# changelog

author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: haomimi <haomimi@uniontech.com> - 1:7.1.8.1-8.0.1.03
changelog:
  - fix: fix menu display issue of arm architecture libreoffice related software (bugid:184789)
  - spec: modify aarch64 off serverconfig


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11.0.1
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Eduard Abdullin <eabdullin@almalinux.org> - 1:7.1.8.1-12.0.1
changelog:
  - escape url passed to gstreamer
  - add some protocols that don't make sense as floating frame
   targets
  - warn about exotic protocols as well
  - default to ignoring libreoffice special-purpose protocols
   in calc hyperlink
  - reuse AllowedLinkProtocolFromDocument in writer
  - reuse AllowedLinkProtocolFromDocument in impress/draw
  - CVE-2023-6185 CVE-2023-6186 backporting


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-14
changelog:
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
  - Do not use header_prev in expire_lru_headers


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.1
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Correct ANY queries to not have additional data appended


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.5
changelog:
  - Add support for max-records-per-type and max-types-per-name options
    (RHEL-61936)
  - Support reading of new options also in named-checkconf -z, v2


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: David Marlin <dmarlin@redhat.com> - 5.63-2
changelog:
  + bluez-5.63-2
  - Change default of ClassicBondedOnly to true to align with HID specification.
  - Resolves: RHEL-18429
  - Fixing CVE-2021-41229


author: David Marlin <dmarlin@redhat.com> - 5.63-4
changelog:
  + bluez-5.63-4
  - Resolves: RHEL-35501
  - Fixing CVE-2023-50230
  - Resolves: RHEL-35504
  - Fixing CVE-2023-50229


author: David Marlin <dmarlin@redhat.com> - 5.63-5
changelog:
  + bluez-5.63-5
  - Resolves: RHEL-35371
  - Fixing CVE-2023-27349
  - Resolves: RHEL-35492
  - Fixing CVE-2023-51589


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-3.f2d38ce.git
changelog:
  - update for another, current snapshot beyond booth-1.0
    (commit f2d38ce), including:
    . support for solely manually managed tickets (9a365f9)
    . use asciidoctor instead of asciidoc for generating man pages (65e6a6b)
  - switch to using Python 3 for the tests instead of Python 2
    (behind unversioned "python" references; rhbz#1590856)


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-4.f2d38ce.git
changelog:
  - revert back to using asciidoc instead of asciidoctor for generating man pages
    (rhbz#1603119)
  - fix some issues in the shell scripts (rhbz#1602455)


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.1
changelog:
  - Resolves: rhbz#1602455
  - Resolves: rhbz#1682122
  - Resolves: rhbz#1768369
  - Resolves: rhbz#1835831

  - Update to current snapshot (commit ac1d34c) to fix test suite,
    build warnings and build with gcc10
  - Fix hardcoded-library-path
  - Package /var/lib/booth where booth can chroot
  - Add '?dist' macro to release field
  - Pass full path of Python3 to configure
  - Add CI tests
  - Enable gating


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.2
changelog:
  - Related: rhbz#1835831

  - Do not link with the pcmk libraries
  - Generate runtests.py and boothtestenv.py with -Es as make check does


author: Jan Friesse <jfriesse@redhat.com> - 1.0-199.1.ac1d34c.git
changelog:
  - Resolves: rhbz#1873948
  - Resolves: rhbz#1768172

  - Fix versioning scheme to handle updates better
  - Handle updated exit code of crm_ticket


author: Jan Friesse <jfriesse@redhat.com> - 1.0-199.2.ac1d34c.git
changelog:
  - Resolves: rhbz#2111668

  - Fix authfile directive handling in booth config file
    (fixes CVE-2022-2553)
  - Add enable-authfile option


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - Resolves: RHEL-15265

  - New upstream release (RHEL-15265)
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots (RHEL-15265)


author: caina <caina@uniontech.com> - 4.19.0-91.179.3
changelog:
  - uos: drm/ast: Fixed display error for ps23xx when using ast bmc card [T353997]
  - uos: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card [T342993]
  - uos: phytium: 4.19 add crtc [T351611]
  - euler: mm/memcontrol: fix wrong vmstats for dying memcg [T351649]
  - stable: {CVE-2024-26816} x86/boot: Ignore relocations in .notes sections in walk_relocs() too [B262317]
  - stable: {CVE-2024-26816} x86, relocs: Ignore relocations in .notes section [B262317]
  - uos: do not check permissions when the task is exiting


author: caina <caina@uniontech.com> - 4.19.0-91.179.4
changelog:
  - uos: Fix the misalignment between vm_ event_state. events [] and vmstat_text
  - uos: drm/phytium: Replace default efi fb0 with dc fb [T357571]
  - anolis: alinux: proc/stat: Add the missing rcu unlock. [T353137]
  - uos: fix ccp init failed for hygon c86-4g cpu machine [T353305]
  - uos: fix megaraid freeze during reboot [B262995]
  - uos: Revert "LS7A2000: PCIE: Fixup GPU card error" [B262995]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.5
changelog:
  - uos: Open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF
  - uos: diable irq limit of la64 by default [T358195]
  - stable: {CVE-2024-42232} libceph: fix race between delayed_work() and ceph_monc_stop() [T360521]
  - uos: dup: disable lazy_dup by default [G006301]
  - uos: update srpm kernel.spec [T354015]
  - uos: add lts-1070 srpm source [T354015]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.6
changelog:
  - uos: remove driver ps3stor identity equation [T364379]
  - uos: Upgrade megaraid driver to version 07.727.03.00 [T364381]
  - uos: open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF for arm64 and loongarch [T364381]
  - feat: modify the hook add timing for network control
  - uos: fix not being able to install kernel-* after install kernel-debug-* [T00000]
  - anolis: LoongArch: Limit min pci msi-x/msi vector number [G005956]
  - uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]
  - uos: Revert "uos: diable irq limit of la64 by default [T358195]"
  - uos: update srpm to 4.19.0-91.179.5 [T00000]
  - uos: Add manufacturer's ps3stor driver, version:2.2.0.16 [T364379]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.7
changelog:
  - uos: set the uos feature to off by default [T370941]
  - Merge changes Ie8b48cf6,I476b7c95,I78c8796c,I2ff30c55,Ib416260c, ... into lts-1070
  - mainline: bpf: Avoid storing modifier to info->btf_id [G2024122000034]
  - euler: cpuidle: menu: Avoid computations when result will be discarded [G006912]
  - uos: Loongarch: fix rebooting failed with ls2k500 [B274249]
  - uos: perf: Fix the logical in ebtables optimise. [G005616]
  - Merge "uos: add leak changelog [T00000]" into lts-1070
  - uos: add leak changelog [T00000]
  - uos: fix kernel panic caused by memory out of bounds [B255527]
  - uos: perf: ebtables: fix cpu 100% during wrk testing. [G005616]
  - loongarch: LoongArch: Backport page table code [G006496]
  - loongarch: LoongArch: LSVZ: Replace set_pte with kvm_set_pte [G006496]
  - loongarch: LoongArch: KVM: Select huge page only if secondary mmu supports it [G006496]
  - loongarch: LoongArch: LSVZ: disable vcpu preempt detection [G006496]
  - loongarch: LoongArch: LSVZ: Delay secondary mmu tlb flush until guest entry [G006496]
  - loongarch: LoongArch: LSVZ: Remove SW timer switch when vcpu is halt polling [G006496]
  - loongarch: Loongarch: Revert quicklist [G006496]
  - loongarch: LoongArch: LSVZ: Fix the rcu timeout problem when the VM is cpu hotplug [G006496]
  - loongarch: loongarch/kvm: Fixed a huge page leak on a virtual machine [G006496]
  - uos: update srpm to 4.19.0-91.179.6 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.8
changelog:
  - Merge changes I779b240d,If5d4a7bc,I3dbb41f4,I581242a3 into lts-1070
  - loongarch: LoongArch: Fixup extioi bounce [B282411]
  - loongarch: LoongArch:irqchip/loongarch-extioi: Add compat support on mainline kvm [B282411]
  - loongarch: LoongArch:irqchip/loongarch-extioi:Fix ext irq route error. [B282411]
  - loongarch: irqchip/loongarch-extioi: Fix ext irq route fail when some cpus offline [B282411]
  - euler: Revert "NFS: Don't interrupt file writeout due to fatal errors" [G006687]
  - uos: update srpm to 4.19.0-91.179.7 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.9
changelog:
  - stable: {CVE-2024-26976} KVM: Always flush async #PF workqueue when vCPU is being destroyed [T371989]
  - stable: {CVE-2024-44999} gtp: pull network headers in gtp_dev_xmit() [T371989]
  - stable: {CVE-2023-52885} SUNRPC: Fix UAF in svc_tcp_listen_data_ready() [T371989]
  - stable: {CVE-2024-46800} sch/netem: fix use after free in netem_dequeue [T371989]
  - stable: {CVE-2024-26852} net/ipv6: avoid possible UAF in ip6_route_mpath_notify() [T371989]
  - stable: {CVE-2024-41046} net: ethernet: lantiq_etop: fix double free in detach [T371989]
  - stable: {CVE-2024-53061} media: s5p-jpeg: prevent buffer overflows [T371989]
  - stable: {CVE-2024-50230} nilfs2: fix kernel bug due to missing clearing of checked flag [T371989]
  - stable: {CVE-2024-40901} scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory [T371989]
  - stable: {CVE-2024-36940} pinctrl: core: delete incorrect free in pinctrl_enable() [T371989]
  - stable: {CVE-2024-53155} ocfs2: fix uninitialized value in ocfs2_file_read_iter() [T371989]
  - stable: {CVE-2024-26934} USB: core: Fix deadlock in usb_deauthorize_interface() [T371989]
  - stable: {CVE-2024-53156} wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() [T371989]
  - stable: {CVE-2024-56548} hfsplus: don't query the device logical block size multiple times [T371989]
  - stable: {CVE-2023-52840} Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() [T371989]
  - stable: {CVE-2024-46782} ila: call nf_unregister_net_hooks() sooner [T371989]
  - stable: {CVE-2024-44998} atm: idt77252: prevent use after free in dequeue_rx() [T371989]
  - stable: {CVE-2024-26884} bpf: Fix hashtab overflow check on 32-bit arches [T371989]
  - stable: {CVE-2024-53057} net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT [T371989]
  - stable: {CVE-2024-38552} drm/amd/display: Fix potential index out of bounds in color transformation function [T371989]
  - stable: {CVE-2024-46738} VMCI: Fix use-after-free when removing resource in vmci_resource_remove() [T371989]
  - stable: {CVE-2024-38560} scsi: bfa: Ensure the copied buf is NUL terminated [T371989]
  - stable: {CVE-2024-50262} bpf: Fix out-of-bounds write in trie_get_next_key() [T371989]
  - stable: {CVE-2024-53227} scsi: bfa: Fix use-after-free in bfad_im_module_exit() [T371989]
  - stable: {CVE-2024-50267} USB: serial: io_edgeport: fix use after free in debug printk [T371989]
  - stable: {CVE-2024-35847} irqchip/gic-v3-its: Prevent double free on error [T371989]
  - stable: {CVE-2024-50302} HID: core: zero-initialize the report buffer [T371989]
  - stable: {CVE-2024-41087} ata: libata-core: Fix double free on error [T371989]
  - stable: {CVE-2023-52847} media: bttv: fix use after free error due to btv->timeout timer [T371989]
  - stable: {CVE-2024-50279} dm cache: fix out-of-bounds access to the dirty bitset when resizing [T371989]
  - stable: {CVE-2024-53173} NFSv4.0: Fix a use-after-free problem in the asynchronous open() [T371989]
  - stable: {CVE-2024-35821} ubifs: Set page uptodate in the correct place [T371989]
  - stable: {CVE-2024-38627} stm class: Fix a double free in stm_register_device() [T371989]
  - stable: {CVE-2024-27024} net/rds: fix WARNING in rds_conn_connect_if_down [T371989]
  - stable: {CVE-2024-53104} media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format [T371989]
  - stable: {CVE-2024-36886} tipc: fix UAF in error path [T371989]
  - stable: {CVE-2024-50269} usb: musb: sunxi: Fix accessing an released usb phy [T371989]
  - stable: {CVE-2024-56704} 9p/xen: fix release of IRQ [T371989]
  - stable: {CVE-2024-44987} ipv6: prevent UAF in ip6_send_skb() [T371989]
  - stable: {CVE-2024-50301} security/keys: fix slab-out-of-bounds in key_task_permission [T371989]
  - stable: {CVE-2024-46674} usb: dwc3: st: fix probed platform device ref count on probe error path [T371989]
  - stable: {CVE-2024-50264} vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans [T371989]
  - stable: {CVE-2024-53165} sh: intc: Fix use-after-free bug in register_intc_controller() [T371989]
  - stable: {CVE-2023-52922} can: bcm: Fix UAF in bcm_proc_show() [T371989]
  - stable: {CVE-2024-53142} initramfs: avoid filename buffer overrun [T371989]
  - stable: {CVE-2024-53239} ALSA: 6fire: Release resources at card release [T371989]
  - stable: {CVE-2024-46673} scsi: aacraid: Fix double-free on probe failure [T371989]
  - stable: {CVE-2024-42148} bnx2x: Fix multiple UBSAN array-index-out-of-bounds [T371989]
  - stable: {CVE-2024-27043} media: edia: dvbdev: fix a use-after-free [T371989]
  - stable: {CVE-2023-52691} drm/amd/pm: fix a double-free in si_dpm_init [T371989]
  - stable: {CVE-2023-52679} of: Fix double free in of_parse_phandle_with_args_map [T371989]
  - stable: {CVE-2024-38583} nilfs2: fix use-after-free of timer for log writer thread [T371989]
  - stable: {CVE-2024-53141} netfilter: ipset: add missing range check in bitmap_ip_uadt [T371989]
  - uos: diable irq limit of la64 by default again [T358195] [G005956]
  - uos: c7: Change the startup order of the kernel [T00000] [B302583]
  - uos: update srpm to 4.19.0-91.179.8 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.10
changelog:
  - Merge changes from topic "cve-1070a-20250417" into lts-1070
  - Merge "uos: update srpm to 4.19.0-91.179.9 [T00000]" into lts-1070
  - mainline: {CVE-2024-26974} crypto: qat - resolve race condition during AER recovery
  - mainline: crypto: qat - fix double free during reset
  - mainline: {CVE-2024-38612} ipv6: sr: fix invalid unregister error path
  - mainline: ipv6: sr: fix incorrect unregister order
  - mainline: ipv6: sr: add missing seg6_local_exit
  - mainline: ipv6: sr: fix possible use-after-free and null-ptr-deref
  - mainline: {CVE-2024-50278} dm cache: fix potential out-of-bounds access on the first resume
  - mainline: dm cache: optimize dirty bit checking with find_next_bit when resizing
  - mainline: {CVE-2024-27405} usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - mainline: usb: gadget: f_ncm: Always set current gadget in ncm_bind()
  - mainline: usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
  - mainline: usb: gadget: f_ncm: Fix NTP-32 support
  - mainline: usb: gadget: f_ncm: Add OS descriptor support
  - mainline: {CVE-2024-27395} net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - mainline: net: openvswitch: ovs_ct_exit to be done under ovs_lock
  - mainline: {CVE-2024-35960} net/mlx5: Properly link new fs rules into the tree
  - uos: update srpm to 4.19.0-91.179.9 [T00000]
  - anolis: ipvs: add sysctl_run_estimation to support disable estimation [G2025031100008]
  - uos: Revert "ipvs: move estimation from timer to kworker" [G2025031100008]
  - uos: Revert "net: ipvs: add sysctl_run_estimation to support disable estimation" [G2025031100008]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.11
changelog:
  - Merge changes Ied6aad01,Ied6aad01 into lts-1070
  - stable: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties [T343551]
  - mainline: waitid: Add support for waiting for the current process group [G2025051000002]
  - mainline: pidfd: add P_PIDFD to waitid() [G2025051000002]
  - uos: update srpm to 4.19.0-91.179.10 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.12
changelog:
  - uos: fix kabi broken for struct dst_ops and netns_xfrm
  - mainline: {CVE-2024-36971} net: fix __dst_negative_advice() race [G2025051600022]
  - mainline: mptcp: add sk_stop_timer_sync helper
  - mainline: net: annotate data-races around sk->sk_dst_pending_confirm
  - mainline: af_unix: Fix data race around sk->sk_err.
  - mainline: af_unix: Fix data-races around sk->sk_shutdown.
  - mainline: net: read sk->sk_family once in sk_mc_loop()
  - mainline: sock: Fix misuse of sk_under_memory_pressure()
  - mainline: net: add missing data-race annotation for sk_ll_usec
  - mainline: net: add missing data-race annotations around sk->sk_peek_off
  - mainline: netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - mainline: xfrm: fix a data-race in xfrm_gen_index()
  - uos: update srpm to 4.19.0-91.179.11 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.13
changelog:
  - mainline: {CVE-2024-57887} drm: adv7511: Fix use-after-free in adv7533_attach_dsi() [G2025060400020]
  - mainline: {CVE-2024-56659} net: lapb: increase LAPB_HEADER_LEN [G2025060400020]
  - mainline: {CVE-2024-56650} netfilter: x_tables: fix LED ID check in led_tg_check() [G2025060400020]
  - uos: update srpm to 4.19.0-91.179.12 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.14
changelog:
  - Merge "uos: Revert "UOS: modify pipe read/write" [G2025061700021]" into lts-1070
  - Merge changes I2b15cc45,I2b15cc45,I2b15cc45,I2b15cc45,I2b15cc45, ... into lts-1070
  - uos: Revert "UOS: modify pipe read/write" [G2025061700021]
  - uos: fix "mainline: mptcp: add sk_stop_timer_sync helper"
  - mainline: {CVE-2024-50051} spi: mpc52xx: Add cancel_work_sync before module remove [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: handle isoc Babble and Buffer Overrun events properly [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: process isoc TD properly when there was a transaction error mid TD. [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: store TD status in the td struct instead of passing it along [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: remove extra loop in interrupt context [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: get isochronous ring directly from endpoint structure [G2025060400020]
  - uos: update srpm to 4.19.0-91.179.13 [T00000]


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.173
changelog:
  - uos: arm64: configs: update CONFIG_VIRTIO_BALLOON from y to m[B233313]
  - uos: pmu: workaround for some cpu [B230423]


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.174
changelog:
  - uos: support CCUSR8116 RAID
  - uos: change the python-shabang to '/usr/xx' path [B235061]
  - uos: igb: add architecture flag for loongarch patch [B237615]
  - uos: Adjust the uos_sched structure
  - uos: tasks: fix kabi for struct task_struct
  - tasks, sched/core: RCUify the assignment of rq->curr
  - tasks, sched/core: With a grace period after finish_task_switch(), remove unnecessary code
  - tasks, sched/core: Ensure tasks are available for a grace period after leaving the runqueue
  - tasks: Add a count of task RCU users
  - uos: Revert "uos: bugfix: fixup marvell sata controller init fail on some machine" [B240939]
  - stable: kvm: selftests: aarch64: compile with warnings on [B240841]
  - stable: kvm: selftests: aarch64: fix default vm mode [B240841]
  - stable: kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size [B240841]
  - stable: KVM: selftests: Wrap vcpu_nested_state_get/set functions with x86 guard [B240841]
  - uos: fix kvm selftest compiling error [B240841]
  - stable: selftests, kvm: Replace manual MSR defs with common msr-index.h [B240841]
  - stable: tools arch x86: Grab a copy of the file containing the MSR numbers [B240841]
  - stable: x86/pkeys: Revert a5eff7259790 ("x86/pkeys: Add PKRU value to init_fpstate") [B234311]
  - uos: Adjust the code structure and naming of the uos_sched
  - uos: Refactoring uos_fork and uos_cwu code
  - uos: Unixbench optimized
  - stable: {CVE-2023-7192} netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() [T310775]
  - stable: {CVE-2023-6606} smb: client: fix OOB in smbCalcSize() [T310775]
  - uos: fix compile error on loongarch
  - uos: uos_pwu: add sched partner wakeup solution
  - uos: Revert "uos: add sched partner solution"
  - uos: uos_fork: Simplify code and adjust scheduling strategy
  - uos: add sched partner solution
  - uos: config: open CONFIG_ZIMC_PHY config [T317019]
  - uos: derive: net: add ZIMC_PHY driver [T317019]


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.175
changelog:
  - uos: locking/osq_lock: in osq_lock.h add uos_kabi.h header file
  - mainline: fsnotify: send path type events to group with super block marks [B237003]
  - uos: derive: net: update ice to 1.12.7 [T317017]
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - feat: uos: sched: hide period poll debug info
  - uos: uos-sched: Cut out unnecessary variables
  - uos: Simplify uos-sched implementation
  - loongarch: Fix error when build selftest/bpf [B219507]
  - uos: Revert "uos: fix loongarch64 bpf test_verifier compile bug [B215281]" [219507]
  - fix: mm/munlock: delete munlock_vma_pages_all(), allow oomreap(bugid:190957)


author: caina <caina@uniontech.com> - 4.19.0-91.176
changelog:
  - mainline: ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems [B219467]
  - mainline: ACPI: processor_idle: Skip dummy wait if kernel is in guest [B219467]
  - uos: bugfix: fixup marvell sata controller init fail on some machine
  - uos: fix fanotify10 failed [B191653]
  - uos: fs: move S_ISGID stripping into the vfs_*() helpers [B191653]
  - uos: fs: add mode_strip_sgid() helper [B191653]
  - uos: fix the error of sssdk.ko and sssnic.ko[B234253]
  - uos: workaround: livepatch: fix livepatch-transition cannot be completed in lonnargch64 [B239737]
  - stable: {CVE-2024-23849} net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv [T310775]
  - stable: {CVE-2024-1086} netfilter: nf_tables: reject QUEUE/DROP verdict parameters [T310775]
  - stable: {CVE-2024-0607} netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() [T310775]
  - stable: {CVE-2024-0340} vhost: use kzalloc() instead of kmalloc() followed by memset() [T310775]
  - stable: {CVE-2024-26597} net: qualcomm: rmnet: fix global oob in rmnet_policy [T310775]
  - stable: {CVE-2023-52464} EDAC/thunderx: Fix possible out-of-bounds string access [T310775]
  - stable: {CVE-2023-52451} powerpc/pseries/memhp: Fix access beyond end of drmem array [T310775]
  - stable: {CVE-2023-52451} powerpc/pseries/memhotplug: Quieten some DLPAR operations [T310775]
  - stable: {CVE-2023-52449} mtd: Fix gluebi NULL pointer dereference caused by ftl notifier [T310775]
  - stable: {CVE-2023-52445} media: pvrusb2: fix use after free on context disconnection [T310775]
  - stable: {CVE-2023-52444} f2fs: fix to avoid dirent corruption [T310775]
  - stable: {CVE-2023-52443} apparmor: avoid crash when parsed profile name is empty [T310775]
  - stable: {CVE-2023-52439} uio: Fix use-after-free in uio_open [T310775]
  - stable: {CVE-2023-52436} f2fs: explicitly null-terminate the xattr list [T310775]
  - uos: uharden: fix network performance degradation issue [B237495]
  - uos: Fix the issue of crashing during reboot. Release reserved memory resources
  - uos: elfverify: fix slab memory leak [T325833]
  - stable: {CVE-2023-46838} xen-netback: don't produce zero-size SKB frags [T310775]
  - stable: {CVE-2023-6040} netfilter: nf_tables: Reject tables of unsupported family [T310775]
  - stable: {CVE-2023-46343} nfc: nci: fix possible NULL pointer dereference in send_acknowledge() [T310775]
  - stable: {CVE-2023-51042} drm/amdgpu: Fix potential fence use-after-free v2 [T310775]
  - stable: {CVE-2023-51043} drm/atomic: Fix potential use-after-free in nonblocking commits [T310775]
  - stable: {CVE-2024-0775} ext4: improve error recovery code paths in __ext4_remount() [T310775]
  - euler: {CVE-2021-33631} ext4: fix kernel BUG in 'ext4_write_inline_data_end()' [T310775]
  - uos: uos-sched: Remove functions with duplicate functions
  - uos: locking/osq_lock: fix osq_lock compile warning


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.177
changelog:
  - stable: kvm/arm64: fixed passthrough gpu into vm on arm64
  - uos: bugfix: modified the license information unified uharden certificate information in all modules
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - Revert "uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA"
  - Revert "uos: locking/osq_lock: in osq_lock.h add uos_kabi.h header file"
  - Revert "uos: locking/osq_lock: fix osq_lock compile warning"


author: caina <caina@uniontech.com> - 4.19.0-91.178
changelog:
  - uos: locking/osq_lock: fix longarch64 compile err
  - uos: Revert "uos: hygon: [newfeature]x86: add hygon family 18h" [B248835]
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - Revert "uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA"
  - fix: uos: Add module license for uhdkmod[B248671]


author: caina <caina@uniontech.com> - 4.19.0-91.179
changelog:
  - uos: export uld_fcheck_file symbol
  - uos: config: open Motorcomm YT6801 defconfig [T332297]
  - uos: net/yt6801: Add Motorcomm Gigabit network card driver 1.0.27 [T332297]
  - uos: net: update Motorcomm Phy driver to 2.2.26536 [T332295]
  - euler: net/mlx5: Update the list of the PCI supported devices [B250451]
  - euler: net/mlx5: Update the list of the PCI supported devices [B250451]
  - uos: uos-sched: adjust uos-sched code
  - stable: {CVE-2023-7042} wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() [T334689]
  - stable: {CVE-2024-22099} Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security [T334689]
  - stable: {CVE-2023-6270} aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts [T334689]
  - fix: wrong logic when allocating memory in elf module


author: caina <caina@uniontech.com> - 4.19.0-91.179.1
changelog:
  - stable: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier [T351223]
  - uos: drm/hisilicon/hibmc: add gamma_set function [B252467]
  - uos: drm/hisilicon/hibmc: add DPMS on/off function [B252467]
  - uos: drm/hisilicon/hibmc: fix 'xset dpms force off' fail [B252467]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.5
changelog:
  * Mon Aug 19 2024 caina <caina@uniontech.com> - 4.19.0-91.179.4
  - uos: Fix the misalignment between vm_ event_state. events [] and vmstat_text
  - uos: drm/phytium: Replace default efi fb0 with dc fb [T357571]
  - anolis: alinux: proc/stat: Add the missing rcu unlock. [T353137]
  - uos: fix ccp init failed for hygon c86-4g cpu machine [T353305]
  - uos: fix megaraid freeze during reboot [B262995]
  - uos: Revert "LS7A2000: PCIE: Fixup GPU card error" [B262995]


author: caina <caina@uniontech.com> - 4.19.0-91.182
changelog:
  - uos: net/wangxun: update wangxun txgbe driver to 1.3.5.1 [T349909]
  - uos: net/wangxun: update wangxun ngbe driver to 1.2.6 [T349909]
  - uos: do not check permissions when the task is exiting
  - uos: fix warning error and grammar error causing by lower gcc version [T351223]
  - euler: mm/memcontrol: fix wrong vmstats for dying memcg [T351649]
  - stable: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier [T351223]
  - uos: update cusr8116 raid card driver to g2c35dadd
  - uos: perf: fix compile errors


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.183
changelog:
  - uos: sw_64: fix implicit declaration of 'vzalloc'i by qla2xxx [T359831]
  - uos: fix cpufreq of la64 compile failed [T325607]
  - uos: srpm: disable sign-kernel in c7 [T362695]
  - uos: fix netswift compile error [T325607]
  - uos: fix compile error by update qla2xxx hda driver version to 10.02.12.01-k [T359831]
  - perf: back-port Generic function-alignment infrastructure.
  - mainline: irqchip/gic-v3-its: Enable RESEND_WHEN_IN_PROGRESS for LPIs
  - mainline: genirq: Allow fasteoi handler to resend interrupts on concurrent handling
  - mainline: genirq: Expand doc for PENDING and REPLAY flags
  - mainline: genirq/PM: Introduce IRQCHIP_ENABLE_WAKEUP_ON_SUSPEND flag
  - mainline: net: sched: remove NET_CLS_IND config option
  - mainline: sched,livepatch: Use wake_up_if_idle()
  - mainline: sched: Improve wake_up_all_idle_cpus() take #2
  - mainline: sched: Simplify wake_up_*idle*()
  - mainline: btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
  - mainline: btrfs: check return value of btrfs_commit_transaction in relocation
  - mainline: HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - mainline: ipvs: align inner_mac_header for encapsulation
  - mainline: ipvs: allow rs_table to contain different real server types
  - mainline: ipvs: allow tunneling with gue encapsulation
  - mainline: generic radix trees
  - mainline: Documentation/ABI: Mention retbleed vulnerability info file for sysfs
  - mainline: xfs: report corruption only as a regular error
  - mainline: LoongArch, bpf: Fix jit to skip speculation barrier opcode
  - mainline: net: xdp: allow generic and driver XDP on one interface
  - mainline: selftests/bpf: fix the expected messages
  - mainline: xdp: Provide extack messages when prog attachment failed
  - mainline: netfilter: remove BUG_ON() after skb_header_pointer()
  - mainline: skbuff: micro-optimize {,__}skb_header_pointer()
  - mainline: skbuff: make __skb_header_pointer()'s data argument const
  - mainline: mm: add vma_lookup(), update find_vma_intersection() comments
  - mainline: i915_vma: Rename vma_lookup to i915_vma_lookup
  - mainline: l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  - mainline: net: fix a concurrency bug in l2tp_tunnel_register()
  - mainline: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  - mainline: NFS: Don't call generic_error_remove_page() while holding locks
  - mainline: {CVE-2022-1280} drm: use the lookup lock in drm_is_current_master
  - mainline: {CVE-2022-1280} drm: add a locked version of drm_is_current_master
  - mainline: {CVE-2022-1280} drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
  - mainline: {CVE-2022-1280} drm: protect drm_master pointers in drm_lease.c
  - mainline: {CVE-2022-1280} drm: serialize drm_file.master with a new spinlock
  - mainline: {CVE-2022-1280} drm: clean up unused kerneldoc in drm_lease.c
  - mainline: {CVE-2022-1280} drm: clarify usage of drm leases
  - mainline: video: fbdev: i740fb: Error out if 'pixclock' equals zero
  - mainline: seccomp: Improve performace by optimizing rmb()
  - uos: update qla2xxx hda driver version to 10.02.12.01-k [T359831]
  - uos: add Zhongxing micro network card driver [T363175]
  - euler: Revert "genirq: Increase the number of IRQ descriptors" [T325607]
  - euler: crypto: hisilicon - Add value profile support for kernel. [T325607]
  - euler: config: arm64: Enable dubugfs config of hisi sas [T325607]
  - euler: scsi: hisi_sas_v3_hw: Remove extra function calls for runtime pm [T325607]
  - euler: scsi: hisi_sas_v3_hw: Don't use PCI helper functions [T325607]
  - euler: scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING [T325607]
  - euler: scsi: hisi_sas: Work around build failure in suspend function [T325607]
  - euler: scsi: hisi_sas: Block requests before take debugfs snapshot [T325607]
  - euler: scsi: hisi_sas: Add slave_destroy interface for v3 hw [T325607]
  - euler: scsi: hisi_sas: Configure the initialization registers according to HBA model [T325607]
  - euler: scsi: hisi_sas: Increase debugfs_dump_index after dump is completed [T325607]
  - euler: scsi: hisi_sas: Ensure all enabled PHYs up during controller reset [T325607]
  - euler: scsi: hisi_sas: Exit suspending state when usage count is greater than 0 [T325607]
  - euler: scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id [T325607]
  - euler: Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure" [T325607]
  - euler: scsi: hisi_sas: Disable-SATA-disk-phy-for-severe-I_T-nexus reset failure [T325607]
  - euler: scsi: hisi_sas: Use abort task set to reset SAS disks when discovered [T325607]
  - euler: scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW [T325607]
  - euler: scsi: hisi_sas: Fix rescan after deleting a disk [T325607]
  - euler: scsi: hisi_sas: Modify v3 HW SSP underflow error processing [T325607]
  - euler: scsi: hisi_sas: Fix phyup timeout on FPGA [T325607]
  - euler: scsi: hisi_sas: Prevent parallel controller reset and control phy command [T325607]
  - euler: scsi: hisi_sas: Limit users changing debugfs BIST count value [T325607]
  - euler: scsi: hisi_sas: Use autosuspend for the host controller [T325607]
  - euler: scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed [T325607]
  - euler: scsi: hisi_sas: Add more logs for runtime suspend/resume [T325607]
  - euler: scsi: hisi_sas: Wait for phyup in hisi_sas_control_phy() [T325607]
  - euler: scsi: hisi_sas: Initialise devices in .slave_alloc callback [T325607]
  - euler: scsi: hisi_sas: Speed up error handling when internal abort timeout occurs [T325607]
  - euler: scsi: hisi_sas: Reset controller for internal abort timeout [T325607]
  - euler: scsi: hisi_sas: Include HZ in timer macros [T325607]
  - euler: scsi: hisi_sas: Run I_T nexus resets in parallel for clear nexus reset [T325607]
  - euler: scsi: hisi_sas: Put a limit of link reset retries [T325607]
  - euler: scsi: hisi_sas: Print SATA device SAS address for soft reset failure [T325607]
  - euler: scsi: hisi_sas: Warn in v3 hw channel interrupt handler when status reg cleared [T325607]
  - euler: scsi: hisi_sas: Directly snapshot registers when executing a reset [T325607]
  - euler: scsi: hisi_sas: Call sas_unregister_ha() to roll back if .hw_init() fails [T325607]
  - euler: scsi: hisi_sas: Print SAS address for v3 hw erroneous completion print [T325607]
  - euler: scsi: hisi_sas: Add trace FIFO debugfs support [T325607]
  - euler: scsi: hisi_sas: Enable debugfs support by default [T325607]
  - euler: scsi: hisi_sas: Remove deferred probe check in hisi_sas_v2_probe() [T325607]
  - euler: scsi: hisi_sas: use threaded irq to process CQ interrupts [T325607]
  - euler: scsi: hisi_sas: Remove preemptible() [T325607]
  - euler: scsi: hisi_sas: Move debugfs code to v3 hw driver [T325607]
  - euler: scsi: hisi_sas: Reduce some indirection in v3 hw driver [T325607]
  - euler: scsi: hisi_sas: Fix up probe error handling for v3 hw [T325607]
  - euler: scsi: hisi_sas: Recover PHY state according to the status before reset [T325607]
  - euler: scsi: hisi_sas: Add device link between SCSI devices and hisi_hba [T325607]
  - euler: scsi: hisi_sas: Add check for methods _PS0 and _PR0 [T325607]
  - euler: scsi: hisi_sas: Add controller runtime PM support for v3 hw [T325607]
  - euler: scsi: hisi_sas: Switch to new framework to support suspend and resume [T325607]
  - euler: scsi: hisi_sas: Code style cleanup [T325607]
  - euler: scsi: hisi_sas: Add missing newlines [T325607]
  - euler: scsi: hisi_sas: Add BIST support for fixed code pattern [T325607]
  - euler: scsi: hisi_sas: Add BIST support for phy FFE [T325607]
  - euler: scsi: hisi_sas: Make phy index variable name consistent [T325607]
  - euler: scsi: hisi_sas: Do not modify upper fields of PROG_PHY_LINK_RATE reg [T325607]
  - euler: scsi: hisi_sas: Modify macro name for OOB phy linkrate [T325607]
  - euler: scsi: hisi_sas: Remove one kerneldoc comment [T325607]
  - euler: scsi: hisi_sas: Do not reset phy timer to wait for stray phy up [T325607]
  - euler: scsi: hisi_sas: Stop returning error code from slot_complete_vX_hw() [T325607]
  - euler: scsi: hisi_sas: Add SAS_RAS_INTR0 to debugfs register name list [T325607]
  - euler: scsi: hisi_sas: Modify the commit information for DSM method [T325607]
  - euler: scsi: hisi_sas: Display proc_name in sysfs [T325607]
  - euler: scsi: hisi_sas: Fix build error without SATA_HOST [T325607]
  - euler: scsi: hisi_sas: Use dev_err() in read_iost_itct_cache_v3_hw() [T325607]
  - euler: scsi: hisi_sas: Add prints for v3 hw interrupt converge and automatic affinity [T325607]
  - euler: scsi: hisi_sas: Modify the file permissions of trigger_dump to write only [T325607]
  - euler: scsi: hisi_sas: Replace magic number when handle channel interrupt [T325607]
  - euler: scsi: hisi_sas: Stop converting a bool into a bool [T325607]
  - euler: scsi: hisi_sas: Return directly if init hardware failed [T325607]
  - euler: scsi: hisi_sas: Record the phy down event in debugfs [T325607]
  - euler: scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the probe fails [T325607]
  - euler: scsi: hisi_sas: Add ability to have multiple debugfs dumps [T325607]
  - euler: scsi: hisi_sas: Add module parameter for debugfs dump count [T325607]
  - euler: scsi: hisi_sas: Allocate memory for multiple dumps of debugfs [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for ITCT cache [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for IOST cache [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for ITCT [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for IOST [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for port [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for registers [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for DQ [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for CQ [T325607]
  - euler: scsi: hisi_sas: Add timestamp for a debugfs dump [T325607]
  - euler: scsi: hisi_sas: Don't create debugfs dump folder twice [T325607]
  - euler: scsi: hisi_sas: Make three functions static [T325607]
  - euler: scsi: hisi_sas: fix spelling mistake "digial" -> "digital" [T325607]
  - euler: scsi: hisi_sas: Add hisi_sas_debugfs_alloc() to centralise allocation [T325607]
  - euler: scsi: hisi_sas: Remove some unused function arguments [T325607]
  - euler: scsi: hisi_sas: Remove redundant work declaration [T325607]
  - euler: scsi: hisi_sas: Remove hisi_sas_hw.slot_complete [T325607]
  - euler: scsi: hisi_sas: add debugfs auto-trigger for internal abort time out [T325607]
  - euler: scsi: hisi_sas: use devm_platform_ioremap_resource() to simplify code [T325607]
  - euler: scsi: hisi_sas: remove set but not used variable 'irq_value' [T325607]
  - euler: scsi: hisi_sas: Remove some unnecessary code [T325607]
  - euler: scsi: hisi_sas: Modify return type of debugfs functions [T325607]
  - euler: scsi: hisi_sas: Drop free_irq() when devm_request_irq() failed [T325607]
  - euler: scsi: hisi_sas: Drop SMP resp frame DMA mapping [T325607]
  - euler: scsi: hisi_sas: Drop kmap_atomic() in SMP command completion [T325607]
  - euler: scsi: hisi_sas: Snapshot AXI and RAS register at debugfs [T325607]
  - euler: scsi: hisi_sas: Snapshot HW cache of IOST and ITCT at debugfs [T325607]
  - euler: scsi: hisi_sas: Fix pointer usage error in show debugfs IOST/ITCT [T325607]
  - euler: scsi: hisi_sas: Make max IPTT count equal for all hw revisions [T325607]
  - euler: scsi: hisi_sas: Some misc tidy-up [T325607]
  - euler: scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental [T325607]
  - euler: scsi: hisi_sas: Fix losing directly attached disk when hot-plug [T325607]
  - euler: scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code [T325607]
  - euler: scsi: hisi_sas: Fix normally completed I/O analysed as failed [T325607]
  - euler: scsi: hisi_sas: No need to check return value of debugfs_create functions [T325607]
  - euler: cpufreq: CPPC: add SW BOOST support [T325607]
  - euler: cpufreq: change '.set_boost' to act on one policy [T325607]
  - euler: genirq: Increase the number of IRQ descriptors [T325607]
  - euler: irqchip: gic-v3: Collection table support muti pages [T325607]
  - euler: net: hns3: Fix ethtool_ Ops&gen_ Improper modification of kabi changes caused by adding members in the ops structure [T325607]
  - euler: net: hns3: Fix Kabi issue caused by ptp introducing gettimex64() [T325607]
  - euler: Fallback ethtool about nla_ Modification of kabi changes caused by the addition of new associations in the policy structure [T325607]
  - euler: net: hns3: Fallback Ethtool's modifications to extack [T325607]
  - euler: net: hns3: Fallback ethtool's modification of lane [T325607]
  - euler: net: hns3: HNAE3 framework add support for ROH client [T325607]
  - euler: net: hns3: add ROH MAC type definitions and support query MAC type [T325607]
  - euler: net: hns3: Add configuration of TM QCN error event [T325607]
  - euler: net: hns3: fix return value check bug of rx copybreak [T325607]
  - euler: net: hns3: add netdev reset check for hns3_set_tunable() [T325607]
  - euler: ethtool: mark netlink family as __ro_after_init [T325607]
  - euler: net: hns3: add max order judgement for tx spare buffer [T325607]
  - euler: net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue [T325607]
  - euler: net: hns3: fix deadlock issue when externel_lb and reset are executed together [T325607]
  - euler: ethtool: Fix uninitialized number of lanes [T325607]
  - euler: ethtool: reset #lanes when lanes is omitted [T325607]
  - euler: ethtool: limit bitset size [T325607]
  - euler: ethtool: fix application of verbose no_mask bitset [T325607]
  - euler: net: hns3: fix for not calculating TX BD send size correctly [T325607]
  - euler: NIC: hns3: fix kabi [T325607]
  - euler: ptp: deprecate gettime64() in favor of gettimex64() [T325607]
  - euler: net: hns3: add support for Hisilicon ptp sync device [T325607]
  - euler: net: hns3: sync linux kernel hns3 wol to openeuler [T325607]
  - euler: net: hns3: fix pointer cast to different type for wol [T325607]
  - euler: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol [T325607]
  - euler: net: hns3: fix getting supported parameter from driver in hclge_set_wol [T325607]
  - euler: net: hns3: add supports pfc storm detection and suppression [T325607]
  - euler: net: hns3: debugfs add dump dscp map info [T325607]
  - euler: net: hns3: refactor dev capability and dev spec of debugfs [T325607]
  - euler: net: hns3: support debugfs for wake on lan [T325607]
  - euler: net: hns3: fix user's coalesce configuration lost issue [T325607]
  - euler: net: hns3: add support for configuring interrupt quantity limiting [T325607]
  - euler: net: hns3: add debugfs support for interrupt coalesce [T325607]
  - euler: net: hns3: delete the hclge_cmd.c and hclgevf_cmd.c [T325607]
  - euler: net: hns3: refactor VF cmdq init and uninit APIs with new common APIs [T325607]
  - euler: net: hns3: refactor PF cmdq init and uninit APIs with new common APIs [T325607]
  - euler: net: hns3: create common cmdq init and uninit APIs [T325607]
  - euler: net: hns3: refactor VF cmdq resource APIs with new common APIs [T325607]
  - euler: net: hns3: refactor PF cmdq resource APIs with new common APIs [T325607]
  - euler: net: hns3: create common cmdq resource allocate/free/query APIs [T325607]
  - euler: net: hns3: refactor hclgevf_cmd_send with new hclge_comm_cmd_send API [T325607]
  - euler: net: hns3: refactor hclge_cmd_send with new hclge_comm_cmd_send API [T325607]
  - euler: net: hns3: fix setting wrong tx_timeout value issue [T325607]
  - euler: net: hns3: refactor hclge_mac_link_status_wait for interface reuse [T325607]
  - euler: net: hns3: add wait until mac link down [T325607]
  - euler: net: hns3: fix set cpu affinity when state down [T325607]
  - euler: net: hns3: restore user pause configure when disable autoneg [T325607]
  - euler: net: hns3: add tm flush when setting tm [T325607]
  - euler: net: hns3: fix the imp capability bit cannot exceed 32 bits issue [T325607]
  - euler: net: hns3: fix GRE checksum offload issue [T325607]
  - euler: net: hns3: fix strncpy() not using dest-buf length as length issue [T325607]
  - euler: net: hns3: add support config dscp map to tc [T325607]
  - euler: net: hns3: refactor hclge_update_desc_vfid for extension [T325607]
  - euler: net:ethtool Fix the Kabi problem is caused by the new FEC callback function in ethtool_ops [T325607]
  - euler: net:hns3 The kabi issue is resolved when the lane members are added to the ethtool_link_ksettings structure [T325607]
  - euler: net: hns3: add querying fec statistics [T325607]
  - euler: ethtool: add FEC statistics [T325607]
  - euler: ethtool: fec_prepare_data() - jump to error handling [T325607]
  - euler: ethtool: support FEC settings over netlink [T325607]
  - euler: ethtool: netlink bitset handling [T325607]
  - euler: net: hns3: avoid mult + div op in critical data path [T325607]
  - euler: net: hns3: add support to query and set lane number by ethtool [T325607]
  - euler: ethtool: Extend link modes settings uAPI with lanes [T325607]
  - euler: net: hns3: Resolved the kabi change issue caused by new members in the devlink structure [T325607]
  - euler: The kabi issue is resolved when the rx_buf_len extension ring is used to set parameters or obtain APIs [T325607]
  - euler: net: hns3: Fix for the compilation problem of hclge_comm_cmd [T325607]
  - euler: net: hns3: remove always exist devlink pointer check [T325607]
  - euler: net: hns3: add support for registering devlink for VF [T325607]
  - euler: net: hns3: add support for registering devlink for PF [T325607]
  - euler: net: hns3: fix output information incomplete for dumping tx queue info with debugfs [T325607]
  - euler: net: hns3: fix reset timeout when enable full VF [T325607]
  - euler: net: hns3: modify reset delay time to avoid configuration timeout [T325607]
  - euler: net: hns3: add support for getting GE port lanes [T325607]
  - euler: net: hns3: Use the correct style for SPDX License Identifier [T325607]
  - euler: net: hns3: support set/get VxLAN rule of rx flow director by ethtool [T325607]
  - euler: net: hns3: PF supports to set and query lane_num by sysfs [T325607]
  - euler: net: ethtool: add VxLAN to the NFC API [T325607]
  - euler: net: hns3: add extend interface support for read and write phy register [T325607]
  - euler: net: hns3: add support set led [T325607]
  - euler: net: hns3: add support set mac state [T325607]
  - euler: net: hns3: add support detect port wire type [T325607]
  - euler: net: hns3: add support PF provides customized interfaces to detect port faults. [T325607]
  - euler: net: hns3: add support disable nic clock [T325607]
  - euler: net: hns3: add support config and query serdes lane status [T325607]
  - euler: net: hns3: add supports configure optical module enable [T325607]
  - euler: net: hns3: add support query the presence of optical module [T325607]
  - euler: net: hns3: disbable pfc en before the reset [T325607]
  - euler: net: hns3: support set pfc pause trans time [T325607]
  - euler: net: hns3: add support query port ext information [T325607]
  - euler: net: hns3: add support to get/set 1d torus param [T325607]
  - euler: net: hns3: add supports fast reporting of faulty nodes [T325607]
  - euler: net: hns3: add support configuring function-level interrupt affinity [T325607]
  - euler: net: hns3: add support clear mac statistics [T325607]
  - euler: net: hns3: add support customized exception handling interfaces. [T325607]
  - euler: net: hns3: fix miss L3E checking for rx packet [T325607]
  - euler: net: hns3: support wake on lan configuration and query [T325607]
  - euler: net: hns3: refactor the debugfs for dumping FD tcam [T325607]
  - euler: net: hns3: allocate fd counter for queue bonding [T325607]
  - euler: net: hns3: add queue bonding mode support for VF [T325607]
  - euler: net: hns3: add support for queue bonding mode of flow director [T325607]
  - euler: net: hns3: refine the handling for VF heartbeat [T325607]
  - euler: net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process [T325607]
  - euler: net: hns3: add support for external loopback test [T325607]
  - euler: net: hns3: net: hns3: add querying and setting fec off mode from firmware [T325607]
  - euler: net: hns3: add querying and setting fec llrs mode from firmware [T325607]
  - euler: net: hns3: add querying fec ability from firmware [T325607]
  - euler: net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware [T325607]
  - euler: net: hns3: handle empty unknown interrupt for VF [T325607]
  - euler: net: hns3: add support for TX push mode [T325607]
  - euler: net: hns3: create new set of unified hclge_comm_cmd_send APIs [T325607]
  - euler: net: hns3: use struct hclge_desc to replace hclgevf_desc in VF cmdq module [T325607]
  - euler: net: hns3: create new cmdq hardware description structure hclge_comm_hw [T325607]
  - euler: net: hns3: fix incorrect components info of ethtool --reset command [T325607]
  - euler: net: hns3: add dql info when tx timeout [T325607]
  - euler: net: hns3: debugfs add drop packet statistics of multicast and broadcast for igu [T325607]
  - euler: net: hns3: Fix unreasonable modifications caused by rollback extension ringparam parameters [T325607]
  - euler: net: hns3: remove the way to set tx spare buf via module parameter [T325607]
  - euler: net: hns3: add support to set/get rx buf len via ethtool for hns3 driver [T325607]
  - euler: build_bug.h: add wrapper for _Static_assert
  - euler: ethtool: add support to set/get rx buf len via ethtool [T325607]
  - euler: net: hns3: add support to set/get tx copybreak buf size via ethtool for hns3 driver [T325607]
  - euler: ethtool: add support to set/get tx copybreak buf size via ethtool [T325607]
  - euler: ethtool: set device ring sizes with RINGS_SET request [T325607]
  - euler: ethtool: provide ring sizes with RINGS_GET request [T325607]
  - euler: ethtool: helper functions for netlink interface [T325607]
  - euler: ethtool: introduce ethtool netlink interface [T325607]
  - euler: ethtool: provide link mode names as a string set [T325607]
  - euler: ethtool: move string arrays into common file [T325607]
  - euler: ethtool: move to its own directory [T325607]
  - euler: net: hns3: allow configure ETS bandwidth of all TCs [T325607]
  - euler: net: hns3: fix some mac statistics is always 0 in device version V2 [T325607]
  - euler: net: hns3: sync rx ring head in echo common pull [T325607]
  - euler: net: hns3: fix ROCE base interrupt vector initialization bug [T325607]
  - euler: net: hns3: add support for pf querying new interrupt resources [T325607]
  - euler: net: hisilicon: fix hsn3_ethtool kernel-doc warnings [T325607]
  - euler: net: hns3: adjust string spaces of some parameters of tx bd info in debugfs [T325607]
  - euler: net: hns3: fix data endian problem of some functions of debugfs [T325607]
  - euler: net: hns3: add error recovery module and type for himac [T325607]
  - euler: net: hns3: add new ras error type for roce [T325607]
  - euler: net: hns3: add update ethtool advertised link modes for FIBRE port when autoneg off [T325607]
  - euler: net: hns3: modify functions of converting speed ability to ethtool link mode [T325607]
  - euler: net: hns3: add support pause/pfc durations for mac statistics [T325607]
  - euler: net: hns3: device specifications add number of mac statistics [T325607]
  - euler: net: hns3: modify mac statistics update process for compatibility [T325607]
  - euler: net: hns3: schedule the polling again when allocation fails [T325607]
  - euler: net: hns3: fix for miscalculation of rx unused desc [T325607]
  - euler: net: hns3: PF enable promisc for VF when mac table is overflow [T325607]
  - euler: net: hns3: don't rollback when destroy mqprio fail [T325607]
  - euler: net: hns3: fix hclge_dbg_dump_tm_pg() stack usage [T325607]
  - euler: xdp: Fixed an issue where the trace_mem_disconnect function cannot find the definition. [T325607]
  - euler: net: hns3: fix always enable rx vlan filter problem after selftest [T325607]
  - euler: net: hns3: fix show wrong state when add existing uc mac address [T325607]
  - euler: net: hns3: do not allow call hns3_nic_net_open repeatedly [T325607]
  - euler: net: hns3: optimize the rx page reuse handling process [T325607]
  - euler: net: hns3: fix misuse vf id and vport id in some logs [T325607]
  - euler: net: hns3: make hclgevf_cmd_caps_bit_map0 and hclge_cmd_caps_bit_map0 static [T325607]
  - euler: net: hns3: remove unnecessary spaces [T325607]
  - euler: net: hns3: add some required spaces [T325607]
  - euler: net: hns3: clean up a type mismatch warning [T325607]
  - euler: net: hns3: refine function hns3_set_default_feature() [T325607]
  - euler: net: hns3: uniform parameter name of hclge_ptp_clean_tx_hwts() [T325607]
  - euler: net: hnss3: use max() to simplify code [T325607]
  - euler: net: hns3: refine function hclge_dbg_dump_tm_pri() [T325607]
  - euler: net: hns3: reconstruct function hclge_ets_validate() [T325607]
  - euler: net: hns3: reconstruct function hns3_self_test [T325607]
  - euler: net: hns3: initialize each member of structure array on a separate line [T325607]
  - euler: net: hns3: add required space in comment [T325607]
  - euler: net: hns3: remove unnecessary "static" of local variables in function [T325607]
  - euler: net: hns3: don't config TM DWRR twice when set ETS [T325607]
  - euler: net: hns3: add new function hclge_get_speed_bit() [T325607]
  - euler: net: hns3: refactor function hclgevf_parse_capability() [T325607]
  - euler: net: hns3: refactor function hclge_parse_capability() [T325607]
  - euler: net: hns3: uniform type of function parameter cmd [T325607]
  - euler: net: hns3: merge some repetitive macros [T325607]
  - euler: net: hns3: package new functions to simplify hclgevf_mbx_handler code [T325607]
  - euler: net: hns3: remove redundant param to simplify code [T325607]
  - euler: net: hns3: use memcpy to simplify code [T325607]
  - euler: net: hns3: add hns3_state_init() to do state initialization [T325607]
  - euler: net: hns3: add macros for mac speeds of firmware command [T325607]
  - euler: net: hns3: fix GRO configuration error after reset [T325607]
  - euler: net: hns3: fix speed unknown issue in bond 4 [T325607]
  - euler: net: hns3: add support ethtool extended link state [T325607]
  - euler: net: hns3: add header file hns3_ethtoo.h [T325607]
  - euler: ethtool: add two link extended substates of bad signal integrity [T325607]
  - euler: docs: ethtool: Add two link extended substates of bad signal integrity [T325607]
  - euler: net: hns3: add support for triggering reset by ethtool [T325607]
  - euler: net: hns3: change the method of obtaining default ptp cycle [T325607]
  - euler: net: hns3: fix different snprintf() limit [T325607]
  - euler: net: hns3: fix a double shift bug [T325607]
  - euler: net: hns3: add support for PTP [T325607]
  - euler: net: hns3: add error handling compatibility during initialization [T325607]
  - euler: net: hns3: add support for imp-handle ras capability [T325607]
  - euler: net: hns3: add log for workqueue scheduled late [T325607]
  - euler: net: hns3: add phy loopback support for imp-controlled PHYs [T325607]
  - euler: net: hns3: add ioctl support for imp-controlled PHYs [T325607]
  - euler: net: hns3: add get/set pause parameters support for imp-controlled PHYs [T325607]
  - euler: net: hns3: add support for imp-controlled PHYs [T325607]
  - euler: net:hns3 Fix KABI for deletion of hnae3_unic_private_info in hnae3_handle [T325607]
  - euler: net:hns3 Fix KABI for ethtools->supported_coalesce_params [T325607]
  - euler: net: hns3: remove some unused macros [T325607]
  - euler: net: hns3: remove some unused codes in hns3_nic_set_features() [T325607]
  - euler: net: hns3: fix two coding style issues in hclgevf_main.c [T325607]
  - euler: net: hns3: remove two unused macros in hclgevf_cmd.c [T325607]
  - euler: net: hns3: remove an unused macro hclge_is_csq [T325607]
  - euler: net: hns3: fix a print format issue in hclge_mac_mdio_config() [T325607]
  - euler: net: hns3: remove some unused fields in struct hclge_dev [T325607]
  - euler: net: hns3: remove two duplicated register macros in hclgevf_main.h [T325607]
  - euler: net: hns3: remove unused struct hnae3_unic_private_info [T325607]
  - euler: net: hns3: remove some unused fields in struct hns3_nic_priv [T325607]
  - euler: net: hns3: modify an incorrect type in struct hclgevf_cfg_gro_status_cmd [T325607]
  - euler: net: hns3: modify an incorrect type in struct hclge_cfg_gro_status_cmd [T325607]
  - euler: net: hns3: refactor hclge_query_bd_num_cmd_send() [T325607]
  - euler: net: hns3: refactor hclge_config_tso() [T325607]
  - euler: net: hns3: remove a duplicated printing in hclge_configure() [T325607]
  - euler: net: hns3: modify two uncorrect macro names [T325607]
  - euler: net: hns3: remove a redundant register macro definition [T325607]
  - euler: net/hns: Remove custom driver version in favour of global one [T325607]
  - euler: net: hns3: clear port base VLAN when unload PF [T325607]
  - euler: net: hns3: reject unsupported coalescing params [T325607]
  - euler: net: hns3: modify an unsuitable log in hclge_map_ring_to_vector() [T325607]
  - euler: net: hns3: remove unused macros [T325607]
  - euler: net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() [T325607]
  - euler: net: hns3: fix compile warning without CONFIG_RFS_ACCEL [T325607]
  - euler: net: hns3: Use LLDP ethertype define ETH_P_LLDP [T325607]
  - euler: net: hns3: return 0 and print warning when hit duplicate MAC [T325607]
  - euler: net: hns3: make function hclge_set_all_vf_rst() static [T325607]
  - uos: net: remove linkmode helpers from ice driver
  - euler: net: phy: Move linkmode helpers to somewhere public [T325607]
  - euler: net: hns3: Add unlikely for buf_num check [T325607]
  - euler: net: hns3: Add default irq affinity [T325607]
  - euler: net: hns3: Only update mac configuation when necessary [T325607]
  - euler: net: hns3: Fix for loopback selftest failed problem [T325607]
  - euler: config: arm64: Build HiSilicon SPI/SFC driver as module [T325607]
  - euler: spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection [T325607]
  - euler: spi: hisi-sfc-v3xx: fix potential irq race condition [T325607]
  - euler: spi: hisi-sfc-v3xx: add address mode check [T325607]
  - euler: spi: hisi-sfc-v3xx: extend version checking compatibility [T325607]
  - euler: spi: hisi-sfc-v3xx: add support for IRQ mode [T325607]
  - euler: spi: hisi-sfc-v3xx: factor out the bit definition of interrupt register [T325607]
  - euler: spi: hisi-sfc-v3xx: factor out bus config and transfer functions [T325607]
  - euler: spi: hisi-sfc-v3xx: factor out IO modes configuration [T325607]
  - euler: spi: Remove CONFIG_ prefix from Kconfig select [T325607]
  - euler: spi: hisi-sfc-v3xx: add error check after per operation [T325607]
  - euler: spi: HiSilicon v3xx: Use DMI quirk to set controller buswidth override bits [T325607]
  - euler: spi: HiSilicon v3xx: Properly set CMD_CONFIG for Dual/Quad modes [T325607]
  - euler: spi: Allow SPI controller override device buswidth [T325607]
  - euler: spi: Add HiSilicon v3xx SPI NOR flash controller driver [T325607]
  - euler: spi/acpi: avoid spurious matches during slave enumeration [T325607]
  - euler: spi/acpi: fix incorrect ACPI parent check [T325607]
  - euler: spi/acpi: enumerate all SPI slaves in the namespace [T325607]
  - euler: driver core: platform: return -ENXIO for missing GpioInt [T325607]
  - euler: driver: platform: Support parsing GpioInt 0 in platform_get_irq() [T325607]
  - euler: spi: spi-mem: Fix build error without CONFIG_SPI_MEM [T325607]
  - euler: spi: spi-mem: Add SPI_MEM_NO_DATA to the spi_mem_data_dir enum [T325607]
  - euler: sh: Replace CONFIG_MTD_M25P80 with CONFIG_MTD_SPI_NOR in sh7757lcr_defconfig [T325607]
  - euler: powerpc: Drop CONFIG_MTD_M25P80 in 85xx-hw.config [T325607]
  - euler: m68k: Drop CONFIG_MTD_M25P80 in stmark2_defconfig [T325607]
  - euler: mips: Drop CONFIG_MTD_M25P80 in various defconfig files [T325607]
  - euler: ARM: shmobile: defconfig: Refresh config CONFIG_MTD_M25P80 for v5.4-rc1 [T325607]
  - euler: mtd: spi-nor: core: Fix an issue of releasing resources during read/write [T325607]
  - euler: mtd: spi-nor: fix kernel-doc for spi_nor::spimem [T325607]
  - euler: mtd: spi-nor: Pointer parameter for CR in spi_nor_read_cr() [T325607]
  - euler: mtd: spi-nor: Pointer parameter for FSR in spi_nor_read_fsr() [T325607]
  - euler: mtd: spi-nor: Pointer parameter for SR in spi_nor_read_sr() [T325607]
  - euler: mtd: spi-nor: Stop compare with negative in Reg Ops methods [T325607]
  - euler: mtd: spi-nor: Prepend spi_nor_ to all Reg Ops methods [T325607]
  - euler: mtd: spi-nor: Fix direction of the write_sr() transfer [T325607]
  - euler: mtd: spi-nor: Move m25p80 code in spi-nor.c [T325607]
  - euler: mtd: spi-nor: always use bounce buffer for register read/writes [T325607]
  - euler: mtd: spi-nor: Add support for mx25u12835f [T325607]
  - euler: spi: add support for octal mode I/O data transfer [T325607]
  - euler: ACPI/MPAM: Adapt to Arm's MPAM ACPI table version 2 [T325607]
  - euler: dt-bindings: mpam: add document for arm64 mpam [T325607]
  - euler: arm64/mpam: add device tree support for mpam initialization [T325607]
  - euler: arm64/mpam: remove __init macro to support driver probe [T325607]
  - euler: arm64/mpam: rmid: refine allocation and release process [T325607]
  - euler: arm64/mpam: resctrl: add tips when rmid modification failed [T325607]
  - euler: arm64/mpam: Fix mpam corrupt when cpu online [T325607]
  - euler: mpam: update monitor rmid and group configuration [T325607]
  - euler: mpam: Add support for group rmid modify [T325607]
  - euler: mpam: enable rdt_mon_capable for mbw monitor [T325607]
  - euler: ACPI / PPTT: Find PPTT processor node by cache id [T325607]
  - euler: ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1 [T325607]
  - euler: ACPICA: Add support for Arm's MPAM ACPI table version 2 [T325607]
  - euler: perf metricgroup: Fix find_evsel_group() event selector [T325607]
  - euler: perf metricgroup: Fix for metrics containing duration_time [T325607]
  - euler: perf metricgroup: Fix system PMU metrics [T325607]
  - euler: perf metricgroup: Return error code from metricgroup__add_metric_sys_event_iter() [T325607]
  - euler: perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics [T325607]
  - euler: perf test: Fix metric parsing test [T325607]
  - euler: perf test: Fix msan uninitialized use. [T325607]
  - euler: perf test: Set NULL sentinel in pmu_events table in "Parse and process metrics" test [T325607]
  - euler: perf expr: Allow numbers to be followed by a dot [T325607]
  - euler: perf expr: Test parsing of floating point numbers [T325607]
  - euler: perf jevents: Add support for HiSilicon PA PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon SLLC PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon HHA PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon DDRC PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon L3C PMU aliasing [T325607]
  - euler: perf test: Add pmu-events test for aliases of hip09 ddrc pmu [T325607]
  - euler: perf vendor events arm64: Revise hip08 uncore events [T325607]
  - euler: perf test: Verify more event members in pmu-events test [T325607]
  - euler: perf jevents: Support ConfigCode [T325607]
  - euler: perf parse-events: Set numeric term config [T325607]
  - euler: perf test: Add pmu-events sys event support [T325607]
  - euler: perf jevents: Print SoC name per system event table [T325607]
  - euler: perf pmu: Make pmu_add_sys_aliases() public [T325607]
  - euler: perf test: Add more pmu-events uncore aliases [T325607]
  - euler: perf test: Re-add pmu-event uncore PMU alias test [T325607]
  - euler: perf pmu: Check .is_uncore field in pmu_add_cpu_aliases_map() [T325607]
  - euler: perf test: Test pmu-events core aliases separately [T325607]
  - euler: perf test: Factor out pmu-events alias comparison [T325607]
  - euler: perf test: Declare pmu-events test events separately [T325607]
  - euler: perf jevents: Relocate test events to cpu folder [T325607]
  - euler: perf test: Factor out pmu-events event comparison [T325607]
  - euler: perf jevents: Make build dependency on test JSONs [T325607]
  - euler: perf pmu: Save pmu name [T325607]
  - euler: perf pmu: Simplify arguments of __perf_pmu__new_alias [T325607]
  - euler: perf pmu: Add alias match method to fit pmu_name of HiSilicon DDRC [T325607]
  - euler: perf pmu: Fix alias matching [T325607]
  - euler: perf tools: Fix pattern matching for same substring in different PMU type [T325607]
  - euler: perf jevents: Add test for arch std events [T325607]
  - euler: perf metricgroup: Support adding metrics for system PMUs [T325607]
  - euler: perf metricgroup: Support printing metric groups for system PMUs [T325607]
  - euler: perf metricgroup: Split up metricgroup__print() [T325607]
  - euler: perf metricgroup: Fix metrics using aliases covering multiple PMUs [T325607]
  - euler: perf evlist: Change evlist__splice_list_tail() ordering [T325607]
  - euler: perf pmu: Add pmu_add_sys_aliases() [T325607]
  - euler: perf pmu: Add pmu_id() [T325607]
  - euler: perf jevents: Add support for system events tables [T325607]
  - euler: perf jevents: Add support for an extra directory level [T325607]
  - euler: perf jevents: Tidy error handling [T325607]
  - euler: perf jevents: Fix event code for events referencing std arch events [T325607]
  - euler: perf vendor events arm64: Add Hisi hip08 L3 metrics [T325607]
  - euler: perf vendor events arm64: Add Hisi hip08 L2 metrics [T325607]
  - euler: perf vendor events arm64: Add Hisi hip08 L1 metrics [T325607]
  - euler: perf pmu: Add pmu_events_map__find() function to find the common PMU map for the system [T325607]
  - euler: perf test: Handle metric reuse in pmu-events parsing test [T325607]
  - euler: perf metricgroup: Make find_metric() public with name change [T325607]
  - euler: perf metricgroup: Fix uncore metric expressions [T325607]
  - euler: perf metric: Do not free metric when failed to resolve [T325607]
  - euler: perf metric: Free metric when it failed to resolve [T325607]
  - euler: perf metric: Release expr_parse_ctx after testing [T325607]
  - euler: perf test: Fix memory leaks in parse-metric test [T325607]
  - euler: perf parse-event: Fix memory leak in evsel->unit [T325607]
  - euler: perf evlist: Fix cpu/thread map leak [T325607]
  - euler: perf metric: Fix some memory leaks - part 2 [T325607]
  - euler: perf metric: Fix some memory leaks [T325607]
  - euler: perf test: Free aliases for PMU event map aliases test [T325607]
  - euler: perf metricgroup: Fix typo in comment. [T325607]
  - euler: perf list: Do not print 'Metric Groups:' unnecessarily [T325607]
  - euler: perf metricgroup: Pass pmu_event structure as a parameter for arch_get_runtimeparam() [T325607]
  - euler: perf jevents: Add support for parsing perchip/percore events [T325607]
  - euler: perf jevents: Add new structure to pass json fields. [T325607]
  - euler: perf jevents: Make json_events() static and ditch jevents.h file [T325607]
  - euler: perf metric: Rename group_list to metric_list [T325607]
  - euler: perf metric: Rename struct egroup to metric [T325607]
  - euler: perf metric: Add metric group test [T325607]
  - euler: perf metric: Make compute_single function more precise [T325607]
  - euler: perf metric: Add recursion check when processing nested metrics [T325607]
  - euler: perf metric: Add DCache_L2 to metric parse test [T325607]
  - euler: perf metric: Add cache_miss_cycles to metric parse test [T325607]
  - euler: perf tests: Add parse metric test for frontend metric [T325607]
  - euler: perf tests: Add parse metric test for ipc metric [T325607]
  - euler: perf metric: Add events for the current list [T325607]
  - euler: perf metric: Compute referenced metrics [T325607]
  - euler: perf metric: Add referenced metrics to hash data [T325607]
  - euler: perf metric: Collect referenced metrics in struct metric_expr [T325607]
  - euler: perf metric: Collect referenced metrics in struct metric_ref_node [T325607]
  - euler: perf metric: Rename __metricgroup__add_metric to __add_metric [T325607]
  - euler: perf metric: Add add_metric function [T325607]
  - euler: perf metric: Add macros for iterating map events [T325607]
  - euler: perf metric: Add expr__del_id function [T325607]
  - euler: perf metric: Change expr__get_id to return struct expr_id_data [T325607]
  - euler: perf metric: Add expr__add_id function [T325607]
  - euler: perf metric: Fix memory leak in expr__add_id function [T325607]
  - euler: perf metric: Add 'struct expr_id_data' to keep expr value [T325607]
  - euler: perf metric: Rename expr__add_id() to expr__add_val() [T325607]
  - euler: perf pmu: Improve CPU core PMU HW event list ordering [T325607]
  - euler: perf pmu: List kernel supplied event aliases for arm64 [T325607]
  - euler: perf tools: Add test_generic_metric function [T325607]
  - euler: perf tools: Release metric_events rblist [T325607]
  - euler: perf tools: Factor out prepare_metric function [T325607]
  - euler: perf tools: Add metricgroup__parse_groups_test function [T325607]
  - euler: perf tools: Add map to parse_groups() function [T325607]
  - euler: perf tools: Add fake_pmu to parse_group() function [T325607]
  - euler: perf parse: Factor out parse_groups() function [T325607]
  - euler: perf tests: Add another metric parsing test [T325607]
  - euler: perf pmu: Add a perf_pmu__fake object to use with __parse_events() [T325607]
  - euler: perf parse: Provide a way to pass a fake_pmu to parse_events() [T325607]
  - euler: perf tests: Factor check_parse_id function [T325607]
  - euler: perf tools: Add fake pmu support [T325607]
  - euler: perf tools: Fix term parsing for raw syntax [T325607]
  - euler: perf parse: Add 'struct parse_events_state' pointer to scanner [T325607]
  - euler: perf stat: Do not pass avg to generic_metric [T325607]
  - euler: perf tools: Allow r0x<HEX> event syntax [T325607]
  - euler: perf parser: Add support to specify rXXX event with pmu [T325607]
  - euler: perf metricgroup: Remove unnecessary ',' from events [T325607]
  - euler: perf metricgroup: Add options to not group or merge [T325607]
  - euler: perf metricgroup: Remove duped metric group events [T325607]
  - euler: perf metricgroup: Order event groups by size [T325607]
  - euler: perf metricgroup: Delay events string creation [T325607]
  - euler: perf metricgroup: Use early return in add_metric [T325607]
  - euler: perf metricgroup: Always place duration_time last [T325607]
  - euler: perf metricgroup: Make 'evlist_used' variable a bitmap instead of array of bools [T325607]
  - euler: perf expr: Migrate expr ids table to a hashmap [T325607]
  - euler: perf test: Provide a subtest callback to ask for the reason for skipping a subtest [T325607]
  - euler: perf test: Improve pmu event metric testing [T325607]
  - euler: perf expr: Parse numbers as doubles [T325607]
  - euler: perf expr: Increase max other [T325607]
  - euler: perf expr: Allow ',' to be an other token [T325607]
  - euler: perf expr: Allow for unlimited escaped characters in a symbol [T325607]
  - euler: perf test: Test pmu-events aliases [T325607]
  - euler: perf pmu: Make pmu_uncore_alias_match() public [T325607]
  - euler: perf pmu: Add is_pmu_core() [T325607]
  - euler: perf test: Add pmu-events test [T325607]
  - euler: perf pmu: Refactor pmu_add_cpu_aliases() [T325607]
  - euler: perf jevents: Support test events folder [T325607]
  - euler: perf jevents: Add some test events [T325607]
  - euler: perf tests expr: Added test for runtime param in metric expression [T325607]
  - euler: perf metricgroups: Enhance JSON/metric infrastructure to handle "?" [T325607]
  - euler: perf metrictroup: Split the metricgroup__add_metric function [T325607]
  - euler: perf expr: Add expr_scanner_ctx object [T325607]
  - euler: perf expr: Add expr_ prefix for parse_ctx and parse_id [T325607]
  - euler: perf expr: Fix copy/paste mistake [T325607]
  - euler: perf expr: Fix memory leaks in metric bison [T325607]
  - euler: perf expr: Make expr__parse() return -1 on error [T325607]
  - euler: perf expr: Straighten expr__parse()/expr__find_other() interface [T325607]
  - euler: perf expr: Increase EXPR_MAX_OTHER to support metrics with more than 15 variables [T325607]
  - euler: perf expr: Move expr lexer to flex [T325607]
  - euler: perf expr: Add expr.c object [T325607]
  - euler: perf vendor events intel: Add NO_NMI_WATCHDOG metric constraint [T325607]
  - euler: perf metricgroup: Support metric constraint [T325607]
  - euler: perf util: Factor out sysctl__nmi_watchdog_enabled() [T325607]
  - euler: perf metricgroup: Factor out metricgroup__add_metric_weak_group() [T325607]
  - euler: perf jevents: Support metric constraint [T325607]
  - euler: perf tools: Update copy of libbpf's hashmap.c [T325607]
  - euler: perf tools: Sync hashmap.h with libbpf's [T325607]
  - euler: perf tools: Grab a copy of libbpf's hashmap [T325607]
  - euler: libbpf, hashmap: Fix undefined behavior in hash_bits [T325607]
  - euler: libbpf: Fix libbpf hashmap on (I)LP32 architectures [T325607]
  - euler: libbpf: Define __WORDSIZE if not available [T325607]
  - euler: libbpf, hashmap: Remove unused #include [T325607]
  - euler: perf parse-events: Fix an old style declaration [T325607]
  - euler: perf metricgroup: Fix printing event names of metric group with multiple events incase of overlapping events [T325607]
  - euler: tools bitmap: Implement bitmap_equal() operation at bitmap API [T325607]
  - euler: perf metricgroup: Fix printing event names of metric group with multiple events [T325607]
  - euler: perf list: Hide deprecated events by default [T325607]
  - euler: perf tools: Move ALLOC_LIST into a function [T325607]
  - euler: perf stat: Fix free memory access / memory leaks in metrics [T325607]
  - euler: perf vendor events arm64: Add some missing events for Hisi hip08 HHA PMU [T325607]
  - euler: perf vendor events arm64: Add some missing events for Hisi hip08 L3C PMU [T325607]
  - euler: perf vendor events arm64: Add some missing events for Hisi hip08 DDRC PMU [T325607]
  - euler: perf vendor events arm64: Fix Hisi hip08 DDRC PMU eventname [T325607]
  - euler: perf jevents: Add support for Hisi hip08 L3C PMU aliasing [T325607]
  - euler: perf jevents: Add support for Hisi hip08 HHA PMU aliasing [T325607]
  - euler: perf jevents: Add support for Hisi hip08 DDRC PMU aliasing [T325607]
  - euler: perf pmu: Support more complex PMU event aliasing [T325607]
  - euler: perf metricgroup: Support multiple events for metricgroup [T325607]
  - euler: perf metricgroup: Scale the metric result [T325607]
  - euler: perf pmu: Change convert_scale from static to global [T325607]
  - euler: perf metricgroup: Remove needless includes from metricgroup.h [T325607]
  - euler: perf metricgroup: Add missing list_del_init() when flushing egroups list [T325607]
  - euler: perf tools metric: Don't include duration_time in group [T325607]
  - euler: perf list: Avoid extra : for --raw metrics [T325607]
  - euler: perf jevents: Use nonlocal include statements in pmu-events.c [T325607]
  - euler: perf jevents: Remove unused variable [T325607]
  - euler: perf stat: Fix metrics with --no-merge [T325607]
  - euler: perf list: Output tool events [T325607]
  - euler: perf evsel: Support printing evsel name for 'duration_time' [T325607]
  - euler: perf stat: Implement duration_time as a proper event [T325607]
  - euler: perf stat: Revert checks for duration_time [T325607]
  - euler: perf tools: Fix legacy events symbol separator parsing [T325607]
  - euler: perf list: Display metric expressions for --details option [T325607]
  - euler: perf stat: Move 'metric_events' to 'struct perf_stat_config' [T325607]
  - euler: perf stat: Pass a 'struct perf_stat_config' argument to global print functions [T325607]
  - euler: perf stat: Pass 'struct perf_stat_config' argument to local print functions [T325607]
  - euler: perf stat: Add 'struct perf_stat_config' argument to perf_evlist__print_counters() [T325607]
  - euler: perf stat: Move STAT_RECORD out of perf_evlist__print_counters() [T325607]
  - euler: perf stat: Introduce perf_evlist__print_counters() [T325607]
  - euler: scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids [T325607]
  - euler: Fix the header file location error and adjust the function and structure version. [T325607]
  - euler: perf auxtrace arm64: Add support for parsing HiSilicon PCIe Trace packet [T325607]
  - euler: perf auxtrace arm64: Add support for HiSilicon PCIe Tune and Trace device driver [T325607]
  - euler: perf auxtrace arm: Refactor event list iteration in auxtrace_record__init() [T325607]
  - euler: perf tools: No need to cache the PMUs in ARM SPE auxtrace init routine [T325607]
  - euler: perf tools: Fix record failure when mixed with ARM SPE event [T325607]
  - euler: perf pmu: Move EVENT_SOURCE_DEVICE_PATH to PMU header file [T325607]
  - euler: spi: hisi-kunpeng: Fix the debugfs directory name incorrect [T325607]
  - euler: spi: hisi-kunpeng: Add debugfs support [T325607]
  - euler: spi: hisi-kunpeng: Fix Woverflow warning on conversion [T325607]
  - euler: spi: Add HiSilicon SPI Controller Driver for Kunpeng SoCs [T325607]
  - euler: Documentation: devres: add missing SPI helper [T325607]
  - euler: spi: <linux/spi/spi.h>: add missing struct kernel-doc entry [T325607]
  - euler: spi: core: allow reporting the effectivly used speed_hz for a transfer [T325607]
  - euler: arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled [T325607]
  - euler: arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() [T325607]
  - euler: arm64: Expose SVE2 features for userspace [T325607]
  - euler: arm64: HWCAP: add support for AT_HWCAP2 [T325607]
  - euler: perf/smmuv3: Add MODULE_ALIAS for module auto loading [T325607]
  - euler: perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 [T325607]
  - euler: perf/smmuv3: Enable HiSilicon Erratum 162001800 quirk [T325607]
  - euler: Revert "perf/smmuv3_pmu: Enable HiSilicon Erratum 162001800 quirk" [T325607]
  - euler: drivers/perf: hisi: add NULL check for name [T325607]
  - euler: drivers/perf: hisi: Remove redundant initialized of pmu->name [T325607]
  - euler: drivers/perf: hisi: Extract initialization of "cpa_pmu->pmu" [T325607]
  - euler: drivers/perf: hisi: Simplify the parameters of hisi_pmu_init() [T325607]
  - euler: drivers/perf: hisi: Advertise the PERF_PMU_CAP_NO_EXCLUDE capability [T325607]
  - euler: perf: hisi: Extract hisi_pmu_init [T325607]
  - euler: perf: hisi: Add configs for PMU isolation [T325607]
  - euler: perf: hisi: Fix read sccl_id and ccl_id error in TSV200 [T325607]
  - euler: drivers/perf: fixed kabi broken for SLLC and PA PMU [T325607]
  - euler: drivers/perf: fixed the issue that the kabi value changed [T325607]
  - euler: drivers/perf: hisi: Don't migrate perf to the CPU going to teardown [T325607]
  - euler: drivers/perf: hisi: Add TLP filter support [T325607]
  - euler: docs: perf: Fix PMU instance name of hisi-pcie-pmu [T325607]
  - euler: docs: fix 'make htmldocs' warning in perf [T325607]
  - euler: docs: perf: Address some html build warnings [T325607]
  - euler: docs: perf: Add description for HiSilicon PCIe PMU driver [T325607]
  - euler: docs: perf: Add new description on HiSilicon uncore PMU v2 [T325607]
  - euler: docs: perf: move to the admin-guide [T325607]
  - euler: drivers/perf: hisi: Fix some event id for hisi-pcie-pmu [T325607]
  - euler: drivers/perf: hisi: Add Support for CPA PMU [T325607]
  - euler: driver/perf: hisi: fix kabi broken for struct hisi_pmu [T325607]
  - euler: drivers/perf: hisi: Associate PMUs in SICL with CPUs online [T325607]
  - euler: drivers/perf: hisi: Add driver for HiSilicon PCIe PMU [T325607]
  - euler: PCI: Add pci_dev_id() helper [T325607]
  - euler: perf: hisi: Fix unexpected modifications in hisi_uncore_l3c_pmu.c [T325607]
  - euler: perf: hisi: Add support for HiSilicon SoC LPDDRC PMU [T325607]
  - euler: perf: hisi: Add support for HiSilicon SoC L3T PMU [T325607]
  - euler: perf: hisi: Fix read sccl_id and ccl_id error in some platform [T325607]
  - euler: openeuler_defconfig: Build HISI PMU drivers as modules. [T325607]
  - euler: arm64: perf: Expose some new events via sysfs [T325607]
  - euler: arm64: perf: Hook up new events [T325607]
  - euler: arm64: perf: Correct the event index in sysfs [T325607]
  - euler: arm64: perf: Add support for Armv8.1 PMCEID register format [T325607]
  - euler: perf/smmuv3: Don't trample existing events with global filter [T325607]
  - euler: drivers/perf: hisi: Add missing include of linux/module.h [T325607]
  - euler: drivers/perf: Prevent forced unbinding of PMU drivers [T325607]
  - euler: drivers/perf: hisi: Permit modular builds of HiSilicon uncore drivers [T325607]
  - euler: drivers/perf: hisi: Simplify hisi_read_sccl_and_ccl_id and its comment [T325607]
  - euler: drivers/perf: hisi: update the sccl_id/ccl_id for certain HiSilicon platform [T325607]
  - euler: perf: hisi: Make irq shared [T325607]
  - euler: drivers/perf: hisi: Fix data source control [T325607]
  - euler: perf/hisi: Use irq_set_affinity() [T325607]
  - euler: drivers/perf: hisi: Add support for HiSilicon PA PMU driver [T325607]
  - euler: drivers/perf: hisi: Add support for HiSilicon SLLC PMU driver [T325607]
  - euler: drivers/perf: hisi: Update DDRC PMU for programmable counter [T325607]
  - euler: drivers/perf: hisi: Add new functions for HHA PMU [T325607]
  - euler: drivers/perf: hisi: Add new functions for L3C PMU [T325607]
  - euler: drivers/perf: hisi: Add PMU version for uncore PMU drivers. [T325607]
  - euler: drivers/perf: hisi: Refactor code for more uncore PMUs [T325607]
  - euler: drivers/perf: hisi: Remove unnecessary check of counter index [T325607]
  - euler: drivers/perf: hisi: Add identifier sysfs file [T325607]
  - euler: perf: hisi: use devm_platform_ioremap_resource() to simplify code [T325607]
  - euler: For drivers that do not support context exclusion let's advertise the PERF_PMU_CAP_NO_EXCLUDE capability. This ensures that perf will prevent us from handling events where any exclusion flags are set. Let's also remove the now unnecessary check for exclusion flags. [T325607]
  - euler: drivers/perf: Fix kernel panic when rmmod PMU modules during perf sampling [T325607]
  - euler: docs: perf: convert to ReST [T325607]
  - euler: Revert "perf: hisi: remove duplicated code" [T325607]
  - euler: drivers/perf: Add support for ARMv8.3-SPE [T325607]
  - euler: perf arm-spe: Add support for ARMv8.3-SPE [T325607]
  - euler: perf arm_spe: Decode memory tagging properties [T325607]
  - euler: perf arm-spe: Add more sub classes for operation packet [T325607]
  - euler: perf arm-spe: Refactor operation packet handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_op_type() [T325607]
  - euler: perf arm-spe: Remove size condition checking for events [T325607]
  - euler: perf arm-spe: Refactor event type handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_event() [T325607]
  - euler: perf arm-spe: Refactor counter packet handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_counter() [T325607]
  - euler: perf arm-spe: Refactor context packet handling [T325607]
  - euler: perf arm-spe: Refactor address packet handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_addr() [T325607]
  - euler: perf arm-spe: Refactor packet header parsing [T325607]
  - euler: perf arm-spe: Refactor printing string to buffer [T325607]
  - euler: perf arm-spe: Fix packet length handling [T325607]
  - euler: perf arm-spe: Refactor arm_spe_get_events() [T325607]
  - euler: perf arm-spe: Refactor payload size calculation [T325607]
  - euler: perf arm-spe: Fix a typo in comment [T325607]
  - euler: perf arm-spe: Include bitops.h for BIT() macro [T325607]
  - euler: Subject: [PATCH] crypto: hisilicon - fix different versions of devices driver compatibility issue [T325607]
  - euler: UACCE backport from mainline [T325607]
  - euler: crypto: hisilicon-Cap block size at 2^31 [T325607]
  - euler: crypto: hisilicon-hpre add req check when callback [T325607]
  - euler: crypto: hisilicon- count send_ref when sending bd [T325607]
  - euler: crypto: hisilicon-enhancement of qm DFX [T325607]
  - euler: crypto: hisilicon-memory management optimization [T325607]
  - euler: config: arm64: Enable config of hisi ptt [T325607]
  - euler: hwtracing: hisi_ptt: Add dummy callback pmu::read() [T325607]
  - euler: hwtracing: hisi_ptt: Keep to advertise PERF_PMU_CAP_EXCLUSIVE [T325607]
  - euler: hwtracing: hisi_ptt: Fix potential sleep in atomic context [T325607]
  - euler: hwtracing: hisi_ptt: Advertise PERF_PMU_CAP_NO_EXCLUDE for PTT PMU [T325607]
  - euler: hwtracing: hisi_ptt: Export available filters through sysfs [T325607]
  - euler: hwtracing: hisi_ptt: Add support for dynamically updating the filter list [T325607]
  - euler: hwtracing: hisi_ptt: Factor out filter allocation and release operation [T325607]
  - euler: hwtracing: hisi_ptt: Only add the supported devices to the filters list [T325607]
  - euler: hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" [T325607]
  - euler: MAINTAINERS: Add maintainer for HiSilicon PTT driver [T325607]
  - euler: docs: trace: Add HiSilicon PTT device driver documentation [T325607]
  - euler: hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device [T325607]
  - euler: hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device [T325607]
  - euler: genirq: Export affinity setter for modules [T325607]
  - euler: iommu/arm-smmu-v3: Integrate the function for obtain the device domain type in bypass mode [T325607]
  - euler: iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity [T325607]
  - euler: iommu: Add def_domain_type() callback in iommu_ops [T325607]
  - euler: iommu: smmuv2: Using the SMMU_BYPASS_DEV to bypass SMMU for some SoCs [T325607]
  - euler: iommu: dev_bypass: cleanup dev bypass code [T325607]
  - euler: arm64: phytium: using MIDR_PHYTIUM_FT2000PLUS instead of ARM_CPU_IMP_PHYTIUM [T325607]
  - euler: PCI: Support BAR sizes up to 8TB [T325607]
  - uos: Open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF
  - uos: fix hyperv_cpuid testing failure [B240841]
  - stable: {CVE-2024-42232} libceph: fix race between delayed_work() and ceph_monc_stop() [T360521]
  - uos: dup: disable lazy_dup by default [G006301]
  - uos: srpm: even if with_btf is 0, it should still depends on dwarves [T354015]
  - uos: modify srpm source [T354015]
  - uos: add lts-1070 srpm source [T354015]
  - uos: diable irq limit of la64 by default [T358195]
  - mainline: PCI: Add ACS quirk for Wangxun NICs. [T358365]
  - uos: drm/phytium: Replace default efi fb0 with dc fb [T357571]
  - uos: Fix the misalignment between vm_ event_state. events [] and vmstat_text
  - update: lpfc.ko to 14.2.673.36 [T355279]
  - anolis: alinux: proc/stat: Add the missing rcu unlock. [T353137]
  - uos: fix ccp init failed for hygon c86-4g cpu machine [T353305]
  - uos: add loongarch64 macro to mkspec for %build [T354923]
  - uos: net/wangxun: update wangxun ngbevf driver to 1.2.2 [T353307]
  - stable: {CVE-2024-26816} x86/boot: Ignore relocations in .notes sections in walk_relocs() too [B262317]
  - stable: {CVE-2024-26816} x86, relocs: Ignore relocations in .notes section [B262317]
  - uos: fix kabi broken by modify struct sock {} [T343551]
  - stable: wifi: rtlwifi: 8192de: correct checking of IQK reload [T343551]
  - stable: regmap: Account for register length when chunking [T343551]
  - stable: fbcon: Fix null-ptr-deref in soft_cursor [T343551]
  - stable: ext4: add lockdep annotations for i_data_sem for ea_inode's [T343551]
  - stable: selinux: don't use make's grouped targets feature yet [T343551]
  - stable: tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK [T343551]
  - stable: mmc: vub300: fix invalid response handling [T343551]
  - stable: rsi: Remove unnecessary boolean condition [T343551]
  - stable: regulator: da905{2,5}: Remove unnecessary array check [T343551]
  - stable: hwmon: (scmi) Remove redundant pointer check [T343551]
  - stable: wifi: rtlwifi: remove always-true condition pointed out by GCC 12 [T343551]
  - stable: lib/dynamic_debug.c: use address-of operator on section symbols [T343551]
  - stable: kernel/extable.c: use address-of operator on section symbols [T343551]
  - stable: eth: sun: cassini: remove dead code [T343551]
  - stable: gcc-12: disable '-Wdangling-pointer' warning for now [T343551]
  - stable: ACPI: thermal: drop an always true check [T343551]
  - stable: x86/boot: Wrap literal addresses in absolute_pointer() [T343551]
  - stable: ata: libata-scsi: Use correct device no in ata_find_dev() [T343551]
  - stable: scsi: stex: Fix gcc 13 warnings [T343551]
  - stable: usb: gadget: f_fs: Add unbind event before functionfs_unbind [T343551]
  - stable: net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 [T343551]
  - stable: iio: dac: build ad5758 driver when AD5758 is selected [T343551]
  - stable: iio: dac: mcp4725: Fix i2c_master_send() return value handling [T343551]
  - stable: HID: wacom: avoid integer overflow in wacom_intuos_inout() [T343551]
  - stable: HID: google: add jewel USB id [T343551]
  - stable: iio: adc: mxs-lradc: fix the order of two cleanup operations [T343551]
  - stable: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() [T343551]
  - stable: atm: hide unused procfs functions [T343551]
  - stable: ALSA: oss: avoid missing-prototype warnings [T343551]
  - stable: netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT [T343551]
  - stable: wifi: b43: fix incorrect __packed annotation [T343551]
  - stable: scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed [T343551]
  - stable: arm64/mm: mark private VM_FAULT_X defines as vm_fault_t [T343551]
  - stable: ARM: dts: stm32: add pin map for CAN controller on stm32f7 [T343551]
  - stable: wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value [T343551]
  - stable: media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table [T343551]
  - stable: media: dvb_ca_en50221: fix a size write bug [T343551]
  - stable: media: netup_unidvb: fix irq init by register it at the end of probe [T343551]
  - stable: media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address [T343551]
  - stable: media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() [T343551]
  - stable: media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer [T343551]
  - stable: media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() [T343551]
  - stable: media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() [T343551]
  - stable: media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() [T343551]
  - stable: media: dvb_demux: fix a bug for the continuity counter [T343551]
  - stable: ASoC: ssm2602: Add workaround for playback distortions [T343551]
  - stable: xfrm: Check if_id in inbound policy/secpath match [T343551]
  - stable: ASoC: dwc: limit the number of overrun messages [T343551]
  - stable: nbd: Fix debugfs_create_dir error checking [T343551]
  - stable: fbdev: stifb: Fix info entry in sti_struct on error path [T343551]
  - stable: fbdev: modedb: Add 1920x1080 at 60 Hz video mode [T343551]
  - stable: media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE [T343551]
  - stable: ARM: 9295/1: unwind:fix unwind abort for uleb128 case [T343551]
  - stable: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() [T343551]
  - stable: watchdog: menz069_wdt: fix watchdog initialisation [T343551]
  - stable: net: dsa: mv88e6xxx: Increase wait after reset deactivation [T343551]
  - stable: udp6: Fix race condition in udp6_sendmsg & connect [T343551]
  - stable: net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report [T343551]
  - stable: ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use [T343551]
  - stable: net/sched: Prohibit regrafting ingress or clsact Qdiscs [T343551]
  - stable: net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs [T343551]
  - stable: net/sched: sch_clsact: Only create under TC_H_CLSACT [T343551]
  - stable: net/sched: sch_ingress: Only create under TC_H_INGRESS [T343551]
  - stable: tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set [T343551]
  - stable: tcp: deny tcp_disconnect() when threads are waiting [T343551]
  - stable: af_packet: do not use READ_ONCE() in packet_bind() [T343551]
  - stable: amd-xgbe: fix the false linkup in xgbe_phy_status [T343551]
  - stable: af_packet: Fix data-races of pkt_sk(sk)->num. [T343551]
  - stable: netrom: fix info-leak in nr_write_internal() [T343551]
  - stable: net/mlx5: fw_tracer, Fix event handling [T343551]
  - stable: dmaengine: pl330: rename _start to prevent build error [T343551]
  - stable: netfilter: ctnetlink: Support offloaded conntrack entry deletion [T343551]
  - stable: ipv{4,6}/raw: fix output xfrm lookup wrt protocol [T343551]
  - stable: bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() [T343551]
  - stable: cdc_ncm: Fix the build warning [T343551]
  - stable: power: supply: bq24190: Call power_supply_changed() after updating input current [T343551]
  - stable: power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() [T343551]
  - stable: power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize [T343551]
  - stable: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize [T343551]
  - stable: cdc_ncm: Implement the 32-bit version of NCM Transfer Block [T343551]
  - uos: fix kabi broken by modify enum cpuhp_state {} [T343551]
  - uos: fix kabi borken by modify struct proto {} [T343551]
  - stable: 3c589_cs: Fix an error handling path in tc589_probe() [T343551]
  - stable: forcedeth: Fix an error handling path in nv_probe() [T343551]
  - stable: ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg [T343551]
  - stable: x86/show_trace_log_lvl: Ensure stack pointer is aligned, again [T343551]
  - stable: xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() [T343551]
  - stable: coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() [T343551]
  - stable: power: supply: sbs-charger: Fix INHIBITED bit for Status reg [T343551]
  - stable: power: supply: bq27xxx: Fix poll_interval handling and races on remove [T343551]
  - stable: power: supply: bq27xxx: Fix I2C IRQ race on remove [T343551]
  - stable: power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition [T343551]
  - stable: power: supply: leds: Fix blink to LED on transition [T343551]
  - stable: ipv6: Fix out-of-bounds access in ipv6_find_tlv() [T343551]
  - stable: bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields [T343551]
  - stable: net: fix skb leak in __skb_tstamp_tx() [T343551]
  - stable: media: radio-shark: Add endpoint checks [T343551]
  - stable: USB: sisusbvga: Add endpoint checks [T343551]
  - stable: USB: core: Add routines for endpoint checks in old drivers [T343551]
  - stable: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). [T343551]
  - stable: ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G [T343551]
  - stable: ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported [T343551]
  - stable: parisc: Fix flush_dcache_page() for usage from irq context [T343551]
  - stable: selftests/memfd: Fix unknown type name build failure [T343551]
  - stable: x86/mm: Avoid incomplete Global INVLPG flushes [T343551]
  - stable: btrfs: use nofs when cleaning up aborted transactions [T343551]
  - stable: parisc: Allow to reboot machine after system halt [T343551]
  - stable: m68k: Move signal frame following exception on 68020/030 [T343551]
  - stable: ALSA: hda/ca0132: add quirk for EVGA X299 DARK [T343551]
  - stable: spi: fsl-cpm: Use 16 bit mode for large transfers with even size [T343551]
  - stable: spi: fsl-spi: Re-organise transfer bits_per_word adaptation [T343551]
  - stable: spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode [T343551]
  - stable: s390/qdio: fix do_sqbs() inline assembly constraint [T343551]
  - stable: s390/qdio: get rid of register asm [T343551]
  - stable: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF [T343551]
  - stable: vc_screen: rewrite vcs_size to accept vc, not inode [T343551]
  - stable: usb: gadget: u_ether: Fix host MAC address case [T343551]
  - stable: usb: gadget: u_ether: Convert prints to device prints [T343551]
  - stable: lib/string_helpers: Introduce string_upper() and string_lower() helpers [T343551]
  - stable: ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 [T343551]
  - stable: ALSA: hda/realtek - ALC897 headset MIC no sound [T343551]
  - stable: ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform [T343551]
  - stable: ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW [T343551]
  - stable: ALSA: hda/realtek - The front Mic on a HP machine doesn't work [T343551]
  - stable: ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 [T343551]
  - stable: ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 [T343551]
  - stable: ALSA: hda/realtek - Add Headset Mic supported for HP cPC [T343551]
  - stable: ALSA: hda/realtek - More constifications [T343551]
  - stable: Add Acer Aspire Ethos 8951G model quirk [T343551]
  - stable: HID: wacom: Force pen out of prox if no events have been received in a while [T343551]
  - stable: netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag [T343551]
  - stable: netfilter: nf_tables: stricter validation of element data [T343551]
  - stable: netfilter: nf_tables: allow up to 64 bytes in the set element data area [T343551]
  - stable: netfilter: nf_tables: add nft_setelem_parse_key() [T343551]
  - stable: netfilter: nf_tables: validate registers coming from userspace. [T343551]
  - stable: netfilter: nftables: statify nft_parse_register() [T343551]
  - stable: netfilter: nftables: add nft_parse_register_store() and use it [T343551]
  - stable: netfilter: nftables: add nft_parse_register_load() and use it [T343551]
  - stable: nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() [T343551]
  - stable: tpm/tpm_tis: Disable interrupts for more Lenovo devices [T343551]
  - stable: ceph: force updating the msg pointer in non-split case [T343551]
  - stable: serial: Add support for Advantech PCI-1611U card [T343551]
  - stable: statfs: enforce statfs[64] structure initialization [T343551]
  - stable: ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table [T343551]
  - stable: ALSA: hda: Fix Oops by 9.1 surround channel names [T343551]
  - stable: usb: typec: altmodes/displayport: fix pin_assignment_show [T343551]
  - stable: usb-storage: fix deadlock when a scsi command timeouts more than once [T343551]
  - stable: vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() [T343551]
  - stable: igb: fix bit_shift to be in [1..8] range [T343551]
  - stable: cassini: Fix a memory leak in the error handling path of cas_init_one() [T343551]
  - stable: net: bcmgenet: Restore phy_stop() depending upon suspend/close [T343551]
  - stable: net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() [T343551]
  - stable: drm/exynos: fix g2d_open/close helper function definitions [T343551]
  - stable: media: netup_unidvb: fix use-after-free at del_timer() [T343551]
  - stable: erspan: get the proto with the md version for collect_md [T343551]
  - stable: ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode [T343551]
  - stable: ip6_gre: Make o_seqno start from 0 in native mode [T343551]
  - stable: ip6_gre: Fix skb_under_panic in __gre6_xmit() [T343551]
  - stable: serial: arc_uart: fix of_iomap leak in `arc_serial_probe` [T343551]
  - stable: vsock: avoid to close connected socket after the timeout [T343551]
  - stable: net: fec: Better handle pm_runtime_get() failing in .remove() [T343551]
  - stable: af_key: Reject optional tunnel/BEET mode templates in outbound policies [T343551]
  - stable: cpupower: Make TSC read per CPU for Mperf monitor [T343551]
  - stable: btrfs: fix space cache inconsistency after error loading it from disk [T343551]
  - stable: btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid [T343551]
  - stable: mfd: dln2: Fix memory leak in dln2_probe() [T343551]
  - stable: phy: st: miphy28lp: use _poll_timeout functions for waits [T343551]
  - stable: Input: xpad - add constants for GIP interface numbers [T343551]
  - stable: clk: tegra20: fix gcc-7 constant overflow warning [T343551]
  - stable: recordmcount: Fix memory leaks in the uwrite function [T343551]
  - stable: sched: Fix KCSAN noinstr violation [T343551]
  - stable: mcb-pci: Reallocate memory region to avoid memory overlapping [T343551]
  - stable: serial: 8250: Reinit port->pm on port specific driver unbind [T343551]
  - stable: usb: typec: tcpm: fix multiple times discover svids error [T343551]
  - stable: HID: wacom: generic: Set battery quirk only when we see battery data [T343551]
  - stable: spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 [T343551]
  - stable: HID: logitech-hidpp: Reconcile USB and Unifying serials [T343551]
  - stable: HID: logitech-hidpp: Don't use the USB serial for USB devices [T343551]
  - stable: staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE [T343551]
  - stable: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp [T343551]
  - stable: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace [T343551]
  - stable: f2fs: fix to drop all dirty pages during umount() if cp_error is set [T343551]
  - stable: ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() [T343551]
  - stable: ext4: set goal start correctly in ext4_mb_normalize_request [T343551]
  - stable: gfs2: Fix inode height consistency check [T343551]
  - stable: scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition [T343551]
  - stable: lib: cpu_rmap: Avoid use after free on rmap->obj array entries [T343551]
  - stable: net: Catch invalid index in XPS mapping [T343551]
  - stable: net: pasemi: Fix return type of pasemi_mac_start_tx() [T343551]
  - stable: ext2: Check block size validity during mount [T343551]
  - stable: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex [T343551]
  - stable: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects [T343551]
  - stable: ACPICA: Avoid undefined behavior: applying zero offset to null pointer [T343551]
  - stable: drm/tegra: Avoid potential 32-bit integer overflow [T343551]
  - stable: ACPI: EC: Fix oops when removing custom query handlers [T343551]
  - stable: firmware: arm_sdei: Fix sleep from invalid context BUG [T343551]
  - stable: regmap: cache: Return error in cache sync operations for REGCACHE_NONE [T343551]
  - stable: drm/amd/display: Use DC_LOG_DC in the trasform pixel function [T343551]
  - stable: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() [T343551]
  - stable: af_unix: Fix data races around sk->sk_shutdown. [T343551]
  - stable: af_unix: Fix a data race of sk->sk_receive_queue->qlen. [T343551]
  - stable: net: datagram: fix data-races in datagram_poll() [T343551]
  - stable: ipvlan:Fix out-of-bounds caused by unclear skb->cb [T343551]
  - stable: tcp: add annotations around sk->sk_shutdown accesses [T343551]
  - stable: tcp: factor out __tcp_close() helper [T343551]
  - stable: tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit [T343551]
  - stable: tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT [T343551]
  - stable: net: annotate sk->sk_err write from do_recvmmsg() [T343551]
  - stable: netlink: annotate accesses to nlk->cb_running [T343551]
  - stable: net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). [T343551]
  - uos: drm/ast: Fixed display error for ps23xx when using ast bmc card [T353997]
  - uos: Revert "uos: drm/ast: Fixed display error for ps23xx when using ast bmc card [T342993]" [T353997]
  - uos: fix kabi broken for ipmi_smi_msg_received. [T343551]
  - uos: revert stable: uapi/linux/const.h: prefer ISO-friendly __typeof__ [T343551] [T343551]
  - stable: PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock [T343551]
  - stable: PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors [T343551]
  - stable: drbd: correctly submit flush bio on barrier [T343551]
  - stable: ext4: fix invalid free tracking in ext4_xattr_move_to_block() [T343551]
  - stable: ext4: remove a BUG_ON in ext4_mb_release_group_pa() [T343551]
  - stable: ext4: bail out of ext4_xattr_ibody_get() fails for any reason [T343551]
  - stable: ext4: add bounds checking in get_max_inline_xattr_value_size() [T343551]
  - stable: HID: wacom: Set a default resolution for older tablets [T343551]
  - stable: drm/panel: otm8009a: Set backlight parent to panel device [T343551]
  - stable: ARM: dts: s5pv210: correct MIPI CSIS clock name [T343551]
  - stable: ARM: dts: exynos: fix WM8960 clock name in Itop Elite [T343551]
  - stable: sh: nmi_debug: fix return value of __setup handler [T343551]
  - stable: sh: init: use OF_EARLY_FLATTREE for early init [T343551]
  - stable: sh: math-emu: fix macro redefined warning [T343551]
  - stable: platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i [T343551]
  - stable: cifs: fix pcchunk length type in smb2_copychunk_range [T343551]
  - stable: btrfs: print-tree: parent bytenr must be aligned to sector size [T343551]
  - stable: btrfs: fix btrfs_prev_leaf() to not return the same key twice [T343551]
  - stable: perf symbols: Fix return incorrect build_id size in elf_read_build_id() [T343551]
  - stable: perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() [T343551]
  - stable: perf vendor events power9: Remove UTF-8 characters from JSON files [T343551]
  - stable: ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` [T343551]
  - stable: drm/amdgpu: add a missing lock for AMDGPU_SCHED [T343551]
  - stable: drm/amdgpu: Add command to override the context priority. [T343551]
  - stable: drm/amdgpu: Put enable gfx off feature to a delay thread [T343551]
  - stable: rxrpc: Fix hard call timeout units [T343551]
  - stable: net/sched: act_mirred: Add carrier check [T343551]
  - stable: writeback: fix call of incorrect macro [T343551]
  - stable: net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu [T343551]
  - stable: net: dsa: mv88e6xxx: Add missing watchdog ops for 6320 family [T343551]
  - stable: dm verity: fix error handling for check_at_most_once on FEC [T343551]
  - stable: dm verity: skip redundant verity_handle_err() on I/O errors [T343551]
  - stable: ipmi: Fix how the lower layers are told to watch for messages [T343551]
  - stable: tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem [T343551]
  - stable: debugobject: Ensure pool refill (again) [T343551]
  - stable: perf auxtrace: Fix address filter entire kernel size [T343551]
  - stable: dm flakey: fix a crash with invalid table line [T343551]
  - stable: dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path [T343551]
  - stable: s390/dasd: fix hanging blockdevice after request requeue [T343551]
  - stable: btrfs: scrub: reject unsupported scrub flags [T343551]
  - stable: clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent [T343551]
  - stable: wifi: rtl8xxxu: RTL8192EU always needs full init [T343551]
  - stable: md/raid10: fix null-ptr-deref in raid10_sync_request [T343551]
  - stable: nilfs2: fix infinite loop in nilfs_mdt_get_block() [T343551]
  - stable: nilfs2: do not write dirty data after degenerating to read-only [T343551]
  - stable: parisc: Fix argument pointer in real64_call_asm() [T343551]
  - stable: dmaengine: at_xdmac: do not enable all cyclic channels [T343551]
  - stable: phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port [T343551]
  - stable: pwm: mtk-disp: Disable shadow registers before setting backlight values [T343551]
  - stable: pwm: mtk-disp: Adjust the clocks to avoid them mismatch [T343551]
  - stable: pwm: mtk-disp: Don't check the return code of pwmchip_remove() [T343551]
  - stable: openrisc: Properly store r31 to pt_regs on unhandled exceptions [T343551]
  - stable: RDMA/mlx5: Use correct device num_ports when modify DC [T343551]
  - stable: SUNRPC: remove the maximum number of retries in call_bind_status [T343551]
  - stable: NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease [T343551]
  - stable: IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order [T343551]
  - stable: clk: add missing of_node_put() in "assigned-clocks" property parsing [T343551]
  - stable: power: supply: generic-adc-battery: fix unit scaling [T343551]
  - stable: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() [T343551]
  - stable: RDMA/rdmavt: Delete unnecessary NULL check [T343551]
  - stable: powerpc/rtas: use memmove for potentially overlapping buffer copy [T343551]
  - stable: macintosh: via-pmu-led: requires ATA to be set [T343551]
  - stable: powerpc/sysdev/tsi108: fix resource printk format warnings [T343551]
  - stable: powerpc/wii: fix resource printk format warnings [T343551]
  - stable: powerpc/mpc512x: fix resource printk format warning [T343551]
  - stable: macintosh/windfarm_smu_sat: Add missing of_node_put() [T343551]
  - stable: spmi: Add a check for remove callback when removing a SPMI driver [T343551]
  - stable: staging: rtl8192e: Fix W_DISABLE# does not work after stop/start [T343551]
  - stable: serial: 8250: Add missing wakeup event reporting [T343551]
  - stable: tty: serial: fsl_lpuart: adjust buffer length to the intended size [T343551]
  - stable: usb: chipidea: fix missing goto in `ci_hdrc_probe` [T343551]
  - stable: sh: sq: Fix incorrect element size for allocating bitmap buffer [T343551]
  - stable: uapi/linux/const.h: prefer ISO-friendly __typeof__ [T343551]
  - stable: spi: cadence-quadspi: fix suspend-resume implementations [T343551]
  - stable: mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel [T343551]
  - stable: mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure [T343551]
  - stable: mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry [T343551]
  - stable: ia64: salinfo: placate defined-but-not-used warning [T343551]
  - stable: ia64: mm/contig: fix section mismatch warning/error [T343551]
  - stable: vmci_host: fix a race condition in vmci_host_poll() causing GPF [T343551]
  - stable: spi: fsl-spi: Fix CPM/QE mode Litte Endian [T343551]
  - stable: spi: qup: Don't skip cleanup in remove's error path [T343551]
  - stable: spi: qup: fix PM reference leak in spi_qup_remove() [T343551]
  - stable: linux/vt_buffer.h: allow either builtin or modular for macros [T343551]
  - stable: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition [T343551]
  - stable: fpga: bridge: fix kernel-doc parameter description [T343551]
  - stable: usb: host: xhci-rcar: remove leftover quirk handling [T343551]
  - stable: pstore: Revert pmsg_lock back to a normal mutex [T343551]
  - stable: net: amd: Fix link leak when verifying config failed [T343551]
  - stable: netlink: Use copy_to_user() for optval in netlink_getsockopt(). [T343551]
  - stable: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" [T343551]
  - stable: netfilter: nf_tables: don't write table validation state without mutex [T343551]
  - stable: ixgbe: Enable setting RSS table to default values [T343551]
  - stable: ixgbe: Allow flow hash to be set via ethtool [T343551]
  - stable: wifi: iwlwifi: mvm: check firmware response size [T343551]
  - stable: wifi: iwlwifi: make the loop for card preparation effective [T343551]
  - stable: md/raid10: fix memleak of md thread [T343551]
  - stable: md: update the optimal I/O size on reshape [T343551]
  - stable: md/raid10: fix memleak for 'conf->bio_split' [T343551]
  - stable: md/raid10: fix leak of 'r10bio->remaining' for recovery [T343551]
  - stable: bpftool: Fix bug for long instructions in program CFG dumps [T343551]
  - stable: wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() [T343551]
  - stable: wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() [T343551]
  - stable: rtlwifi: Replace RT_TRACE with rtl_dbg [T343551]
  - stable: rtlwifi: Start changing RT_TRACE into rtl_dbg [T343551]
  - stable: rtlwifi: rtl_pci: Fix memory leak when hardware init fails [T343551]
  - stable: scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS [T343551]
  - stable: scsi: target: iscsit: Fix TAS handling during conn cleanup [T343551]
  - stable: vlan: partially enable SIOCSHWTSTAMP in container [T343551]
  - stable: scm: fix MSG_CTRUNC setting condition for SO_PASSSEC [T343551]
  - stable: tools: bpftool: Remove invalid \' json escape [T343551]
  - stable: wifi: ath6kl: reduce WARN to dev_dbg() in callback [T343551]
  - stable: wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() [T343551]
  - stable: wifi: ath9k: hif_usb: fix memory leak of remain_skbs [T343551]
  - stable: wifi: ath6kl: minor fix for allocation size [T343551]
  - stable: debugobject: Prevent init race with static objects [T343551]
  - stable: debugobjects: Move printk out of db->lock critical sections [T343551]
  - stable: debugobjects: Add percpu free pools [T343551]
  - stable: arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step [T343551]
  - stable: x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() [T343551]
  - stable: media: rc: gpio-ir-recv: Fix support for wake-up [T343551]
  - stable: media: rcar_fdp1: Fix refcount leak in probe and remove function [T343551]
  - stable: media: rcar_fdp1: Fix the correct variable assignments [T343551]
  - stable: media: saa7134: fix use after free bug in saa7134_finidev due to race condition [T343551]
  - stable: media: dm1105: Fix use after free bug in dm1105_remove due to race condition [T343551]
  - stable: x86/apic: Fix atomic update of offset in reserve_eilvt_offset() [T343551]
  - stable: drm/msm/adreno: drop bogus pm_runtime_set_active() [T343551]
  - stable: drm/msm/adreno: Defer enabling runpm until hw_init() [T343551]
  - stable: firmware: qcom_scm: Clear download bit during reboot [T343551]
  - stable: media: av7110: prevent underflow in write_ts_to_decoder() [T343551]
  - stable: media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. [T343551]
  - stable: media: bdisp: Add missing check for create_workqueue [T343551]
  - stable: ARM: dts: qcom: ipq4019: Fix the PCI I/O port range [T343551]
  - stable: EDAC/skx: Fix overflows on the DRAM row address mapping arrays [T343551]
  - stable: drm/probe-helper: Cancel previous job before starting new one [T343551]
  - stable: drm/vgem: add missing mutex_destroy [T343551]
  - stable: drm/rockchip: Drop unbalanced obj unref [T343551]
  - stable: selinux: ensure av_permissions.h is built when needed [T343551]
  - stable: selinux: fix Makefile dependencies of flask.h [T343551]
  - stable: ubifs: Free memory for tmpfile name [T343551]
  - stable: ubi: Fix return value overwrite issue in try_write_vid_and_data() [T343551]
  - stable: ubifs: Fix memleak when insert_old_idx() failed [T343551]
  - stable: Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" [T343551]
  - stable: i2c: omap: Fix standard mode false ACK readings [T343551]
  - stable: KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted [T343551]
  - stable: reiserfs: Add security prefix to xattr name in reiserfs_security_write() [T343551]
  - stable: pwm: meson: Fix axg ao mux parents [T343551]
  - stable: MIPS: fw: Allow firmware to pass a empty env [T343551]
  - stable: xhci: fix debugfs register accesses while suspended [T343551]
  - stable: debugfs: regset32: Add Runtime PM support [T343551]
  - stable: staging: iio: resolver: ads1210: fix config mode [T343551]
  - stable: perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) [T343551]
  - stable: USB: dwc3: fix runtime pm imbalance on unbind [T343551]
  - stable: ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 [T343551]
  - stable: iio: adc: palmas_gpadc: fix NULL dereference on rmmod [T343551]
  - stable: USB: serial: option: add UNISOC vendor and TOZED LT70C product [T343551]
  - stable: ASN.1: Fix check for strdup() success [T343551]
  - stable: iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() [T343551]
  - stable: counter: 104-quad-8: Fix race condition between FLAG and CNTR reads [T343551]
  - stable: ext4: fix use-after-free in ext4_xattr_set_entry [T343551]
  - stable: ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() [T343551]
  - stable: Revert "ext4: fix use-after-free in ext4_xattr_set_entry" [T343551]
  - stable: x86/purgatory: Don't generate debug info for purgatory.ro [T343551]
  - stable: memstick: fix memory leak if card device is never registered [T343551]
  - stable: nilfs2: initialize unused bytes in segment summary blocks [T343551]
  - stable: xen/netback: use same error messages for same errors [T343551]
  - stable: s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling [T343551]
  - stable: net: dsa: b53: mmap: add phy ops [T343551]
  - stable: scsi: core: Improve scsi_vpd_inquiry() checks [T343551]
  - stable: scsi: megaraid_sas: Fix fw_crash_buffer_show() [T343551]
  - stable: selftests: sigaltstack: fix -Wuninitialized [T343551]
  - stable: Input: i8042 - add quirk for Fujitsu Lifebook A574/H [T343551]
  - stable: f2fs: Fix f2fs_truncate_partial_nodes ftrace event [T343551]
  - stable: e1000e: Disable TSO on i219-LM card to increase speed [T343551]
  - stable: mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() [T343551]
  - stable: i40e: fix i40e_setup_misc_vector() error handling [T343551]
  - stable: i40e: fix accessing vsi->active_filters without holding lock [T343551]
  - stable: ARM: dts: rockchip: fix a typo error for rk3288 spdif node [T343551]
  - stable: coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug [T343551]
  - stable: watchdog: sbsa_wdog: Make sure the timeout programming is within the limits [T343551]
  - stable: ubi: Fix deadlock caused by recursively holding work_sem [T343551]
  - stable: mtd: ubi: wl: Fix a couple of kernel-doc issues [T343551]
  - stable: ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size [T343551]
  - stable: x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot [T343551]
  - stable: scsi: ses: Handle enclosure with just a primary component gracefully [T343551]
  - stable: efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L [T343551]
  - stable: i2c: imx-lpi2c: clean rx/tx buffers upon new message [T343551]
  - stable: power: supply: cros_usbpd: reclassify "default case!" as debug [T343551]
  - stable: net: macb: fix a memory corruption in extended buffer descriptor mode [T343551]
  - stable: sctp: fix a potential overflow in sctp_ifwdtsn_skip [T343551]
  - stable: qlcnic: check pci_reset_function result [T343551]
  - stable: niu: Fix missing unwind goto in niu_alloc_channels() [T343551]
  - stable: mtdblock: tolerate corrected bit-flips [T343551]
  - stable: Bluetooth: Fix race condition in hidp_session_thread [T343551]
  - stable: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} [T343551]
  - stable: ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards [T343551]
  - stable: ALSA: i2c/cs8427: fix iec958 mixer control deactivation [T343551]
  - stable: ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard [T343551]
  - stable: ALSA: emu10k1: fix capture interrupt handler unlinking [T343551]
  - stable: Revert "pinctrl: amd: Disable and mask interrupts on resume" [T343551]
  - stable: ALSA: hda/realtek: Add quirk for Clevo X370SNW [T343551]
  - stable: nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() [T343551]
  - stable: tty: serial: sh-sci: Fix Rx on RZ/G2L SCI [T343551]
  - stable: tty: serial: sh-sci: Fix transmit end interrupt handler [T343551]
  - stable: iio: dac: cio-dac: Fix max DAC write value check for 12-bit [T343551]
  - stable: USB: serial: option: add Quectel RM500U-CN modem [T343551]
  - stable: USB: serial: option: add Telit FE990 compositions [T343551]
  - stable: USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs [T343551]
  - stable: gpio: davinci: Add irq chip flag to skip set wake [T343551]
  - stable: sctp: check send stream number after wait_for_sndbuf [T343551]
  - stable: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta [T343551]
  - stable: pwm: cros-ec: Explicitly set .polarity in .get_state() [T343551]
  - stable: NFSv4: Fix hangs when recovering open state after a server reboot [T343551]
  - stable: NFSv4: Check the return value of update_open_stateid() [T343551]
  - stable: NFSv4: Convert struct nfs4_state to use refcount_t [T343551]
  - stable: pinctrl: amd: Disable and mask interrupts on resume [T343551]
  - stable: pinctrl: amd: disable and mask interrupts on probe [T343551]
  - stable: pinctrl: amd: Use irqchip template [T343551]
  - stable: pinctrl: Added IRQF_SHARED flag for amd-pinctrl driver [T343551]
  - stable: gfs2: Always check inode size of inline inodes [T343551]
  - stable: firmware: arm_scmi: Fix device node validation for mailbox transport [T343551]
  - stable: usb: host: ohci-pxa27x: Fix and & vs | typo [T343551]
  - stable: s390/uaccess: add missing earlyclobber annotations to __clear_user() [T343551]
  - stable: drm/etnaviv: fix reference leak when mmaping imported buffer [T343551]
  - stable: ALSA: usb-audio: Fix regression on detection of Roland VS-100 [T343551]
  - stable: ALSA: hda/conexant: Partial revert of a quirk for Lenovo [T343551]
  - stable: pinctrl: at91-pio4: fix domain name assignment [T343551]
  - stable: xen/netback: don't do grant copy across page boundary [T343551]
  - stable: cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL [T343551]
  - stable: cifs: prevent infinite recursion in CIFSGetDFSRefer() [T343551]
  - stable: Input: focaltech - use explicitly signed char type [T343551]
  - stable: Input: alps - fix compatibility with -funsigned-char [T343551]
  - stable: net: mvneta: make tx buffer array agnostic [T343551]
  - stable: net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only [T343551]
  - stable: i40e: fix registers dump after run ethtool adapter self test [T343551]
  - stable: can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write [T343551]
  - stable: scsi: megaraid_sas: Fix crash after a double completion [T343551]
  - stable: ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() [T343551]
  - stable: fbdev: au1200fb: Fix potential divide by zero [T343551]
  - stable: fbdev: lxfb: Fix potential divide by zero [T343551]
  - stable: fbdev: intelfb: Fix potential divide by zero [T343551]
  - stable: fbdev: nvidia: Fix potential divide by zero [T343551]
  - stable: fbdev: tgafb: Fix potential divide by zero [T343551]
  - stable: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() [T343551]
  - stable: ALSA: asihpi: check pao in control_message() [T343551]
  - stable: md: avoid signed overflow in slot_store() [T343551]
  - stable: bus: imx-weim: fix branch condition evaluates to a garbage value [T343551]
  - stable: ocfs2: fix data corruption after failed write [T343551]
  - stable: dm crypt: add cond_resched() to dmcrypt_write() [T343551]
  - stable: nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() [T343551]
  - stable: usb: chipidea: core: fix possible concurrent when switch role [T343551]
  - stable: usb: chipdea: core: fix return -EINVAL if request role is the same with current role [T343551]
  - stable: igb: revert rtnl_lock() that causes deadlock [T343551]
  - stable: usb: gadget: u_audio: don't let userspace block driver unbind [T343551]
  - stable: scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR [T343551]
  - stable: cifs: empty interface list when server doesn't support query interfaces [T343551]
  - stable: sh: sanitize the flags on sigreturn [T343551]
  - stable: net: usb: qmi_wwan: add Telit 0x1080 composition [T343551]
  - stable: net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 [T343551]
  - stable: scsi: ufs: core: Add soft dependency on governor_simpleondemand [T343551]
  - stable: scsi: target: iscsi: Fix an error message in iscsi_check_key() [T343551]
  - stable: m68k: Only force 030 bus error if PC not in exception table [T343551]
  - stable: ca8210: fix mac_len negative array access [T343551]
  - stable: riscv: Bump COMMAND_LINE_SIZE value to 1024 [T343551]
  - stable: uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 [T343551]
  - stable: hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs [T343551]
  - stable: Bluetooth: btqcomsmd: Fix command timeout after setting BD address [T343551]
  - stable: net: mdio: thunder: Add missing fwnode_handle_put() [T343551]
  - stable: hvc/xen: prevent concurrent accesses to the shared ring [T343551]
  - stable: net/sonic: use dma_mapping_error() for error check [T343551]
  - stable: erspan: do not use skb_mac_header() in ndo_start_xmit() [T343551]
  - stable: atm: idt77252: fix kmemleak when rmmod idt77252 [T343551]
  - stable: net/mlx5: Read the TC mapping of all priorities on ETS query [T343551]
  - stable: bpf: Adjust insufficient default bpf_jit_limit [T343551]
  - stable: net/ps3_gelic_net: Use dma_mapping_error [T343551]
  - stable: net/ps3_gelic_net: Fix RX sk_buff length [T343551]
  - stable: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info [T343551]
  - stable: net: usb: smsc95xx: Limit packet length to skb->len [T343551]
  - stable: i2c: imx-lpi2c: check only for enabled interrupt flags [T343551]
  - stable: igbvf: Regard vf reset nack as success [T343551]
  - stable: intel/igbvf: free irq on the error path in igbvf_request_msix() [T343551]
  - stable: iavf: fix inverted Rx hash condition leading to disabled hash [T343551]
  - stable: iavf: diet and reformat [T343551]
  - stable: intel-ethernet: rename i40evf to iavf [T343551]
  - stable: i40evf: Change a VF mac without reloading the VF driver [T343551]
  - stable: HID: uhid: Over-ride the default maximum data buffer value with our own [T343551]
  - stable: HID: core: Provide new max_buffer_size attribute to over-ride the default [T343551]
  - stable: serial: 8250_em: Fix UART port type [T343551]
  - stable: drm/i915: Don't use stolen memory for ring buffers with LLC [T343551]
  - stable: fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks [T343551]
  - stable: tracing: Make tracepoint lockdep check actually test something [T343551]
  - stable: tracing: Check field value in hist_field_name() [T343551]
  - stable: sh: intc: Avoid spurious sizeof-pointer-div warning [T343551]
  - stable: drm/amdkfd: Fix an illegal memory access [T343551]
  - stable: ext4: fix task hung in ext4_xattr_delete_inode [T343551]
  - stable: jffs2: correct logic when creating a hole in jffs2_write_begin [T343551]
  - stable: mmc: atmel-mci: fix race between stop command and start of next command [T343551]
  - stable: media: m5mols: fix off-by-one loop termination error [T343551]
  - stable: hwmon: (adt7475) Fix masking of hysteresis registers [T343551]
  - stable: hwmon: (adt7475) Display smoothing attributes in correct order [T343551]
  - stable: ethernet: sun: add check for the mdesc_grab() [T343551]
  - stable: net/iucv: Fix size of interrupt data [T343551]
  - stable: net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull [T343551]
  - stable: ipv4: Fix incorrect table ID in IOCTL path [T343551]
  - stable: block: sunvdc: add check for mdesc_grab() returning NULL [T343551]
  - stable: nvmet: avoid potential UAF in nvmet_req_complete() [T343551]
  - stable: net: usb: smsc75xx: Limit packet length to skb->len [T343551]
  - stable: net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails [T343551]
  - stable: net: tunnels: annotate lockless accesses to dev->needed_headroom [T343551]
  - stable: qed/qed_dev: guard against a possible division by zero [T343551]
  - stable: nfc: pn533: initialize struct pn533_out_arg properly [T343551]
  - stable: tcp: tcp_make_synack() can be called from process context [T343551]
  - stable: clk: HI655X: select REGMAP instead of depending on it [T343551]
  - stable: fs: sysfs_emit_at: Remove PAGE_SIZE alignment check [T343551]
  - stable: xt4: fix cgroup writeback accounting with fs-layer encryption [T343551]
  - stable: ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() [T343551]
  - stable: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties [T343551]
  - stable: net: caif: Fix use-after-free in cfusbl_device_notify() [T343551]
  - stable: drm/i915: Don't use BAR mappings for ring buffers with LLC [T343551]
  - stable: tipc: improve function tipc_wait_for_cond() [T343551]
  - stable: media: ov5640: Fix analogue gain control [T343551]
  - stable: PCI: Add SolidRun vendor ID [T343551]
  - stable: macintosh: windfarm: Use unsigned type for 1-bit bitfields [T343551]
  - stable: alpha: fix R_ALPHA_LITERAL reloc for large modules [T343551]
  - stable: MIPS: Fix a compilation issue [T343551]
  - stable: Revert "spi: mt7621: Fix an error message in mt7621_spi_probe()" [T343551]
  - stable: scsi: core: Remove the /proc/scsi/${proc_name} directory earlier [T343551]
  - stable: kbuild: generate modules.order only in directories visited by obj-y/m [T343551]
  - stable: kbuild: fix false-positive need-builtin calculation [T343551]
  - stable: udf: Detect system inodes linked into directory hierarchy [T343551]
  - stable: udf: Preserve link count of system files [T343551]
  - stable: udf: Remove pointless union in udf_inode_info [T343551]
  - stable: udf: reduce leakage of blocks related to named streams [T343551]
  - stable: udf: Explain handling of load_nls() failure [T343551]
  - stable: nfc: change order inside nfc_se_io error path [T343551]
  - stable: ext4: fix WARNING in ext4_update_inline_data [T343551]
  - stable: ext4: move where set the MAY_INLINE_DATA flag is set [T343551]
  - stable: ext4: fix RENAME_WHITEOUT handling for inline directories [T343551]
  - stable: x86/CPU/AMD: Disable XSAVES on AMD family 0x17 [T343551]
  - stable: staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh [T343551]
  - stable: staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script [T343551]
  - stable: wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" [T343551]
  - stable: thermal: intel: powerclamp: Fix cur_state for multi package system [T343551]
  - stable: f2fs: fix cgroup writeback accounting with fs-layer encryption [T343551]
  - stable: media: uvcvideo: Fix race condition with usb_kill_urb [T343551]
  - stable: media: uvcvideo: Provide sync and async uvc_ctrl_status_event [T343551]
  - stable: s390/setup: init jump labels before command line parsing [T343551]
  - stable: s390/maccess: add no DAT mode to kernel_write [T343551]
  - stable: Bluetooth: hci_sock: purge socket queues in the destruct() callback [T343551]
  - stable: phy: rockchip-typec: Fix unsigned comparison with less than zero [T343551]
  - stable: usb: uvc: Enumerate valid values for color matching [T343551]
  - stable: usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math [T343551]
  - stable: iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() [T343551]
  - stable: iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() [T343551]
  - stable: tools/iio/iio_utils:fix memory leak [T343551]
  - stable: mei: bus-fixup:upon error print return values of send and receive [T343551]
  - stable: tty: serial: fsl_lpuart: disable the CTS when send break signal [T343551]
  - stable: media: uvcvideo: Silence memcpy() run-time false positive warnings [T343551]
  - stable: media: uvcvideo: Handle errors from calls to usb_string [T343551]
  - stable: media: uvcvideo: Handle cameras with invalid descriptors [T343551]
  - stable: firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 [T343551]
  - stable: tracing: Add NULL checks for buffer in ring_buffer_free_read_page() [T343551]
  - stable: thermal: intel: quark_dts: fix error pointer dereference [T343551]
  - stable: scsi: ipr: Work around fortify-string warning [T343551]
  - stable: vc_screen: modify vcs_size() handling in vcs_read() [T343551]
  - stable: tcp: tcp_check_req() can be called from process context [T343551]
  - stable: ARM: dts: spear320-hmi: correct STMPE GPIO compatible [T343551]
  - stable: nfc: fix memory leak of se_io context in nfc_genl_se_io [T343551]
  - stable: 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() [T343551]
  - stable: 9p/xen: fix connection sequence [T343551]
  - stable: 9p/xen: fix version parsing [T343551]
  - stable: net: fix __dev_kfree_skb_any() vs drop monitor [T343551]
  - stable: watchdog: pcwd_usb: Fix attempting to access uninitialized memory [T343551]
  - stable: watchdog: Fix kmemleak in watchdog_cdev_register [T343551]
  - stable: watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path [T343551]
  - stable: x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list [T343551]
  - stable: ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed [T343551]
  - stable: ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() [T343551]
  - stable: ubifs: ubifs_writepage: Mark page dirty after writing inode failed [T343551]
  - stable: ubifs: dirty_cow_znode: Fix memleak in error handling path [T343551]
  - stable: ubifs: Re-statistic cleaned znode count if commit failed [T343551]
  - stable: ubi: Fix possible null-ptr-deref in ubi_free_volume() [T343551]
  - stable: ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() [T343551]
  - stable: ubi: Fix use-after-free when volume resizing failed [T343551]
  - stable: ubifs: Reserve one leb for each journal head while doing budget [T343551]
  - stable: ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 [T343551]
  - stable: ubifs: Fix wrong dirty space budget for dirty inode [T343551]
  - stable: ubifs: Rectify space budget for ubifs_xrename() [T343551]
  - stable: ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted [T343551]
  - stable: ubi: ensure that VID header offset + VID header size <= alloc, size [T343551]
  - stable: um: vector: Fix memory leak in vector_config [T343551]
  - stable: pwm: stm32-lp: fix the check on arr and cmp registers update [T343551]
  - stable: fs/jfs: fix shift exponent db_agl2size negative [T343551]
  - stable: kbuild: Port silent mode detection to future gnu make. [T343551]
  - stable: wifi: ath9k: use proper statements in conditionals [T343551]
  - stable: drm/radeon: Fix eDP for single-display iMac11,2 [T343551]
  - stable: PCI: Avoid FLR for AMD FCH AHCI adapters [T343551]
  - stable: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() [T343551]
  - stable: scsi: ses: Fix possible desc_ptr out-of-bounds accesses [T343551]
  - stable: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses [T343551]
  - stable: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() [T343551]
  - stable: scsi: ses: Don't attach if enclosure has no components [T343551]
  - stable: scsi: qla2xxx: Fix erroneous link down [T343551]
  - stable: scsi: qla2xxx: Fix link failure in NPIV environment [T343551]
  - stable: ktest.pl: Add RUN_TIMEOUT option with default unlimited [T343551]
  - stable: ktest.pl: Fix missing "end_monitor" when machine check fails [T343551]
  - stable: ktest.pl: Give back console on Ctrt^C on monitor [T343551]
  - stable: media: ipu3-cio2: Fix PM runtime usage_count in driver unbind [T343551]
  - stable: mips: fix syscall_get_nr [T343551]
  - stable: alpha: fix FEN fault handling [T343551]
  - stable: rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails [T343551]
  - stable: ARM: dts: exynos: correct TMU phandle in Odroid XU [T343551]
  - stable: ARM: dts: exynos: correct TMU phandle in Exynos4 [T343551]
  - stable: dm flakey: don't corrupt the zero page [T343551]
  - stable: dm flakey: fix logic when corrupting a bio [T343551]
  - stable: wifi: cfg80211: Fix use after free for wext [T343551]
  - stable: wifi: rtl8xxxu: Use a longer retry limit of 48 [T343551]
  - stable: ext4: refuse to create ea block when umounted [T343551]
  - stable: ext4: optimize ea_inode block expansion [T343551]
  - stable: ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() [T343551]
  - stable: ima: Align ima_file_mmap() parameters with mmap_file LSM hook [T343551]
  - stable: Documentation/hw-vuln: Document the interaction between IBRS and STIBP [T343551]
  - stable: x86/microcode/AMD: Fix mixed steppings support [T343551]
  - stable: x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter [T343551]
  - stable: x86/reboot: Disable SVM, not just VMX, when stopping CPUs [T343551]
  - stable: x86/reboot: Disable virtualization in an emergency if SVM is supported [T343551]
  - stable: x86/crash: Disable virt in core NMI crash handler to avoid double shootdown [T343551]
  - stable: x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) [T343551]
  - stable: udf: Fix file corruption when appending just after end of preallocated extent [T343551]
  - stable: udf: Do not update file length for failed writes to inline files [T343551]
  - stable: udf: Do not bother merging very long extents [T343551]
  - stable: udf: Truncate added extents on failed expansion [T343551]
  - stable: ocfs2: fix non-auto defrag path not working issue [T343551]
  - stable: ocfs2: fix defrag path triggering jbd2 ASSERT [T343551]
  - stable: f2fs: fix information leak in f2fs_move_inline_dirents() [T343551]
  - stable: hfs: fix missing hfs_bnode_get() in __hfs_bnode_create [T343551]
  - stable: ARM: dts: exynos: correct HDMI phy compatible in Exynos4 [T343551]
  - stable: s390/kprobes: fix current_kprobe never cleared after kprobes reenter [T343551]
  - stable: s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler [T343551]
  - stable: s390: discard .interp section [T343551]
  - stable: rtc: pm8xxx: fix set-alarm race [T343551]
  - stable: firmware: coreboot: framebuffer: Ignore reserved pixel color bits [T343551]
  - stable: wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu [T343551]
  - stable: dm cache: add cond_resched() to various workqueue loops [T343551]
  - stable: dm thin: add cond_resched() to various workqueue loops [T343551]
  - stable: pinctrl: at91: use devm_kasprintf() to avoid potential leaks [T343551]
  - stable: regulator: s5m8767: Bounds check id indexing into arrays [T343551]
  - stable: regulator: max77802: Bounds check regulator id against opmode [T343551]
  - stable: ASoC: kirkwood: Iterate over array indexes instead of using pointer math [T343551]
  - stable: docs/scripts/gdb: add necessary make scripts_gdb step [T343551]
  - stable: drm/msm/dsi: Add missing check for alloc_ordered_workqueue [T343551]
  - stable: drm/radeon: free iio for atombios when driver shutdown [T343551]
  - stable: drm/amd/display: Fix potential null-deref in dm_resume [T343551]
  - stable: net/mlx5: fw_tracer: Fix debug print [T343551]
  - stable: ACPI: video: Fix Lenovo Ideapad Z570 DMI match [T343551]
  - stable: m68k: Check syscall_trace_enter() return code [T343551]
  - stable: net: bcmgenet: Add a check for oversized packets [T343551]
  - stable: ACPI: Don't build ACPICA with '-Os' [T343551]
  - stable: inet: fix fast path in __inet_hash_connect() [T343551]
  - stable: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds [T343551]
  - stable: thermal: intel: Fix unsigned comparison with less than zero [T343551]
  - stable: rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() [T343551]
  - stable: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() [T343551]
  - stable: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy [T343551]
  - stable: udf: Define EFSCORRUPTED error code [T343551]
  - stable: rpmsg: glink: Avoid infinite loop on intent for missing channel [T343551]
  - stable: media: i2c: ov7670: 0 instead of -EINVAL was returned [T343551]
  - stable: media: i2c: ov772x: Fix memleak in ov772x_probe() [T343551]
  - stable: powerpc: Remove linker flag from KBUILD_AFLAGS [T343551]
  - stable: media: platform: ti: Add missing check for devm_regulator_get [T343551]
  - stable: MIPS: vpe-mt: drop physical_memsize [T343551]
  - stable: powerpc/rtas: ensure 4KB alignment for rtas_data_buf [T343551]
  - stable: powerpc/rtas: make all exports GPL [T343551]
  - stable: powerpc/pseries/lparcfg: add missing RTAS retry status handling [T343551]
  - stable: clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() [T343551]
  - stable: powerpc/powernv/ioda: Skip unallocated resources when mapping to PE [T343551]
  - stable: Input: ads7846 - don't check penirq immediately for 7845 [T343551]
  - stable: Input: ads7846 - don't report pressure for ads7845 [T343551]
  - stable: mtd: rawnand: sunxi: Fix the size of the last OOB region [T343551]
  - stable: mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() [T343551]
  - stable: selftests/ftrace: Fix bash specific "==" operator [T343551]
  - stable: sparc: allow PM configs for sparc32 COMPILE_TEST [T343551]
  - stable: perf tools: Fix auto-complete on aarch64 [T343551]
  - stable: perf llvm: Fix inadvertent file creation [T343551]
  - stable: gfs2: jdata writepage fix [T343551]
  - stable: cifs: Fix warning and UAF when destroy the MR list [T343551]
  - stable: cifs: Fix lost destroy smbd connection when MR allocate failed [T343551]
  - stable: nfsd: fix race to check ls_layouts [T343551]
  - stable: dm: remove flush_scheduled_work() during local_exit() [T343551]
  - stable: hwmon: (mlxreg-fan) Return zero speed for broken fan [T343551]
  - stable: spi: bcm63xx-hsspi: Fix multi-bit mode setting [T343551]
  - stable: spi: bcm63xx-hsspi: fix pm_runtime [T343551]
  - stable: scsi: aic94xx: Add missing check for dma_map_single() [T343551]
  - stable: hwmon: (ltc2945) Handle error case in ltc2945_value_store [T343551]
  - stable: gpio: vf610: connect GPIO label to dev name [T343551]
  - stable: ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() [T343551]
  - stable: drm/mediatek: Clean dangling pointer on bind error path [T343551]
  - stable: drm/mediatek: Drop unbalanced obj unref [T343551]
  - stable: gpu: host1x: Don't skip assigning syncpoints to channels [T343551]
  - stable: drm/msm/dpu: Add check for pstates [T343551]
  - stable: drm/msm: use strscpy instead of strncpy [T343551]
  - stable: drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness [T343551]
  - stable: ALSA: hda/ca0132: minor fix for allocation size [T343551]
  - stable: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups [T343551]
  - stable: pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours [T343551]
  - stable: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue [T343551]
  - stable: gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() [T343551]
  - stable: drm/vc4: dpi: Fix format mapping for RGB565 [T343551]
  - stable: drm/vc4: dpi: Add option for inverting pixel clock and output enable [T343551]
  - stable: drm: Clarify definition of the DRM_BUS_FLAG_(PIXDATA|SYNC)_* macros [T343551]
  - stable: drm/bridge: megachips: Fix error handling in i2c_register_driver() [T343551]
  - stable: drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC [T343551]
  - stable: selftest: fib_tests: Always cleanup before exit [T343551]
  - stable: irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts [T343551]
  - stable: irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts [T343551]
  - stable: can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error [T343551]
  - stable: wifi: mac80211: make rate u32 in sta_set_rate_info_rx() [T343551]
  - stable: crypto: crypto4xx - Call dma_unmap_page when done [T343551]
  - stable: wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() [T343551]
  - stable: wifi: iwl4965: Add missing check for create_singlethread_workqueue() [T343551]
  - stable: wifi: iwl3945: Add missing check for create_singlethread_workqueue [T343551]
  - stable: RISC-V: time: initialize hrtimer based broadcast clock event device [T343551]
  - stable: m68k: /proc/hardware should depend on PROC_FS [T343551]
  - stable: rds: rds_rm_zerocopy_callback() correct order for list_add_tail() [T343551]
  - stable: libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() [T343551]
  - stable: Bluetooth: L2CAP: Fix potential user-after-free [T343551]
  - stable: irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe [T343551]
  - stable: irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains [T343551]
  - stable: net/mlx5: Enhance debug print in page allocation failure [T343551]
  - stable: powercap: fix possible name leak in powercap_register_zone() [T343551]
  - stable: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() [T343551]
  - stable: wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails [T343551]
  - stable: ath9k: htc: clean up statistics macros [T343551]
  - stable: ath9k: hif_usb: simplify if-if to if-else [T343551]
  - stable: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function [T343551]
  - stable: wifi: orinoco: check return value of hermes_write_wordrec() [T343551]
  - stable: lib/mpi: Fix buffer overrun when SG is too long [T343551]
  - stable: ACPICA: Drop port I/O validation for some regions [T343551]
  - stable: wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() [T343551]
  - stable: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() [T343551]
  - stable: wifi: ipw2200: fix memory leak in ipw_wdev_init() [T343551]
  - stable: wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: ipw2x00: switch from 'pci_' to 'dma_' API [T343551]
  - stable: wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() [T343551]
  - stable: rtlwifi: fix -Wpointer-sign warning [T343551]
  - stable: wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: fix memory leak in lbs_init_adapter() [T343551]
  - stable: wifi: rsi: Fix memory leak in rsi_coex_attach() [T343551]
  - stable: block: bio-integrity: Copy flags when bio_integrity_payload is cloned [T343551]
  - stable: blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx [T343551]
  - stable: arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node [T343551]
  - stable: arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name [T343551]
  - stable: arm64: dts: amlogic: meson-gx: add missing unit address to rng node name [T343551]
  - stable: arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible [T343551]
  - stable: arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name [T343551]
  - stable: arm64: dts: meson-axg: enable SCPI [T343551]
  - stable: arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name [T343551]
  - stable: ARM: imx: Call ida_simple_remove() for ida_simple_get [T343551]
  - stable: ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato [T343551]
  - stable: ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() [T343551]
  - stable: arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address [T343551]
  - stable: arm64: dts: meson-gx: Fix Ethernet MAC address unit name [T343551]
  - stable: ARM: zynq: Fix refcount leak in zynq_early_slcr_init [T343551]
  - stable: ARM: OMAP2+: Fix memory leak in realtime_counter_init() [T343551]
  - stable: USB: core: Don't hold device lock while reading the "descriptors" sysfs file [T343551]
  - stable: USB: serial: option: add support for VW/Skoda "Carstick LTE" [T343551]
  - stable: dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size [T343551]
  - stable: vc_screen: don't clobber return value in vcs_read [T343551]
  - stable: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF [T343551]
  - stable: IB/hfi1: Assign npages earlier [T343551]
  - stable: btrfs: send: limit number of clones and allocated memory size [T343511]
  - stable: ARM: dts: rockchip: add power-domains property to dp node on rk3288 [T343511]
  - stable: ext4: Fix function prototype mismatch for ext4_feat_ktype [T343511]
  - stable: wifi: mwifiex: Add missing compatible string for SD8787 [T343511]
  - stable: mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh [T343551]
  - stable: powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 [T343551]
  - stable: can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len [T343551]
  - stable: random: always mix cycle counter in add_latent_entropy() [T343551]
  - stable: powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G [T343551]
  - stable: wifi: rtl8xxxu: gen2: Turn on the rate control [T342551]
  - phytium: 4.19 add crtc [T351611]
  - uos: add leak config for sw_64


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.184
changelog:
  - uos: fix not being able to install kernel-* after install kernel-debug-* [T00000]
  - anolis: LoongArch: Limit min pci msi-x/msi vector number [G005956]
  - uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]
  - uos: Revert "uos: diable irq limit of la64 by default [T358195]"
  - Revert "uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]"
  - euler: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers [T365775]
  - uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]
  - uos: net: hns3: fix the network kept restarting [T365939]
  - euler: net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode [T365939]
  - uos: fix merge issue of "mainline: net: hns3: use capabilities queried from firmware" [T365939]
  - euler: net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization [T365939]
  - euler: net: hns: fix fake link up on xge port [T365939]
  - euler: net: hns: fix wrong head when modify the tx feature when sending packets [T365939]
  - euler: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg [T365939]
  - euler: net: hns3: fix not call nic_call_event() problem when reset failed [T365939]
  - uos: arm64: fix crash kernel dump core failed [B277607]
  - uos: update crashkernel size with guestos [B277393]
  - uos: srpm: remove version number of whitelists and dw [T00000]
  - uos: Upgrade megaraid driver to version 07.727.03.00 [T364381]
  - uos: Add manufacturer's ps3stor driver, version:2.2.0.16 [T364379]
  - uos: update srpm to 4.19.0-91.183 [T00000]
  - uos: sw_64: fix implicit declaration of 'vzalloc'i by qla2xxx [T359831]
  - uos: fix cpufreq of la64 compile failed [T325607]
  - uos: srpm: disable sign-kernel in c7 [T362695]
  - uos: fix netswift compile error [T325607]
  - uos: fix compile error by update qla2xxx hda driver version to 10.02.12.01-k [T359831]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.185
changelog:
  - uos: diable irq limit of la64 by default again [T358195] [G005956]
  - uos: c7: Change the startup order of the kernel [T00000] [B302583]
  - uos: loongarch: LoongArch: Fixup extioi bounce [B282411]
  - uos: loongarch: LoongArch:irqchip/loongarch-extioi: Add compat support on mainline kvm [B282411]
  - uos: open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF for arm64 and loongarch [T364381]
  - uos: Revert "LS7A2000: PCIE: Fixup GPU card error" [B262995]
  - uos: delete useless logs and enable cn font [B276033]
  - uos: open sgx driver for x86 [T373551]
  - uos: move linux-sgx-driver to kernel [T373551]
  - uos: scsi: update ccusr to 1.0-b2354-g38486a40 [D2024110003]
  - uos: printk: Avoid logbuf_lock deadlock in oops_end() [D2024120001]
  - uos: i2c/zhaoxin: I2C controller driver enhancement and optimization [D2024120001]
  - uos: perf/x86/zhaoxin/uncore: update KX-7000 support [D2024120001]
  - uos: fs/address_space: move i_mmap_rwsem to mitigate a false sharing with i_mmap. [D2024120001]
  - uos: Move SM4 Block Cipher algorithm driver to the arch directory [D2024120001]
  - uos: Move SM3 Secure Hash algorithm driver to the arch directory [D2024120001]
  - uos: x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors [D2024120001]
  - uos: perf/x86/zhaoxin/uncore: add KX-7000 support [D2024120001]
  - uos: USB: UAS: return ENODEV when submit urbs fail with device not attached [D2024120001]
  - uos: PCI: Extend PCI root port device IDs for Zhaoxin platforms [D2024120001]
  - uos: crypto: x86/sm2: update SM2 algorithm driver using inline assembly [D2024120001]
  - uos: efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode [D2024120001]
  - uos: hwrng: add Zhaoxin rng driver base on rep_xstore instruction [D2024120001]
  - uos: i2c: zhaoxin: Add support for Zhaoxin KX-7000 [D2024120001]
  - uos: HDAC: Update support for Zhaoxin NB HDAC [D2024120001]
  - uos: Log for Add support for Zhaoxin Processors [D2024120001]
  - euler: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h [D2025020027]
  - euler: EDAC/amd64: Add support for Hygon family 18h model 7h [D2025020027]
  - euler: x86/amd_nb: Add support for Hygon family 18h model 7h [D2025020027]
  - euler: ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio [D2025020027]
  - euler: hwmon/k10temp: Add support for Hygon family 18h model 10h [D2025020027]
  - euler: EDAC/amd64: Add support for Hygon family 18h model 10h [D2025020027]
  - euler: x86/amd_nb: Add support for Hygon family 18h model 10h [D2025020027]
  - euler: x86/cpu: Get LLC ID for Hygon family 18h model 10h [D2025020027]
  - euler: perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU [D2025020027]
  - euler: KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog [D2025020027]
  - euler: KVM: x86: Adjust counter sample period after a wrmsr [D2025020027]
  - euler: KVM: x86: Fix perfctr WRMSR for running counters [D2025020027]
  - euler: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h [D2025020027]
  - euler: EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h [D2025020027]
  - euler: x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h [D2025020027]
  - euler: EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h [D2025020027]
  - euler: EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h [D2025020027]
  - euler: EDAC/mc_sysfs: Increase legacy channel support to 12 [D2025020027]
  - euler: hwmon: (k10temp) Remove unused definitions [D2025020027]
  - euler: hwmon: (k10temp) Remove residues of current and voltage [D2025020027]
  - euler: x86/cpu/amd: Set __max_die_per_package on AMD [D2025020027]
  - euler: ALSA: hda: Fix single byte write failure issue for Hygon [D2025020027]
  - euler: ALSA: hda: Add Hygon HD-Audio support [D2025020027]
  - uos: scsi/raid: update ps3stor from 2.2.0.16 to 2.5.0.30 [D2025020019]
  - uos: drivers/net: update ixgbe from 5.16.5 to 5.19.9 [D2025010010]
  - loongarch: LoongArch: Backport page table code [G006496]
  - loongarch: LoongArch: LSVZ: Replace set_pte with kvm_set_pte [G006496]
  - loongarch: LoongArch: KVM: Select huge page only if secondary mmu supports it [G006496]
  - loongarch: LoongArch: LSVZ: disable vcpu preempt detection [G006496]
  - loongarch: LoongArch: LSVZ: Delay secondary mmu tlb flush until guest entry [G006496]
  - loongarch: LoongArch: LSVZ: Remove SW timer switch when vcpu is halt polling [G006496]
  - loongarch: Loongarch: Revert quicklist [G006496]
  - uos: gpu/drm: update mwv207 from 1.2.0 to 1.5.0 [D2024110005]
  - euler: Revert "NFS: Don't interrupt file writeout due to fatal errors" [G006687]
  - uos: set the uos feature to off by default [T370941]
  - mainline: bpf: Avoid storing modifier to info->btf_id [G2024122000034]
  - euler: cpuidle: menu: Avoid computations when result will be discarded [G006912]
  - uos: Loongarch: fix rebooting failed with ls2k500 [B274249]
  - uos: perf: Fix the logical in ebtables optimise. [G005616]
  - uos: perf: ebtables: fix cpu 100% during wrk testing. [G005616]
  - uos: fix kernel panic caused by memory out of bounds [B255527]
  - uos: fix megaraid freeze during reboot [B262995]
  - uos: remove driver ps3stor identity equation [T364379]
  - feat: modify the hook add timing for network control
  - uos: update srpm to 4.19.0-91.184 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.186
changelog:
  - uos: add CRYPTO_DEV_ZHAOXIN depend for CRYPTO_ZHAOXIN_GMI_SM3/SM4 [D2024120001]
  - uos: Revert "uos: move linux-sgx-driver to kernel [T373551]" [T373551]
  - uos: Revert "uos: open sgx driver for x86 [T373551]" [T373551]
  - uos: update srpm to 4.19.0-91.185 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.187
changelog:
  - uos: net/linkdata: fix compile error [T363175]
  - uos: net/linkdata: fix error by ec52e84dc185 [T363175]
  - mainline: {CVE-2024-26974} crypto: qat - resolve race condition during AER recovery
  - mainline: crypto: qat - fix double free during reset
  - mainline: {CVE-2024-38612} ipv6: sr: fix invalid unregister error path
  - mainline: ipv6: sr: fix incorrect unregister order
  - mainline: ipv6: sr: add missing seg6_local_exit
  - mainline: ipv6: sr: fix possible use-after-free and null-ptr-deref
  - mainline: {CVE-2024-50278} dm cache: fix potential out-of-bounds access on the first resume
  - mainline: dm cache: optimize dirty bit checking with find_next_bit when resizing
  - mainline: {CVE-2024-27405} usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - mainline: usb: gadget: f_ncm: Always set current gadget in ncm_bind()
  - mainline: usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
  - mainline: usb: gadget: f_ncm: Fix NTP-32 support
  - mainline: usb: gadget: f_ncm: Add OS descriptor support
  - mainline: {CVE-2024-36940} pinctrl: core: delete incorrect free in pinctrl_enable()
  - mainline: {CVE-2024-27395} net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - mainline: net: openvswitch: ovs_ct_exit to be done under ovs_lock
  - mainline: {CVE-2024-35960} net/mlx5: Properly link new fs rules into the tree
  - Merge "uos: remove legacy traffic auditing code [B299895]" into uos_dev
  - uos: remove legacy traffic auditing code [B299895]
  - Merge "stable: scsi: core: Fix a procfs host directory removal regression [B308003]" into uos_dev
  - Merge "stable: scsi: core: Fix a comment in function scsi_host_dev_release() [B308003]" into uos_dev
  - stable: scsi: core: Fix a procfs host directory removal regression [B308003]
  - stable: scsi: core: Fix a comment in function scsi_host_dev_release() [B308003]
  - uos: ethtool: Disable netlink interface by default [B306455]
  - Merge "stable: serial: 8250_port: Check IRQ data before use [T370631] [B308255]" into uos_dev
  - Merge changes I5b7f7452,Ideef1c95,Ica5c9d7e,Ifb0aeb80,I27407e68, ... into uos_dev
  - Merge changes from topic "cve-dev" into uos_dev
  - Merge changes from topic "G2025031100008" into uos_dev
  - uos: arm64: HWCAP: Fix PACA/PACG without a {KERNEL_}HWCAP_ prefix [B306767]
  - Merge "stable: arm64: cpufeature: Rework ptr auth hwcaps using multi_entry_cap_matches [B306767]" into uos_dev
  - Merge "stable: arm64: cpufeature: Reduce number of pointer auth CPU caps from 6 to 4 [B306767]" into uos_dev
  - uos: net/wangxun: update wangxun txgbe driver to 1.3.6.4 [D20250327LIANTOG]
  - stable: arm64: cpufeature: Rework ptr auth hwcaps using multi_entry_cap_matches [B306767]
  - stable: arm64: cpufeature: Reduce number of pointer auth CPU caps from 6 to 4 [B306767]
  - stable: serial: 8250_port: Check IRQ data before use [T370631] [B308255]
  - uos: security: merge sid2 decoupling function from desktop 1070 kernel [T372497]
  - uos: open LOONGSON_SE_SDF [D20250320]
  - loongarch: LoongArch: irqchip/pch-lpc: fix irq_mask error. [D20250320]
  - loongarch: LoongArch: fix kexec and kdump kernel runtime error [D20250320]
  - loongarch: module: kallsyms: Filter out mapping symbols from module core kallsyms [D20250320]
  - loongarch: LoongArch: KVM: Add interrupt checking with Loongson AVEC [D20250320]
  - loongarch: LoongArch: KVM: Fixed VM migration failure after ptw was enabled [D20250320]
  - loongarch: /kvm: Fixed the virtual machine crash problem after the physical machine wakes up from sleep [D20250320]
  - loongarch: driver/irqchip: add extioi cpu encode support for 6.6 host [D20250320]
  - loongarch: cpufreq: loongson3-acpi: Change failed status to disable [D20250320]
  - loongarch: LoongArch:LSVZ: Fix typo issue using funtion kvm_gcsr_write() [D20250320]
  - loongarch: LoongArch: KVM: enable ptw for kvm [D20250320]
  - loongarch: Revert "locking/pvqspinlock: Use try_cmpxchg() in pv_unhash" [D20250320]
  - loongarch: LoongArch:LSVZ: Clear LLBCTL if secondary mmu mapping is changed [D20250320]
  - loongarch: LoongArch: Add retry support for handle_mm_fault [D20250320]
  - loongarch: PCI/portdrv: Do not disable PCIE ports for loongarch [D20250320]
  - loongarch: locking/pvqspinlock: Use try_cmpxchg() in pv_unhash [D20250320]
  - loongarch: cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 [D20250320]
  - loongarch: drivers/se: add ACPI support for Loongson SE and SDF driver [D20250320]
  - loongarch: LoongArch: add hypcall to emulate syscall in kvm [D20250320]
  - loongarch: LoongArch: Let pmd_present() return true when splitting pmd [D20250320]
  - loongarch: Loongarch:Fixup reserve screen info memory for above-4G firmware [D20250320]
  - loongarch: drivers/iommu: Repair the iommu pass-through TLB refresh and page table mapping problem [D20250320]
  - loongarch: LoongArch: Revert qspinlock to test-and-set simple lock on VM [D20250320]
  - loongarch: LoongArch: LSVZ: Detect host pagesize by page table walk [D20250320]
  - loongarch: LoongArch: LSVZ: Revert allocate page table with numa support [D20250320]
  - loongarch: misc: driver for loongson se sdf [D20250320]
  - loongarch: soc: driver for loongson se [D20250320]
  - loongarch: LoongArch: Make KASAN usable for variable cpu_vabits [D20250320]
  - loongarch: LoongArch: Add AVEC irqchip support [D20250320]
  - loongarch: LoongArch: Get correct cores_per_package for SMT systems [D20250320]
  - loongarch: LoongArch: fixup for hardware ptw [D20250320]
  - loongarch: drivers/pci: Enables the acs ability of loongson Bridge [D20250320]
  - loongarch: drivers/iommu: Support iommu for 3c6000 [D20250320]
  - loongarch: fbdev: ls2k500sfb fix default video memory size. [D20250320]
  - loongarch: acpi: mcfg quirk: Increased multi-chip support for the 3C6000, now capable of supporting up to eight chips. [D20250320]
  - loongarch: irqchip: irq-loongson-pch-msi: Use pch_msi_priv[0] as the default value [D20250320]
  - loongarch: fbdev: ls2k500sfb update var info according to resolution. [D20250320]
  - loongarch: PPTT: Supports SMT when physical cores are discontinuous. [D20250320]
  - loongarch: memblock,arm64: expand the static memblock memory table [D20250320]
  - loongarch: LoongArch: Fixup INIT_MEMBLOCK_RESERVED_REGIONS for loongarch [D20250320]
  - loongarch: pci/quirks: LS7A2000 enble msi [D20250320]
  - loongarch: LoongArch: Add irq_work support via self IPIs [D20250320]
  - loongarch: LoongArch: kdump: fix huge memory machine trigger capture kernel failure [D20250320]
  - loongarch: sizes.h: Add entries between SZ_8G and SZ_64T [D20250320]
  - loongarch: loongson: spi: fix repeated kfree() [D20250320]
  - loongarch: cpufreq: loongson3-acpi: Fixed the error of assigning the value of Mhz to Khz [D20250320]
  - loongarch: loongson: pic: update interrupt registration policy [D20250320]
  - loongarch: ACPI: Fix unmet direct dependencies detected for ACPI_PPTT [D20250320]
  - loongarch: LoongArch: Fix kernel boot failure with CONFIG_KASAN [D20250320]
  - anolis: ipvs: add sysctl_run_estimation to support disable estimation [G2025031100008]
  - uos: Revert "ipvs: move estimation from timer to kworker" [G2025031100008]
  - uos: Revert "net: ipvs: add sysctl_run_estimation to support disable estimation" [G2025031100008]
  - stable: {CVE-2022-48966} net: mvneta: Prevent out of bounds read in mvneta_config_rss() [T371989]
  - stable: {CVE-2024-26976} KVM: Always flush async #PF workqueue when vCPU is being destroyed [T371989]
  - stable: {CVE-2024-44999} gtp: pull network headers in gtp_dev_xmit() [T371989]
  - stable: {CVE-2023-52885} SUNRPC: Fix UAF in svc_tcp_listen_data_ready() [T371989]
  - stable: {CVE-2024-46800} sch/netem: fix use after free in netem_dequeue [T371989]
  - stable: {CVE-2024-26852} net/ipv6: avoid possible UAF in ip6_route_mpath_notify() [T371989]
  - stable: {CVE-2024-41046} net: ethernet: lantiq_etop: fix double free in detach [T371989]
  - stable: {CVE-2024-53061} media: s5p-jpeg: prevent buffer overflows [T371989]
  - stable: {CVE-2024-50230} nilfs2: fix kernel bug due to missing clearing of checked flag [T371989]
  - stable: {CVE-2024-40901} scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory [T371989]
  - stable: {CVE-2024-53155} ocfs2: fix uninitialized value in ocfs2_file_read_iter() [T371989]
  - stable: {CVE-2024-26934} USB: core: Fix deadlock in usb_deauthorize_interface() [T371989]
  - stable: {CVE-2024-53156} wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() [T371989]
  - stable: {CVE-2024-56548} hfsplus: don't query the device logical block size multiple times [T371989]
  - stable: {CVE-2023-52840} Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() [T371989]
  - stable: {CVE-2024-46782} ila: call nf_unregister_net_hooks() sooner [T371989]
  - stable: {CVE-2024-44998} atm: idt77252: prevent use after free in dequeue_rx() [T371989]
  - stable: {CVE-2024-26884} bpf: Fix hashtab overflow check on 32-bit arches [T371989]
  - stable: {CVE-2024-53057} net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT [T371989]
  - stable: {CVE-2024-38552} drm/amd/display: Fix potential index out of bounds in color transformation function [T371989]
  - stable: {CVE-2024-46738} VMCI: Fix use-after-free when removing resource in vmci_resource_remove() [T371989]
  - stable: {CVE-2024-38560} scsi: bfa: Ensure the copied buf is NUL terminated [T371989]
  - stable: {CVE-2024-50262} bpf: Fix out-of-bounds write in trie_get_next_key() [T371989]
  - stable: {CVE-2024-53227} scsi: bfa: Fix use-after-free in bfad_im_module_exit() [T371989]
  - stable: {CVE-2024-50267} USB: serial: io_edgeport: fix use after free in debug printk [T371989]
  - stable: {CVE-2024-35847} irqchip/gic-v3-its: Prevent double free on error [T371989]
  - stable: {CVE-2024-50302} HID: core: zero-initialize the report buffer [T371989]
  - stable: {CVE-2024-41087} ata: libata-core: Fix double free on error [T371989]
  - stable: {CVE-2023-52847} media: bttv: fix use after free error due to btv->timeout timer [T371989]
  - stable: {CVE-2024-50279} dm cache: fix out-of-bounds access to the dirty bitset when resizing [T371989]
  - stable: {CVE-2024-53173} NFSv4.0: Fix a use-after-free problem in the asynchronous open() [T371989]
  - stable: {CVE-2024-35821} ubifs: Set page uptodate in the correct place [T371989]
  - stable: {CVE-2024-38627} stm class: Fix a double free in stm_register_device() [T371989]
  - stable: {CVE-2024-27024} net/rds: fix WARNING in rds_conn_connect_if_down [T371989]
  - stable: {CVE-2024-53104} media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format [T371989]
  - stable: {CVE-2024-36886} tipc: fix UAF in error path [T371989]
  - stable: {CVE-2024-50269} usb: musb: sunxi: Fix accessing an released usb phy [T371989]
  - stable: {CVE-2024-56704} 9p/xen: fix release of IRQ [T371989]
  - stable: {CVE-2024-44987} ipv6: prevent UAF in ip6_send_skb() [T371989]
  - stable: {CVE-2024-50301} security/keys: fix slab-out-of-bounds in key_task_permission [T371989]
  - stable: {CVE-2024-46674} usb: dwc3: st: fix probed platform device ref count on probe error path [T371989]
  - stable: {CVE-2024-50264} vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans [T371989]
  - stable: {CVE-2024-53165} sh: intc: Fix use-after-free bug in register_intc_controller() [T371989]
  - stable: {CVE-2023-52922} can: bcm: Fix UAF in bcm_proc_show() [T371989]
  - stable: {CVE-2024-53142} initramfs: avoid filename buffer overrun [T371989]
  - stable: {CVE-2024-53239} ALSA: 6fire: Release resources at card release [T371989]
  - stable: {CVE-2024-46673} scsi: aacraid: Fix double-free on probe failure [T371989]
  - stable: {CVE-2024-42148} bnx2x: Fix multiple UBSAN array-index-out-of-bounds [T371989]
  - stable: {CVE-2024-27043} media: edia: dvbdev: fix a use-after-free [T371989]
  - stable: {CVE-2023-52691} drm/amd/pm: fix a double-free in si_dpm_init [T371989]
  - stable: {CVE-2023-52679} of: Fix double free in of_parse_phandle_with_args_map [T371989]
  - stable: {CVE-2024-38583} nilfs2: fix use-after-free of timer for log writer thread [T371989]
  - stable: {CVE-2024-53141} netfilter: ipset: add missing range check in bitmap_ip_uadt [T371989]
  - uos: update srpm to 4.19.0-91.186 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.188
changelog:
  - uos: fix kabi broken for loongarch
  - uos: fix slabtop bug with correct config[B276885]
  - uos: Revert "uos: fix slabtop bug [B276885]"
  - uos: Merge branch 'uos_dev' into uos_release [T000000]
  - uos: fix kabi broken for struct dst_ops and netns_xfrm
  - mainline: {CVE-2024-36971} net: fix __dst_negative_advice() race [G2025051600022]
  - mainline: mptcp: add sk_stop_timer_sync helper
  - mainline: net: annotate data-races around sk->sk_dst_pending_confirm
  - mainline: af_unix: Fix data race around sk->sk_err.
  - mainline: af_unix: Fix data-races around sk->sk_shutdown.
  - mainline: net: read sk->sk_family once in sk_mc_loop()
  - mainline: sock: Fix misuse of sk_under_memory_pressure()
  - mainline: net: add missing data-race annotation for sk_ll_usec
  - mainline: net: add missing data-race annotations around sk->sk_peek_off
  - mainline: netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - mainline: xfrm: fix a data-race in xfrm_gen_index()
  - euler: x86: Enhanced copy capabilities for Hygon processor [T000000]
  - mainline: waitid: Add support for waiting for the current process group [G2025051000002]
  - mainline: pidfd: add P_PIDFD to waitid() [G2025051000002]
  - uos: fix slabtop bug [B276885]
  - phytium: pswiotlb: Fix kernel panic when the dma phy address is DMA_MAPPING_ERROR [D2025030003]
  - phytium: pswiotlb: Add bypass rules of pswiotlb for specific application scenes [D2025030003]
  - phytium: pswiotlb: Add support for PS24080 [D2025030003]
  - phytium: pswiotlb: Adapt for coherent dma memory allocation bypass SMMU [D2025030003]
  - phytium: pswiotlb: Adapt for coherent dma memory allocation [D2025030003]
  - phytium: pswiotlb: Avoid dead lock when expansion occures [D2025030003]
  - phytium: pswiotlb: Avoid sleep when pswiotlb is used in interrupt contexts [D2025030003]
  - phytium: pswiotlb: Fix kernel panic when the dma phy address is 0 [D2025030003]
  - phytium: pswiotlb: Fix softlockup when PAGE_SIZE is 4KB [D2025030003]
  - phytium: pswiotlb: Add version information [D2025030003]
  - phytium: pswiotlb: Resolve KABI conflicts [D2025030003]
  - phytium: pswiotlb: Expansion is disabled when remaining memory is insufficient [D2025030003]
  - phytium: pswiotlb: Reduce overhead when pools are searched [D2025030003]
  - phytium: pswiotlb: Basic functions of OS are not affected by devices which are incompatible with pswiotlb [D2025030003]
  - phytium: pswiotlb: Add blacklist which are incompatible with pswiotlb temporarily [D2025030003]
  - phytium: pswiotlb: Fix abnormal expansion when PAGE_SIZE is 64KB [D2025030003]
  - phytium: pswiotlb: Enable PSWIOTLB by default [D2025030003]
  - phytium: pswiotlb: Adapt for iommu-translated mode [D2025030003]
  - phytium: pswiotlb: Adapt for iommu-passthrough mode [D2025030003]
  - phytium: pswiotlb: Distribute the traffic to PSWIOTLB or not [D2025030003]
  - phytium: pswiotlb: Add PSWIOTLB mechanism to improve DMA performance [D2025030003]
  - uos: mm/init: Add quirk for phytium ps23064 SoC [D2025030003]
  - uos: PCI/MSI: Set device flag indicating only 32-bit MSI support [D2025030003]
  - uos: PCI/MSI: Move MSI/MSI-X flags updaters to msi.c [D2025030003]
  - uos: PCI/MSI: Move MSI/MSI-X init to msi.c [D2025030003]
  - uos: update srpm to 4.19.0-91.187 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.189
changelog:
  - uos: Revert "euler: x86: Enhanced copy capabilities for Hygon processor [T000000]"
  - uos: update srpm to 4.19.0-91.188 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190
changelog:
  - uos: fix ice driver compile error in loongarch [T00000]
  - mainline: {CVE-2024-50051} spi: mpc52xx: Add cancel_work_sync before module remove [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: handle isoc Babble and Buffer Overrun events properly [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: process isoc TD properly when there was a transaction error mid TD. [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: store TD status in the td struct instead of passing it along [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: remove extra loop in interrupt context [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: get isochronous ring directly from endpoint structure [G2025060400020]
  - uos: Revert "UOS: modify pipe read/write" [G2025061700021]
  - uos: fix "mainline: mptcp: add sk_stop_timer_sync helper"
  - mainline: {CVE-2024-57887} drm: adv7511: Fix use-after-free in adv7533_attach_dsi() [G2025060400020]
  - mainline: {CVE-2024-56659} net: lapb: increase LAPB_HEADER_LEN [G2025060400020]
  - mainline: {CVE-2024-56650} netfilter: x_tables: fix LED ID check in led_tg_check() [G2025060400020]
  - uos: net: update ice to 1.15.5 [DM2025030001]
  - uos: update srpm to 4.19.0-91.189 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.003
changelog:
  - uos: block: suppress "I/O scheduler none not found" error [G2025101200001]
  - Merge "mainline: depend: {CVE-2024-26722} ASoC: rt5650: fix the wrong result of key button" into lts-1070u1
  - mainline: depend: {CVE-2024-26722} ASoC: rt5650: add mutex to avoid the jack detection failure
  - mainline: depend: {CVE-2024-26722} ASoC: rt5650: fix the wrong result of key button
  - uos: disable osq_cna_lock by default [G2025101300031]
  - Merge changes from topic "20251014-cve-419a-lts1070u1" into lts-1070u1
  - uos: fix kabi broken for struct netns_nftables
  - uos: fix kabi change of struct net_device_stats
  - mainline: {CVE-2022-48935} netfilter: nf_tables: unregister flowtable hooks on netns exit
  - mainline: depend: {CVE-2022-48935} netfilter: nf_tables: use net_generic infra for transaction data
  - mainline: depend: {CVE-2022-48935} netfilter: nftables: add helper function to set the base sequence number
  - mainline: {CVE-2023-52525} wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
  - mainline: depend: {CVE-2023-52525} wifi: mwifiex: Fix missed return in oob checks failed path
  - mainline: depend: {CVE-2023-52525} wifi: mwifiex: Fix OOB and integer underflow when rx packets
  - mainline: {CVE-2023-52577} dccp: fix dccp_v4_err()/dccp_v6_err() again
  - mainline: depend: {CVE-2023-52577} dccp: Fix out of bounds access in DCCP error handler
  - mainline: {CVE-2023-52796} ipvlan: add ipvlan_route_v6_outbound() helper
  - mainline: depend: {CVE-2023-52796} ipvlan: properly track tx_errors
  - mainline: depend: {CVE-2023-52796} net: add DEV_STATS_READ() helper
  - mainline: depend: {CVE-2023-52796} dev_forward_skb: do not scrub skb mark within the same name space
  - mainline: depend: {CVE-2023-52796} net: add atomic_long_t to net_device_stats fields
  - mainline: depend: {CVE-2023-52796} Remove DECnet support from kernel
  - mainline: depend: {CVE-2023-52796} rfs: annotate lockless accesses to RFS sock flow table
  - mainline: depend: {CVE-2023-52796} macsec: use DEV_STATS_INC()
  - mainline: depend: {CVE-2023-52796} macsec: Fix traffic counters/statistics
  - mainline: depend: {CVE-2023-52796} ipvlan: Fix return value of ipvlan_queue_xmit()
  - mainline: {CVE-2023-52799} jfs: fix array-index-out-of-bounds in dbFindLeaf
  - mainline: {CVE-2023-52810} fs/jfs: Add check for negative db_l2nbperpage
  - mainline: depend: {CVE-2023-52810} fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
  - mainline: depend: {CVE-2023-52810} fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
  - mainline: depend: {CVE-2023-52810} jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - mainline: {CVE-2023-52838} fbdev: imsttfb: fix a resource leak in probe
  - mainline: depend: {CVE-2023-52838} fbdev: imsttfb: Fix error path of imsttfb_probe()
  - mainline: depend: {CVE-2023-52838} fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  - mainline: depend: {CVE-2023-52838} video: imsttfb: check for ioremap() failures
  - mainline: {CVE-2023-52853} hid: cp2112: Fix duplicate workqueue initialization
  - mainline: depend: {CVE-2023-52853} HID: cp2112: Use irqchip template
  - mainline: {CVE-2023-52864} platform/x86: wmi: Fix opening of char device
  - mainline: depend: {CVE-2023-52864} platform/x86: wmi: remove unnecessary initializations
  - mainline: depend: {CVE-2023-52864} platform/x86: wmi: Fix probe failure when failing to register WMI devices
  - mainline: {CVE-2024-26820} hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
  - mainline: depend: {CVE-2024-26820} hv_netvsc: use netif_is_bond_master() instead of open code
  - mainline: depend: {CVE-2024-26820} hv_netvsc: Make netvsc/VF binding check both MAC and serial number
  - mainline: depend: {CVE-2024-26820} hv_netvsc: Mark VF as slave before exposing it to user-mode
  - mainline: depend: {CVE-2024-26820} hv_netvsc: Fix race of register_netdevice_notifier and VF register
  - mainline: {CVE-2024-26878} 15 quota: Fix potential NULL pointer dereference
  - mainline: depend: {CVE-2024-26878} quota: simplify drop_dquot_ref()
  - mainline: depend: {CVE-2024-26878} quota: check time limit when back out space/inode change
  - mainline: depend: {CVE-2024-26878} fs/quota: erase unused but set variable warning
  - mainline: depend: {CVE-2024-26878} quota: code cleanup for __dquot_alloc_space()
  - mainline: depend: {CVE-2024-26878} quota: explicitly forbid quota files from being encrypted
  - mainline: depend: {CVE-2024-26878} quota: Fix slow quotaoff
  - mainline: depend: {CVE-2024-26878} quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - mainline: depend: {CVE-2024-26878} quota: add new helper dquot_active()
  - mainline: depend: {CVE-2024-26878} quota: rename dquot_active() to inode_quota_active()
  - mainline: depend: {CVE-2024-26878} quota: factor out dquot_write_dquot()
  - mainline: depend: {CVE-2024-26878} quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
  - mainline: depend: {CVE-2024-26878} quota: add dqi_dirty_list description to comment of Dquot List Management
  - mainline: depend: {CVE-2024-26878} quota: fix warning in dqgrab()
  - mainline: depend: {CVE-2024-26878} quota: Properly disable quotas when add_dquot_ref() fails
  - mainline: {CVE-2024-26883} bpf: Fix stackmap overflow check on 32-bit arches
  - mainline: {CVE-2024-26917} scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
  - mainline: depend: {CVE-2024-26917} scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
  - mainline: {CVE-2024-35809} PCI/PM: Drain runtime-idle callbacks before driver removal
  - mainline: depend: {CVE-2024-35809} PCI: Drop pci_device_remove() test of pci_dev->driver
  - mainline: {CVE-2024-35955} kprobes: Fix possible use-after-free issue on kprobe registration
  - mainline: {CVE-2024-38381} nfc: nci: Fix kcov check in nci_rx_work()
  - mainline: depend: {CVE-2024-38381} nfc: nci: Fix uninit-value in nci_rx_work
  - mainline: depend: {CVE-2024-38381} nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - mainline: depend: {CVE-2024-38381} nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - mainline: depend: {CVE-2024-38381} nfc: nci: assert requested protocol is valid
  - mainline: {CVE-2024-38582} nilfs2: fix potential hang in nilfs_detach_log_writer()
  - mainline: depend: {CVE-2024-38582} nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - mainline: depend: {CVE-2024-38582} nilfs2: fix potential bug in end_buffer_async_write
  - mainline: depend: {CVE-2024-38582} nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
  - mainline: depend: {CVE-2024-38582} nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
  - mainline: depend: {CVE-2024-38582} nilfs2: fix buffer corruption due to concurrent device reads
  - mainline: {CVE-2024-38587} speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - mainline: depend: {CVE-2024-38587} speakup: Avoid crash on very long word
  - mainline: {CVE-2024-38598} md: fix resync softlockup when bitmap size is less than array size
  - mainline: depend: {CVE-2024-38598} md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
  - mainline: {CVE-2024-46675} usb: dwc3: core: Prevent USB core invalid event buffer address access
  - mainline: depend: {CVE-2024-46675} usb: dwc3: core: Skip setting event buffers for host only controllers
  - mainline: depend: {CVE-2024-46675} Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
  - mainline: depend: {CVE-2024-46675} Revert "usb: dwc3: Soft reset phy on probe for host"
  - mainline: depend: {CVE-2024-46675} usb: dwc3: set the dma max_seg_size
  - mainline: depend: {CVE-2024-46675} usb: dwc3: Soft reset phy on probe for host
  - mainline: depend: {CVE-2024-46675} usb: dwc3: don't reset device side if dwc3 was configured as host-only
  - mainline: depend: {CVE-2024-46675} Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
  - mainline: {CVE-2024-53060} drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  - mainline: depend: {CVE-2024-53060} drm/amd: Guard against bad data for ATIF ACPI method
  - mainline: {CVE-2024-53146} NFSD: Prevent a potential integer overflow
  - mainline: depend: {CVE-2024-53146} NFS: Remove print_overflow_msg()
  - mainline: {CVE-2023-52699} sysv: don't call sb_bread() with pointers_lock held
  - mainline: {CVE-2023-52703} net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - mainline: {CVE-2023-52705} nilfs2: fix underflow in second superblock position calculations
  - mainline: {CVE-2023-52730} mmc: sdio: fix possible resource leaks in some error paths
  - mainline: {CVE-2023-52742} net: USB: Fix wrong-direction WARNING in plusb.c
  - mainline: {CVE-2023-52747} IB/hfi1: Restore allocated resources on failed copyout
  - mainline: {CVE-2023-52753} drm/amd/display: Avoid NULL dereference of timing generator
  - mainline: {CVE-2023-52764} media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - mainline: {CVE-2023-52774} s390/dasd: protect device queue against concurrent access
  - mainline: {CVE-2023-52789} tty: vcc: Add check for kstrdup() in vcc_probe()
  - mainline: {CVE-2023-52804} fs/jfs: Add validity check for db_maxag and db_agpref
  - mainline: {CVE-2023-52805} jfs: fix array-index-out-of-bounds in diAlloc
  - mainline: {CVE-2023-52806} ALSA: hda: Fix possible null-ptr-deref when assigning a stream
  - mainline: {CVE-2023-52809} scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
  - mainline: {CVE-2023-52813} crypto: pcrypt - Fix hungtask for PADATA_RESET
  - mainline: {CVE-2023-52817} drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - mainline: {CVE-2023-52818} drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
  - mainline: {CVE-2023-52819} drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
  - mainline: {CVE-2023-52832} wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
  - mainline: {CVE-2023-52835} perf/core: Bail out early if the request AUX area is out of bound
  - mainline: {CVE-2023-52836} locking/ww_mutex/test: Fix potential workqueue corruption
  - mainline: {CVE-2023-52843} llc: verify mac len before reading mac header
  - mainline: {CVE-2023-52867} drm/radeon: possible buffer overflow
  - mainline: {CVE-2023-52868} thermal: core: prevent potential string overflow
  - mainline: {CVE-2023-52881} tcp: do not accept ACK of bytes we never sent
  - mainline: {CVE-2023-52915} media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
  - mainline: {CVE-2023-52918} media: pci: cx23885: check cx23885_vdev_init() return
  - mainline: {CVE-2024-26722} ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
  - mainline: {CVE-2024-26889} Bluetooth: hci_core: Fix possible buffer overflow
  - mainline: {CVE-2024-26957} s390/zcrypt: fix reference counting on zcrypt card objects
  - mainline: {CVE-2024-27396} net: gtp: Fix Use-After-Free in gtp_dellink
  - mainline: {CVE-2024-27412} power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - mainline: {CVE-2024-35849} btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - mainline: {CVE-2024-35902} net/rds: fix possible cp null dereference
  - mainline: {CVE-2024-35922} fbmon: prevent division by zero in fb_videomode_from_videomode()
  - mainline: {CVE-2024-35925} block: prevent division by zero in blk_rq_stat_sum()
  - mainline: {CVE-2024-35930} scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - mainline: {CVE-2024-35933} Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  - mainline: {CVE-2024-35947} dyndbg: fix old BUG_ON in >control parser
  - mainline: {CVE-2024-35973} geneve: fix header validation in geneve[6]_xmit_skb
  - mainline: {CVE-2024-36950} firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - mainline: {CVE-2024-36954} tipc: fix a possible memleak in tipc_buf_append
  - mainline: {CVE-2024-36959} pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - mainline: {CVE-2024-37356} tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - params: lift param_set_uint_minmax to common code
  - mainline: {CVE-2024-38578} ecryptfs: Fix buffer size for tag 66 packet
  - mainline: {CVE-2024-38596} af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - mainline: {CVE-2024-38599} jffs2: prevent xattr node from overflowing the eraseblock
  - mainline: {CVE-2024-38601} ring-buffer: Fix a race between readers and resize checks
  - mainline: {CVE-2024-38613} m68k: Fix spinlock race in kernel thread creation
  - mainline: {CVE-2024-38618} ALSA: timer: Set lower bound of start tick time
  - mainline: {CVE-2024-38621} media: stk1160: fix bounds checking in stk1160_copy_video()
  - mainline: {CVE-2024-38637} greybus: lights: check return of get_channel_from_mode
  - mainline: {CVE-2024-38661} s390/ap: Fix crash in AP internal function modify_bitmap()
  - mainline: {CVE-2024-39475} fbdev: savage: Handle err return when savagefb_check_var failed
  - mainline: {CVE-2024-39476} md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - mainline: {CVE-2024-39480} kdb: Fix buffer overflow during tab-complete
  - mainline: {CVE-2024-39488} arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - mainline: {CVE-2024-39493} crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - mainline: {CVE-2024-39499} vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - mainline: {CVE-2024-39509} HID: core: remove unnecessary WARN_ON() in implement()
  - mainline: {CVE-2024-40902} jfs: xattr: fix buffer overflow for invalid xattr
  - mainline: {CVE-2024-40932} drm/exynos/vidi: fix memory leak in .get_modes()
  - mainline: {CVE-2024-40942} wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - mainline: {CVE-2024-40943} ocfs2: fix races between hole punching and AIO+DIO
  - mainline: {CVE-2024-40968} MIPS: Octeon: Add PCIe link status check
  - mainline: {CVE-2024-40974} powerpc/pseries: Enforce hcall result buffer validity and size
  - mainline: {CVE-2024-40978} scsi: qedi: Fix crash while reading debugfs attribute
  - mainline: {CVE-2024-40981} batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - mainline: {CVE-2024-41006} netrom: Fix a memory leak in nr_heartbeat_expiry()
  - mainline: {CVE-2024-41020} filelock: Fix fcntl/close race recovery compat path
  - mainline: {CVE-2024-41059} hfsplus: fix uninit-value in copy_name
  - mainline: {CVE-2024-41063} Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - mainline: {CVE-2024-41089} drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - mainline: {CVE-2024-41095} drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - mainline: {CVE-2024-42086} iio: chemical: bme680: Fix overflows in compensate() functions
  - mainline: {CVE-2024-42092} gpio: davinci: Validate the obtained number of IRQs
  - mainline: {CVE-2024-42094} net/iucv: Avoid explicit cpumask var allocation on stack
  - mainline: {CVE-2024-42096} x86: stop playing stack games in profile_pc()
  - mainline: {CVE-2024-42104} nilfs2: add missing check for inode numbers on directory entries
  - mainline: {CVE-2024-42105} nilfs2: fix inode number range checks
  - mainline: {CVE-2024-42115} jffs2: Fix potential illegal address access in jffs2_free_inode
  - mainline: {CVE-2024-42145} IB/core: Implement a limit on UMAD receive List
  - mainline: {CVE-2024-42157} s390/pkey: Wipe sensitive data on failure
  - mainline: {CVE-2024-42223} media: dvb-frontends: tda10048: Fix integer overflow
  - mainline: {CVE-2024-42224} net: dsa: mv88e6xxx: Correct check for empty list
  - mainline: {CVE-2024-42236} usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - mainline: {CVE-2024-43882} exec: Fix ToCToU between perm check and set-uid/gid usage
  - mainline: {CVE-2024-43893} serial: core: check uartclk for zero to avoid divide by zero
  - mainline: {CVE-2024-43914} md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - mainline: {CVE-2024-44954} ALSA: line6: Fix racy access to midibuf
  - mainline: {CVE-2024-44969} s390/sclp: Prevent release of buffer in I/O
  - mainline: {CVE-2024-46721} apparmor: fix possible NULL pointer dereference
  - mainline: {CVE-2024-46743} of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - mainline: {CVE-2024-46744} Squashfs: sanity check symbolic link size
  - mainline: {CVE-2024-46745} Input: uinput - reject requests with unreasonable number of slots
  - mainline: {CVE-2024-46747} HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - mainline: {CVE-2024-46750} PCI: Add missing bridge lock to pci_bus_lock()
  - mainline: {CVE-2024-46755} wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - mainline: {CVE-2024-46759} hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - mainline: {CVE-2024-46777} udf: Avoid excessive partition lengths
  - mainline: {CVE-2024-46840} btrfs: clean up our handling of refs == 0 in snapshot delete
  - mainline: {CVE-2024-46844} um: line: always fill *error_out in setup_one_line()
  - mainline: {CVE-2024-47659} smack: tcp: ipv4, fix incorrect labeling
  - mainline: {CVE-2024-50234} wifi: iwlegacy: Clear stale interrupts before resuming device
  - mainline: {CVE-2024-50290} media: cx24116: prevent overflows on SNR calculus
  - mainline: {CVE-2024-50296} net: hns3: fix kernel crash when uninstalling driver
  - mainline: {CVE-2024-53101} fs: Fix uninitialized value issue in from_kuid and from_kgid
  - mainline: {CVE-2024-53103} hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  - mainline: {CVE-2024-53158} soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - mainline: {CVE-2024-53214} vfio/pci: Properly hide first-in-list PCIe extended capability
  - mainline: {CVE-2024-56531} ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  - mainline: {CVE-2024-56532} ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  - mainline: {CVE-2024-56700} media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - uos: fix kmalloc-1024 memoryleak [G2025032600004]
  - Revert "mainline: {CVE-2025-38544} rxrpc: Fix bug due to prealloc collision"
  - Merge changes from topic "20250901-v20-419a-lts1070u1" into lts-1070u1
  - stable: {CVE-2025-38624} PCI: pnv_php: Clean up allocated IRQs on unplug
  - uos: stable: {CVE-2024-46761} pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv [G006936] [T372895]
  - stable: {CVE-2025-38591} bpf: Reject narrower access to pointer ctx fields
  - stable: {CVE-2025-38563} perf/core: Prevent VMA split of buffer mappings
  - stable: {CVE-2025-38565} perf/core: Exit early on perf_mmap() fail
  - stable: {CVE-2025-38546} atm: clip: Fix memory leak of struct clip_vcc.
  - stable: atm: clip: Fix potential null-ptr-deref in to_atmarpd().
  - mainline: {CVE-2025-38352} posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() [G2025091200016]
  - euler: sch_netem: acquire qdisc lock in netem_change()
  - mainline: {CVE-2025-38512} wifi: prevent A-MSDU attacks in mesh networks
  - mainline: {CVE-2025-38618} vsock: Do not allow binding to VMADDR_PORT_ANY
  - mainline: {CVE-2025-38663} nilfs2: reject invalid file types when reading inodes
  - mainline: {CVE-2025-38666} net: appletalk: Fix use-after-free in AARP proxy probe
  - mainline: {CVE-2025-38556} HID: core: Harden s32ton() against conversion to 0 bits
  - mainline: {CVE-2025-38612} staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
  - mainline: {CVE-2025-38617} net/packet: fix a race in packet_set_ring() and packet_notifier()
  - mainline: {CVE-2025-38572} ipv6: reject malicious packets in ipv6_gso_segment()
  - mainline: {CVE-2025-38578} f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
  - mainline: {CVE-2025-38630} fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  - mainline: {CVE-2025-38539} tracing: Add down_write(trace_event_sem) when adding trace event
  - mainline: depend: {CVE-2025-38503} btrfs: separate BLOCK_GROUP_TREE compat RO flag from EXTENT_TREE_V2
  - mainline: {CVE-2025-38503} btrfs: fix assertion when building free space tree
  - mainline: {CVE-2025-38544} rxrpc: Fix bug due to prealloc collision
  - mainline: {CVE-2025-38671} i2c: qup: jump out of the loop in case of timeout
  - mainline: {CVE-2025-38602} iwlwifi: Add missing check for alloc_ordered_workqueue
  - mainline: {CVE-2025-38604} wifi: rtl818x: Kill URBs before clearing tx status queue
  - mainline: {CVE-2025-38555} usb: gadget : fix use-after-free in composite_dev_cleanup()
  - mainline: {CVE-2025-38574} pptp: ensure minimal skb length in pptp_xmit()
  - mainline: {CVE-2025-38514} rxrpc: Fix oops due to non-existence of prealloc backlog struct
  - mainline: {CVE-2025-38581} crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - mainline: {CVE-2025-38635} clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  - mainline: {CVE-2025-38650} hfsplus: remove mutex_lock check in hfsplus_free_extents
  - mainline: {CVE-2025-38639} netfilter: xt_nfacct: don't assume acct name is null-terminated
  - mainline: {CVE-2025-38595} xen: fix UAF in dmabuf_exp_from_pages()
  - mainline: {CVE-2025-38553} net/sched: Restrict conditions for adding duplicating netems to qdisc tree
  - mainline: {CVE-2025-38538} dmaengine: nbpfaxi: Fix memory corruption in probe()
  - mainline: {CVE-2025-38542} net: appletalk: Fix device refcount leak in atrtr_create()
  - mainline: {CVE-2025-38513} wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
  - mainline: {CVE-2025-38515} drm/sched: Increment job count before swapping tail spsc queue
  - github: {CVE-2022-27666} esp: Fix possible buffer overflow in ESP transformation
  - mainline: net/mlx5: Fix eeprom support for SFP module [G2025052300009]
  - mainline: net/mlx5e: ethtool, Add support for EEPROM high pages query [G2025052300009]
  - mainline: ethtool: Add SFF-8436 and SFF-8636 max EEPROM length definitions [G2025052300009]
  - mainline: netfilter: nf_tables: fix oops during rule dump [G202507280007]
  - uos: update srpm to 4.19.0-91.190 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.004
changelog:
  - Merge "uos: LoongArch: Fix the issue of incorrect calculation of thread count [T384057]" into lts-1070u1
  - uos: LoongArch: Fix the issue of incorrect calculation of thread count [T384057]
  - uos: LoongArch: Let cores_io_master cover the largest NR_CPUS [T384057]
  - uos: update srpm to 4.19.0-91.190.003 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.005
changelog:
  - uos: modify the CONFIG_SCSI_MVSAS the same config with arm64 and x86
  - euler: tools: fix implicit declaration of function __ALIGN_KERNEL
  - uos: fix the compile error with sk_is_tcp and sk_is_stream_unix from {CVE-2025-40080}
  - Merge "mainline: {CVE-2025-40081} perf: arm_spe: Prevent overflow in PERF_IDX2OFF()" into lts-1070u1
  - Merge changes from topic "net" into lts-1070u1
  - Merge changes Ibd96f506,I69126020,I774f0df8,Id7434bc1,If6c7b249, ... into lts-1070u1
  - Merge changes Iced2efc8,I12ead166,I2ccbfbd9,I6b99710d into lts-1070u1
  - mainline: {CVE-2025-40081} perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - Merge changes from topic "cve-419a-1070u1-20251127" into lts-1070u1
  - Merge changes from topic "cve-1070u1-lts-1070u1-20251127" into lts-1070u1
  - Merge "stable: {CVE-2025-40006} mm/hugetlb: fix folio is still mapped when deleted" into lts-1070u1
  - Merge changes Id5462223,I04ad2d7b,I3f0f41f7,I2a35ac3b,I2e8aca12, ... into lts-1070u1
  - Merge changes Ia537be09,I0e58f4ac,I8527c90a,Ibaf896bf,I976509e6, ... into lts-1070u1
  - mainline: depend {CVE-2023-52924} netfilter: nf_tables: GC transaction API to avoid race with control plane
  - mainline: depend {CVE-2023-52924} netfilter: nf_tables: reject unbound anonymous set before commit phase
  - mainline: depend {CVE-2023-52924} netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
  - mainline: depend {CVE-2023-52924} netfilter: nftables: rename set element data activation/deactivation functions
  - mainline: {CVE-2023-52924} netfilter: nf_tables: don't skip expired elements during walk
  - mainline: {CVE-2023-52923} netfilter: nf_tables: adapt set backend to use GC transaction API
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: fix overlap expiration walk
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: fix null deref on element insertion
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: Add missing expired checks
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  - mainline: depend {CVE-2023-52923} netfilter: nf_tables: drop map element references from  preparation phase
  - mainline: depend {CVE-2023-52923} netfilter: nf_tables: pass context to nft_set_destroy()
  - mainline: depend {CVE-2023-52923} mainline: depend {CVE-2023-52923} netfilter: nf_tables: report use refcount overflow
  - mainline: depend {CVE-2023-52923} netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush
  - mainline: {CVE-2023-53712} ARM: 9317/1: kexec: Make smp stop calls asynchronous
  - Merge "uos: update srpm to 4.19.0-91.190.004 [T00000]" into lts-1070u1
  - euler: {CVE-2024-45025} fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - euler: bitmap: introduce generic optimized bitmap_size()
  - mainline: {CVE-2023-53117} fs: prevent out-of-bounds array speculation when closing a file descriptor
  - euler: {CVE-2025-40044} fs: udf: fix OOB read in lengthAllocDescs handling
  - mainline: {CVE-2025-40099} cifs: parse_dfs_referrals: prevent oob on malformed input
  - mainline: {CVE-2025-40100} btrfs: do not assert we found block group item when creating free space tree
  - mainline: {CVE-2025-40053} net: dlink: handle copy_thresh allocation failure
  - mainline: {CVE-2025-40083} net/sched: sch_qfq: Fix null-deref in agg_dequeue
  - mainline: {CVE-2025-40027} net/9p: fix double req put in p9_fd_cancelled
  - mainline: {CVE-2025-40018} ipvs: Defer ip_vs_ftp unregister during netns cleanup
  - mainline: {CVE-2022-50556} drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
  - mainline: {CVE-2025-40011} drm/gma500: Fix null dereference in hdmi teardown
  - mainline: {CVE-2024-50282} drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  - mainline: depend: {CVE-2024-50282} drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
  - mainline: {CVE-2025-40105} vfs: Don't leak disconnected dentries on umount
  - mainline: {CVE-2025-40103} smb: client: Fix refcount leak for cifs_sb_tlink
  - mainline: {CVE-2025-40088} hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  - mainline: {CVE-2025-40087} NFSD: Define a proc_layoutcommit for the FlexFiles layout type
  - mainline: {CVE-2025-40080} nbd: restrict sockets to TCP and UDP
  - mainline: {CVE-2025-40055} ocfs2: fix double free in user_cluster_connect()
  - mainline: {CVE-2025-40049} Squashfs: fix uninit-value in squashfs_get_parent
  - uos: update srpm to 4.19.0-91.190.004 [T00000]
  - mainline: blk-mq: enforce op-specific segment limits in blk_insert_cloned_request [G2025112400006]
  - stable: {CVE-2025-40006} mm/hugetlb: fix folio is still mapped when deleted
  - mainline: block: respect queue limit of max discard segment [G2025112400006]
  - mainline: {CVE-2025-40030} pinctrl: check the return value of pinmux_ops::get_function_name()
  - mainline: {CVE-2024-38607} macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - mainline: depend: {CVE-2024-38607} macintosh/via-macii: Clarify definition of macii_init()
  - mainline: {CVE-2025-40035} Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - mainline: {CVE-2025-40001} scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
  - mainline: depend: {CVE-2025-40001} scsi: mvsas: Use sas_task_find_rq() for tagging
  - mainline: {CVE-2023-53696} scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()
  - mainline: {CVE-2025-39998} scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - mainline: {CVE-2025-39970} i40e: fix input validation logic for action_meta
  - mainline: {CVE-2025-39972} i40e: fix idx validation in i40e_validate_queue_map
  - mainline: {CVE-2025-39968} i40e: add max boundary check for VF filters
  - euler: {CVE-2023-53728} posix-timers: Ensure timer ID search-loop limit is valid
  - mainline: {CVE-2023-53722} md: raid1: fix potential OOB in raid1_remove_disk()
  - mainline: {CVE-2023-53729} soc: qcom: qmi_encdec: Restrict string length in decode
  - mainline: {CVE-2022-49034} sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - mainline: {CVE-2022-49558} netfilter: nf_tables: double hook unregistration in netns path
  - mainline: {CVE-2022-50001} netfilter: nft_tproxy: restrict to prerouting hook
  - mainline: {CVE-2023-52933} Squashfs: fix handling and sanity checking of xattr_ids count
  - mainline: {CVE-2023-52977} net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
  - mainline: {CVE-2023-52988} ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - mainline: {CVE-2023-52989} firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
  - mainline: {CVE-2023-53146} media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
  - mainline: {CVE-2024-26817} amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - mainline: {CVE-2024-31076} genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - mainline: {CVE-2024-33621} ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - mainline: {CVE-2024-38558} net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - mainline: {CVE-2024-38567} wifi: carl9170: add a proper sanity check for endpoints
  - mainline: {CVE-2024-38579} crypto: bcm - Fix pointer arithmetic
  - mainline: {CVE-2024-38634} serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - mainline: {CVE-2024-38659} enic: Validate length of nl attributes in enic_set_vf_port
  - mainline: {CVE-2024-40941} wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - mainline: {CVE-2024-40987} drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - mainline: {CVE-2024-40988} drm/radeon: fix UBSAN warning in kv_dpm.c
  - mainline: {CVE-2024-41015} ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - mainline: {CVE-2024-41017} jfs: don't walk off the end of ealist
  - mainline: {CVE-2024-41035} USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - mainline: {CVE-2024-41044} ppp: reject claimed-as-LCP but actually malformed packets
  - mainline: {CVE-2024-41068} s390/sclp: Fix sclp_init() cleanup on failure
  - mainline: {CVE-2024-41072} wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - mainline: {CVE-2024-41081} ila: block BH in ila_output()
  - mainline: {CVE-2024-42084} ftruncate: pass a signed offset
  - mainline: {CVE-2024-42087} drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - mainline: {CVE-2024-42097} ALSA: emux: improve patch ioctl data validation
  - mainline: {CVE-2024-42119} drm/amd/display: Skip finding free audio for unknown engine_id
  - mainline: {CVE-2024-43879} wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - mainline: {CVE-2024-43883} usb: vhci-hcd: Do not drop references before new references are gained
  - mainline: {CVE-2024-44948} x86/mtrr: Check if fixed MTRRs exist before saving them
  - mainline: {CVE-2024-45008} Input: MT - limit max slots
  - mainline: {CVE-2024-46685} pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - mainline: {CVE-2024-46722} drm/amdgpu: fix mc_data out-of-bounds read warning
  - mainline: {CVE-2024-46723} drm/amdgpu: fix ucode out-of-bounds read warning
  - mainline: {CVE-2024-50218} ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - mainline: {CVE-2024-53172} ubi: fastmap: Fix duplicate slab cache names while attaching
  - mainline: {CVE-2024-53181} um: vector: Do not use drvdata in release
  - mainline: {CVE-2024-53183} um: net: Do not use drvdata in release
  - mainline: {CVE-2024-53184} um: ubd: Do not use drvdata in release
  - mainline: {CVE-2024-53194} PCI: Fix use-after-free of slot->bus on hot remove
  - mainline: {CVE-2024-53197} ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - mainline: {CVE-2024-56539} wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - mainline: {CVE-2024-56681} crypto: bcm - add error check in the ahash_hmac_init function
  - mainline: {CVE-2024-56690} crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-81
changelog:
  - Update to CKBI 2.48 from NSS 3.64
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-82
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Trustis FPS Root CA"
  -    Adding:
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-81
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-80.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-80.0
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "FNMT-RCM"
  -    Adding:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "Chambers of Commerce Root"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Use-explicit-usr-bin-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-9
changelog:
  - ci-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2229460]
  - Resolves: bz#2229460
    ([rhel-8.9] [RFE] Configure "ipv6.addr-gen-mode=eui64' as default in NetworkManager)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-10
changelog:
  - Resolves: bz#2233047
    ([RHEL 8.9] Inform user when cloud-init generated config files are left during uninstalling)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-11
changelog:
  - ci-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2046491]
  - Resolves: bz#2046491
    (cloud-init enable both DHCPv4 and DHCPv6 when network type is ipv6_dhcpv6-stateful/ipv6_dhcpv6-stateless)
  - Resolves: RHEL-2325
    ([RHEL8.9][cloud-init] Not inform user during upgrade that cloud-init generated config files are left )


author: zhangxianting <zhangxianting@uniontech.com> - 310.4-1.01
changelog:
  - spec: no BR gdb on loongarch64 
  - spec: add patch1 for gcc-7.3.0 based compilation
  - spec: Change the subscription-manager-cockpit dependency level
  - fix: delete arch/* empty link(bugid:123783)
  - fix: fix no display /usr/share/cockpit/motd/inactive.motd (bugid:192093)
  - fix: remove rhel and centos(bugid:198321)
  - fix: closed others brands(bugid:243459)


author: loongson <service@loongnix.cn> - 2.28-30.6
changelog:
  - Add patches:
  - 0001-Improve-performance-of-memcpy.patch
  - 0002-glibc-2.28-Make-benchmark-output-valid.patch
  - 0003-glibc-2.28-Add-LoongArch-support-in-config.guess-and.patch
  - 0004-elf-Change-EM_NUM-after-add-loongarch-support.patch
  - 0005-LoongArch-Hard-Float-Support-for-functions-ll-l-rint.patch
  - 0006-LoongArch-Hard-Float-Support-for-float-point-classif.patch
  - 0007-LoongArch-Hard-Float-Support-for-functions-logb-f-__.patch
  - 0008-LoongArch-Hard-Float-Support-for-functions-scalbn-f.patch
  - 0009-LoongArch-Hard-Float-Support-for-functions-fmax-f-fm.patch
  - 0010-LoongArch-Hard-Float-Support-for-functions-copysign-.patch
  - 0011-LoongArch-Hard-Float-Support-for-fmaxmag-f-fminmag-f.patch
  - 0012-glibc-2.28-Fix-glibc-elf_machine_rela-R_LARCH_IRELAT.patch
  - 0013-glibc-2.28-Correct-macro-ARCH_SETUP_IREL.patch
  - 0014-glibc-2.28-Add-support-for-cpu-features.patch
  - 0015-glibc-2.28-Multiple-implementation-of-_dl_runtime_re.patch
  - 0016-glibc-2.28-Add-ifunc-support-for-mem-cpy-set-move-_-.patch
  - 0017-glibc-2.28-xfail-test-memcpy-test-memset-to-suit-2k1.patch
  - 0018-glibc-2.28-Delete-useless-codes-and-format-codes.patch
  - 0019-glibc-2.28-Add-ifunc-support-for-memchr_-aligned-lsx.patch
  - 0020-glibc-2.28-Add-ifunc-support-for-memrchr_-generic-ls.patch
  - 0021-glibc-2.28-Add-ifunc-support-for-mem-cpy-move-_lsx-a.patch
  - 0022-glibc-2.28-Add-ifunc-support-for-memset_lsx.patch
  - 0023-glibc-2.28-Add-new-macro-ENTRY_NO_ALIGN.patch
  - 0024-glibc-2.28-Add-ifunc-support-for-memcmp_-aligned-lsx.patch
  - 0025-glibc-2.28-Add-ifunc-support-for-rawmemchr_-aligned-.patch
  - 0026-glibc-2.28-Add-ifunc-support-for-strchr_-aligned-una.patch
  - 0027-glibc-2.28-Add-ifunc-support-for-strrchr_-aligned-ls.patch
  - 0028-glibc-2.28-Add-ifunc-support-for-strlen_-aligned-una.patch
  - 0029-glibc-2.28-Add-ifunc-support-for-strnlen_-aligned-un.patch
  - 0030-glibc-2.28-Add-ifunc-support-for-strchrnul_-aligned-.patch
  - 0031-glibc-2.28-Add-ifunc-support-for-strncmp_-aligned-un.patch
  - 0032-glibc-2.28-Add-ifunc-support-for-strcpy_-aligned-una.patch
  - 0033-glibc-2.28-Add-ifunc-support-for-stpcpy_-aligned-lsx.patch
  - 0034-glibc-2.28-Add-ifunc-support-for-strcmp_-aligned-una.patch
  - 0035-glibc-2.28-Use-common-files-ifunc-lasx.h-ifunc-lsx.h.patch
  - 0036-glibc-2.28-Delete-useless-ifndef-in-mem-.S-files.patch
  - 0037-glibc-2.28-Add-TUNABLES-support-of-glibc.cpu.hwcaps.patch
  - 0038-glibc-2.28-Add-TUNABLES-multi-options-support-of-gli.patch
  - 0039-glibc-2.28-Add-lasx-ifunc-support-of-str-mem-funcs-a.patch
  - 0040-getenv-Move-call-to-strlen-to-the-branch-it-s-used-i.patch
  - 0041-stdlib-Avoid-Wuse-after-free-in-__add_to_environ.patch
  - 0042-glibc-2.28-Add-new-lsx-impls-of-str-mem-funcs-and-ad.patch
  - 0043-glibc-2.28-Adjust-symbol-index-rindex-and-bcmp.patch
  - 0044-glibc-2.28-xfails-256-bits-str-mem-functions-to-suit.patch
  - 0045-glibc-2.28-use-latest-memmove-lasx.S.patch
  - 0046-glibc-2.28-use-latest-strchr-lasx.S.patch


author: loongson <service@loongnix.cn> - 2.28-30.7
changelog:
  - Add patches:
  - 0001-glibc-2.28-Remove-unseless-ANDROID_CHANGES-and-relat.patch
  - 0002-glibc-2.28-use-new-macro-LEAF-and-ENTRY-and-modify-r.patch
  - 0003-glibc-2.28-Fix-ifunc-str-mem-functions-xfail-problem.patch
  - 0004-glibc-2.28-Add-run-one-test-convenience-target-and-m.patch
  - 0005-glibc-2.28-remove-ABILPX32-related-code.patch
  - 0006-glibc-2.28-Refactor-code-of-raw-mem-functions.patch
  - 0007-glibc-2.28-Refactor-code-of-st-r-p-functions.patch
  - 0008-glibc-2.28-Add-new-struct-user_fp_state-in-user.h.patch
  - 0009-glibc-2.28-Redefine-macro-LEAF-ENTRY.patch


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-4
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for "timer -r" option to display all the per-CPU clocks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-64
changelog:
  - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-65
changelog:
  - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.20.0-34.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(Weisson)


author: wanhui <wanhui@uniontech.com> - 7.71.1-45.up3.01
changelog:
  - update: update from openEuler and fix CVE-2025-10966 CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: maqi <maqi@uniontech.com> - 5.15.24-2.12
changelog:
  - fix: after Auto connection is enabled, the configuration file is displayed in other network connections(bugid:307255)


author: lichao <lichaod@uniontech.com> - 1.0.47-1.01
changelog:
  - update: update to 1.0.47
  - spec: limit opencv BuildRequires
  - fix: fix incorrect pkg replacing relation(bugid:219967)
  - spec: sw BuildRequires: opencv


author: qinzhiben <qinzhiben@uniontech.com> - 12:4.3.6-50.0.2
changelog:
  - feat: update 12:4.3.6-50.0.1
  - feat: dhcp-server sw_64 provides dhcp
  - rebrand: modify bug url for uos


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Pavel Valena <pvalena@redhat.com> - 049-218.git20221019
changelog:
  - Dracut: only login to one target at a time
  - iscsi: don't continue waiting if the root device is present
  - network: stop waiting for interfaces if root device is
  - iscsiroot: parse_iscsi_root overwrites command line args
  - iscsiroot: there's never more than one target per call
  - iscsiroot: try targets only once
  - iscsiroot: remove bashisms
  - fixup "Dracut: only login to one target at a time"
  - 35network-legacy: only skip waiting for interfaces if netroot


author: Pavel Valena <pvalena@redhat.com> - 049-221.git20221214
changelog:
  - fix(80lvmthinpool-monitor): use systemsctl instead of
  - fix(squash): build ld cache for squash loader
  - fix(network-manager): write DHCP filename option to dhcpopts


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-6
changelog:
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
  - Resolves: bz#2150267
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-7
changelog:
  - edk2-add-8.6-machine-type-to-edk2-ovmf-cc.json.patch [RHEL-12626]
  - Resolves: RHEL-12626
    (Missing firmware descriptor with secureboot disabled in RHEL 8)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-8
changelog:
  - edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
  - Resolves: RHEL-7560
    (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-9
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-10
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-clone-ArmPlatformPkg-s-NOR-f.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-CheckBlockLocked-feat.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-disk-I-O-protocol-imp.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-drop-block-I-O-protocol-impl.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-array-mode-switch-afte.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-switching-between-mode.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-use-EFI_MEMORY_WC-and-drop-A.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariable2.patch [RHEL-17587]
  -  edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variable2.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-17587]
  - edk2-ArmVirtPkg-ArmVirtQemu-migrate-to-OVMF-s-VirtNorFlas.patch [RHEL-17587]
  - edk2-OvmfPkg-clone-NorFlashPlatformLib-into-VirtNorFlashP.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-11
changelog:
  - edk2-SecurityPkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Change-OPTIONAL-keyword-usage-style.patch [RHEL-21154 RHEL-21156]
  - edk2-MdePkg-Introduce-CcMeasurementProtocol-for-CC-Guest-.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpm2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpmM.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-418.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SEC-PATCH-4118-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SEC-PATCH-4117-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21154 RHEL-21156]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
  - Resolves: RHEL-21154
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
  - Resolves: RHEL-21156
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21842
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-12
changelog:
  - edk2-Apply-uncrustify-changes-to-.c-.h-files-in-the-Netwo.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes-p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21844
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-8])
  - Resolves: RHEL-21846
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-8])
  - Resolves: RHEL-21848
    (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-8])
  - Resolves: RHEL-21850
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21852
    (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - Resolves: RHEL-21158
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])


author: Jiang Xin <jiangxin@hygon.cn> - 20220126gitbb1bba3d77-13.0.1
changelog:
  - Support hygon CSV3 feature
  - Support SEV live migration
  - 0047-anolis-OvmfPkg-BaseMemEncryptLib-Save-memory-encrypt.patch
  - Fix the isue that interrupt is enabled in MMIO VC handler
  - 0048-OvmfPkg-AmdSev-SecretDxe-Allocate-secret-location-as.patch (fangbaoshun@hygon.cn)
  - Resolves: bz#8033


author: maqi <maqi@uniontech.com> - 20220126gitbb1bba3d77-13.0.1.01
changelog:
  - fix: add soft link to make UEFI fireware be detectable(bugid:240197)
  - fix: create symbolic link OVMF_CODE.fd(bugid:253393)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.2
changelog:
  * Wed Jul 03 2024 Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.1
  - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Apply-uncrustify-changes.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-Apply-uncrustify-changes.p2.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-RdRandGenerateEntropy-to-g.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Remove-ArchGetSupportedRngAlgorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Documentation-include-parameter-c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Check-before-advertising-Cpu-Rng-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-AArch64-RawAlgorithm-support-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-debug-warning-for-NULL-PcdCpu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-AArch64-RngDxe.c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-Arm-support-of-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Correctly-update-mAvailableAlgoAr.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Conditionally-install-EFI_RNG_PRO.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Duplicate-BaseRngLibTimerLib-to-MdeModu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Add-deprecated-warning-to-BaseRngLibTimer.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-SecurityPkg.dec-Move-PcdCpuRngSupportedA.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-DxeRngLib-Request-raw-algorithm-instead-of-de.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GUID-to-describe-Arm-Rndr-Rng-algorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Rng-Add-GUID-to-describe-unsafe-Rng-alg.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GetRngGuid-to-RngLib.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Use-GetRngGuid-when-probing-RngLi.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Simplify-Rng-algorithm-selection-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - Resolves: RHEL-21854
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-8])
  - Resolves: RHEL-21856
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-8])
  - Resolves: RHEL-40099
    (CVE-2024-1298 edk2: Temporary DoS vulnerability [rhel-8.10.z])


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-11.el9_5.1
changelog:
  - Fix man.el shell injection vulnerability (RHEL-79021)
  - Eliminate use of obsolete patch syntax (RHEL-80450)


author: Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 1:27.2-11.0.1.1
changelog:
  - Add doc sub package
  - update config.sub and config.guess for loongarch64 (Jingyun Hua)
  - cherry-pick `add sw patch #349896d0a48b80b530cfa5cc2bd1fc4ceff68e42`. (nijie@wxiat.com)


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-125
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14031


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-127
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5397
  - fence_zvmip: document required user permissions in metadata/manpage
    Resolves: RHEL-14343


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18132
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20915
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-22174


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.02
changelog:
  - bundled setuptools: fix CVE-2024-6345
    Resolves: RHEL-50223
  - bundled urllib3: fix CVE-2024-37891
    Resolves: RHEL-43568

  - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
    Resolves: RHEL-7734
  - bundled jinja2: fix CVE-2024-34064
    Resolves: RHEL-35655


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: José Expósito <jexposit@redhat.com> - 3.0.0-9
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25175
    Resolves: https://issues.redhat.com/browse/RHEL-25177


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
changelog:
  - Resolves: #2184870 - Reachable assertion in peek_for_as4_capability function
  - Resolves: #2196795 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196796 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196794 - out-of-bounds read exists in the BGP daemon of FRRouting


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.19
changelog:
  - libio: Fix a deadlock after fork in popen
  - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018)


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-251.0.1.22
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)
  - Add Hygon Support (Jing Li)
  - Sync loongarch64 code to lnd.36. (fanpeng@loongson.cn)
  - SPECS: define glibc_ldso for LoongArch. (fanpeng@loongson.cn)


author: zengwei <zengwei1@uniontech.com> - 2.28-251.0.1.22.1
changelog:
  - feat: sync optmize from upstream
  - arch: loongarch64 shadow stack
  - optmize: from upstream bug#214497


author: Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6
changelog:
  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-12
changelog:
  - Resolves RHEL-7503
  - Adds a selinux policy for grafana
  - Resolves RHEL-12650
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-14
changelog:
  - Resolves RHEL-19596
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory
  - Fixes postgresql AVC denial


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-15
changelog:
  - Resolves RHEL-23466
  - Resolves RHEL-21027
  - Allows for gid to be 0
  - Allows for postgreSQL datasource in selinux policy


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-3
changelog:
  - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615
    Resolves: RHEL-70979, RHEL-71015, RHEL-70991


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in
    FLAC image tag handling
  - Resolves: RHEL-19469


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-5
changelog:
  - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,
    CVE-2024-47613
    Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022
    Resolves: RHEL-70998


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230515-115.gitd1962891
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later
  Resolves: rhbz#2183606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230711-116.gitd3f66064
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later
  Resolves: rhbz#2218670


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230808-117.git0ab353f8
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Navi32 dGPU firmware
  - Update to fix multi monitor behind TBT3 dock & random flickers
  - AMD Zen2 firmware update for cross-process information leak
  Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230824-118.git0e048b06
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - AMD Zen3 and Zen4 firmware update for return address predictor velunerability
  Resolves: rhbz#2230415


author: Denys Vlasenko <dvlasenk@redhat.com> - 20231121-119.git9552083a
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update AMD cpu microcode
  - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
  Resolves: RHEL-16721, RHEL-14260


author: Denys Vlasenko <dvlasenk@redhat.com> - 20231121-120.git9552083a
changelog:
  - Work around absense of rdfind during build
  - Add file directives for new iwlwifi files
  Resolves: RHEL-16721, RHEL-14260


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240111-121.gitb3132c18
changelog:
  - Pass --ignore-duplicates to copy-firmware.sh
  - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity
  Resolves: RHEL-13982


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240610-122.git90df68d2
changelog:
  - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607)
  - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596)
  - amd-ucode early loading broken [rhel-8] (RHEL-16799)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  - linux-firmware: Add tuning parameter configs for CS35L41 Firmware
  - linux-firmware: Fix firmware names for Laptop SSID 104316a3
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - iwlwifi: add gl FW for core87-44 release
  - iwlwifi: add ty/So/Ma firmwares for core87-44 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update sdma 6.0.1 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update sdma 6.0.2 firmware
  - amdgpu: update ipsp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update raven firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update smu 13.0.6 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update sdma 6.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update  firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update gc 10.3.7 firmware
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
  - Merge https://github.com/pkshih/linux-firmware into rtw
  - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
  - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
  - i915: Add DG2 HuC 7.10.15
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mekdiatek: Update mt8186 SOF firmware to v2.0.1
  - rtw89: 8852c: update fw to v0.27.56.14
  - rtw89: 8922a: add firmware v0.35.18.0
  - rtw88: Add RTL8703B firmware v11.0.0
  - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
  - Montage: update firmware for Mont-TSSE
  - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
  - imx: sdma: update firmware to v3.6/v4.6
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: update 9000-family firmwares to core85-89
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
  - amdgpu: Update VCN firmware binaries
  - Intel IPU2: Add firmware files
  - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  - i915: Add Xe2LPD DMC v2.18
  - i915: Update MTL DMC v2.21
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - linux-firmware: add firmware for MT7996
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - check_whence: Add a check for duplicate link entries
  - WHENCE: Clean up section separators
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - Intel Bluetooth: Make spacing consistent with rest of WHENCE
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  Resolves: RHEL-35596, RHEL-16799, RHEL-15607


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240715-123.git4c8fb21e
changelog:
  - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  Resolves: RHEL-47353


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240827-141.git3cff7109
changelog:
  - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256)
  - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: update path for video firmware for vpu-1/2/3.0
  - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
  - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: Update ISP FW for isp v4.1.1
  - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
  - Merge https://github.com/zijun-hu/qca_btfw into list-20240802
  - mediatek: Update mt8195 SOF firmware
  - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
  - amdgpu: DMCUB updates for DCN314
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22
  - i915: update MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10
  - xe: Add GSC 104.0.0.1161 for LNL
  - xe: Add LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: add new ISP 4.1.1 firmware
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
  - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
  - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update ty/So/Ma firmwares for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - .gitignore: Ignore intermediate files
  - i915: Update Xe2LPD DMC to v2.21
  Resolves: RHEL-54256, RHEL-54237


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.302.b08-8.1.9
changelog:
  - 版本升级，由jdk8u292-b10升级至jdk8u302-b08
  - [LoongArch] 解决了一处在堆设置大于128G时可能触发的随机崩溃问题
  - [LoongArch] 实现trampoline stub，解决patch原子性问题


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.332.b09-8.1.11
changelog:
  - 版本升级，由8u312-b07升级至8u322-b06
  - 版本升级，由8u322-b06升级至8u332-b09
  - [LoongArch] C1和分层编译支持，优化性能
  - [LoongArch] C2向量指令优化
  - [LoongArch] 优化GC停顿时间
  - [LoongArch] CRC32 Intrinsics优化
  - 优化ArrayFill
  - [LoongArch] 优化Math.multiplyHigh
  - [LoongArch] AllocatePrefetch相关参数调优
  - [LoongArch] InlineSmallCode调优，默认值设为2000
  - [LoongArch] 使用cpucfg识别特性
  - 修复Redefine Class可能导致的偶发崩溃
  - 修复jvmti相关的随机错误
  - 修复push2/pop2入栈和出栈顺序问题
  - 修复Early Return可能导致浮点值恢复错误问题
  - 修复ori2s立即数越界问题


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.352.b08-8.1.12
changelog:
  - 版本升级，由8u332-b09升级至8u342-b07
  - 版本升级，由8u342-b07升级至8u345-b01
  - 版本升级，由8u345-b01升级至8u352-b08
  - 修复GC偶发崩溃问题
  - 删除各别字体文件
  - OpenJFX更新至8u212-b02，修复遗漏的WTF_CPU_KNOWN
  - [LoongArch] 解决社区版本编译器构建JDK时遇到的user_regs_struct相关错误
  - [MIPS] 提高ReservedCodeCacheSize默认值至120M，解决长时间运行偶发变慢问题


author: zhangxianting <zhangxianting@uniontech.com> - 1:1.8.0.412-b08.5.up2.01
changelog:
  - rebuild: rebuild
  - update: update to loongson java-1.8.0-openjdk-1.8.0.382.b05-8.1.16.lns8.src.rpm


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.72-79
changelog:
  - Fixed a bug which could result in the UDS index issuing I/O while
    suspended.
  - Resolves: rhbz#1990180


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-83
changelog:
  - Adjusted kernel dependencies to grab the right packages.
  - Resolves: rhbz#2011426
  - Rebuilt for latest kernel.
  - Relates: rhbz#2000909


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Julien Rische <jrische@redhat.com> - 1.18.2-27
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27250
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27244
  - Make TCP waiting time configurable
    Resolves: RHEL-17131


author: Julien Rische <jrische@redhat.com> - 1.18.2-29.01
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45398 RHEL-45386
  - Fix leak of default credentials in gss_inquire_cred()
    Resolves: RHEL-32258


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: haomimi <haomimi@uniontech.com> - 2.35.2-12.up4.07
changelog:
  - build: sync from anolis
  - build: fix #2142496 - update upstream tests
  - build: fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - build: fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - build: fix #2180413 - Backport hint about systemd daemon-reload


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: lichao <lichaod@uniontech.com> - 2.9.4-3.01
changelog:
  - fix: adjust sssd service to speed up system-booting (bugid:240631)
  - fix: sssd service failed (bugid:240325)
  - fix: add default conf file at /etc/sssd/ (bugid:197047)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.1
changelog:
  - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z]
  - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z]
  - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z]
  - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z]
  - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z]
  - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.2
changelog:
  - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z]
  - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z]
  - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z]


author: Alejandro López <allopez@redhat.com> - 2.9.4-5.3
changelog:
  - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z]
  - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z]


author: Daniel Kopecek <dkopecek@redhat.com> - 9-3
changelog:
  - Enabled build gating
  - Synced layout test assumtions with recent cryptsetup changes
    Resolves: rhbz#1625683


author: Sergio Correia <scorreia@redhat.com> - 9-4
changelog:
  - LUKSMeta now sets error level from libcryptsetup to CRYPT_LOG_ERROR, and
    this output is logged to stderr
    Resolves: rhbz#1770395


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-7
changelog:
  - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
    Resolves: RHEL-76376


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-8
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85887
    Resolves: RHEL-85900
    Resolves: RHEL-85901
    Resolves: RHEL-87039
    Resolves: RHEL-87094
    Resolves: RHEL-87114
    Resolves: RHEL-88348
    Resolves: RHEL-88351


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-9
changelog:
  - Add patches to improve test reliability
  - Backport patches for various CVEs
    Resolves: RHEL-85879
    Resolves: RHEL-92280
    Resolves: RHEL-93031
    Resolves: RHEL-93032


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52530 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 0.9.6-7
changelog:
  - NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
  - authorization bypass in pki_verify_data_signature (CVE-2023-2283)


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: mahailiang <mahailiang@uniontech.com> - 2.9.0-9.01
changelog:
  - build: add udisks-mount-patch-changes.patch
  - spec: Modify redhat-rpm-config to uos-rpm-config and /media instead of /run/media


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: zengwei <zengwei1@uniontech.com> - 1.7.0-11.0.1.01
changelog:
  - Add patch to fix integer overflows.
  - Fix compilation by including limits.h
  - Resolves: RHEL-40650
  - fix: fix CVE-2024-5197 CVE-2023-6349


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Funda Wang <fundawang@yeah.net> - 2.9.10-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - update the restore defaults for pkcs12


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 3.101.0-7.01
changelog:
  - disable unit test
  - cherry-pick `add sw patch #ce8dbcf775a1bf3d6bd0d5de53d3688e7caa00db`. (nijie@wxiat.com)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-17
changelog:
  - Harden pmdaopenmetrics metric name validator (BZ 2139325)
  - Fix issues in pmdanfsclient srcport handling (BZ 2150889)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-18
changelog:
  - Improve pmproxy handling large HTTP requests (BZ 2159207)
  - Fix hacluster metrics with current Pacemaker (BZ 2219731)
  - Ensure pmcd.conf not needlessly over written (BZ 2211263)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-19
changelog:
  - Fix OpenMetrics PMDA mishandling systemd metrics (RHEL-7507)
  - Additional pmlogger_farm service SELinux policy (RHEL-7501)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-21
changelog:
  - Fix python API day-of-year out of range bug (RHEL-29708)
  - Added spec deps on ps and diffutils for diff (RHEL-17081)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-22
changelog:
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57796)
  - Guard against symlink attacks in pmpost program (RHEL-57799)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58002)
  - Update pmdahacluster for newer crm_mon versions (RHEL-57788)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991763)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-1
changelog:
  - Fix several issues in the pcp-ss(1) utility (BZ 1981886)
  - Document pmproxy archive discovery further (BZ 2026726)
  - Improve SQL Server PMDA secure settings (BZ 2057615)
  - Rebase to latest stable version of PCP (BZ 2059461)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign warning message from pmie systemd unit file.


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Michal Pospisil <mpospisi@redhat.com> - 0.10.18-2
changelog:
  - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack
    Resolves: RHEL-26445, RHEL-26447, RHEL-26449


author: Michal Pospisil <mpospisi@redhat.com> - 0.10.18-2.el8_10.3
changelog:
  - Prevented any future HTTP header-based attacks on puma/sinatra by removing any headers not recognized by pcsd
    Resolves: RHEL-65595


author: Michal Pospisil <mpospisi@redhat.com> - 0.10.18-2.uelc20.5
changelog:
  - Fixed CVE-2024-47287 by patching bundled Tornado
    Resolves: RHEL-93167
  - Fixed CVE-2025-46727 by updating bundled rubygem rack
    Resolves: RHEL-90147


author: Michal Pospíšil <mpospisi@redhat.com> - 0.10.18-2.uelc20.7
changelog:
  - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack
    Resolves: RHEL-120432, RHEL-120939, RHEL-121033, RHEL-123639, RHEL-124936


author: lichao <lichaod@uniontech.com> - 0.10.18-2..uelc20.8
changelog:
  - update: update to openanolis
  - build: fix dataclasses-0.8-euler.tar.gz not found error
  - build: add dataclasses-0.8-euler.tar.gz for euler
  - feat: enable i18n patch
  - cve: CVE-2022-27539 CVE-2022-27530
  - build: updated bundled rubygem rack
  - cve: CVE-2022-45442
  - build: remove unneeded rubygem webrick
  - build: limit ruby version to 2.5.9
  - arch: remove i686
  - arch: modify ffi gem to support loongarch


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-416
changelog:
  - 5.26.3 bump (bug #1655526)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924)
  - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-417
changelog:
  - Fix Time-Local tests to pass after year 2019 (bug #1807120)
  - Run-require perl(Encode) by perl-libs (bug #1903503)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-419
changelog:
  - Fix CVE-2020-10543 (bug #1839273)
  - Fix CVE-2020-10878 (bug #1839276)
  - Fix a file mode of a perl-example.stp example (bug #1913693)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-58
changelog:
  - Security fix for CVE-2022-48564
  Resolves: RHEL-16674
  - Skip tests failing on s390x
  Resolves: RHEL-19252


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-62.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - repair security fix for CVE-2007-4559 (sunxinpeng@inspur.com)
  - Fix CVE-2023-40217: Check for & avoid the ssl (hezhongkun@inspur.com)
  - Security fix for CVE-2022-48560 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2022-48564 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2023-27043 (liubo03@inspur.com)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: pangqing <pangqing@uniontech.com> - 3.6.8-62.0.1.01
changelog:
  - spec: change redhat-rpm-config to uos-rpm-config
  - rebrand: add uos platform
  - feat: add sm3 support
  - feat: add sw_64 support


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-4
changelog:
  - New subpackage platform-python-setuptools without files from /usr/bin/*
  - python3-setuptools contains only files from /usr/bin/* and depends
    on platform-python-setuptools
  - Resolves: rhbz#1641973


author: Philip Kovacs <pkdevel@yahoo.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Added enviromnent module for pmi/pmix
  - Added pkgconfig files for pmix/pmi/pmi2
  - Ensure lexer sources are rebuilt
  - Removed obsolete sasl support
  - Use new ldconfig_scriplets macro


author: Jarod Wilson <jarod@redhat.com> - 2.1.1-2
changelog:
  - Add the --with-tests-examples flag to be able to better verify functionality
  - Related: rhbz#1682374


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-47
changelog:
  - Filesystem: improve stop-action and allow setting term/kill signals
    and signal_delay for large filesystems

    Resolves: rhbz#2189243


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-51
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter
    and AWS Policy based authentication type

    Resolves: RHEL-16248


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-53
changelog:
  - bundled urllib3: fix CVE-2023-45803
  - bundled pycryptodome: fix CVE-2023-52323

    Resolves: RHEL-22431, RHEL-20916


author: lichao <lichaod@uniontech.com> - 4.9.0-54.01
changelog:
  - build: use /usr/bin/ps instead of /bin/ps for 105xe
  - build: disable python bytecompilation for 105xe
  - build: fix httplib2 not found error for 105xe
  - feat: New Resource Agent for TongWeb
  - feat: Resource Agent for solution Two-node cluster brain split
  - fix: iSCSILogicalUnit: fix issue where resource was in stopped state when using allowed_initiators parameter
  - fix: podman: add podman parameter error judgment
  - build: add BuildRequires gettext


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.02
changelog:
  - bundled setuptools: fix CVE-2024-6345
    Resolves: RHEL-50360

  - gcp-pd-move: fix TLS_VERSION_1 issue
    Resolves: RHEL-50041

  - bundled urllib3: fix CVE-2024-37891
    Resolves: RHEL-44923

  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service
  - db2: fix OCF_SUCESS typo
    Resolves: RHEL-34137, RHEL-32828


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.15
changelog:
  - ocf-shellfuncs/AWS agents: dont sleep after the final try in
    curl_retry()

    Resolves: RHEL-102731


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.17
changelog:
  - db2: add "skip_basic_sql_health_check" parameter to avoid failing on
    systems with high load
  - db2: add "monitor_retries", "monitor_sleep", and "monitor_retry_all_errors"
    parameters to be able to avoid failing on first try

    Resolves: RHEL-115783, RHEL-115781


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.19
changelog:
  - db2: use reintegration flag to avoid race condition on cluster
    reintegration

    Resolves: RHEL-118625


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.20
changelog:
  - portblock: add promotable support, and method and status_check
    parameters

    Resolves: RHEL-116150


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.23
changelog:
  - nfsserver: add ability to set e.g. "pipefs-directory=/run/nfs/rpc_pipefs"
    in /etc/nfs.conf to avoid issues with non-clustered Kerberized mounts

    Resolves: RHEL-102979


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.27
changelog:
  - bundled urllib3: fix CVE-2025-66471
  - bundled urllib3: fix CVE-2026-21441

    Resolves: RHEL-139760, RHEL-140787


author: lichao <lichaod@uniontech.com> - 4.9.0-54.27.01
changelog:
  - update: update from openanolis
  - build: use /usr/bin/ps instead of /bin/ps for 105xe
  - build: disable python bytecompilation for 105xe
  - build: fix httplib2 not found error for 105xe
  - feat: New Resource Agent for TongWeb
  - feat: Resource Agent for solution Two-node cluster brain split
  - fix: iSCSILogicalUnit: fix issue where resource was in stopped state when using allowed_initiators parameter
  - fix: podman: add podman parameter error judgment
  - build: add BuildRequires gettext


author: Michal Ruprich <mruprich@redhat.com> - 3.1.3-19
changelog:
  - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.09
changelog:
  - fix: Error prompt during non root user authentication, unable to input authentication password (bugid:233697)
  - fix: List of saved passwords - View password removal not as expected (bugid:232243)


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.10
changelog:
  - feat: Update reinforcement manual
  - feat: Add a new feature to add content above a specified line (fn_usa)
  - fix: Root user can successfully modify their password after using the latest 5 attempts (bugid:238839)
  - fix: The issue of passwords being unable to be modified (bugid:233353)


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.12
changelog:
  - fix: Resolve the issue of incorrect issue display in upgrade scenarios (bugid:232697)
  - feat: update doc content


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.14
changelog:
  - feat: 从文件备份的方式改为文件的配置项备份，保证备份高等级切换低等级的功能完整
  - fix: 解决1050u2升级到1070-build4,系统中logo相关内容未更新的问题(bugid:232697)


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Jan Jansky <jjansky@redhat.com> = 4.6.0-1
changelog:
  - [ultrapath] Add new plugin for Huawei UltraPath
    Resolves: bz2187407
  - [cleaner] Use data filter for extraction
    Resolves: bz2217906
  - [discovery] Enable the plugin by containers
    Resolves: bz2222134


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Abhi Das <adas@redhat.com> - 4.3-20
changelog:
  - rhbz#1895017 - unsquashfs does not preserve file capabilities
    rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally
    Resolves: rhbz#1895017, rhbz#1754815


author: Abhi Das <adas@redhat.com> - 4.3-21
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    Resolves: rhbz#2007303 rhbz#2000637


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com>
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-61999


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-15
changelog:
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-79397
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-79401
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-79386
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-79380
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-79369
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-79364
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-79360
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-79348


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-4
changelog:
  - Add option "ApproveLoggedUserOnly" allowing to connect only the user
    owning the running session
    Resolves: RHEL-91104


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
    Resolves: RHEL-97268
  - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294
  - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
    Resolves: RHEL-97364
  - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
    Resolves: RHEL-97397
  - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
    Resolves: RHEL-97232


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-7
changelog:
  - Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-16
changelog:
  - Resolves: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Remove JDK subpackges which are unused


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-27
changelog:
  - Related: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-28
changelog:
  - Resolves: RHEL-13907
    tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)
  - Resolves: RHEL-13904
    tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
  - Resolves: RHEL-12951
    tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
  - Resolves: RHEL-12544
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Resolves: RHEL-2386
    tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-29
changelog:
  - Resolves: RHEL-17602
    tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)
  - tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Sokratis Zappis <szappis@redhat.com> - 1:9.0.87-1.el8_10.1
changelog:
  - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly
  - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-29255
    tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672)
  - Resolves: RHEL-29250
    tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.3
changelog:
  - Resolves: RHEL-82934
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-71708
    tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.4
changelog:
  - Resolves: RHEL-91761
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-71971
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.5
changelog:
  - Resolves: RHEL-108486
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108494
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108502
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108510
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108524
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108518
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.6
changelog:
  - Resolves: RHEL-102193
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.7
changelog:
  - Resolves: RHEL-124507
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-91743
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: wanhui <wanhui@uniontech.com> - 1.2.0-1.17
changelog:
  - feat: fresh application control switch`s status after page change
  - feat: To determine if a restart is required after application control switch on


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-8.10.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1770
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.12-3
changelog:
  - Update test repository snapshot urls rhel 8.10 and remove cs8 repos
    The snapshots for cs8 have been removed from the service
  - Rebuild for CVE-2025-22871
    Resolves: RHEL-89289


author: maqi <maqi@uniontech.com> - 1:2.6.2-14.3
changelog:
  - cve: CVE-2019-10894 CVE-2019-10896 CVE-2019-10899 
  - cve: CVE-2019-10901 CVE-2019-10903 CVE-2020-7045
  - cve: CVE-2019-12295 CVE-2019-13619 CVE-2019-9209 
  - cve: CVE-2020-26575 CVE-2020-9431  CVE-2020-11647
  - cve: CVE-2020-25862 CVE-2020-25863 CVE-2020-9428
  - rebuild: rebuild for c8.5


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: José Expósito <jexposit@redhat.com> - 1.20.11-20
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18321
    Resolves: https://issues.redhat.com/browse/RHEL-18327


author: José Expósito <jexposit@redhat.com> - 1.20.11-21
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21207
    Resolves: https://issues.redhat.com/browse/RHEL-20528
    Resolves: https://issues.redhat.com/browse/RHEL-20378
    Resolves: https://issues.redhat.com/browse/RHEL-20384
    Resolves: https://issues.redhat.com/browse/RHEL-21191
    Resolves: https://issues.redhat.com/browse/RHEL-21198


author: José Expósito <jexposit@redhat.com> - 1.20.14-23
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: zhangshaoning <zhangshaoning@uniontech.com> - 1.20.11-23.01
changelog:
  - update: xorg-x11-server-1.20.11-23.el8.src.rpm and sync patch
  - fix: workaround to resolve crash while changing resolution ratio(bugid:163293)(zhaoshuang)
  - feat: transplant deepin patch(liweigang)


