<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="207">
<package pkgid="e900958cae73952cecd95fa41f02c9da825cd22434a48156f16a23ffd9d13e07" name="D-FOT-debuginfo" arch="aarch64">
  <version epoch="0" ver="v1.0.2" rel="2.oe2203sp4"/>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.1-1" date="1732708800">- ID:NA
- SUG:NA
- DESC: init D-FOT</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.1-2" date="1733227200">- ID:NA
- SUG:NA
- DESC: update libkperf dependence and adapt code for oeaware 2.0</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.2-1" date="1733832000">- ID:NA
- SUG:NA
- DESC: fix pmudata processing bugs and add execution check</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.2-2" date="1733918400">- ID:NA
- SUG:NA
- DESC: filter so address in pmudata</changelog>
</package>
<package pkgid="9eab1fc34c8e782f87979ebf2285d3efb4b1930cba32ea08fea3eb8fd5f068e1" name="D-FOT-debugsource" arch="aarch64">
  <version epoch="0" ver="v1.0.2" rel="2.oe2203sp4"/>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.1-1" date="1732708800">- ID:NA
- SUG:NA
- DESC: init D-FOT</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.1-2" date="1733227200">- ID:NA
- SUG:NA
- DESC: update libkperf dependence and adapt code for oeaware 2.0</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.2-1" date="1733832000">- ID:NA
- SUG:NA
- DESC: fix pmudata processing bugs and add execution check</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.2-2" date="1733918400">- ID:NA
- SUG:NA
- DESC: filter so address in pmudata</changelog>
</package>
<package pkgid="9bc9a6b4710159a1f16364c803f0cfdeb1884cbae53b6a8a36bc9b7d1908c95d" name="D-FOT" arch="aarch64">
  <version epoch="0" ver="v1.0.2" rel="2.oe2203sp4"/>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.1-1" date="1732708800">- ID:NA
- SUG:NA
- DESC: init D-FOT</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.1-2" date="1733227200">- ID:NA
- SUG:NA
- DESC: update libkperf dependence and adapt code for oeaware 2.0</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.2-1" date="1733832000">- ID:NA
- SUG:NA
- DESC: fix pmudata processing bugs and add execution check</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - v1.0.2-2" date="1733918400">- ID:NA
- SUG:NA
- DESC: filter so address in pmudata</changelog>
</package>
<package pkgid="93c9f4c49690b9b7585a2c214fd1c28ee9e6106f9b34f693f7092e554feb857f" name="activemq" arch="noarch">
  <version epoch="0" ver="5.16.8" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.16-1" date="1698667200">- Upgrade to 5.15.16 for fix CVE-2023-46604</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.7-1" date="1701864000">- Upgrade to 5.16.7 for fix CVE-2022-41678</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 5.16.7-2" date="1737633600">- Fix build error for riscv64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.8-1" date="1746792000">- Upgrade to 5.16.8 for fix CVE-2025-27533</changelog>
</package>
<package pkgid="240fdf6a0d9ba252cac4393d47a31f2bf0f2c2b84e3552d51a1d90429120be6c" name="activemq" arch="noarch">
  <version epoch="0" ver="5.16.8" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.16-1" date="1698667200">- Upgrade to 5.15.16 for fix CVE-2023-46604</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.7-1" date="1701864000">- Upgrade to 5.16.7 for fix CVE-2022-41678</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 5.16.7-2" date="1737633600">- Fix build error for riscv64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.8-1" date="1746792000">- Upgrade to 5.16.8 for fix CVE-2025-27533</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 5.16.8-2" date="1751457600">- add config file env</changelog>
</package>
<package pkgid="35119b9d502b2aee3e0c7d5894006bdf78aa058b36ca66ac02c81dc01a56084a" name="activemq-javadoc" arch="noarch">
  <version epoch="0" ver="5.16.8" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.16-1" date="1698667200">- Upgrade to 5.15.16 for fix CVE-2023-46604</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.7-1" date="1701864000">- Upgrade to 5.16.7 for fix CVE-2022-41678</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 5.16.7-2" date="1737633600">- Fix build error for riscv64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.8-1" date="1746792000">- Upgrade to 5.16.8 for fix CVE-2025-27533</changelog>
</package>
<package pkgid="b059a6128ab0832fa38d22866b7435b115d37445b6a274465df3998e4e434aaa" name="activemq-javadoc" arch="noarch">
  <version epoch="0" ver="5.16.8" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.15.16-1" date="1698667200">- Upgrade to 5.15.16 for fix CVE-2023-46604</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.7-1" date="1701864000">- Upgrade to 5.16.7 for fix CVE-2022-41678</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 5.16.7-2" date="1737633600">- Fix build error for riscv64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.16.8-1" date="1746792000">- Upgrade to 5.16.8 for fix CVE-2025-27533</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 5.16.8-2" date="1751457600">- add config file env</changelog>
</package>
<package pkgid="8625864d68e271c107c65cccebaff0e6c9cb642d712e64afe7bebbbf36fecf58" name="aops-apollo-tool" arch="aarch64">
  <version epoch="0" ver="v1.4.1" rel="4.oe2203sp4"/>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.3.4-6" date="1698062400">- fix the severity field filtering error</changelog>
  <changelog author="gongzhengtang&lt;gong_zhengtang@163.com&gt; - v1.3.4-7" date="1698062401">- fixed the problem that the number of hosts in the cve list repeated statistics</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.3.4-8" date="1698148800">- fix data correction task execution error</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.3.4-9" date="1699876800">- Update the installation dependencies</changelog>
  <changelog author="wangguangge&lt;wangguangge@huawei.com&gt; - v1.3.4-10" date="1699963200">- fix filename bug in aops-apollo-tool</changelog>
  <changelog author="wangguangge&lt;wangguangge@huawei.com&gt; - v1.4.0-1" date="1702382400">- Refactoring repair tasks and hot patch removal tasks</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.4.1-1" date="1702900800">- Add support for CVE rollback tasks
- Optimize the code and adjust the project structure</changelog>
  <changelog author="luxuexian&lt;luxuexian@huawei.com&gt; - v1.4.1-2" date="1702900801">- fix cve_list sort order</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.4.1-3" date="1703246400">- fix the query error of cve associated host
- update verification method for host ip fieldl;fix repo field filter error
- update TimedCorrectTask method</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.4.1-4" date="1721822400">- fix bug with host count in cve fix task</changelog>
</package>
<package pkgid="97f082922ad60d7396ed462a43138401b80b4f8c181caf43fb1e5df72eb0ef3c" name="aops-apollo" arch="aarch64">
  <version epoch="0" ver="v1.4.1" rel="4.oe2203sp4"/>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.3.4-6" date="1698062400">- fix the severity field filtering error</changelog>
  <changelog author="gongzhengtang&lt;gong_zhengtang@163.com&gt; - v1.3.4-7" date="1698062401">- fixed the problem that the number of hosts in the cve list repeated statistics</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.3.4-8" date="1698148800">- fix data correction task execution error</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.3.4-9" date="1699876800">- Update the installation dependencies</changelog>
  <changelog author="wangguangge&lt;wangguangge@huawei.com&gt; - v1.3.4-10" date="1699963200">- fix filename bug in aops-apollo-tool</changelog>
  <changelog author="wangguangge&lt;wangguangge@huawei.com&gt; - v1.4.0-1" date="1702382400">- Refactoring repair tasks and hot patch removal tasks</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.4.1-1" date="1702900800">- Add support for CVE rollback tasks
- Optimize the code and adjust the project structure</changelog>
  <changelog author="luxuexian&lt;luxuexian@huawei.com&gt; - v1.4.1-2" date="1702900801">- fix cve_list sort order</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.4.1-3" date="1703246400">- fix the query error of cve associated host
- update verification method for host ip fieldl;fix repo field filter error
- update TimedCorrectTask method</changelog>
  <changelog author="wenxin&lt;wenxin32@foxmail.com&gt; - v1.4.1-4" date="1721822400">- fix bug with host count in cve fix task</changelog>
</package>
<package pkgid="3c8bf87ae04a16c15e5f3efdec519b5af2be6930410014d0ef8ef261dc125e84" name="ark" arch="aarch64">
  <version epoch="0" ver="22.08.3" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 22.08.3-2" date="1738670400">- fix CVE-2024-57966</changelog>
</package>
<package pkgid="ef7e6f8100a7c98a45b04fdb5bfaf8141227c8a2d49cf59d41bfe3c71fdd6215" name="ark-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.08.3" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 22.08.3-2" date="1738670400">- fix CVE-2024-57966</changelog>
</package>
<package pkgid="7a81e70d3babe5a8c42f9c3b56158dbc28768d5c3ef724f574f95a4c701f9977" name="ark-debugsource" arch="aarch64">
  <version epoch="0" ver="22.08.3" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 22.08.3-2" date="1738670400">- fix CVE-2024-57966</changelog>
</package>
<package pkgid="01765832d04eb46b4adbda4e5edd7ce8196fd3d4f59b26b956ef8ccd4a171df1" name="ark-libs" arch="aarch64">
  <version epoch="0" ver="22.08.3" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 22.08.3-2" date="1738670400">- fix CVE-2024-57966</changelog>
</package>
<package pkgid="892dc4533c45d30c5527afac782d0651d01a7d97f49afa9d85a9e8ea8afcd78c" name="avro" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="5.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.10.2-2" date="1677931200">- Fix check strip failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.10.2-3" date="1692619200">- Fix aarch64 strip failure.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-4" date="1702987200">- Fix CVE-2021-43045</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-5" date="1719921600">- Fix CVE-2023-39410</changelog>
</package>
<package pkgid="4377091bd889fb26dbc01bf6a5f0da2e52d0267783774ade7faec89d5404d013" name="avro" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="6.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 1.10.2-2" date="1677931200">- Fix check strip failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.10.2-3" date="1692619200">- Fix aarch64 strip failure.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-4" date="1702987200">- Fix CVE-2021-43045</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-5" date="1719921600">- Fix CVE-2023-39410</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-6" date="1728561600">- Fix CVE-2024-47561</changelog>
</package>
<package pkgid="cee36fca249b467168ba00cdaaa4c610ca8657176111059d727ea21aa473e92c" name="botan2" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="3.oe2203sp4"/>
  <changelog author="misaka00251 &lt;misaka00251@misakanet.cn&gt; - 2.19.1-1" date="1657800000">- Init package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
</package>
<package pkgid="1f2b63ea5263e703b1dfade5767b10de7f4e7ce30135004dcc085fd6bdd1ae08" name="botan2" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="4.oe2203sp4"/>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.19.3-4" date="1729857600">- Fix CVE-2024-50382</changelog>
</package>
<package pkgid="02b0faefadd7c3d26a89e58b746c9fa9cdbd2ceb340d1bf71e0bbfc7fb03d016" name="botan2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="3.oe2203sp4"/>
  <changelog author="misaka00251 &lt;misaka00251@misakanet.cn&gt; - 2.19.1-1" date="1657800000">- Init package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
</package>
<package pkgid="b1e32e31a9147aec3360dce30344d8ed5da72ecc5cc992213b746eccadb93155" name="botan2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="4.oe2203sp4"/>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.19.3-4" date="1729857600">- Fix CVE-2024-50382</changelog>
</package>
<package pkgid="bb81333f21c6525b2ab1f4d01870677b4b667e1187902b93d266795ca10c138a" name="botan2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="3.oe2203sp4"/>
  <changelog author="misaka00251 &lt;misaka00251@misakanet.cn&gt; - 2.19.1-1" date="1657800000">- Init package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
</package>
<package pkgid="6a13da7f37aaa951c14a52ad394f4fb33ae1a2bbf1419bcc8a94747ade6f6f57" name="botan2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="4.oe2203sp4"/>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.19.3-4" date="1729857600">- Fix CVE-2024-50382</changelog>
</package>
<package pkgid="f6769db9b98b6e0af5092b28bb5e27e4752c08fae3c620cae44e4a6b174e2dc8" name="botan2-devel" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="3.oe2203sp4"/>
  <changelog author="misaka00251 &lt;misaka00251@misakanet.cn&gt; - 2.19.1-1" date="1657800000">- Init package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
</package>
<package pkgid="e5702c96759ccced0f4b651b696b8176d54f3c6dc45c5535ea4fbd426e5a3182" name="botan2-devel" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="4.oe2203sp4"/>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.19.3-4" date="1729857600">- Fix CVE-2024-50382</changelog>
</package>
<package pkgid="eaace46ace870a8c4631e15360245a506266011507efce4460098393e633369d" name="botan2-doc" arch="noarch">
  <version epoch="0" ver="2.19.3" rel="3.oe2203sp4"/>
  <changelog author="misaka00251 &lt;misaka00251@misakanet.cn&gt; - 2.19.1-1" date="1657800000">- Init package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
</package>
<package pkgid="a1b208e53d85d3c1d8640fddc377c916d848a89a40257a230f5c3d26dc704109" name="botan2-doc" arch="noarch">
  <version epoch="0" ver="2.19.3" rel="4.oe2203sp4"/>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.19.3-4" date="1729857600">- Fix CVE-2024-50382</changelog>
</package>
<package pkgid="2c552734f85cda1ab5156c961e2c6fc3187ef37566c3b9866c9db61235871966" name="buildah" arch="aarch64">
  <version epoch="0" ver="1.26.1" rel="4.oe2203sp4"/>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-2" date="1734609600">- Rebuild on Go 1.17.3-33 to fix CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-29406 CVE-2022-41715 CVE-2024-24791 CVE-2021-34558 and CVE-2022-1962</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-3" date="1734955200">- fix CVE-2023-39325, CVE-2022-41723 and CVE-2023-48795</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-4" date="1735128000">- fix CVE-2024-1753 and CVE-2022-2990</changelog>
</package>
<package pkgid="8b02f7a57f850c4e2c6afe9f442cb06537920a21387629605e465580a84cbee4" name="buildah" arch="aarch64">
  <version epoch="0" ver="1.26.1" rel="7.oe2203sp4"/>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-2" date="1734609600">- Rebuild on Go 1.17.3-33 to fix CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-29406 CVE-2022-41715 CVE-2024-24791 CVE-2021-34558 and CVE-2022-1962</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-3" date="1734955200">- fix CVE-2023-39325, CVE-2022-41723 and CVE-2023-48795</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-4" date="1735128000">- fix CVE-2024-1753 and CVE-2022-2990</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-5" date="1755864000">- fix CVE-2025-27144</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-6" date="1755864001">- fix CVE-2024-9341 and CVE-2024-45337</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-7" date="1756209600">- fix CVE-2024-11218 CVE-2025-22869 CVE-2024-9407</changelog>
</package>
<package pkgid="fb046b262ff825eb516f442b7e4f3d92428816c6169fbc322cf6390a9704d9cd" name="buildah-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.26.1" rel="4.oe2203sp4"/>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-2" date="1734609600">- Rebuild on Go 1.17.3-33 to fix CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-29406 CVE-2022-41715 CVE-2024-24791 CVE-2021-34558 and CVE-2022-1962</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-3" date="1734955200">- fix CVE-2023-39325, CVE-2022-41723 and CVE-2023-48795</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-4" date="1735128000">- fix CVE-2024-1753 and CVE-2022-2990</changelog>
</package>
<package pkgid="86073313b1c0ac3eec92cd46e7fe9c340d6e9c36b4365cbb65bba14b3ca52515" name="buildah-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.26.1" rel="7.oe2203sp4"/>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-2" date="1734609600">- Rebuild on Go 1.17.3-33 to fix CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-29406 CVE-2022-41715 CVE-2024-24791 CVE-2021-34558 and CVE-2022-1962</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-3" date="1734955200">- fix CVE-2023-39325, CVE-2022-41723 and CVE-2023-48795</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-4" date="1735128000">- fix CVE-2024-1753 and CVE-2022-2990</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-5" date="1755864000">- fix CVE-2025-27144</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-6" date="1755864001">- fix CVE-2024-9341 and CVE-2024-45337</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-7" date="1756209600">- fix CVE-2024-11218 CVE-2025-22869 CVE-2024-9407</changelog>
</package>
<package pkgid="bbb7790df5c283711c07407adcab0808c3cf08c292a3e9dd5f8415168005ec09" name="buildah-debugsource" arch="aarch64">
  <version epoch="0" ver="1.26.1" rel="4.oe2203sp4"/>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-2" date="1734609600">- Rebuild on Go 1.17.3-33 to fix CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-29406 CVE-2022-41715 CVE-2024-24791 CVE-2021-34558 and CVE-2022-1962</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-3" date="1734955200">- fix CVE-2023-39325, CVE-2022-41723 and CVE-2023-48795</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-4" date="1735128000">- fix CVE-2024-1753 and CVE-2022-2990</changelog>
</package>
<package pkgid="05e03666c312146e4731b75930323d3d3a2134b607f46a68ad4a5a6d4965bff5" name="buildah-debugsource" arch="aarch64">
  <version epoch="0" ver="1.26.1" rel="7.oe2203sp4"/>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-2" date="1734609600">- Rebuild on Go 1.17.3-33 to fix CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-29406 CVE-2022-41715 CVE-2024-24791 CVE-2021-34558 and CVE-2022-1962</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-3" date="1734955200">- fix CVE-2023-39325, CVE-2022-41723 and CVE-2023-48795</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-4" date="1735128000">- fix CVE-2024-1753 and CVE-2022-2990</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-5" date="1755864000">- fix CVE-2025-27144</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-6" date="1755864001">- fix CVE-2024-9341 and CVE-2024-45337</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1.26.1-7" date="1756209600">- fix CVE-2024-11218 CVE-2025-22869 CVE-2024-9407</changelog>
</package>
<package pkgid="35397d2b3f7a885ff867c17621086f53a2918698ca7f6f58edeb6fc1b15baf2c" name="caja-actions" arch="aarch64">
  <version epoch="0" ver="1.8.3" rel="17.oe2203sp4"/>
  <changelog author="yuanxing &lt;yuanxing@kylinos.com.cn&gt; - 1.8.3-17" date="1740052800">- KYOS-F: add desktop-file-utils BuildRequires for %check(#IBLCDT)</changelog>
</package>
<package pkgid="c565d4fc0b7994d84d5cc8c867778007a69de0230394b2ba1fe8cbd3470cf2e5" name="caja-actions-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.3" rel="17.oe2203sp4"/>
  <changelog author="yuanxing &lt;yuanxing@kylinos.com.cn&gt; - 1.8.3-17" date="1740052800">- KYOS-F: add desktop-file-utils BuildRequires for %check(#IBLCDT)</changelog>
</package>
<package pkgid="70b43bce188c8cf7b161984482090c344b9659101119e23a9c15bbf87a0decbf" name="caja-actions-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.3" rel="17.oe2203sp4"/>
  <changelog author="yuanxing &lt;yuanxing@kylinos.com.cn&gt; - 1.8.3-17" date="1740052800">- KYOS-F: add desktop-file-utils BuildRequires for %check(#IBLCDT)</changelog>
</package>
<package pkgid="02913030185d56346a361c4ca79c4438457f2cb5f2cce346fec9ec3cca37ca74" name="caja-actions-devel" arch="aarch64">
  <version epoch="0" ver="1.8.3" rel="17.oe2203sp4"/>
  <changelog author="yuanxing &lt;yuanxing@kylinos.com.cn&gt; - 1.8.3-17" date="1740052800">- KYOS-F: add desktop-file-utils BuildRequires for %check(#IBLCDT)</changelog>
</package>
<package pkgid="cea3512b2086a526d537e6d8b14db4c9d3899a01ab54ec40b24d0f45b1e7cd11" name="caja-actions-doc" arch="noarch">
  <version epoch="0" ver="1.8.3" rel="17.oe2203sp4"/>
  <changelog author="yuanxing &lt;yuanxing@kylinos.com.cn&gt; - 1.8.3-17" date="1740052800">- KYOS-F: add desktop-file-utils BuildRequires for %check(#IBLCDT)</changelog>
</package>
<package pkgid="44fc197f20cc133042eaf7fb1ea2384f658a164128007962ae30d814f65949be" name="cobbler" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="4.oe2203sp4"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.0-2" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add install depend</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.0-3" date="1678363200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Change permission with web.ss</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.2.0-4" date="1732104000">- Type:CVE
- ID:CVE-2024-47533
- SUG:NA
- DESC:Add Patch6001, fix CVE-2024-47533</changelog>
</package>
<package pkgid="ff5125f98a83c39eed1566c2a76f48e8968bf2417b5bba006c5511eadb95ddc8" name="cobbler" arch="noarch">
  <version epoch="0" ver="3.2.3" rel="2.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.2.0-4" date="1691755200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build fail</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.2.0-5" date="1732104000">- Type:CVE
- ID:CVE-2024-47533
- SUG:NA
- DESC:Add Patch6002, fix CVE-2024-47533</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.3-1" date="1745323200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update to 3.2.3</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.3-2" date="1745409600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix start cobbler failed</changelog>
</package>
<package pkgid="d4b32fd35b64cee69eb84b61419297b9caf032b17496437ef2ca7a94a6ea8566" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="4.oe2203sp4"/>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.0-2" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add install depend</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.0-3" date="1678363200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Change permission with web.ss</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.2.0-4" date="1732104000">- Type:CVE
- ID:CVE-2024-47533
- SUG:NA
- DESC:Add Patch6001, fix CVE-2024-47533</changelog>
</package>
<package pkgid="830a5388588204443f1f95a662c7200577ea9aaac2a892cccc01a04c5fb61c24" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="3.2.3" rel="2.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.2.0-4" date="1691755200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build fail</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.2.0-5" date="1732104000">- Type:CVE
- ID:CVE-2024-47533
- SUG:NA
- DESC:Add Patch6002, fix CVE-2024-47533</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.3-1" date="1745323200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update to 3.2.3</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 3.2.3-2" date="1745409600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix start cobbler failed</changelog>
</package>
<package pkgid="fefee5dd72ded3d7b8d84133111cb5a50e0240171113a60da4e7303cd97e70d0" name="euler-copilot-framework" arch="aarch64">
  <version epoch="0" ver="0.10.0" rel="11.oe2203sp4"/>
  <changelog author="zxstty &lt;zhaojiaqi18@huawei.com&gt; - 0.10.0-2" date="1757073600">- Package Upgradge</changelog>
  <changelog author="zxstty &lt;zhaojiaqi18@huawei.com&gt; - 0.10.0-3" date="1757246400">- Package Upgradge</changelog>
  <changelog author="zxstty &lt;zhaojiaqi18@huawei.com&gt; - 0.10.0-4" date="1757332800">- Package Upgradge and update pip requirements</changelog>
  <changelog author="zxstty &lt;zhaojiaqi18@huawei.com&gt; - 0.10.0-5" date="1757419200">- Package Upgradge</changelog>
  <changelog author="zxstty &lt;zhaojiaqi18@huawei.com&gt; - 0.10.0-6" date="1757592000">- Package Upgradge</changelog>
  <changelog author="houxu &lt;houxu5@h-partners.com&gt; - 0.10.0-7" date="1757678400">- Package Upgradge</changelog>
  <changelog author="houxu &lt;houxu5@h-partners.com&gt; - 0.10.0-8" date="1757678401">- Package Upgradge</changelog>
  <changelog author="houxu &lt;houxu5@h-partners.com&gt; - 0.10.0-9" date="1758024000">- Package Upgradge</changelog>
  <changelog author="cui-gaoleng &lt;tangshunan1@huawei.com&gt; - 0.10.0-10" date="1758283200">- Package Upgradge</changelog>
  <changelog author="cui-gaoleng &lt;tangshunan1@huawei.com&gt; - 0.10.0-11" date="1762862400">- Package Upgradge</changelog>
</package>
<package pkgid="589722e961290c3fb392c56167cc78acbb91999ad81a9f03c09f9b3d550bb7e5" name="exim" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="8d698e140872337d65a2c4ef3c384b615320e137b4d0bb093d729a80ed79e9e6" name="exim" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="91cc32e191993102cf86696b6e84004d8071452260931b57968467d04342e827" name="exim-clamav" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="cb51ceeb0170270009ebdaf6ee725f0d3adafd47a4b97bd6ba63fa8138fce6dd" name="exim-clamav" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="80f0de0ff5b737ecc890d5ba10e3863ebf14c6560bb000a1f1b9be080bc4ebb6" name="exim-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="420c806af8812a2fc1aa4150bef653168c3d5a9e370eff5ba0852425394708fb" name="exim-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="69f16129e71780c0fbc9212232e4e783b5ab7280f34c496171340fc08fc07652" name="exim-debugsource" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="4711018abaaa8150e3c6adccfb0faa781665a559bd5998a3565782b818497e3a" name="exim-debugsource" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="1a6aaddbfc083b03a95e9c25edfe193b9b7511ec54aa32e750ceb4eb279d73cd" name="exim-greylist" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="448b423847070904507c691d64c6514bdcf1133f9ef7e27d712a76590d8995e6" name="exim-greylist" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="aba050de3a11d2435145f0d89308e0c82b9286a30cb05a7bc678cc514efe19ff" name="exim-mon" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="d0a009a6404a421949a0b5139812d7d36997138b2c170f06fb8b2d802619a5a6" name="exim-mon" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="97e6eef7c3f9bb9c836f742b3618d340ec179fb42e77249af56d75a458051b82" name="exim-mysql" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="e41b622f224d08d6a46c2a9fa4b4e4c824922cbeb288f3570b57e5d7f630764f" name="exim-mysql" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="351dc61089eda7c073475d990022a8e5bc066583deb188837b3c327487c19d30" name="exim-pgsql" arch="aarch64">
  <version epoch="0" ver="4.96" rel="3.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
</package>
<package pkgid="ad9e5290f45efb5c5583c13989777a2780f01883e3f29939a50352ec35d0046a" name="exim-pgsql" arch="aarch64">
  <version epoch="0" ver="4.96" rel="4.oe2203sp4"/>
  <changelog author="zhuchao &lt;tom_toworld@163.com&gt; - 4.96-1" date="1666094400">- DESC:Package init</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-2" date="1720526400">- Fix CVE-2023-51766</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 4.96-3" date="1720699200">- Fix CVE-2022-3559</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.96-4" date="1720699201">- fix CVE-2024-39929</changelog>
</package>
<package pkgid="9b3a86995ea14539195de3176e27737a377f6d5d52c028abba36a35180624f21" name="freeimage" arch="aarch64">
  <version epoch="0" ver="3.18.0" rel="11.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-9" date="1701691200">- Fix CVE-2020-21427,CVE-2020-21428,CVE-2020-22524</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.18.0-10" date="1724068800">- License compliance rectification.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-11" date="1729684800">- Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
  CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997</changelog>
</package>
<package pkgid="8864394347be446ca3794008d642fc87e397e92f2893cc6471be92cfb49a73a8" name="freeimage-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.18.0" rel="11.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-9" date="1701691200">- Fix CVE-2020-21427,CVE-2020-21428,CVE-2020-22524</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.18.0-10" date="1724068800">- License compliance rectification.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-11" date="1729684800">- Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
  CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997</changelog>
</package>
<package pkgid="bfbac1e45b486ef65f1ca66df96d405dedd9d50f5bc2cf787bc949edeb38a89c" name="freeimage-debugsource" arch="aarch64">
  <version epoch="0" ver="3.18.0" rel="11.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-9" date="1701691200">- Fix CVE-2020-21427,CVE-2020-21428,CVE-2020-22524</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.18.0-10" date="1724068800">- License compliance rectification.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-11" date="1729684800">- Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
  CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997</changelog>
</package>
<package pkgid="87be3627724e9b391bd911ff25362afb9238b572de28d8ccde7b179e85550cbb" name="freeimage-devel" arch="aarch64">
  <version epoch="0" ver="3.18.0" rel="11.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-9" date="1701691200">- Fix CVE-2020-21427,CVE-2020-21428,CVE-2020-22524</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.18.0-10" date="1724068800">- License compliance rectification.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.18.0-11" date="1729684800">- Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
  CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997</changelog>
</package>
<package pkgid="76218dc15e7db204478d38ca1136529b341f3cca1953f850838aeb2d63f05683" name="gcc-toolset-12-cpp" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="4a468f0bdf7031a348cfa5539286df15ff4746d48c61a3d771512ff00028a64f" name="gcc-toolset-12-gcc" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="af8c875eb93d8f35557b856bf2c0968f27fb0128b6ced8888bb0ced187756542" name="gcc-toolset-12-gcc-c++" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="fcefb885f22666608312d890ecb97b795f9643d2b3adb92a9227d6513d6a1a13" name="gcc-toolset-12-gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="4f33d73c404bf2b348651774b07c82624c24ed7c715a582f5c5c9c659ba30bc6" name="gcc-toolset-12-gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="b7caf12171f5873f46bca142072058bd7133a32e8f70952ee16a777afe129817" name="gcc-toolset-12-gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="87609cef2bf7a2a130c029066136ccb098db1a3fbc7a0fa8f638d9df76143116" name="gcc-toolset-12-gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="993edf4d651782df8bab8e0bbed879c6bcea395afefe73a1602f18986e7aa75a" name="gcc-toolset-12-gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="38558f3d9e35c7329778504283fc12cd6bbe2d0166ec537c2627d057540d2263" name="gcc-toolset-12-libasan" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="eaa00e2ef5189bd5d0b8a2290220466b02d5660bbd3030a18b6b9c8ecba9f8f8" name="gcc-toolset-12-libasan-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="3dfd3aa7a1da801c025867dfbcacb85ecea52fdfccbe455509995d1f9cbdc9c1" name="gcc-toolset-12-libatomic" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="25dd0700f85d0ba41354cfa91fbcf0981cef3e6cc42dc8c74b3bb6522fb07deb" name="gcc-toolset-12-libatomic-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="87d304123b77746a7eb976cd6321d56d79de5e88fe58290d8e9c87ed97fa4bc8" name="gcc-toolset-12-libgcc" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="bab54468ae1dba0736b0ca769c9f35044ba79655d4fcf599c3c5ac4b255cac61" name="gcc-toolset-12-libgccjit" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="987f642e1b5a8c6d67cc708b74688215755f22a5dff61952d18b018c594dc3c0" name="gcc-toolset-12-libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="b0cd7359b326b9386b48bc42540ba5e199a6d6ca3b64e81250d55348b1af4503" name="gcc-toolset-12-libgfortran" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="30287db57cb34d700be9b2525c1f20f54f4b8e0a6ed5d4e9103f6750d90b93ad" name="gcc-toolset-12-libgfortran-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="bc954964ff3b2b4a6ecf4fd16a7c50443d625a48982d1ba269760651828be150" name="gcc-toolset-12-libgomp" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="371d4754a29f99928fae1bbd8743f2e2205b0908a3f8554e82099f82110f14c1" name="gcc-toolset-12-libitm" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="72670cb664611add3604e3175b181ea4d3bb517c90f49b1873ee535eee7328e4" name="gcc-toolset-12-libitm-devel" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="afb3bf29f251f0d371779ddcbfd58a708f025282a4c18fbf902598bfa2198a83" name="gcc-toolset-12-libitm-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="7b7c4310db6589b771ad5f5b2b96cf3dfa4cec0ddcb5f9f1dfbb77ab45ae57fa" name="gcc-toolset-12-liblsan" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="4245ad8c1160e5ed9edb93c1ae872d4264e80862cbdd9e54de1ba198e8cdec41" name="gcc-toolset-12-liblsan-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="c7466759d01907b2cccb67a1fd995df41bfbef311ffdcc8237b0e80e322d510d" name="gcc-toolset-12-libstdc++" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="76c11bb52491be1226e765b1a71db816fb8c59c2ce8a000879570f9d1fcdcbe7" name="gcc-toolset-12-libstdc++-devel" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="77087236418f6451f2313702064c88fb3dfd61ac5524fb040ff49b0731466797" name="gcc-toolset-12-libstdc++-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="c08a07f81e3ba345e3ea20e0542923f5a41f2a5b6d34b1c8e619c3c9a4b182b1" name="gcc-toolset-12-libtsan" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="10b6237a7e867b98b096ea3504e00241d512dc285d0eaa46ad0e99f1763f1351" name="gcc-toolset-12-libtsan-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="52c7a154997ad3128bfd835decc16e50ffca79064ea08b31221b19b0c4316e94" name="gcc-toolset-12-libubsan" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="943f181aa544154673a78e2a3e8a981ed68796f851d9a2c23bde25db6d9a5bfe" name="gcc-toolset-12-libubsan-static" arch="aarch64">
  <version epoch="0" ver="12.3.1" rel="19.oe2203sp4"/>
  <changelog author="Shujian Zhao &lt;zhaoshujian@huawei.com&gt; 12.3.1-15" date="1700481600">- Upgrade GCC version 12.2.1 to 12.3.1</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 12.3.1-16" date="1702555200">- fix chrpath error</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-17" date="1709985600">- AArch64: Support SME intrinsics</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; 12.3.1-18" date="1712664000">- AArch64: Fix issue https://gitee.com/src-openeuler/gcc-12/issues/I9DE8T</changelog>
  <changelog author="cao-jiaju &lt;272503532@qq.com&gt; 12.3.1-19" date="1752753600">- syn with openEuler 24.03-LTS-SP2</changelog>
</package>
<package pkgid="b06ccec1d0692a3fb5bee480a384506406816bcfec6b7df0a6f56b80f82b9732" name="grafana" arch="aarch64">
  <version epoch="0" ver="7.5.15" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.5.15-4" date="1681387200">- Fix gtime_test</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 7.5.15-5" date="1689249600">- add loong64 support for grafana</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-6" date="1705924800">- Rebuild for golang cves: CVE-2023-39325 and CVE-2022-32148</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-7" date="1728734400">- Fix CVE-2022-39229</changelog>
</package>
<package pkgid="e75b2031f350ef88efeef1e0dc2a4fd152300062ef8b9af501e63e7f97f2115d" name="grafana" arch="aarch64">
  <version epoch="0" ver="9.2.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.5.15-4" date="1681387200">- Fix gtime_test</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 7.5.15-5" date="1689249600">- add loong64 support for grafana</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-6" date="1705924800">- Rebuild for golang cves: CVE-2023-39325 and CVE-2022-32148</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-7" date="1728734400">- Fix CVE-2022-39229</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 9.2.10-1" date="1739966400">- Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
  CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
  CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097</changelog>
</package>
<package pkgid="beea319d61f6a8b054297287922cab96a5a327f231fabb6aae1790f8536decbd" name="grafana-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.5.15" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.5.15-4" date="1681387200">- Fix gtime_test</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 7.5.15-5" date="1689249600">- add loong64 support for grafana</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-6" date="1705924800">- Rebuild for golang cves: CVE-2023-39325 and CVE-2022-32148</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-7" date="1728734400">- Fix CVE-2022-39229</changelog>
</package>
<package pkgid="f3f932d3fb4a3a18e87d014fc95f88db05807744b746483e2193a51a8c7c0614" name="grafana-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.2.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.5.15-4" date="1681387200">- Fix gtime_test</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 7.5.15-5" date="1689249600">- add loong64 support for grafana</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-6" date="1705924800">- Rebuild for golang cves: CVE-2023-39325 and CVE-2022-32148</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-7" date="1728734400">- Fix CVE-2022-39229</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 9.2.10-1" date="1739966400">- Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
  CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
  CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097</changelog>
</package>
<package pkgid="a033f57075ece6d8d0f3ee5d78f43da82a299493c5aa56f81a9b106905bdd2fc" name="grafana-debugsource" arch="aarch64">
  <version epoch="0" ver="9.2.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.5.15-4" date="1681387200">- Fix gtime_test</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 7.5.15-5" date="1689249600">- add loong64 support for grafana</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-6" date="1705924800">- Rebuild for golang cves: CVE-2023-39325 and CVE-2022-32148</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-7" date="1728734400">- Fix CVE-2022-39229</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 9.2.10-1" date="1739966400">- Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
  CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
  CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097</changelog>
</package>
<package pkgid="f26da1b2bd296d6ff3df0aaccadcdc6df493319d327738cd1433ef0c68967c2e" name="grafana-selinux" arch="aarch64">
  <version epoch="0" ver="9.2.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.5.15-4" date="1681387200">- Fix gtime_test</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 7.5.15-5" date="1689249600">- add loong64 support for grafana</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-6" date="1705924800">- Rebuild for golang cves: CVE-2023-39325 and CVE-2022-32148</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7.5.15-7" date="1728734400">- Fix CVE-2022-39229</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 9.2.10-1" date="1739966400">- Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
  CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
  CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097</changelog>
</package>
<package pkgid="a8a597ece9ea5344df58730bcf1d8e80dd380926d233d03bc55ab7f5d5965423" name="kernel-64kb" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="de86439ab4fef6050e3650b81d432007eb6f2d4ab4b7dbf168b9633dfc4d9356" name="kernel-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="2c86750d9c8aa336ea797163ab23c6004cd3a8b9c92c816b3c219cd613bc2b6d" name="kernel-64kb-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="39ab1ed39a8c79fcb2bff56c532a6329c26798515faaf298ae9e6b2bd95f7525" name="kernel-64kb-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="6e20e04ea71046836cd8d46a446bbde973c8266ea88154d36dd96ce4e68af3a2" name="kernel-64kb-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="daaa58df61948bd5eb499184a55645d2c4da31fa7b8af0e80f6e5d54c2b2f3d4" name="kmod-dinghai" arch="aarch64">
  <version epoch="1" ver="2.24.30.01" rel="3.oe2203sp4"/>
  <changelog author="hcf &lt;han.chengfei@zte.com.cn&gt; - 1:2.24.20.02-1" date="1724846400">- Dinghai driver init</changelog>
  <changelog author="hcf &lt;han.chengfei@zte.com.cn&gt; - 1:2.24.20.03-1" date="1730116800">- Add net and rdma ko</changelog>
  <changelog author="hcf &lt;han.chengfei@zte.com.cn&gt; - 1:2.24.30.01-1" date="1732881600">- update pkg_version</changelog>
  <changelog author="hcf &lt;han.chengfei@zte.com.cn&gt; - 1:2.24.30.01-2" date="1732881601">- rename compile shell</changelog>
  <changelog author="hcf &lt;han.chengfei@zte.com.cn&gt; - 1:2.24.30.01-3" date="1732881602">- rename compile shell</changelog>
</package>
<package pkgid="91985d4053626770c384571416c3f3443663b67d43ed11ecf9d1723bc8727576" name="kubernetes" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="26.oe2203sp4"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-17" date="1688040000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2431</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-18" date="1688040001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3162</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-19" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3294</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-20" date="1688472001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2727 and CVE-2023-2728</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
</package>
<package pkgid="a067fcad4461c22415beadb6d23687bb48ee3810d397aa9c795b1d15a0e10b92" name="kubernetes" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="27.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 1.20.2-27" date="1756382400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-5187</changelog>
</package>
<package pkgid="4d15d8a8838d89e90f0a4e1769894537402e16723d095479252cb950153af616" name="kubernetes-client" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="26.oe2203sp4"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-17" date="1688040000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2431</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-18" date="1688040001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3162</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-19" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3294</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-20" date="1688472001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2727 and CVE-2023-2728</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
</package>
<package pkgid="dafec37d8118622cba623b538889865ec89d569a6b00dc13b31b79f7eb365450" name="kubernetes-client" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="27.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 1.20.2-27" date="1756382400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-5187</changelog>
</package>
<package pkgid="d3bf9ad28f3f436926750b0f27775bd7efb7ae1f41bac6748dc01e1376cfe630" name="kubernetes-help" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="26.oe2203sp4"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-17" date="1688040000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2431</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-18" date="1688040001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3162</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-19" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3294</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-20" date="1688472001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2727 and CVE-2023-2728</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
</package>
<package pkgid="9c6308e941b7fa75e94108c66b18abc4cdc669a6eea79c257f8a19a23e707eaf" name="kubernetes-help" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="27.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 1.20.2-27" date="1756382400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-5187</changelog>
</package>
<package pkgid="b6c56443c3ff20d61c654e01c7a98d2680d6544dbf340afae90f82b5f70d8353" name="kubernetes-kubeadm" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="26.oe2203sp4"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-17" date="1688040000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2431</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-18" date="1688040001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3162</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-19" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3294</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-20" date="1688472001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2727 and CVE-2023-2728</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
</package>
<package pkgid="3da1ba89f788f867360e065efb2223af54d2df3d8798d2060e6fc80ca4a7492e" name="kubernetes-kubeadm" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="27.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 1.20.2-27" date="1756382400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-5187</changelog>
</package>
<package pkgid="2be77ba62ed71ca7aeb46e4c909ceae2e7178a670b2b6d270952cb943deeaf5d" name="kubernetes-kubelet" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="26.oe2203sp4"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-17" date="1688040000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2431</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-18" date="1688040001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3162</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-19" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3294</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-20" date="1688472001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2727 and CVE-2023-2728</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
</package>
<package pkgid="6440a7eba5f950b4350704f4b74a2f60738ad8d79be0945cf309076244549f49" name="kubernetes-kubelet" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="27.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 1.20.2-27" date="1756382400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-5187</changelog>
</package>
<package pkgid="c918af5f9989a439901ccc621c8473d54f8c17c5bbeede2ce1f8533e64034ff8" name="kubernetes-master" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="26.oe2203sp4"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-17" date="1688040000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2431</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-18" date="1688040001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3162</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-19" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3294</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-20" date="1688472001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2727 and CVE-2023-2728</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
</package>
<package pkgid="66498dbb612f5b0fdbfaded2b18c9a8df4a7caddb6a30b9c9d7e451eeb738213" name="kubernetes-master" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="27.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 1.20.2-27" date="1756382400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-5187</changelog>
</package>
<package pkgid="c9322f2fd4f74f0c23ac4ef20ac55448bd47009929cb9fb82f2b20e86e32b4bd" name="kubernetes-node" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="26.oe2203sp4"/>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-17" date="1688040000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2431</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-18" date="1688040001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3162</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-19" date="1688472000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2022-3294</changelog>
  <changelog author="zhangxiaoyu &lt;zhangxiaoyu58@huawei.com&gt; - 1.20.2-20" date="1688472001">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-2727 and CVE-2023-2728</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
</package>
<package pkgid="9002be4358bd8e6058f870657c88a6a60881cc6b8f22bbe2f4acd016b7ccbfe5" name="kubernetes-node" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="27.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-21" date="1714392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-3177</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-22" date="1724328000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix kubelet panic when allocate resource for pod. #119561</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-23" date="1724414400">- DESC:reduce configmap and secret watch of kubelet</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-24" date="1724414401">- DESC:Don't prematurely close reflectors in case of slow initialization in watch based manager</changelog>
  <changelog author="zhaoxiaohu &lt;zhaoxiaohu@kuaishou.com&gt; - 1.20.2-25" date="1724760000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore&gt;256)</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1.20.2-26" date="1733400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-10220</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 1.20.2-27" date="1756382400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-5187</changelog>
</package>
<package pkgid="04aa0ba51711efc9a130ab95b3cfb523667a28778a6a0c6a192f7c9f3687f136" name="libspf2" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.11-2" date="1735128000">- fix CVE-2023-42118</changelog>
</package>
<package pkgid="e63fb83e48a508311d9f23c520cebb47c4dc3f9f469f5c3d2a2f4692234e570f" name="libspf2-apidocs" arch="noarch">
  <version epoch="0" ver="1.2.11" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.11-2" date="1735128000">- fix CVE-2023-42118</changelog>
</package>
<package pkgid="7e1150d6867e4483e4997c50b4cc315d394eac5164c70aef86d531246106db53" name="libspf2-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.11-2" date="1735128000">- fix CVE-2023-42118</changelog>
</package>
<package pkgid="202b8859fe00e629dc5fe68c62c3cf44311b82a6f2f8207a3e51576fedfdb21c" name="libspf2-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.11-2" date="1735128000">- fix CVE-2023-42118</changelog>
</package>
<package pkgid="d7d1885466800c1e5364fd5c1a9c626f9c42a24cb793000d9e221bb5a83f688c" name="libspf2-devel" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.11-2" date="1735128000">- fix CVE-2023-42118</changelog>
</package>
<package pkgid="5c9771a7e37c22bf2dc6db8738d9c34f5633942304bfc3642b458f3a2dea4027" name="libspf2-progs" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.11-2" date="1735128000">- fix CVE-2023-42118</changelog>
</package>
<package pkgid="f58153801347b51a1980f9e4f699d4ed6b3d40d7e5d34cfcfc58197fd01d52a2" name="mosquitto" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
</package>
<package pkgid="d0e04d1afdf404437c85193fa4a3c7c30727a7268b24fe3c00544b44a325d115" name="mosquitto" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.0.20-2" date="1731412800">- move mosquitto_dynamic_security into main package</changelog>
</package>
<package pkgid="a287fd00da9ed873d7e934934360b53746bd3ac4312c3c7a4f86fe56bded7593" name="mosquitto-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
</package>
<package pkgid="80e6523e87e909555fe9692b2da29c573f74e8c96f23021d511a51c04bdd0336" name="mosquitto-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.0.20-2" date="1731412800">- move mosquitto_dynamic_security into main package</changelog>
</package>
<package pkgid="6c2ab10530975b2517868ff3770402ed37afaaf6408b9aed3de3f7763363e341" name="mosquitto-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
</package>
<package pkgid="fdfda351fcb5594cd7df10c0863788578717eb255e4ebd01d411c48167029287" name="mosquitto-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.0.20-2" date="1731412800">- move mosquitto_dynamic_security into main package</changelog>
</package>
<package pkgid="ea088564f7c313d84114091229ed9f69486dd235bdb5e73b925cd94622691217" name="mosquitto-devel" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
</package>
<package pkgid="c389f378e35c2fbad0f80b598dd5d3a7afddf507e8d362267dd4e51388f5690f" name="mosquitto-devel" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.16-1" date="1694606400">- Update to 2.0.16 for fix CVE-2021-34431,CVE-2023-28366 and CVE-2023-3592</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.20-1" date="1730721600">- Update to 2.0.20
  * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
  * Open files with appropriate access on Windows. Closes #3119.
  * Don't allow invalid response topic values.
  * Fix some strict protocol compliance issues. Closes #3052.
  * Fix cmake build on OS X. Closes #3125.
  * Fix build on NetBSD
  * Fix mismatched subscribe/unsubscribe with normal/shared topics.
  * Fix crash on bridge using remapped topic being sent a crafted packet.
  * Don't allow SUBACK with missing reason codes in client library.
  * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
  * Fix mosquitto_rr not honouring -R. Closes #2893.
  * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
  * Fix max_inflight_messages not being set correctly. Closes #2876.
  * Fix mosquitto_passwd -U backup file creation. Closes #2873.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.0.20-2" date="1731412800">- move mosquitto_dynamic_security into main package</changelog>
</package>
<package pkgid="2ba28e264cfd9d65604b368e1fea9dfbb4188c3ca8ec2cd83a22c6f88f91ceed" name="mpv" arch="aarch64">
  <version epoch="0" ver="0.32.0" rel="3.oe2203sp4"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 0.32.0-3" date="1718193600">- fix CVE-2021-30145</changelog>
</package>
<package pkgid="7b87d469f64bf0b8436aeddc7e432951b9f9c5a6a8c9af23cf3247ea4629a78d" name="mpv-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.32.0" rel="3.oe2203sp4"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 0.32.0-3" date="1718193600">- fix CVE-2021-30145</changelog>
</package>
<package pkgid="018dcb68e4c9cbf17823074e63bbc817621896e35783b3c62e171f4a29b42066" name="mpv-debugsource" arch="aarch64">
  <version epoch="0" ver="0.32.0" rel="3.oe2203sp4"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 0.32.0-3" date="1718193600">- fix CVE-2021-30145</changelog>
</package>
<package pkgid="2cbd809f965198e87d2014af51ed6b24f95dbc25786a85f5384ef4b96c82bbab" name="mpv-libs" arch="aarch64">
  <version epoch="0" ver="0.32.0" rel="3.oe2203sp4"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 0.32.0-3" date="1718193600">- fix CVE-2021-30145</changelog>
</package>
<package pkgid="c3ced9d991e86443db38b2bd1461f6293d92c005ccc4c760db3ec902f0a92ecb" name="mpv-libs-devel" arch="aarch64">
  <version epoch="0" ver="0.32.0" rel="3.oe2203sp4"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 0.32.0-3" date="1718193600">- fix CVE-2021-30145</changelog>
</package>
<package pkgid="278f72a54175c7747d22efb52a793448f9ecbe954af356b0c81dbc2f26d9ec51" name="oeAware-collector-debuginfo" arch="aarch64">
  <version epoch="0" ver="v1.0.2" rel="2.oe2203sp4"/>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.0-1" date="1713355200">- Package init</changelog>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.0-2" date="1713441600">- add debug package</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-3" date="1714392000">- fix log while not supporting pmu uncore</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-4" date="1714478400">- remove pmu.h and pcerrc.h</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-5" date="1715169600">- replace enable and disable API in reflash_ring_buf</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.1-2" date="1715774400">- fix compile warnings</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-1" date="1717156800">- refactor interface and fix some bugs</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-2" date="1717588800">- update libkperf version to v1.0.3</changelog>
</package>
<package pkgid="aea6feaea1d8d0cd22f82810412d872de12b9798bf351f288a02ebff9da8aed5" name="oeAware-collector-debugsource" arch="aarch64">
  <version epoch="0" ver="v1.0.2" rel="2.oe2203sp4"/>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.0-1" date="1713355200">- Package init</changelog>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.0-2" date="1713441600">- add debug package</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-3" date="1714392000">- fix log while not supporting pmu uncore</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-4" date="1714478400">- remove pmu.h and pcerrc.h</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-5" date="1715169600">- replace enable and disable API in reflash_ring_buf</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.1-2" date="1715774400">- fix compile warnings</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-1" date="1717156800">- refactor interface and fix some bugs</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-2" date="1717588800">- update libkperf version to v1.0.3</changelog>
</package>
<package pkgid="8ca65d381469b9019bde5379129914aa57e127de9b5c9d3ce779460f9655b18b" name="oeAware-collector" arch="aarch64">
  <version epoch="0" ver="v1.0.2" rel="2.oe2203sp4"/>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.0-1" date="1713355200">- Package init</changelog>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.0-2" date="1713441600">- add debug package</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-3" date="1714392000">- fix log while not supporting pmu uncore</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-4" date="1714478400">- remove pmu.h and pcerrc.h</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-5" date="1715169600">- replace enable and disable API in reflash_ring_buf</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.1-2" date="1715774400">- fix compile warnings</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-1" date="1717156800">- refactor interface and fix some bugs</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-2" date="1717588800">- update libkperf version to v1.0.3</changelog>
</package>
<package pkgid="05f36964cac5902eb5caf452c0b98f73a979755e5095a0076db90881a6f13400" name="oeAware-manager-debuginfo" arch="aarch64">
  <version epoch="0" ver="v1.0.1" rel="5.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-1" date="1713441600">- Package init</changelog>
  <changelog author="huangwenhua &lt;huangwenhua@kylinos.cn&gt; -v1.0.0-2" date="1714305600">- Add Requires:graphviz</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-3" date="1714392000">- add error description, refactor, and fix bugs</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-4" date="1714996800">- add logs, modify sock file permission and serivce file</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-5" date="1715169600">- fix systemd service uninstallation issue
- fix load error and args parsing error printing</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-2" date="1715774400">- fix pre-enable failed, dependencies missing error, memory leak
- fix warning message</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-3" date="1717156800">- refactor instance interfaces and add signal function</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-4" date="1717588800">- add dynamic dependencncy adjustment</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-5" date="1718193600">- add Requires</changelog>
</package>
<package pkgid="df5cfecba9ac42410d554a91b5da25c41b34c8a034877452e4c032a6fc46d1b7" name="oeAware-manager-debugsource" arch="aarch64">
  <version epoch="0" ver="v1.0.1" rel="5.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-1" date="1713441600">- Package init</changelog>
  <changelog author="huangwenhua &lt;huangwenhua@kylinos.cn&gt; -v1.0.0-2" date="1714305600">- Add Requires:graphviz</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-3" date="1714392000">- add error description, refactor, and fix bugs</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-4" date="1714996800">- add logs, modify sock file permission and serivce file</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-5" date="1715169600">- fix systemd service uninstallation issue
- fix load error and args parsing error printing</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-2" date="1715774400">- fix pre-enable failed, dependencies missing error, memory leak
- fix warning message</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-3" date="1717156800">- refactor instance interfaces and add signal function</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-4" date="1717588800">- add dynamic dependencncy adjustment</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-5" date="1718193600">- add Requires</changelog>
</package>
<package pkgid="c15883e0e2e0eb1c95e3a28c4b7337db852be4ad60b17a658911b8857f259f23" name="oeAware-manager" arch="aarch64">
  <version epoch="0" ver="v1.0.1" rel="5.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-1" date="1713441600">- Package init</changelog>
  <changelog author="huangwenhua &lt;huangwenhua@kylinos.cn&gt; -v1.0.0-2" date="1714305600">- Add Requires:graphviz</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-3" date="1714392000">- add error description, refactor, and fix bugs</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-4" date="1714996800">- add logs, modify sock file permission and serivce file</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-5" date="1715169600">- fix systemd service uninstallation issue
- fix load error and args parsing error printing</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-2" date="1715774400">- fix pre-enable failed, dependencies missing error, memory leak
- fix warning message</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-3" date="1717156800">- refactor instance interfaces and add signal function</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-4" date="1717588800">- add dynamic dependencncy adjustment</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-5" date="1718193600">- add Requires</changelog>
</package>
<package pkgid="ed690f77a9bf920dbac8f58ec37e17124a8ca6db158937cbd4d442ceeae114d2" name="openeuler-intelligence-cli" arch="aarch64">
  <version epoch="0" ver="0.10.0" rel="14.oe2203sp4"/>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-5" date="1757505600">- 支持切换 MCP 自动执行模式
- 简化安装器命令为 oi-manager</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-6" date="1757592000">- 卸载时清理用户缓存和配置文件</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-7" date="1758024000">- 优化 LLM 和 Embedding 配置验证逻辑
- 添加部署后修改 LLM 和 Embedding 配置功能</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-8" date="1758110400">- 修复 Token 计算器中类型注解的兼容性问题
- 优化部署脚本中下载资源文件的逻辑</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-9" date="1759233600">- 支持通过环境变量 OI_SKIP_SSL_VERIFY / OI_SSL_VERIFY 控制 OpenAI 客户端 SSL 验证</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-10" date="1760961600">- 修复后端可用性校验，优化令牌格式验证</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-11" date="1761393600">- Add internationalization support (currently supports English and Simplified Chinese)
- Fix issue where settings page may reopen multiple times</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-12" date="1761739200">- Fix issue where failing to fetch mcp when creating agent with oi-manager</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-13" date="1762257600">- Fix timeout when executing complex MCP tasks
- Feature: Add login through browser (requires proper desktop environment)</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-14" date="1762862400">- Fix detecting el version issue in deployment script</changelog>
</package>
<package pkgid="676aab2cc2880b876a3bea42b81b5d2db149e3e48f954ae560174e1410139772" name="openeuler-intelligence-installer" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="14.oe2203sp4"/>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-5" date="1757505600">- 支持切换 MCP 自动执行模式
- 简化安装器命令为 oi-manager</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-6" date="1757592000">- 卸载时清理用户缓存和配置文件</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-7" date="1758024000">- 优化 LLM 和 Embedding 配置验证逻辑
- 添加部署后修改 LLM 和 Embedding 配置功能</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-8" date="1758110400">- 修复 Token 计算器中类型注解的兼容性问题
- 优化部署脚本中下载资源文件的逻辑</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-9" date="1759233600">- 支持通过环境变量 OI_SKIP_SSL_VERIFY / OI_SSL_VERIFY 控制 OpenAI 客户端 SSL 验证</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-10" date="1760961600">- 修复后端可用性校验，优化令牌格式验证</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-11" date="1761393600">- Add internationalization support (currently supports English and Simplified Chinese)
- Fix issue where settings page may reopen multiple times</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-12" date="1761739200">- Fix issue where failing to fetch mcp when creating agent with oi-manager</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-13" date="1762257600">- Fix timeout when executing complex MCP tasks
- Feature: Add login through browser (requires proper desktop environment)</changelog>
  <changelog author="openEuler &lt;contact@openeuler.org&gt; - 0.10.0-14" date="1762862400">- Fix detecting el version issue in deployment script</changelog>
</package>
<package pkgid="290dcc6d2039cf627da8b8fe872cba1c42c702e31e7078a409561f2afbb28b2a" name="perl-Mail-SPF_XS" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.2.11-2" date="1735128000">- fix CVE-2023-42118</changelog>
</package>
<package pkgid="479e7049f1b37848161e8667205381541186e2c2071a19ab506ec46def8858d5" name="pki-base" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="bd8fdbb78c820a68ddb333eb479fc50da8d144ceefd328a107054ed00fba6ff3" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="614b0b68f1f2ff45a4882fc1c31834153830e6fcc79a5dce1fe3b5446da6eda1" name="pki-ca" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="f48072c33703ae7b4406092068455fed180c58cdd50799c66949e44e41aede7c" name="pki-core-debuginfo" arch="aarch64">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="ea140b88ae9c882f8c6323494d21bda55c3f3c0705dea596f01c5be1cccfa2b7" name="pki-core-debugsource" arch="aarch64">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="7a712bc98ee363af7baee854c52d1d557792166215573ba98b79d35da91dc8d4" name="pki-help" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="5a89f21ce96305928c58dd84d0f8bf0660385d7575ed1481809438b1d5eeeead" name="pki-kra" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="d299377b1bf936c915b2ea333ff7837f1015bb1d2a742572cd1bbb1100e0ba72" name="pki-ocsp" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="b0336c256f809284e2e6f03a337e2de4033714b1fd507af1e4a09b464d21a2fe" name="pki-server" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="c6b32b970e82b499e01aa0533e4288efdb4d3b05e2d86679b37ee242140eb2df" name="pki-symkey" arch="aarch64">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="832fdd43400559e2d7b84e7215e30ffd3844134b89dd9a2a36022447c68f8da5" name="pki-tks" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="2596ce73635dacd51227c82aa24acad4a047a93d145805ca0c92c387c5b1deaf" name="pki-tools" arch="aarch64">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="2de77b7a27d56c70de90f9d5cb6e56f46b5c1488776a548b1348240d1487f0b2" name="pki-tps" arch="aarch64">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="51c6aebb043506f963a0b302ed1733008fbe39e2b66dba153f8ce539bf9df7b7" name="python-aiohttp-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="5.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
</package>
<package pkgid="f0d852953c917ffd85a3fce60c5aec5935180c86d87cb668734a622e59ad2a2a" name="python-aiohttp-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.7.4-6" date="1741262400">- Fix CVE-2023-47627,CVE-2023-49082,CVE-2024-23334,CVE-2024-23829,CVE-2024-27306 and CVE-2024-30251</changelog>
</package>
<package pkgid="e38f1c500f33022e601bd8b0c39a7e56f73a01d98588b721334c52b795084d29" name="python-aiohttp-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="5.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
</package>
<package pkgid="0b4e1ec70e085092fc21b0045a8e3b61d220c92afe9ede5fe9abb1e5b28e6a8c" name="python-aiohttp-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.7.4-6" date="1741262400">- Fix CVE-2023-47627,CVE-2023-49082,CVE-2024-23334,CVE-2024-23829,CVE-2024-27306 and CVE-2024-30251</changelog>
</package>
<package pkgid="1b1ce1332237071a94f375ae3e856074d72f6dfa76c5b3e9d5f85ae06fae3a9f" name="python-aiohttp-help" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="5.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
</package>
<package pkgid="4672e8ee4da34e22c7b233502db54a3eb33ccd09e398e817d1b3c3a77281480c" name="python-aiohttp-help" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.7.4-6" date="1741262400">- Fix CVE-2023-47627,CVE-2023-49082,CVE-2024-23334,CVE-2024-23829,CVE-2024-27306 and CVE-2024-30251</changelog>
</package>
<package pkgid="14926f4732457785be91b5f3d8635a121994e955c2982a665b3b61789005e3fb" name="python-asgiref-help" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="1.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 3.5.2-1" date="1665748800">- Upgrade to version 3.5.2</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 3.5.2-2" date="1668081600">- fix source0 err</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.6.0-1" date="1723118400">- Update to 3.6.0, fix installation failure of python-Django update to 4.2.15</changelog>
</package>
<package pkgid="ce31792b1e34bad1b5f2ba778eb22a12efdb9487f260817190a1379d0e15b930" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.2.12-2" date="1676289600">- Fix CVE-2023-23969</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.2.12-3" date="1677326400">- Fix CVE-2023-24580</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-4" date="1684238400">- Fix CVE-2023-31047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
</package>
<package pkgid="11ff6ee655467206b51bddfec588c06211c4d14fbf1ac1b212f7d5fb9cb90146" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="10.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-8" date="1756987200">- Fix CVE-2025-57833</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-9" date="1760011200">- Fix CVE-2025-59681 and CVE-2025-59682</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-10" date="1762430400">- Fix CVE-2025-64458 and CVE-2025-64459</changelog>
</package>
<package pkgid="1f73f2aabf46d82acba7a6003031bffce78c40c3845de3e09ca63e6599a80526" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.2.12-3" date="1677326400">- Fix CVE-2023-24580</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-4" date="1684238400">- Fix CVE-2023-31047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
</package>
<package pkgid="26f8cf9219a36c2ab1f0e60738639096f5da16f4689c9623febac002a564555e" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-4" date="1684238400">- Fix CVE-2023-31047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
</package>
<package pkgid="06d958fee5181405de3ecb16c02e5e60c267cb3ad9603514049071c0963ed7d8" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
</package>
<package pkgid="b4f987ad678a86f61bbd238d30ddd550695d4b2d27cde7aa64707af110d57ab1" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="5.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
</package>
<package pkgid="66623e9d9099057dff53bfb381c132bbe63884d395e2e1f76efbc141a5f3dc61" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
</package>
<package pkgid="5ac4019aa1aba1f231fb86977a9975ab375f664b2f63fb5c69041f44b4d50311" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="7.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
</package>
<package pkgid="4fc40a00452d8d4d4a20a3d9b59aba8dedce2e6bb71efc3ef90b068b66507d2c" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="8.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-8" date="1756987200">- Fix CVE-2025-57833</changelog>
</package>
<package pkgid="3d57c668c4e5d9eed35df85a67c79b5a7b631447cf2cc69c97bdddfef08a9e9e" name="python-django-help" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-8" date="1756987200">- Fix CVE-2025-57833</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-9" date="1760011200">- Fix CVE-2025-59681 and CVE-2025-59682</changelog>
</package>
<package pkgid="af0f33563dfcceed78b4124ccb742973e45421401d7d2c6837a98a89a2c682cf" name="python-eventlet-help" arch="noarch">
  <version epoch="0" ver="0.33.0" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.33.0-3" date="1756728000">- Fix CVE-2025-58068 and delete redundant file python37.patch</changelog>
</package>
<package pkgid="5edbfbcf1bca23e2235c088617d23866da4307ac510a0073ae0663c9b22f9d2a" name="python-h2-help" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.0-3" date="1756987200">- Fix CVE-2025-57804</changelog>
</package>
<package pkgid="b1ac1ca158e94ca3fc91e815e283628b0f59a38b0759d5e9a0c85bbf615fb6a7" name="python-pycares-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.9.0" rel="1.oe2203sp4"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 4.4.0-1" date="1709294400">- Update package to version 4.4.0
  Bump GitHub Actions versions and fix warnings in the process</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 4.5.0-1" date="1742558400">- Update package to version 4.5.0</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.9.0-1" date="1750334400">- Update to 4.9.0 for fix CVE-2025-48945</changelog>
</package>
<package pkgid="ed641e1b514e1ee6dab29c2260e6841a3013ce0729fb8e71d98ec06da8e97885" name="python-pycares-debugsource" arch="aarch64">
  <version epoch="0" ver="4.9.0" rel="1.oe2203sp4"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 4.4.0-1" date="1709294400">- Update package to version 4.4.0
  Bump GitHub Actions versions and fix warnings in the process</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 4.5.0-1" date="1742558400">- Update package to version 4.5.0</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.9.0-1" date="1750334400">- Update to 4.9.0 for fix CVE-2025-48945</changelog>
</package>
<package pkgid="99c0a553d69a0d1eb6b9f3d7e78e873812247692e2b0251309a34db96eac8984" name="python-pycares-help" arch="aarch64">
  <version epoch="0" ver="4.9.0" rel="1.oe2203sp4"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 4.4.0-1" date="1709294400">- Update package to version 4.4.0
  Bump GitHub Actions versions and fix warnings in the process</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 4.5.0-1" date="1742558400">- Update package to version 4.5.0</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.9.0-1" date="1750334400">- Update to 4.9.0 for fix CVE-2025-48945</changelog>
</package>
<package pkgid="3fa0e2f90e7fad7716ec971590b724f6584c4a52d5f91ad19c40de73983e8f63" name="python-twisted-help" arch="noarch">
  <version epoch="0" ver="22.4.0" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 22.4.0-1" date="1666872000">- upgrade version to 22.4.0</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 22.4.0-2" date="1702382400">- Fix CVE-2022-39348</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 22.4.0-3" date="1703851200">- Fix CVE-2023-46137</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 22.4.0-4" date="1722340800">- Fix CVE-2024-41810 and CVE-2024-41671</changelog>
</package>
<package pkgid="e76e799a7e7a8196ac33b1f666dc4dab46073eea52b01970ed64774a57b2ddfb" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.2.12-2" date="1676289600">- Fix CVE-2023-23969</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.2.12-3" date="1677326400">- Fix CVE-2023-24580</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-4" date="1684238400">- Fix CVE-2023-31047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
</package>
<package pkgid="9607e932a46418a54c9dc3fdcd6b70455bf64965a833e9f2f3482eb19e65bf8d" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="10.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-8" date="1756987200">- Fix CVE-2025-57833</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-9" date="1760011200">- Fix CVE-2025-59681 and CVE-2025-59682</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-10" date="1762430400">- Fix CVE-2025-64458 and CVE-2025-64459</changelog>
</package>
<package pkgid="340bec8d8ddfdf84f9fe1d9d257de2144a31ff9028156a673afcfda98b000f4d" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 3.2.12-3" date="1677326400">- Fix CVE-2023-24580</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-4" date="1684238400">- Fix CVE-2023-31047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
</package>
<package pkgid="07bd6e380052087fee7cce9d5bed286a101534386df1cc5a8240be1a64789c9f" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-4" date="1684238400">- Fix CVE-2023-31047</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
</package>
<package pkgid="b300c652e17847b3bc7b214ff20a9c585054c944e2571914340452ca764eb922" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-5" date="1689595200">- Fix CVE-2023-36053</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
</package>
<package pkgid="25b80ee9370b665919cd5faf73a19e0726d702dab358df872e661c1a625fc077" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="5.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.2.12-6" date="1694692800">- Fix CVE-2023-41164</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
</package>
<package pkgid="cd4a201892e1091ee0894a5d97b81fc6d1f96efcc21dc1517afaf8ad9eb5aeed" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-7" date="1696766400">- Fix CVE-2023-43665</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
</package>
<package pkgid="42190972b18655009fd4e01dd6f465557937a920680f04f05b584ab2f9c1807f" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="7.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-8" date="1699272000">- Fix CVE-2023-46695</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
</package>
<package pkgid="053e7a64c77f3533284f70f759b1ff4932cca62b5a11e491cd6c4bc8a4868305" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="8.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-9" date="1707307200">- Fix CVE-2024-24680</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-8" date="1756987200">- Fix CVE-2025-57833</changelog>
</package>
<package pkgid="23e1ace1a833d1618c13c3628b3c352cefcc70195fd51b9bffcf0e8ffaf87629" name="python3-Django" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.2.12-10" date="1709640000">- Fix CVE-2024-27351</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.15-1" date="1723118400">- Update to 4.2.15
  * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
  * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
  * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
  * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
  * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters
  * CVE-2024-38875: Potential denial-of-service vulnerability in django.utils.html.urlize()
  * CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords
  * CVE-2024-39330: Potential directory-traversal via Storage.save()
  * CVE-2024-39614: Potential denial-of-service vulnerability in get_supported_language_variant()
  * Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 4.2.15-2" date="1728561600">- Fix CVE-2024-45230 CVE-2024-45231</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.2.15-3" date="1733745600">- Fix CVE-2024-53907 CVE-2024-53908</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-4" date="1737115200">- Fix CVE-2024-56374</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.15-5" date="1741608000">- Type:CVE
- CVE:CVE-2025-26699
- SUG:NA
- DESC:fix CVE-2025-26699</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-6" date="1746792000">- Fix CVE-2025-32873</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-7" date="1749124800">- Fix CVE-2025-48432</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-8" date="1756987200">- Fix CVE-2025-57833</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.2.15-9" date="1760011200">- Fix CVE-2025-59681 and CVE-2025-59682</changelog>
</package>
<package pkgid="4debc2b07afd6b52c91fb9a3be7db4d0e58b3c17d4ee61dd8cdd07cd8f81aaa2" name="python3-aiohttp" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="5.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
</package>
<package pkgid="5c1e0fba03789882d697820045ea0988cb70c31395b1222b2941c5ef7273472b" name="python3-aiohttp" arch="aarch64">
  <version epoch="0" ver="3.7.4" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.7.4-3" date="1700136000">- Fix CVE-2023-47641</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.7.4-4" date="1701432000">- Fix CVE-2023-49081</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.7.4-5" date="1732104000">- Fix CVE-2024-52304</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.7.4-6" date="1741262400">- Fix CVE-2023-47627,CVE-2023-49082,CVE-2024-23334,CVE-2024-23829,CVE-2024-27306 and CVE-2024-30251</changelog>
</package>
<package pkgid="8f3732853573fd3b7a3330819112a2e376e0a4e2e1bfde1805c000539b6f1199" name="python3-asgiref" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="1.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 3.5.2-1" date="1665748800">- Upgrade to version 3.5.2</changelog>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 3.5.2-2" date="1668081600">- fix source0 err</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.6.0-1" date="1723118400">- Update to 3.6.0, fix installation failure of python-Django update to 4.2.15</changelog>
</package>
<package pkgid="5feee2af116efdd77a0430cfb5e2192981ba279537243a133031f1e35ff1c18f" name="python3-botan2" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="3.oe2203sp4"/>
  <changelog author="misaka00251 &lt;misaka00251@misakanet.cn&gt; - 2.19.1-1" date="1657800000">- Init package</changelog>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
</package>
<package pkgid="f283679918fb3c287c10ea97300c6016bbbc82a90a6280b69556bf9f5c0d5067" name="python3-botan2" arch="aarch64">
  <version epoch="0" ver="2.19.3" rel="4.oe2203sp4"/>
  <changelog author="liweiganga &lt;liweiganga@uniontech.com&gt; - 2.19.3-1" date="1669636800">- update to 2.19.3
- fix CVE-2022-43705</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 2.19.3-2" date="1719921600">- fix CVE-2024-34703</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.19.3-3" date="1720612800">- fix CVE-2024-39312
- fix CVE-2024-34702</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.19.3-4" date="1729857600">- Fix CVE-2024-50382</changelog>
</package>
<package pkgid="f4b7c0b241565aa304ec08914a7ee5337a0de6e47c50e048bfd7d5df5216bac7" name="python3-django-debreach" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.1-2" date="1723118400">- Fix build failure caused by python-django update to 4.2.15</changelog>
</package>
<package pkgid="4b9f20259d2a7f920d0e5632e94cce44f25a92303ea191955c4c20b2fedd2ad4" name="python3-eventlet" arch="noarch">
  <version epoch="0" ver="0.33.0" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.33.0-3" date="1756728000">- Fix CVE-2025-58068 and delete redundant file python37.patch</changelog>
</package>
<package pkgid="848a37553c6a7d7f32a7d938cf0c4ef918845d67ed9c722ac90f8431ca49bde7" name="python3-h2" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.0-3" date="1756987200">- Fix CVE-2025-57804</changelog>
</package>
<package pkgid="25edf138189f7ed176e4262cfaf2f1a939e7467695b1d93f818372dbf2871ccd" name="python3-pki" arch="noarch">
  <version epoch="0" ver="11.0.0" rel="6.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 11.0.0-3" date="1669204800">- Rectify the pki-core compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="Ge Wang &lt;wang--ge@126.com&gt; - 11.0.0-4" date="1681819200">- Fix EBS compile failure caused by lack of openjdk-headless</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 11.0.0-5" date="1687953600">- Fix CVE-2022-2414</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.0.0-6" date="1728820800">- Fix CVE-2023-4727</changelog>
</package>
<package pkgid="0980867379c4f6874a94b52cc8ed4b24936c518d816dc3f6963da989d96f8758" name="python3-pycares" arch="aarch64">
  <version epoch="0" ver="4.9.0" rel="1.oe2203sp4"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 4.4.0-1" date="1709294400">- Update package to version 4.4.0
  Bump GitHub Actions versions and fix warnings in the process</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 4.5.0-1" date="1742558400">- Update package to version 4.5.0</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.9.0-1" date="1750334400">- Update to 4.9.0 for fix CVE-2025-48945</changelog>
</package>
<package pkgid="6f0319077026b92ad5953f809bac9dbccd0419eb16b181500be7ad25714a3ee7" name="python3-twisted" arch="aarch64">
  <version epoch="0" ver="22.4.0" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 22.4.0-1" date="1666872000">- upgrade version to 22.4.0</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 22.4.0-2" date="1702382400">- Fix CVE-2022-39348</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 22.4.0-3" date="1703851200">- Fix CVE-2023-46137</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 22.4.0-4" date="1722340800">- Fix CVE-2024-41810 and CVE-2024-41671</changelog>
</package>
<package pkgid="c9b31a277feb0a39c1cfe32e8e0cfe98fa95dfed4602eabc1b306e0377f1dabe" name="restic" arch="aarch64">
  <version epoch="0" ver="0.12.1" rel="2.oe2203sp4"/>
  <changelog author="weidongkl &lt;weidong@uniontech.com&gt; - 0.12.1-2" date="1752753600">- Fix CVE-2025-4673 by rebuilding with updated Golang toolchain</changelog>
</package>
<package pkgid="5a024ab9885bf1ddf69cb0ece4e51fdbe429f655795960eb1892e5f9bf6f35eb" name="restic-bash-completion" arch="noarch">
  <version epoch="0" ver="0.12.1" rel="2.oe2203sp4"/>
  <changelog author="weidongkl &lt;weidong@uniontech.com&gt; - 0.12.1-2" date="1752753600">- Fix CVE-2025-4673 by rebuilding with updated Golang toolchain</changelog>
</package>
<package pkgid="2c3f2b0873a5b3fac3b1e62f364264cab84033a59cb7179ab6898b1ca2ff0ce9" name="restic-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.12.1" rel="2.oe2203sp4"/>
  <changelog author="weidongkl &lt;weidong@uniontech.com&gt; - 0.12.1-2" date="1752753600">- Fix CVE-2025-4673 by rebuilding with updated Golang toolchain</changelog>
</package>
<package pkgid="d860a76250bc81f6e1ad0229f3a4d731bc146bc4c97b54d1602b1a4384b1282f" name="rubygem-fluentd" arch="noarch">
  <version epoch="0" ver="1.14.5" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.14.5-3" date="1758110400">- Fix CVE-2022-39379</changelog>
</package>
<package pkgid="bce4b812ff92737218850a59dbeaa34d4d501e6c7766876595019cce09359b17" name="rubygem-fluentd-help" arch="noarch">
  <version epoch="0" ver="1.14.5" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.14.5-3" date="1758110400">- Fix CVE-2022-39379</changelog>
</package>
</otherdata>