# changelog

author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: haomimi <haomimi@uniontech.com> - 1:7.1.8.1-8.0.1.03
changelog:
  - fix: fix menu display issue of arm architecture libreoffice related software (bugid:184789)
  - spec: modify aarch64 off serverconfig


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11.0.1
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Eduard Abdullin <eabdullin@almalinux.org> - 1:7.1.8.1-12.0.1
changelog:
  - escape url passed to gstreamer
  - add some protocols that don't make sense as floating frame
   targets
  - warn about exotic protocols as well
  - default to ignoring libreoffice special-purpose protocols
   in calc hyperlink
  - reuse AllowedLinkProtocolFromDocument in writer
  - reuse AllowedLinkProtocolFromDocument in impress/draw
  - CVE-2023-6185 CVE-2023-6186 backporting


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-14
changelog:
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
  - Do not use header_prev in expire_lru_headers


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.1
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Correct ANY queries to not have additional data appended


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.5
changelog:
  - Add support for max-records-per-type and max-types-per-name options
    (RHEL-61936)
  - Support reading of new options also in named-checkconf -z, v2


author: Nick Clifton <nickc@redhat.com> - 2.30-119.1
changelog:
  - Backport: Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164700)


author: Nick Clifton <nickc@redhat.com> - 2.30-119.2
changelog:
  - Backport: Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (RHEL-12956)


author: Xue haolin <xuehaolin@openanolis.org> - 2.30-119.0.1.2
changelog:
  - Rebrand to Anolis OS.
  - Add loongarch support. (lixing@loongson.cn)
  - Fixup LoongArch wrong debug line. (lixing@loongson.cn)
  - Add LoongArch missing opcode. (lixing@loongson.cn)


author: Xing Li <lixing@loongson.cn> - 2.30-119.0.2.2
changelog:
  - Fixup gas SIGSEGV for extremely long function name. (lixing@loongson.cn)
  - change loong64 to loongarch64.
  - Add ifunc support.
  - Delete R_LARCH_NONE for eh_frame.
  - Fixup pr21964 bug.
  - Add 3A6000 opcode.
  - Fix some testsuite error.


author: mahailiang <mahailiang@uniontech.com> - 2.30-119.0.2.2.01
changelog:
  - rebrand: rebrand for uos
  - rebrand: modify bugurl
  - spec: no build loongarch64
  - cve: fix ld -E POC loophole
  - cve: fix memory crash when doing "objdump -D" UT-2023-0001


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-10
changelog:
  - Fix getting PV info in LVMPhysicalVolume from the cache
    Resolves: rhbz#2079220
  - Do not crash when changing disklabel on disks with active devices
    Resolves: rhbz#2078801
  - ActionDestroyDevice should not obsolete ActionRemoveMember
    Resolves: rhbz#2076958
  - Correctly set vg_name after adding/removing a PV from a VG
    Resolves: rhbz#2081276
  - Use LVM PV format current_size in LVMVolumeGroupDevice._remove
    Related: rhbz#2081276
  - Add support for creating LVM cache pools
    Resolves: rhbz#2055198


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: David Marlin <dmarlin@redhat.com> - 5.63-2
changelog:
  + bluez-5.63-2
  - Change default of ClassicBondedOnly to true to align with HID specification.
  - Resolves: RHEL-18429
  - Fixing CVE-2021-41229


author: David Marlin <dmarlin@redhat.com> - 5.63-4
changelog:
  + bluez-5.63-4
  - Resolves: RHEL-35501
  - Fixing CVE-2023-50230
  - Resolves: RHEL-35504
  - Fixing CVE-2023-50229


author: David Marlin <dmarlin@redhat.com> - 5.63-5
changelog:
  + bluez-5.63-5
  - Resolves: RHEL-35371
  - Fixing CVE-2023-27349
  - Resolves: RHEL-35492
  - Fixing CVE-2023-51589


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-3.f2d38ce.git
changelog:
  - update for another, current snapshot beyond booth-1.0
    (commit f2d38ce), including:
    . support for solely manually managed tickets (9a365f9)
    . use asciidoctor instead of asciidoc for generating man pages (65e6a6b)
  - switch to using Python 3 for the tests instead of Python 2
    (behind unversioned "python" references; rhbz#1590856)


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-4.f2d38ce.git
changelog:
  - revert back to using asciidoc instead of asciidoctor for generating man pages
    (rhbz#1603119)
  - fix some issues in the shell scripts (rhbz#1602455)


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.1
changelog:
  - Resolves: rhbz#1602455
  - Resolves: rhbz#1682122
  - Resolves: rhbz#1768369
  - Resolves: rhbz#1835831

  - Update to current snapshot (commit ac1d34c) to fix test suite,
    build warnings and build with gcc10
  - Fix hardcoded-library-path
  - Package /var/lib/booth where booth can chroot
  - Add '?dist' macro to release field
  - Pass full path of Python3 to configure
  - Add CI tests
  - Enable gating


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.2
changelog:
  - Related: rhbz#1835831

  - Do not link with the pcmk libraries
  - Generate runtests.py and boothtestenv.py with -Es as make check does


author: Jan Friesse <jfriesse@redhat.com> - 1.0-199.1.ac1d34c.git
changelog:
  - Resolves: rhbz#1873948
  - Resolves: rhbz#1768172

  - Fix versioning scheme to handle updates better
  - Handle updated exit code of crm_ticket


author: Jan Friesse <jfriesse@redhat.com> - 1.0-199.2.ac1d34c.git
changelog:
  - Resolves: rhbz#2111668

  - Fix authfile directive handling in booth config file
    (fixes CVE-2022-2553)
  - Add enable-authfile option


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - Resolves: RHEL-15265

  - New upstream release (RHEL-15265)
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots (RHEL-15265)


author: caina <caina@uniontech.com> - 4.19.0-91.179.1
changelog:
  - stable: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier [T351223]
  - uos: drm/hisilicon/hibmc: add gamma_set function [B252467]
  - uos: drm/hisilicon/hibmc: add DPMS on/off function [B252467]
  - uos: drm/hisilicon/hibmc: fix 'xset dpms force off' fail [B252467]


author: caina <caina@uniontech.com> - 4.19.0-91.179.3
changelog:
  - uos: drm/ast: Fixed display error for ps23xx when using ast bmc card [T353997]
  - uos: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card [T342993]
  - uos: phytium: 4.19 add crtc [T351611]
  - euler: mm/memcontrol: fix wrong vmstats for dying memcg [T351649]
  - stable: {CVE-2024-26816} x86/boot: Ignore relocations in .notes sections in walk_relocs() too [B262317]
  - stable: {CVE-2024-26816} x86, relocs: Ignore relocations in .notes section [B262317]
  - uos: do not check permissions when the task is exiting


author: caina <caina@uniontech.com> - 4.19.0-91.179.4
changelog:
  - uos: Fix the misalignment between vm_ event_state. events [] and vmstat_text
  - uos: drm/phytium: Replace default efi fb0 with dc fb [T357571]
  - anolis: alinux: proc/stat: Add the missing rcu unlock. [T353137]
  - uos: fix ccp init failed for hygon c86-4g cpu machine [T353305]
  - uos: fix megaraid freeze during reboot [B262995]
  - uos: Revert "LS7A2000: PCIE: Fixup GPU card error" [B262995]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.5
changelog:
  - uos: Open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF
  - uos: diable irq limit of la64 by default [T358195]
  - stable: {CVE-2024-42232} libceph: fix race between delayed_work() and ceph_monc_stop() [T360521]
  - uos: dup: disable lazy_dup by default [G006301]
  - uos: update srpm kernel.spec [T354015]
  - uos: add lts-1070 srpm source [T354015]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.6
changelog:
  - uos: remove driver ps3stor identity equation [T364379]
  - uos: Upgrade megaraid driver to version 07.727.03.00 [T364381]
  - uos: open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF for arm64 and loongarch [T364381]
  - feat: modify the hook add timing for network control
  - uos: fix not being able to install kernel-* after install kernel-debug-* [T00000]
  - anolis: LoongArch: Limit min pci msi-x/msi vector number [G005956]
  - uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]
  - uos: Revert "uos: diable irq limit of la64 by default [T358195]"
  - uos: update srpm to 4.19.0-91.179.5 [T00000]
  - uos: Add manufacturer's ps3stor driver, version:2.2.0.16 [T364379]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.7
changelog:
  - uos: set the uos feature to off by default [T370941]
  - Merge changes Ie8b48cf6,I476b7c95,I78c8796c,I2ff30c55,Ib416260c, ... into lts-1070
  - mainline: bpf: Avoid storing modifier to info->btf_id [G2024122000034]
  - euler: cpuidle: menu: Avoid computations when result will be discarded [G006912]
  - uos: Loongarch: fix rebooting failed with ls2k500 [B274249]
  - uos: perf: Fix the logical in ebtables optimise. [G005616]
  - Merge "uos: add leak changelog [T00000]" into lts-1070
  - uos: add leak changelog [T00000]
  - uos: fix kernel panic caused by memory out of bounds [B255527]
  - uos: perf: ebtables: fix cpu 100% during wrk testing. [G005616]
  - loongarch: LoongArch: Backport page table code [G006496]
  - loongarch: LoongArch: LSVZ: Replace set_pte with kvm_set_pte [G006496]
  - loongarch: LoongArch: KVM: Select huge page only if secondary mmu supports it [G006496]
  - loongarch: LoongArch: LSVZ: disable vcpu preempt detection [G006496]
  - loongarch: LoongArch: LSVZ: Delay secondary mmu tlb flush until guest entry [G006496]
  - loongarch: LoongArch: LSVZ: Remove SW timer switch when vcpu is halt polling [G006496]
  - loongarch: Loongarch: Revert quicklist [G006496]
  - loongarch: LoongArch: LSVZ: Fix the rcu timeout problem when the VM is cpu hotplug [G006496]
  - loongarch: loongarch/kvm: Fixed a huge page leak on a virtual machine [G006496]
  - uos: update srpm to 4.19.0-91.179.6 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.8
changelog:
  - Merge changes I779b240d,If5d4a7bc,I3dbb41f4,I581242a3 into lts-1070
  - loongarch: LoongArch: Fixup extioi bounce [B282411]
  - loongarch: LoongArch:irqchip/loongarch-extioi: Add compat support on mainline kvm [B282411]
  - loongarch: LoongArch:irqchip/loongarch-extioi:Fix ext irq route error. [B282411]
  - loongarch: irqchip/loongarch-extioi: Fix ext irq route fail when some cpus offline [B282411]
  - euler: Revert "NFS: Don't interrupt file writeout due to fatal errors" [G006687]
  - uos: update srpm to 4.19.0-91.179.7 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.9
changelog:
  - stable: {CVE-2024-26976} KVM: Always flush async #PF workqueue when vCPU is being destroyed [T371989]
  - stable: {CVE-2024-44999} gtp: pull network headers in gtp_dev_xmit() [T371989]
  - stable: {CVE-2023-52885} SUNRPC: Fix UAF in svc_tcp_listen_data_ready() [T371989]
  - stable: {CVE-2024-46800} sch/netem: fix use after free in netem_dequeue [T371989]
  - stable: {CVE-2024-26852} net/ipv6: avoid possible UAF in ip6_route_mpath_notify() [T371989]
  - stable: {CVE-2024-41046} net: ethernet: lantiq_etop: fix double free in detach [T371989]
  - stable: {CVE-2024-53061} media: s5p-jpeg: prevent buffer overflows [T371989]
  - stable: {CVE-2024-50230} nilfs2: fix kernel bug due to missing clearing of checked flag [T371989]
  - stable: {CVE-2024-40901} scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory [T371989]
  - stable: {CVE-2024-36940} pinctrl: core: delete incorrect free in pinctrl_enable() [T371989]
  - stable: {CVE-2024-53155} ocfs2: fix uninitialized value in ocfs2_file_read_iter() [T371989]
  - stable: {CVE-2024-26934} USB: core: Fix deadlock in usb_deauthorize_interface() [T371989]
  - stable: {CVE-2024-53156} wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() [T371989]
  - stable: {CVE-2024-56548} hfsplus: don't query the device logical block size multiple times [T371989]
  - stable: {CVE-2023-52840} Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() [T371989]
  - stable: {CVE-2024-46782} ila: call nf_unregister_net_hooks() sooner [T371989]
  - stable: {CVE-2024-44998} atm: idt77252: prevent use after free in dequeue_rx() [T371989]
  - stable: {CVE-2024-26884} bpf: Fix hashtab overflow check on 32-bit arches [T371989]
  - stable: {CVE-2024-53057} net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT [T371989]
  - stable: {CVE-2024-38552} drm/amd/display: Fix potential index out of bounds in color transformation function [T371989]
  - stable: {CVE-2024-46738} VMCI: Fix use-after-free when removing resource in vmci_resource_remove() [T371989]
  - stable: {CVE-2024-38560} scsi: bfa: Ensure the copied buf is NUL terminated [T371989]
  - stable: {CVE-2024-50262} bpf: Fix out-of-bounds write in trie_get_next_key() [T371989]
  - stable: {CVE-2024-53227} scsi: bfa: Fix use-after-free in bfad_im_module_exit() [T371989]
  - stable: {CVE-2024-50267} USB: serial: io_edgeport: fix use after free in debug printk [T371989]
  - stable: {CVE-2024-35847} irqchip/gic-v3-its: Prevent double free on error [T371989]
  - stable: {CVE-2024-50302} HID: core: zero-initialize the report buffer [T371989]
  - stable: {CVE-2024-41087} ata: libata-core: Fix double free on error [T371989]
  - stable: {CVE-2023-52847} media: bttv: fix use after free error due to btv->timeout timer [T371989]
  - stable: {CVE-2024-50279} dm cache: fix out-of-bounds access to the dirty bitset when resizing [T371989]
  - stable: {CVE-2024-53173} NFSv4.0: Fix a use-after-free problem in the asynchronous open() [T371989]
  - stable: {CVE-2024-35821} ubifs: Set page uptodate in the correct place [T371989]
  - stable: {CVE-2024-38627} stm class: Fix a double free in stm_register_device() [T371989]
  - stable: {CVE-2024-27024} net/rds: fix WARNING in rds_conn_connect_if_down [T371989]
  - stable: {CVE-2024-53104} media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format [T371989]
  - stable: {CVE-2024-36886} tipc: fix UAF in error path [T371989]
  - stable: {CVE-2024-50269} usb: musb: sunxi: Fix accessing an released usb phy [T371989]
  - stable: {CVE-2024-56704} 9p/xen: fix release of IRQ [T371989]
  - stable: {CVE-2024-44987} ipv6: prevent UAF in ip6_send_skb() [T371989]
  - stable: {CVE-2024-50301} security/keys: fix slab-out-of-bounds in key_task_permission [T371989]
  - stable: {CVE-2024-46674} usb: dwc3: st: fix probed platform device ref count on probe error path [T371989]
  - stable: {CVE-2024-50264} vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans [T371989]
  - stable: {CVE-2024-53165} sh: intc: Fix use-after-free bug in register_intc_controller() [T371989]
  - stable: {CVE-2023-52922} can: bcm: Fix UAF in bcm_proc_show() [T371989]
  - stable: {CVE-2024-53142} initramfs: avoid filename buffer overrun [T371989]
  - stable: {CVE-2024-53239} ALSA: 6fire: Release resources at card release [T371989]
  - stable: {CVE-2024-46673} scsi: aacraid: Fix double-free on probe failure [T371989]
  - stable: {CVE-2024-42148} bnx2x: Fix multiple UBSAN array-index-out-of-bounds [T371989]
  - stable: {CVE-2024-27043} media: edia: dvbdev: fix a use-after-free [T371989]
  - stable: {CVE-2023-52691} drm/amd/pm: fix a double-free in si_dpm_init [T371989]
  - stable: {CVE-2023-52679} of: Fix double free in of_parse_phandle_with_args_map [T371989]
  - stable: {CVE-2024-38583} nilfs2: fix use-after-free of timer for log writer thread [T371989]
  - stable: {CVE-2024-53141} netfilter: ipset: add missing range check in bitmap_ip_uadt [T371989]
  - uos: diable irq limit of la64 by default again [T358195] [G005956]
  - uos: c7: Change the startup order of the kernel [T00000] [B302583]
  - uos: update srpm to 4.19.0-91.179.8 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.10
changelog:
  - Merge changes from topic "cve-1070a-20250417" into lts-1070
  - Merge "uos: update srpm to 4.19.0-91.179.9 [T00000]" into lts-1070
  - mainline: {CVE-2024-26974} crypto: qat - resolve race condition during AER recovery
  - mainline: crypto: qat - fix double free during reset
  - mainline: {CVE-2024-38612} ipv6: sr: fix invalid unregister error path
  - mainline: ipv6: sr: fix incorrect unregister order
  - mainline: ipv6: sr: add missing seg6_local_exit
  - mainline: ipv6: sr: fix possible use-after-free and null-ptr-deref
  - mainline: {CVE-2024-50278} dm cache: fix potential out-of-bounds access on the first resume
  - mainline: dm cache: optimize dirty bit checking with find_next_bit when resizing
  - mainline: {CVE-2024-27405} usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - mainline: usb: gadget: f_ncm: Always set current gadget in ncm_bind()
  - mainline: usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
  - mainline: usb: gadget: f_ncm: Fix NTP-32 support
  - mainline: usb: gadget: f_ncm: Add OS descriptor support
  - mainline: {CVE-2024-27395} net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - mainline: net: openvswitch: ovs_ct_exit to be done under ovs_lock
  - mainline: {CVE-2024-35960} net/mlx5: Properly link new fs rules into the tree
  - uos: update srpm to 4.19.0-91.179.9 [T00000]
  - anolis: ipvs: add sysctl_run_estimation to support disable estimation [G2025031100008]
  - uos: Revert "ipvs: move estimation from timer to kworker" [G2025031100008]
  - uos: Revert "net: ipvs: add sysctl_run_estimation to support disable estimation" [G2025031100008]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.11
changelog:
  - Merge changes Ied6aad01,Ied6aad01 into lts-1070
  - stable: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties [T343551]
  - mainline: waitid: Add support for waiting for the current process group [G2025051000002]
  - mainline: pidfd: add P_PIDFD to waitid() [G2025051000002]
  - uos: update srpm to 4.19.0-91.179.10 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.12
changelog:
  - uos: fix kabi broken for struct dst_ops and netns_xfrm
  - mainline: {CVE-2024-36971} net: fix __dst_negative_advice() race [G2025051600022]
  - mainline: mptcp: add sk_stop_timer_sync helper
  - mainline: net: annotate data-races around sk->sk_dst_pending_confirm
  - mainline: af_unix: Fix data race around sk->sk_err.
  - mainline: af_unix: Fix data-races around sk->sk_shutdown.
  - mainline: net: read sk->sk_family once in sk_mc_loop()
  - mainline: sock: Fix misuse of sk_under_memory_pressure()
  - mainline: net: add missing data-race annotation for sk_ll_usec
  - mainline: net: add missing data-race annotations around sk->sk_peek_off
  - mainline: netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - mainline: xfrm: fix a data-race in xfrm_gen_index()
  - uos: update srpm to 4.19.0-91.179.11 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.13
changelog:
  - mainline: {CVE-2024-57887} drm: adv7511: Fix use-after-free in adv7533_attach_dsi() [G2025060400020]
  - mainline: {CVE-2024-56659} net: lapb: increase LAPB_HEADER_LEN [G2025060400020]
  - mainline: {CVE-2024-56650} netfilter: x_tables: fix LED ID check in led_tg_check() [G2025060400020]
  - uos: update srpm to 4.19.0-91.179.12 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.14
changelog:
  - Merge "uos: Revert "UOS: modify pipe read/write" [G2025061700021]" into lts-1070
  - Merge changes I2b15cc45,I2b15cc45,I2b15cc45,I2b15cc45,I2b15cc45, ... into lts-1070
  - uos: Revert "UOS: modify pipe read/write" [G2025061700021]
  - uos: fix "mainline: mptcp: add sk_stop_timer_sync helper"
  - mainline: {CVE-2024-50051} spi: mpc52xx: Add cancel_work_sync before module remove [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: handle isoc Babble and Buffer Overrun events properly [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: process isoc TD properly when there was a transaction error mid TD. [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: store TD status in the td struct instead of passing it along [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: remove extra loop in interrupt context [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: get isochronous ring directly from endpoint structure [G2025060400020]
  - uos: update srpm to 4.19.0-91.179.13 [T00000]


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.173
changelog:
  - uos: arm64: configs: update CONFIG_VIRTIO_BALLOON from y to m[B233313]
  - uos: pmu: workaround for some cpu [B230423]


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.174
changelog:
  - uos: support CCUSR8116 RAID
  - uos: change the python-shabang to '/usr/xx' path [B235061]
  - uos: igb: add architecture flag for loongarch patch [B237615]
  - uos: Adjust the uos_sched structure
  - uos: tasks: fix kabi for struct task_struct
  - tasks, sched/core: RCUify the assignment of rq->curr
  - tasks, sched/core: With a grace period after finish_task_switch(), remove unnecessary code
  - tasks, sched/core: Ensure tasks are available for a grace period after leaving the runqueue
  - tasks: Add a count of task RCU users
  - uos: Revert "uos: bugfix: fixup marvell sata controller init fail on some machine" [B240939]
  - stable: kvm: selftests: aarch64: compile with warnings on [B240841]
  - stable: kvm: selftests: aarch64: fix default vm mode [B240841]
  - stable: kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size [B240841]
  - stable: KVM: selftests: Wrap vcpu_nested_state_get/set functions with x86 guard [B240841]
  - uos: fix kvm selftest compiling error [B240841]
  - stable: selftests, kvm: Replace manual MSR defs with common msr-index.h [B240841]
  - stable: tools arch x86: Grab a copy of the file containing the MSR numbers [B240841]
  - stable: x86/pkeys: Revert a5eff7259790 ("x86/pkeys: Add PKRU value to init_fpstate") [B234311]
  - uos: Adjust the code structure and naming of the uos_sched
  - uos: Refactoring uos_fork and uos_cwu code
  - uos: Unixbench optimized
  - stable: {CVE-2023-7192} netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() [T310775]
  - stable: {CVE-2023-6606} smb: client: fix OOB in smbCalcSize() [T310775]
  - uos: fix compile error on loongarch
  - uos: uos_pwu: add sched partner wakeup solution
  - uos: Revert "uos: add sched partner solution"
  - uos: uos_fork: Simplify code and adjust scheduling strategy
  - uos: add sched partner solution
  - uos: config: open CONFIG_ZIMC_PHY config [T317019]
  - uos: derive: net: add ZIMC_PHY driver [T317019]


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.175
changelog:
  - uos: locking/osq_lock: in osq_lock.h add uos_kabi.h header file
  - mainline: fsnotify: send path type events to group with super block marks [B237003]
  - uos: derive: net: update ice to 1.12.7 [T317017]
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - feat: uos: sched: hide period poll debug info
  - uos: uos-sched: Cut out unnecessary variables
  - uos: Simplify uos-sched implementation
  - loongarch: Fix error when build selftest/bpf [B219507]
  - uos: Revert "uos: fix loongarch64 bpf test_verifier compile bug [B215281]" [219507]
  - fix: mm/munlock: delete munlock_vma_pages_all(), allow oomreap(bugid:190957)


author: caina <caina@uniontech.com> - 4.19.0-91.176
changelog:
  - mainline: ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems [B219467]
  - mainline: ACPI: processor_idle: Skip dummy wait if kernel is in guest [B219467]
  - uos: bugfix: fixup marvell sata controller init fail on some machine
  - uos: fix fanotify10 failed [B191653]
  - uos: fs: move S_ISGID stripping into the vfs_*() helpers [B191653]
  - uos: fs: add mode_strip_sgid() helper [B191653]
  - uos: fix the error of sssdk.ko and sssnic.ko[B234253]
  - uos: workaround: livepatch: fix livepatch-transition cannot be completed in lonnargch64 [B239737]
  - stable: {CVE-2024-23849} net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv [T310775]
  - stable: {CVE-2024-1086} netfilter: nf_tables: reject QUEUE/DROP verdict parameters [T310775]
  - stable: {CVE-2024-0607} netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() [T310775]
  - stable: {CVE-2024-0340} vhost: use kzalloc() instead of kmalloc() followed by memset() [T310775]
  - stable: {CVE-2024-26597} net: qualcomm: rmnet: fix global oob in rmnet_policy [T310775]
  - stable: {CVE-2023-52464} EDAC/thunderx: Fix possible out-of-bounds string access [T310775]
  - stable: {CVE-2023-52451} powerpc/pseries/memhp: Fix access beyond end of drmem array [T310775]
  - stable: {CVE-2023-52451} powerpc/pseries/memhotplug: Quieten some DLPAR operations [T310775]
  - stable: {CVE-2023-52449} mtd: Fix gluebi NULL pointer dereference caused by ftl notifier [T310775]
  - stable: {CVE-2023-52445} media: pvrusb2: fix use after free on context disconnection [T310775]
  - stable: {CVE-2023-52444} f2fs: fix to avoid dirent corruption [T310775]
  - stable: {CVE-2023-52443} apparmor: avoid crash when parsed profile name is empty [T310775]
  - stable: {CVE-2023-52439} uio: Fix use-after-free in uio_open [T310775]
  - stable: {CVE-2023-52436} f2fs: explicitly null-terminate the xattr list [T310775]
  - uos: uharden: fix network performance degradation issue [B237495]
  - uos: Fix the issue of crashing during reboot. Release reserved memory resources
  - uos: elfverify: fix slab memory leak [T325833]
  - stable: {CVE-2023-46838} xen-netback: don't produce zero-size SKB frags [T310775]
  - stable: {CVE-2023-6040} netfilter: nf_tables: Reject tables of unsupported family [T310775]
  - stable: {CVE-2023-46343} nfc: nci: fix possible NULL pointer dereference in send_acknowledge() [T310775]
  - stable: {CVE-2023-51042} drm/amdgpu: Fix potential fence use-after-free v2 [T310775]
  - stable: {CVE-2023-51043} drm/atomic: Fix potential use-after-free in nonblocking commits [T310775]
  - stable: {CVE-2024-0775} ext4: improve error recovery code paths in __ext4_remount() [T310775]
  - euler: {CVE-2021-33631} ext4: fix kernel BUG in 'ext4_write_inline_data_end()' [T310775]
  - uos: uos-sched: Remove functions with duplicate functions
  - uos: locking/osq_lock: fix osq_lock compile warning


author: lihongbin <lihongbin@uniontech.com> - 4.19.0-91.177
changelog:
  - stable: kvm/arm64: fixed passthrough gpu into vm on arm64
  - uos: bugfix: modified the license information unified uharden certificate information in all modules
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - Revert "uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA"
  - Revert "uos: locking/osq_lock: in osq_lock.h add uos_kabi.h header file"
  - Revert "uos: locking/osq_lock: fix osq_lock compile warning"


author: caina <caina@uniontech.com> - 4.19.0-91.178
changelog:
  - uos: locking/osq_lock: fix longarch64 compile err
  - uos: Revert "uos: hygon: [newfeature]x86: add hygon family 18h" [B248835]
  - uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA
  - Revert "uos: locking/osq_lock: Optimize osq_lock performance using per-NUMA"
  - fix: uos: Add module license for uhdkmod[B248671]


author: caina <caina@uniontech.com> - 4.19.0-91.179
changelog:
  - uos: export uld_fcheck_file symbol
  - uos: config: open Motorcomm YT6801 defconfig [T332297]
  - uos: net/yt6801: Add Motorcomm Gigabit network card driver 1.0.27 [T332297]
  - uos: net: update Motorcomm Phy driver to 2.2.26536 [T332295]
  - euler: net/mlx5: Update the list of the PCI supported devices [B250451]
  - euler: net/mlx5: Update the list of the PCI supported devices [B250451]
  - uos: uos-sched: adjust uos-sched code
  - stable: {CVE-2023-7042} wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() [T334689]
  - stable: {CVE-2024-22099} Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security [T334689]
  - stable: {CVE-2023-6270} aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts [T334689]
  - fix: wrong logic when allocating memory in elf module


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.179.5
changelog:
  * Mon Aug 19 2024 caina <caina@uniontech.com> - 4.19.0-91.179.4
  - uos: Fix the misalignment between vm_ event_state. events [] and vmstat_text
  - uos: drm/phytium: Replace default efi fb0 with dc fb [T357571]
  - anolis: alinux: proc/stat: Add the missing rcu unlock. [T353137]
  - uos: fix ccp init failed for hygon c86-4g cpu machine [T353305]
  - uos: fix megaraid freeze during reboot [B262995]
  - uos: Revert "LS7A2000: PCIE: Fixup GPU card error" [B262995]


author: caina <caina@uniontech.com> - 4.19.0-91.182
changelog:
  - uos: net/wangxun: update wangxun txgbe driver to 1.3.5.1 [T349909]
  - uos: net/wangxun: update wangxun ngbe driver to 1.2.6 [T349909]
  - uos: do not check permissions when the task is exiting
  - uos: fix warning error and grammar error causing by lower gcc version [T351223]
  - euler: mm/memcontrol: fix wrong vmstats for dying memcg [T351649]
  - stable: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier [T351223]
  - uos: update cusr8116 raid card driver to g2c35dadd
  - uos: perf: fix compile errors


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.183
changelog:
  - uos: sw_64: fix implicit declaration of 'vzalloc'i by qla2xxx [T359831]
  - uos: fix cpufreq of la64 compile failed [T325607]
  - uos: srpm: disable sign-kernel in c7 [T362695]
  - uos: fix netswift compile error [T325607]
  - uos: fix compile error by update qla2xxx hda driver version to 10.02.12.01-k [T359831]
  - perf: back-port Generic function-alignment infrastructure.
  - mainline: irqchip/gic-v3-its: Enable RESEND_WHEN_IN_PROGRESS for LPIs
  - mainline: genirq: Allow fasteoi handler to resend interrupts on concurrent handling
  - mainline: genirq: Expand doc for PENDING and REPLAY flags
  - mainline: genirq/PM: Introduce IRQCHIP_ENABLE_WAKEUP_ON_SUSPEND flag
  - mainline: net: sched: remove NET_CLS_IND config option
  - mainline: sched,livepatch: Use wake_up_if_idle()
  - mainline: sched: Improve wake_up_all_idle_cpus() take #2
  - mainline: sched: Simplify wake_up_*idle*()
  - mainline: btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
  - mainline: btrfs: check return value of btrfs_commit_transaction in relocation
  - mainline: HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - mainline: ipvs: align inner_mac_header for encapsulation
  - mainline: ipvs: allow rs_table to contain different real server types
  - mainline: ipvs: allow tunneling with gue encapsulation
  - mainline: generic radix trees
  - mainline: Documentation/ABI: Mention retbleed vulnerability info file for sysfs
  - mainline: xfs: report corruption only as a regular error
  - mainline: LoongArch, bpf: Fix jit to skip speculation barrier opcode
  - mainline: net: xdp: allow generic and driver XDP on one interface
  - mainline: selftests/bpf: fix the expected messages
  - mainline: xdp: Provide extack messages when prog attachment failed
  - mainline: netfilter: remove BUG_ON() after skb_header_pointer()
  - mainline: skbuff: micro-optimize {,__}skb_header_pointer()
  - mainline: skbuff: make __skb_header_pointer()'s data argument const
  - mainline: mm: add vma_lookup(), update find_vma_intersection() comments
  - mainline: i915_vma: Rename vma_lookup to i915_vma_lookup
  - mainline: l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  - mainline: net: fix a concurrency bug in l2tp_tunnel_register()
  - mainline: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  - mainline: NFS: Don't call generic_error_remove_page() while holding locks
  - mainline: {CVE-2022-1280} drm: use the lookup lock in drm_is_current_master
  - mainline: {CVE-2022-1280} drm: add a locked version of drm_is_current_master
  - mainline: {CVE-2022-1280} drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
  - mainline: {CVE-2022-1280} drm: protect drm_master pointers in drm_lease.c
  - mainline: {CVE-2022-1280} drm: serialize drm_file.master with a new spinlock
  - mainline: {CVE-2022-1280} drm: clean up unused kerneldoc in drm_lease.c
  - mainline: {CVE-2022-1280} drm: clarify usage of drm leases
  - mainline: video: fbdev: i740fb: Error out if 'pixclock' equals zero
  - mainline: seccomp: Improve performace by optimizing rmb()
  - uos: update qla2xxx hda driver version to 10.02.12.01-k [T359831]
  - uos: add Zhongxing micro network card driver [T363175]
  - euler: Revert "genirq: Increase the number of IRQ descriptors" [T325607]
  - euler: crypto: hisilicon - Add value profile support for kernel. [T325607]
  - euler: config: arm64: Enable dubugfs config of hisi sas [T325607]
  - euler: scsi: hisi_sas_v3_hw: Remove extra function calls for runtime pm [T325607]
  - euler: scsi: hisi_sas_v3_hw: Don't use PCI helper functions [T325607]
  - euler: scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING [T325607]
  - euler: scsi: hisi_sas: Work around build failure in suspend function [T325607]
  - euler: scsi: hisi_sas: Block requests before take debugfs snapshot [T325607]
  - euler: scsi: hisi_sas: Add slave_destroy interface for v3 hw [T325607]
  - euler: scsi: hisi_sas: Configure the initialization registers according to HBA model [T325607]
  - euler: scsi: hisi_sas: Increase debugfs_dump_index after dump is completed [T325607]
  - euler: scsi: hisi_sas: Ensure all enabled PHYs up during controller reset [T325607]
  - euler: scsi: hisi_sas: Exit suspending state when usage count is greater than 0 [T325607]
  - euler: scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id [T325607]
  - euler: Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure" [T325607]
  - euler: scsi: hisi_sas: Disable-SATA-disk-phy-for-severe-I_T-nexus reset failure [T325607]
  - euler: scsi: hisi_sas: Use abort task set to reset SAS disks when discovered [T325607]
  - euler: scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW [T325607]
  - euler: scsi: hisi_sas: Fix rescan after deleting a disk [T325607]
  - euler: scsi: hisi_sas: Modify v3 HW SSP underflow error processing [T325607]
  - euler: scsi: hisi_sas: Fix phyup timeout on FPGA [T325607]
  - euler: scsi: hisi_sas: Prevent parallel controller reset and control phy command [T325607]
  - euler: scsi: hisi_sas: Limit users changing debugfs BIST count value [T325607]
  - euler: scsi: hisi_sas: Use autosuspend for the host controller [T325607]
  - euler: scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed [T325607]
  - euler: scsi: hisi_sas: Add more logs for runtime suspend/resume [T325607]
  - euler: scsi: hisi_sas: Wait for phyup in hisi_sas_control_phy() [T325607]
  - euler: scsi: hisi_sas: Initialise devices in .slave_alloc callback [T325607]
  - euler: scsi: hisi_sas: Speed up error handling when internal abort timeout occurs [T325607]
  - euler: scsi: hisi_sas: Reset controller for internal abort timeout [T325607]
  - euler: scsi: hisi_sas: Include HZ in timer macros [T325607]
  - euler: scsi: hisi_sas: Run I_T nexus resets in parallel for clear nexus reset [T325607]
  - euler: scsi: hisi_sas: Put a limit of link reset retries [T325607]
  - euler: scsi: hisi_sas: Print SATA device SAS address for soft reset failure [T325607]
  - euler: scsi: hisi_sas: Warn in v3 hw channel interrupt handler when status reg cleared [T325607]
  - euler: scsi: hisi_sas: Directly snapshot registers when executing a reset [T325607]
  - euler: scsi: hisi_sas: Call sas_unregister_ha() to roll back if .hw_init() fails [T325607]
  - euler: scsi: hisi_sas: Print SAS address for v3 hw erroneous completion print [T325607]
  - euler: scsi: hisi_sas: Add trace FIFO debugfs support [T325607]
  - euler: scsi: hisi_sas: Enable debugfs support by default [T325607]
  - euler: scsi: hisi_sas: Remove deferred probe check in hisi_sas_v2_probe() [T325607]
  - euler: scsi: hisi_sas: use threaded irq to process CQ interrupts [T325607]
  - euler: scsi: hisi_sas: Remove preemptible() [T325607]
  - euler: scsi: hisi_sas: Move debugfs code to v3 hw driver [T325607]
  - euler: scsi: hisi_sas: Reduce some indirection in v3 hw driver [T325607]
  - euler: scsi: hisi_sas: Fix up probe error handling for v3 hw [T325607]
  - euler: scsi: hisi_sas: Recover PHY state according to the status before reset [T325607]
  - euler: scsi: hisi_sas: Add device link between SCSI devices and hisi_hba [T325607]
  - euler: scsi: hisi_sas: Add check for methods _PS0 and _PR0 [T325607]
  - euler: scsi: hisi_sas: Add controller runtime PM support for v3 hw [T325607]
  - euler: scsi: hisi_sas: Switch to new framework to support suspend and resume [T325607]
  - euler: scsi: hisi_sas: Code style cleanup [T325607]
  - euler: scsi: hisi_sas: Add missing newlines [T325607]
  - euler: scsi: hisi_sas: Add BIST support for fixed code pattern [T325607]
  - euler: scsi: hisi_sas: Add BIST support for phy FFE [T325607]
  - euler: scsi: hisi_sas: Make phy index variable name consistent [T325607]
  - euler: scsi: hisi_sas: Do not modify upper fields of PROG_PHY_LINK_RATE reg [T325607]
  - euler: scsi: hisi_sas: Modify macro name for OOB phy linkrate [T325607]
  - euler: scsi: hisi_sas: Remove one kerneldoc comment [T325607]
  - euler: scsi: hisi_sas: Do not reset phy timer to wait for stray phy up [T325607]
  - euler: scsi: hisi_sas: Stop returning error code from slot_complete_vX_hw() [T325607]
  - euler: scsi: hisi_sas: Add SAS_RAS_INTR0 to debugfs register name list [T325607]
  - euler: scsi: hisi_sas: Modify the commit information for DSM method [T325607]
  - euler: scsi: hisi_sas: Display proc_name in sysfs [T325607]
  - euler: scsi: hisi_sas: Fix build error without SATA_HOST [T325607]
  - euler: scsi: hisi_sas: Use dev_err() in read_iost_itct_cache_v3_hw() [T325607]
  - euler: scsi: hisi_sas: Add prints for v3 hw interrupt converge and automatic affinity [T325607]
  - euler: scsi: hisi_sas: Modify the file permissions of trigger_dump to write only [T325607]
  - euler: scsi: hisi_sas: Replace magic number when handle channel interrupt [T325607]
  - euler: scsi: hisi_sas: Stop converting a bool into a bool [T325607]
  - euler: scsi: hisi_sas: Return directly if init hardware failed [T325607]
  - euler: scsi: hisi_sas: Record the phy down event in debugfs [T325607]
  - euler: scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the probe fails [T325607]
  - euler: scsi: hisi_sas: Add ability to have multiple debugfs dumps [T325607]
  - euler: scsi: hisi_sas: Add module parameter for debugfs dump count [T325607]
  - euler: scsi: hisi_sas: Allocate memory for multiple dumps of debugfs [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for ITCT cache [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for IOST cache [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for ITCT [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for IOST [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for port [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for registers [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for DQ [T325607]
  - euler: scsi: hisi_sas: Add debugfs file structure for CQ [T325607]
  - euler: scsi: hisi_sas: Add timestamp for a debugfs dump [T325607]
  - euler: scsi: hisi_sas: Don't create debugfs dump folder twice [T325607]
  - euler: scsi: hisi_sas: Make three functions static [T325607]
  - euler: scsi: hisi_sas: fix spelling mistake "digial" -> "digital" [T325607]
  - euler: scsi: hisi_sas: Add hisi_sas_debugfs_alloc() to centralise allocation [T325607]
  - euler: scsi: hisi_sas: Remove some unused function arguments [T325607]
  - euler: scsi: hisi_sas: Remove redundant work declaration [T325607]
  - euler: scsi: hisi_sas: Remove hisi_sas_hw.slot_complete [T325607]
  - euler: scsi: hisi_sas: add debugfs auto-trigger for internal abort time out [T325607]
  - euler: scsi: hisi_sas: use devm_platform_ioremap_resource() to simplify code [T325607]
  - euler: scsi: hisi_sas: remove set but not used variable 'irq_value' [T325607]
  - euler: scsi: hisi_sas: Remove some unnecessary code [T325607]
  - euler: scsi: hisi_sas: Modify return type of debugfs functions [T325607]
  - euler: scsi: hisi_sas: Drop free_irq() when devm_request_irq() failed [T325607]
  - euler: scsi: hisi_sas: Drop SMP resp frame DMA mapping [T325607]
  - euler: scsi: hisi_sas: Drop kmap_atomic() in SMP command completion [T325607]
  - euler: scsi: hisi_sas: Snapshot AXI and RAS register at debugfs [T325607]
  - euler: scsi: hisi_sas: Snapshot HW cache of IOST and ITCT at debugfs [T325607]
  - euler: scsi: hisi_sas: Fix pointer usage error in show debugfs IOST/ITCT [T325607]
  - euler: scsi: hisi_sas: Make max IPTT count equal for all hw revisions [T325607]
  - euler: scsi: hisi_sas: Some misc tidy-up [T325607]
  - euler: scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental [T325607]
  - euler: scsi: hisi_sas: Fix losing directly attached disk when hot-plug [T325607]
  - euler: scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code [T325607]
  - euler: scsi: hisi_sas: Fix normally completed I/O analysed as failed [T325607]
  - euler: scsi: hisi_sas: No need to check return value of debugfs_create functions [T325607]
  - euler: cpufreq: CPPC: add SW BOOST support [T325607]
  - euler: cpufreq: change '.set_boost' to act on one policy [T325607]
  - euler: genirq: Increase the number of IRQ descriptors [T325607]
  - euler: irqchip: gic-v3: Collection table support muti pages [T325607]
  - euler: net: hns3: Fix ethtool_ Ops&gen_ Improper modification of kabi changes caused by adding members in the ops structure [T325607]
  - euler: net: hns3: Fix Kabi issue caused by ptp introducing gettimex64() [T325607]
  - euler: Fallback ethtool about nla_ Modification of kabi changes caused by the addition of new associations in the policy structure [T325607]
  - euler: net: hns3: Fallback Ethtool's modifications to extack [T325607]
  - euler: net: hns3: Fallback ethtool's modification of lane [T325607]
  - euler: net: hns3: HNAE3 framework add support for ROH client [T325607]
  - euler: net: hns3: add ROH MAC type definitions and support query MAC type [T325607]
  - euler: net: hns3: Add configuration of TM QCN error event [T325607]
  - euler: net: hns3: fix return value check bug of rx copybreak [T325607]
  - euler: net: hns3: add netdev reset check for hns3_set_tunable() [T325607]
  - euler: ethtool: mark netlink family as __ro_after_init [T325607]
  - euler: net: hns3: add max order judgement for tx spare buffer [T325607]
  - euler: net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue [T325607]
  - euler: net: hns3: fix deadlock issue when externel_lb and reset are executed together [T325607]
  - euler: ethtool: Fix uninitialized number of lanes [T325607]
  - euler: ethtool: reset #lanes when lanes is omitted [T325607]
  - euler: ethtool: limit bitset size [T325607]
  - euler: ethtool: fix application of verbose no_mask bitset [T325607]
  - euler: net: hns3: fix for not calculating TX BD send size correctly [T325607]
  - euler: NIC: hns3: fix kabi [T325607]
  - euler: ptp: deprecate gettime64() in favor of gettimex64() [T325607]
  - euler: net: hns3: add support for Hisilicon ptp sync device [T325607]
  - euler: net: hns3: sync linux kernel hns3 wol to openeuler [T325607]
  - euler: net: hns3: fix pointer cast to different type for wol [T325607]
  - euler: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol [T325607]
  - euler: net: hns3: fix getting supported parameter from driver in hclge_set_wol [T325607]
  - euler: net: hns3: add supports pfc storm detection and suppression [T325607]
  - euler: net: hns3: debugfs add dump dscp map info [T325607]
  - euler: net: hns3: refactor dev capability and dev spec of debugfs [T325607]
  - euler: net: hns3: support debugfs for wake on lan [T325607]
  - euler: net: hns3: fix user's coalesce configuration lost issue [T325607]
  - euler: net: hns3: add support for configuring interrupt quantity limiting [T325607]
  - euler: net: hns3: add debugfs support for interrupt coalesce [T325607]
  - euler: net: hns3: delete the hclge_cmd.c and hclgevf_cmd.c [T325607]
  - euler: net: hns3: refactor VF cmdq init and uninit APIs with new common APIs [T325607]
  - euler: net: hns3: refactor PF cmdq init and uninit APIs with new common APIs [T325607]
  - euler: net: hns3: create common cmdq init and uninit APIs [T325607]
  - euler: net: hns3: refactor VF cmdq resource APIs with new common APIs [T325607]
  - euler: net: hns3: refactor PF cmdq resource APIs with new common APIs [T325607]
  - euler: net: hns3: create common cmdq resource allocate/free/query APIs [T325607]
  - euler: net: hns3: refactor hclgevf_cmd_send with new hclge_comm_cmd_send API [T325607]
  - euler: net: hns3: refactor hclge_cmd_send with new hclge_comm_cmd_send API [T325607]
  - euler: net: hns3: fix setting wrong tx_timeout value issue [T325607]
  - euler: net: hns3: refactor hclge_mac_link_status_wait for interface reuse [T325607]
  - euler: net: hns3: add wait until mac link down [T325607]
  - euler: net: hns3: fix set cpu affinity when state down [T325607]
  - euler: net: hns3: restore user pause configure when disable autoneg [T325607]
  - euler: net: hns3: add tm flush when setting tm [T325607]
  - euler: net: hns3: fix the imp capability bit cannot exceed 32 bits issue [T325607]
  - euler: net: hns3: fix GRE checksum offload issue [T325607]
  - euler: net: hns3: fix strncpy() not using dest-buf length as length issue [T325607]
  - euler: net: hns3: add support config dscp map to tc [T325607]
  - euler: net: hns3: refactor hclge_update_desc_vfid for extension [T325607]
  - euler: net:ethtool Fix the Kabi problem is caused by the new FEC callback function in ethtool_ops [T325607]
  - euler: net:hns3 The kabi issue is resolved when the lane members are added to the ethtool_link_ksettings structure [T325607]
  - euler: net: hns3: add querying fec statistics [T325607]
  - euler: ethtool: add FEC statistics [T325607]
  - euler: ethtool: fec_prepare_data() - jump to error handling [T325607]
  - euler: ethtool: support FEC settings over netlink [T325607]
  - euler: ethtool: netlink bitset handling [T325607]
  - euler: net: hns3: avoid mult + div op in critical data path [T325607]
  - euler: net: hns3: add support to query and set lane number by ethtool [T325607]
  - euler: ethtool: Extend link modes settings uAPI with lanes [T325607]
  - euler: net: hns3: Resolved the kabi change issue caused by new members in the devlink structure [T325607]
  - euler: The kabi issue is resolved when the rx_buf_len extension ring is used to set parameters or obtain APIs [T325607]
  - euler: net: hns3: Fix for the compilation problem of hclge_comm_cmd [T325607]
  - euler: net: hns3: remove always exist devlink pointer check [T325607]
  - euler: net: hns3: add support for registering devlink for VF [T325607]
  - euler: net: hns3: add support for registering devlink for PF [T325607]
  - euler: net: hns3: fix output information incomplete for dumping tx queue info with debugfs [T325607]
  - euler: net: hns3: fix reset timeout when enable full VF [T325607]
  - euler: net: hns3: modify reset delay time to avoid configuration timeout [T325607]
  - euler: net: hns3: add support for getting GE port lanes [T325607]
  - euler: net: hns3: Use the correct style for SPDX License Identifier [T325607]
  - euler: net: hns3: support set/get VxLAN rule of rx flow director by ethtool [T325607]
  - euler: net: hns3: PF supports to set and query lane_num by sysfs [T325607]
  - euler: net: ethtool: add VxLAN to the NFC API [T325607]
  - euler: net: hns3: add extend interface support for read and write phy register [T325607]
  - euler: net: hns3: add support set led [T325607]
  - euler: net: hns3: add support set mac state [T325607]
  - euler: net: hns3: add support detect port wire type [T325607]
  - euler: net: hns3: add support PF provides customized interfaces to detect port faults. [T325607]
  - euler: net: hns3: add support disable nic clock [T325607]
  - euler: net: hns3: add support config and query serdes lane status [T325607]
  - euler: net: hns3: add supports configure optical module enable [T325607]
  - euler: net: hns3: add support query the presence of optical module [T325607]
  - euler: net: hns3: disbable pfc en before the reset [T325607]
  - euler: net: hns3: support set pfc pause trans time [T325607]
  - euler: net: hns3: add support query port ext information [T325607]
  - euler: net: hns3: add support to get/set 1d torus param [T325607]
  - euler: net: hns3: add supports fast reporting of faulty nodes [T325607]
  - euler: net: hns3: add support configuring function-level interrupt affinity [T325607]
  - euler: net: hns3: add support clear mac statistics [T325607]
  - euler: net: hns3: add support customized exception handling interfaces. [T325607]
  - euler: net: hns3: fix miss L3E checking for rx packet [T325607]
  - euler: net: hns3: support wake on lan configuration and query [T325607]
  - euler: net: hns3: refactor the debugfs for dumping FD tcam [T325607]
  - euler: net: hns3: allocate fd counter for queue bonding [T325607]
  - euler: net: hns3: add queue bonding mode support for VF [T325607]
  - euler: net: hns3: add support for queue bonding mode of flow director [T325607]
  - euler: net: hns3: refine the handling for VF heartbeat [T325607]
  - euler: net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process [T325607]
  - euler: net: hns3: add support for external loopback test [T325607]
  - euler: net: hns3: net: hns3: add querying and setting fec off mode from firmware [T325607]
  - euler: net: hns3: add querying and setting fec llrs mode from firmware [T325607]
  - euler: net: hns3: add querying fec ability from firmware [T325607]
  - euler: net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware [T325607]
  - euler: net: hns3: handle empty unknown interrupt for VF [T325607]
  - euler: net: hns3: add support for TX push mode [T325607]
  - euler: net: hns3: create new set of unified hclge_comm_cmd_send APIs [T325607]
  - euler: net: hns3: use struct hclge_desc to replace hclgevf_desc in VF cmdq module [T325607]
  - euler: net: hns3: create new cmdq hardware description structure hclge_comm_hw [T325607]
  - euler: net: hns3: fix incorrect components info of ethtool --reset command [T325607]
  - euler: net: hns3: add dql info when tx timeout [T325607]
  - euler: net: hns3: debugfs add drop packet statistics of multicast and broadcast for igu [T325607]
  - euler: net: hns3: Fix unreasonable modifications caused by rollback extension ringparam parameters [T325607]
  - euler: net: hns3: remove the way to set tx spare buf via module parameter [T325607]
  - euler: net: hns3: add support to set/get rx buf len via ethtool for hns3 driver [T325607]
  - euler: build_bug.h: add wrapper for _Static_assert
  - euler: ethtool: add support to set/get rx buf len via ethtool [T325607]
  - euler: net: hns3: add support to set/get tx copybreak buf size via ethtool for hns3 driver [T325607]
  - euler: ethtool: add support to set/get tx copybreak buf size via ethtool [T325607]
  - euler: ethtool: set device ring sizes with RINGS_SET request [T325607]
  - euler: ethtool: provide ring sizes with RINGS_GET request [T325607]
  - euler: ethtool: helper functions for netlink interface [T325607]
  - euler: ethtool: introduce ethtool netlink interface [T325607]
  - euler: ethtool: provide link mode names as a string set [T325607]
  - euler: ethtool: move string arrays into common file [T325607]
  - euler: ethtool: move to its own directory [T325607]
  - euler: net: hns3: allow configure ETS bandwidth of all TCs [T325607]
  - euler: net: hns3: fix some mac statistics is always 0 in device version V2 [T325607]
  - euler: net: hns3: sync rx ring head in echo common pull [T325607]
  - euler: net: hns3: fix ROCE base interrupt vector initialization bug [T325607]
  - euler: net: hns3: add support for pf querying new interrupt resources [T325607]
  - euler: net: hisilicon: fix hsn3_ethtool kernel-doc warnings [T325607]
  - euler: net: hns3: adjust string spaces of some parameters of tx bd info in debugfs [T325607]
  - euler: net: hns3: fix data endian problem of some functions of debugfs [T325607]
  - euler: net: hns3: add error recovery module and type for himac [T325607]
  - euler: net: hns3: add new ras error type for roce [T325607]
  - euler: net: hns3: add update ethtool advertised link modes for FIBRE port when autoneg off [T325607]
  - euler: net: hns3: modify functions of converting speed ability to ethtool link mode [T325607]
  - euler: net: hns3: add support pause/pfc durations for mac statistics [T325607]
  - euler: net: hns3: device specifications add number of mac statistics [T325607]
  - euler: net: hns3: modify mac statistics update process for compatibility [T325607]
  - euler: net: hns3: schedule the polling again when allocation fails [T325607]
  - euler: net: hns3: fix for miscalculation of rx unused desc [T325607]
  - euler: net: hns3: PF enable promisc for VF when mac table is overflow [T325607]
  - euler: net: hns3: don't rollback when destroy mqprio fail [T325607]
  - euler: net: hns3: fix hclge_dbg_dump_tm_pg() stack usage [T325607]
  - euler: xdp: Fixed an issue where the trace_mem_disconnect function cannot find the definition. [T325607]
  - euler: net: hns3: fix always enable rx vlan filter problem after selftest [T325607]
  - euler: net: hns3: fix show wrong state when add existing uc mac address [T325607]
  - euler: net: hns3: do not allow call hns3_nic_net_open repeatedly [T325607]
  - euler: net: hns3: optimize the rx page reuse handling process [T325607]
  - euler: net: hns3: fix misuse vf id and vport id in some logs [T325607]
  - euler: net: hns3: make hclgevf_cmd_caps_bit_map0 and hclge_cmd_caps_bit_map0 static [T325607]
  - euler: net: hns3: remove unnecessary spaces [T325607]
  - euler: net: hns3: add some required spaces [T325607]
  - euler: net: hns3: clean up a type mismatch warning [T325607]
  - euler: net: hns3: refine function hns3_set_default_feature() [T325607]
  - euler: net: hns3: uniform parameter name of hclge_ptp_clean_tx_hwts() [T325607]
  - euler: net: hnss3: use max() to simplify code [T325607]
  - euler: net: hns3: refine function hclge_dbg_dump_tm_pri() [T325607]
  - euler: net: hns3: reconstruct function hclge_ets_validate() [T325607]
  - euler: net: hns3: reconstruct function hns3_self_test [T325607]
  - euler: net: hns3: initialize each member of structure array on a separate line [T325607]
  - euler: net: hns3: add required space in comment [T325607]
  - euler: net: hns3: remove unnecessary "static" of local variables in function [T325607]
  - euler: net: hns3: don't config TM DWRR twice when set ETS [T325607]
  - euler: net: hns3: add new function hclge_get_speed_bit() [T325607]
  - euler: net: hns3: refactor function hclgevf_parse_capability() [T325607]
  - euler: net: hns3: refactor function hclge_parse_capability() [T325607]
  - euler: net: hns3: uniform type of function parameter cmd [T325607]
  - euler: net: hns3: merge some repetitive macros [T325607]
  - euler: net: hns3: package new functions to simplify hclgevf_mbx_handler code [T325607]
  - euler: net: hns3: remove redundant param to simplify code [T325607]
  - euler: net: hns3: use memcpy to simplify code [T325607]
  - euler: net: hns3: add hns3_state_init() to do state initialization [T325607]
  - euler: net: hns3: add macros for mac speeds of firmware command [T325607]
  - euler: net: hns3: fix GRO configuration error after reset [T325607]
  - euler: net: hns3: fix speed unknown issue in bond 4 [T325607]
  - euler: net: hns3: add support ethtool extended link state [T325607]
  - euler: net: hns3: add header file hns3_ethtoo.h [T325607]
  - euler: ethtool: add two link extended substates of bad signal integrity [T325607]
  - euler: docs: ethtool: Add two link extended substates of bad signal integrity [T325607]
  - euler: net: hns3: add support for triggering reset by ethtool [T325607]
  - euler: net: hns3: change the method of obtaining default ptp cycle [T325607]
  - euler: net: hns3: fix different snprintf() limit [T325607]
  - euler: net: hns3: fix a double shift bug [T325607]
  - euler: net: hns3: add support for PTP [T325607]
  - euler: net: hns3: add error handling compatibility during initialization [T325607]
  - euler: net: hns3: add support for imp-handle ras capability [T325607]
  - euler: net: hns3: add log for workqueue scheduled late [T325607]
  - euler: net: hns3: add phy loopback support for imp-controlled PHYs [T325607]
  - euler: net: hns3: add ioctl support for imp-controlled PHYs [T325607]
  - euler: net: hns3: add get/set pause parameters support for imp-controlled PHYs [T325607]
  - euler: net: hns3: add support for imp-controlled PHYs [T325607]
  - euler: net:hns3 Fix KABI for deletion of hnae3_unic_private_info in hnae3_handle [T325607]
  - euler: net:hns3 Fix KABI for ethtools->supported_coalesce_params [T325607]
  - euler: net: hns3: remove some unused macros [T325607]
  - euler: net: hns3: remove some unused codes in hns3_nic_set_features() [T325607]
  - euler: net: hns3: fix two coding style issues in hclgevf_main.c [T325607]
  - euler: net: hns3: remove two unused macros in hclgevf_cmd.c [T325607]
  - euler: net: hns3: remove an unused macro hclge_is_csq [T325607]
  - euler: net: hns3: fix a print format issue in hclge_mac_mdio_config() [T325607]
  - euler: net: hns3: remove some unused fields in struct hclge_dev [T325607]
  - euler: net: hns3: remove two duplicated register macros in hclgevf_main.h [T325607]
  - euler: net: hns3: remove unused struct hnae3_unic_private_info [T325607]
  - euler: net: hns3: remove some unused fields in struct hns3_nic_priv [T325607]
  - euler: net: hns3: modify an incorrect type in struct hclgevf_cfg_gro_status_cmd [T325607]
  - euler: net: hns3: modify an incorrect type in struct hclge_cfg_gro_status_cmd [T325607]
  - euler: net: hns3: refactor hclge_query_bd_num_cmd_send() [T325607]
  - euler: net: hns3: refactor hclge_config_tso() [T325607]
  - euler: net: hns3: remove a duplicated printing in hclge_configure() [T325607]
  - euler: net: hns3: modify two uncorrect macro names [T325607]
  - euler: net: hns3: remove a redundant register macro definition [T325607]
  - euler: net/hns: Remove custom driver version in favour of global one [T325607]
  - euler: net: hns3: clear port base VLAN when unload PF [T325607]
  - euler: net: hns3: reject unsupported coalescing params [T325607]
  - euler: net: hns3: modify an unsuitable log in hclge_map_ring_to_vector() [T325607]
  - euler: net: hns3: remove unused macros [T325607]
  - euler: net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() [T325607]
  - euler: net: hns3: fix compile warning without CONFIG_RFS_ACCEL [T325607]
  - euler: net: hns3: Use LLDP ethertype define ETH_P_LLDP [T325607]
  - euler: net: hns3: return 0 and print warning when hit duplicate MAC [T325607]
  - euler: net: hns3: make function hclge_set_all_vf_rst() static [T325607]
  - uos: net: remove linkmode helpers from ice driver
  - euler: net: phy: Move linkmode helpers to somewhere public [T325607]
  - euler: net: hns3: Add unlikely for buf_num check [T325607]
  - euler: net: hns3: Add default irq affinity [T325607]
  - euler: net: hns3: Only update mac configuation when necessary [T325607]
  - euler: net: hns3: Fix for loopback selftest failed problem [T325607]
  - euler: config: arm64: Build HiSilicon SPI/SFC driver as module [T325607]
  - euler: spi: hisi-sfc-v3xx: drop unnecessary ACPI_PTR and related ifendif protection [T325607]
  - euler: spi: hisi-sfc-v3xx: fix potential irq race condition [T325607]
  - euler: spi: hisi-sfc-v3xx: add address mode check [T325607]
  - euler: spi: hisi-sfc-v3xx: extend version checking compatibility [T325607]
  - euler: spi: hisi-sfc-v3xx: add support for IRQ mode [T325607]
  - euler: spi: hisi-sfc-v3xx: factor out the bit definition of interrupt register [T325607]
  - euler: spi: hisi-sfc-v3xx: factor out bus config and transfer functions [T325607]
  - euler: spi: hisi-sfc-v3xx: factor out IO modes configuration [T325607]
  - euler: spi: Remove CONFIG_ prefix from Kconfig select [T325607]
  - euler: spi: hisi-sfc-v3xx: add error check after per operation [T325607]
  - euler: spi: HiSilicon v3xx: Use DMI quirk to set controller buswidth override bits [T325607]
  - euler: spi: HiSilicon v3xx: Properly set CMD_CONFIG for Dual/Quad modes [T325607]
  - euler: spi: Allow SPI controller override device buswidth [T325607]
  - euler: spi: Add HiSilicon v3xx SPI NOR flash controller driver [T325607]
  - euler: spi/acpi: avoid spurious matches during slave enumeration [T325607]
  - euler: spi/acpi: fix incorrect ACPI parent check [T325607]
  - euler: spi/acpi: enumerate all SPI slaves in the namespace [T325607]
  - euler: driver core: platform: return -ENXIO for missing GpioInt [T325607]
  - euler: driver: platform: Support parsing GpioInt 0 in platform_get_irq() [T325607]
  - euler: spi: spi-mem: Fix build error without CONFIG_SPI_MEM [T325607]
  - euler: spi: spi-mem: Add SPI_MEM_NO_DATA to the spi_mem_data_dir enum [T325607]
  - euler: sh: Replace CONFIG_MTD_M25P80 with CONFIG_MTD_SPI_NOR in sh7757lcr_defconfig [T325607]
  - euler: powerpc: Drop CONFIG_MTD_M25P80 in 85xx-hw.config [T325607]
  - euler: m68k: Drop CONFIG_MTD_M25P80 in stmark2_defconfig [T325607]
  - euler: mips: Drop CONFIG_MTD_M25P80 in various defconfig files [T325607]
  - euler: ARM: shmobile: defconfig: Refresh config CONFIG_MTD_M25P80 for v5.4-rc1 [T325607]
  - euler: mtd: spi-nor: core: Fix an issue of releasing resources during read/write [T325607]
  - euler: mtd: spi-nor: fix kernel-doc for spi_nor::spimem [T325607]
  - euler: mtd: spi-nor: Pointer parameter for CR in spi_nor_read_cr() [T325607]
  - euler: mtd: spi-nor: Pointer parameter for FSR in spi_nor_read_fsr() [T325607]
  - euler: mtd: spi-nor: Pointer parameter for SR in spi_nor_read_sr() [T325607]
  - euler: mtd: spi-nor: Stop compare with negative in Reg Ops methods [T325607]
  - euler: mtd: spi-nor: Prepend spi_nor_ to all Reg Ops methods [T325607]
  - euler: mtd: spi-nor: Fix direction of the write_sr() transfer [T325607]
  - euler: mtd: spi-nor: Move m25p80 code in spi-nor.c [T325607]
  - euler: mtd: spi-nor: always use bounce buffer for register read/writes [T325607]
  - euler: mtd: spi-nor: Add support for mx25u12835f [T325607]
  - euler: spi: add support for octal mode I/O data transfer [T325607]
  - euler: ACPI/MPAM: Adapt to Arm's MPAM ACPI table version 2 [T325607]
  - euler: dt-bindings: mpam: add document for arm64 mpam [T325607]
  - euler: arm64/mpam: add device tree support for mpam initialization [T325607]
  - euler: arm64/mpam: remove __init macro to support driver probe [T325607]
  - euler: arm64/mpam: rmid: refine allocation and release process [T325607]
  - euler: arm64/mpam: resctrl: add tips when rmid modification failed [T325607]
  - euler: arm64/mpam: Fix mpam corrupt when cpu online [T325607]
  - euler: mpam: update monitor rmid and group configuration [T325607]
  - euler: mpam: Add support for group rmid modify [T325607]
  - euler: mpam: enable rdt_mon_capable for mbw monitor [T325607]
  - euler: ACPI / PPTT: Find PPTT processor node by cache id [T325607]
  - euler: ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1 [T325607]
  - euler: ACPICA: Add support for Arm's MPAM ACPI table version 2 [T325607]
  - euler: perf metricgroup: Fix find_evsel_group() event selector [T325607]
  - euler: perf metricgroup: Fix for metrics containing duration_time [T325607]
  - euler: perf metricgroup: Fix system PMU metrics [T325607]
  - euler: perf metricgroup: Return error code from metricgroup__add_metric_sys_event_iter() [T325607]
  - euler: perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics [T325607]
  - euler: perf test: Fix metric parsing test [T325607]
  - euler: perf test: Fix msan uninitialized use. [T325607]
  - euler: perf test: Set NULL sentinel in pmu_events table in "Parse and process metrics" test [T325607]
  - euler: perf expr: Allow numbers to be followed by a dot [T325607]
  - euler: perf expr: Test parsing of floating point numbers [T325607]
  - euler: perf jevents: Add support for HiSilicon PA PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon SLLC PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon HHA PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon DDRC PMU aliasing [T325607]
  - euler: perf jevents: Add support for HiSilicon L3C PMU aliasing [T325607]
  - euler: perf test: Add pmu-events test for aliases of hip09 ddrc pmu [T325607]
  - euler: perf vendor events arm64: Revise hip08 uncore events [T325607]
  - euler: perf test: Verify more event members in pmu-events test [T325607]
  - euler: perf jevents: Support ConfigCode [T325607]
  - euler: perf parse-events: Set numeric term config [T325607]
  - euler: perf test: Add pmu-events sys event support [T325607]
  - euler: perf jevents: Print SoC name per system event table [T325607]
  - euler: perf pmu: Make pmu_add_sys_aliases() public [T325607]
  - euler: perf test: Add more pmu-events uncore aliases [T325607]
  - euler: perf test: Re-add pmu-event uncore PMU alias test [T325607]
  - euler: perf pmu: Check .is_uncore field in pmu_add_cpu_aliases_map() [T325607]
  - euler: perf test: Test pmu-events core aliases separately [T325607]
  - euler: perf test: Factor out pmu-events alias comparison [T325607]
  - euler: perf test: Declare pmu-events test events separately [T325607]
  - euler: perf jevents: Relocate test events to cpu folder [T325607]
  - euler: perf test: Factor out pmu-events event comparison [T325607]
  - euler: perf jevents: Make build dependency on test JSONs [T325607]
  - euler: perf pmu: Save pmu name [T325607]
  - euler: perf pmu: Simplify arguments of __perf_pmu__new_alias [T325607]
  - euler: perf pmu: Add alias match method to fit pmu_name of HiSilicon DDRC [T325607]
  - euler: perf pmu: Fix alias matching [T325607]
  - euler: perf tools: Fix pattern matching for same substring in different PMU type [T325607]
  - euler: perf jevents: Add test for arch std events [T325607]
  - euler: perf metricgroup: Support adding metrics for system PMUs [T325607]
  - euler: perf metricgroup: Support printing metric groups for system PMUs [T325607]
  - euler: perf metricgroup: Split up metricgroup__print() [T325607]
  - euler: perf metricgroup: Fix metrics using aliases covering multiple PMUs [T325607]
  - euler: perf evlist: Change evlist__splice_list_tail() ordering [T325607]
  - euler: perf pmu: Add pmu_add_sys_aliases() [T325607]
  - euler: perf pmu: Add pmu_id() [T325607]
  - euler: perf jevents: Add support for system events tables [T325607]
  - euler: perf jevents: Add support for an extra directory level [T325607]
  - euler: perf jevents: Tidy error handling [T325607]
  - euler: perf jevents: Fix event code for events referencing std arch events [T325607]
  - euler: perf vendor events arm64: Add Hisi hip08 L3 metrics [T325607]
  - euler: perf vendor events arm64: Add Hisi hip08 L2 metrics [T325607]
  - euler: perf vendor events arm64: Add Hisi hip08 L1 metrics [T325607]
  - euler: perf pmu: Add pmu_events_map__find() function to find the common PMU map for the system [T325607]
  - euler: perf test: Handle metric reuse in pmu-events parsing test [T325607]
  - euler: perf metricgroup: Make find_metric() public with name change [T325607]
  - euler: perf metricgroup: Fix uncore metric expressions [T325607]
  - euler: perf metric: Do not free metric when failed to resolve [T325607]
  - euler: perf metric: Free metric when it failed to resolve [T325607]
  - euler: perf metric: Release expr_parse_ctx after testing [T325607]
  - euler: perf test: Fix memory leaks in parse-metric test [T325607]
  - euler: perf parse-event: Fix memory leak in evsel->unit [T325607]
  - euler: perf evlist: Fix cpu/thread map leak [T325607]
  - euler: perf metric: Fix some memory leaks - part 2 [T325607]
  - euler: perf metric: Fix some memory leaks [T325607]
  - euler: perf test: Free aliases for PMU event map aliases test [T325607]
  - euler: perf metricgroup: Fix typo in comment. [T325607]
  - euler: perf list: Do not print 'Metric Groups:' unnecessarily [T325607]
  - euler: perf metricgroup: Pass pmu_event structure as a parameter for arch_get_runtimeparam() [T325607]
  - euler: perf jevents: Add support for parsing perchip/percore events [T325607]
  - euler: perf jevents: Add new structure to pass json fields. [T325607]
  - euler: perf jevents: Make json_events() static and ditch jevents.h file [T325607]
  - euler: perf metric: Rename group_list to metric_list [T325607]
  - euler: perf metric: Rename struct egroup to metric [T325607]
  - euler: perf metric: Add metric group test [T325607]
  - euler: perf metric: Make compute_single function more precise [T325607]
  - euler: perf metric: Add recursion check when processing nested metrics [T325607]
  - euler: perf metric: Add DCache_L2 to metric parse test [T325607]
  - euler: perf metric: Add cache_miss_cycles to metric parse test [T325607]
  - euler: perf tests: Add parse metric test for frontend metric [T325607]
  - euler: perf tests: Add parse metric test for ipc metric [T325607]
  - euler: perf metric: Add events for the current list [T325607]
  - euler: perf metric: Compute referenced metrics [T325607]
  - euler: perf metric: Add referenced metrics to hash data [T325607]
  - euler: perf metric: Collect referenced metrics in struct metric_expr [T325607]
  - euler: perf metric: Collect referenced metrics in struct metric_ref_node [T325607]
  - euler: perf metric: Rename __metricgroup__add_metric to __add_metric [T325607]
  - euler: perf metric: Add add_metric function [T325607]
  - euler: perf metric: Add macros for iterating map events [T325607]
  - euler: perf metric: Add expr__del_id function [T325607]
  - euler: perf metric: Change expr__get_id to return struct expr_id_data [T325607]
  - euler: perf metric: Add expr__add_id function [T325607]
  - euler: perf metric: Fix memory leak in expr__add_id function [T325607]
  - euler: perf metric: Add 'struct expr_id_data' to keep expr value [T325607]
  - euler: perf metric: Rename expr__add_id() to expr__add_val() [T325607]
  - euler: perf pmu: Improve CPU core PMU HW event list ordering [T325607]
  - euler: perf pmu: List kernel supplied event aliases for arm64 [T325607]
  - euler: perf tools: Add test_generic_metric function [T325607]
  - euler: perf tools: Release metric_events rblist [T325607]
  - euler: perf tools: Factor out prepare_metric function [T325607]
  - euler: perf tools: Add metricgroup__parse_groups_test function [T325607]
  - euler: perf tools: Add map to parse_groups() function [T325607]
  - euler: perf tools: Add fake_pmu to parse_group() function [T325607]
  - euler: perf parse: Factor out parse_groups() function [T325607]
  - euler: perf tests: Add another metric parsing test [T325607]
  - euler: perf pmu: Add a perf_pmu__fake object to use with __parse_events() [T325607]
  - euler: perf parse: Provide a way to pass a fake_pmu to parse_events() [T325607]
  - euler: perf tests: Factor check_parse_id function [T325607]
  - euler: perf tools: Add fake pmu support [T325607]
  - euler: perf tools: Fix term parsing for raw syntax [T325607]
  - euler: perf parse: Add 'struct parse_events_state' pointer to scanner [T325607]
  - euler: perf stat: Do not pass avg to generic_metric [T325607]
  - euler: perf tools: Allow r0x<HEX> event syntax [T325607]
  - euler: perf parser: Add support to specify rXXX event with pmu [T325607]
  - euler: perf metricgroup: Remove unnecessary ',' from events [T325607]
  - euler: perf metricgroup: Add options to not group or merge [T325607]
  - euler: perf metricgroup: Remove duped metric group events [T325607]
  - euler: perf metricgroup: Order event groups by size [T325607]
  - euler: perf metricgroup: Delay events string creation [T325607]
  - euler: perf metricgroup: Use early return in add_metric [T325607]
  - euler: perf metricgroup: Always place duration_time last [T325607]
  - euler: perf metricgroup: Make 'evlist_used' variable a bitmap instead of array of bools [T325607]
  - euler: perf expr: Migrate expr ids table to a hashmap [T325607]
  - euler: perf test: Provide a subtest callback to ask for the reason for skipping a subtest [T325607]
  - euler: perf test: Improve pmu event metric testing [T325607]
  - euler: perf expr: Parse numbers as doubles [T325607]
  - euler: perf expr: Increase max other [T325607]
  - euler: perf expr: Allow ',' to be an other token [T325607]
  - euler: perf expr: Allow for unlimited escaped characters in a symbol [T325607]
  - euler: perf test: Test pmu-events aliases [T325607]
  - euler: perf pmu: Make pmu_uncore_alias_match() public [T325607]
  - euler: perf pmu: Add is_pmu_core() [T325607]
  - euler: perf test: Add pmu-events test [T325607]
  - euler: perf pmu: Refactor pmu_add_cpu_aliases() [T325607]
  - euler: perf jevents: Support test events folder [T325607]
  - euler: perf jevents: Add some test events [T325607]
  - euler: perf tests expr: Added test for runtime param in metric expression [T325607]
  - euler: perf metricgroups: Enhance JSON/metric infrastructure to handle "?" [T325607]
  - euler: perf metrictroup: Split the metricgroup__add_metric function [T325607]
  - euler: perf expr: Add expr_scanner_ctx object [T325607]
  - euler: perf expr: Add expr_ prefix for parse_ctx and parse_id [T325607]
  - euler: perf expr: Fix copy/paste mistake [T325607]
  - euler: perf expr: Fix memory leaks in metric bison [T325607]
  - euler: perf expr: Make expr__parse() return -1 on error [T325607]
  - euler: perf expr: Straighten expr__parse()/expr__find_other() interface [T325607]
  - euler: perf expr: Increase EXPR_MAX_OTHER to support metrics with more than 15 variables [T325607]
  - euler: perf expr: Move expr lexer to flex [T325607]
  - euler: perf expr: Add expr.c object [T325607]
  - euler: perf vendor events intel: Add NO_NMI_WATCHDOG metric constraint [T325607]
  - euler: perf metricgroup: Support metric constraint [T325607]
  - euler: perf util: Factor out sysctl__nmi_watchdog_enabled() [T325607]
  - euler: perf metricgroup: Factor out metricgroup__add_metric_weak_group() [T325607]
  - euler: perf jevents: Support metric constraint [T325607]
  - euler: perf tools: Update copy of libbpf's hashmap.c [T325607]
  - euler: perf tools: Sync hashmap.h with libbpf's [T325607]
  - euler: perf tools: Grab a copy of libbpf's hashmap [T325607]
  - euler: libbpf, hashmap: Fix undefined behavior in hash_bits [T325607]
  - euler: libbpf: Fix libbpf hashmap on (I)LP32 architectures [T325607]
  - euler: libbpf: Define __WORDSIZE if not available [T325607]
  - euler: libbpf, hashmap: Remove unused #include [T325607]
  - euler: perf parse-events: Fix an old style declaration [T325607]
  - euler: perf metricgroup: Fix printing event names of metric group with multiple events incase of overlapping events [T325607]
  - euler: tools bitmap: Implement bitmap_equal() operation at bitmap API [T325607]
  - euler: perf metricgroup: Fix printing event names of metric group with multiple events [T325607]
  - euler: perf list: Hide deprecated events by default [T325607]
  - euler: perf tools: Move ALLOC_LIST into a function [T325607]
  - euler: perf stat: Fix free memory access / memory leaks in metrics [T325607]
  - euler: perf vendor events arm64: Add some missing events for Hisi hip08 HHA PMU [T325607]
  - euler: perf vendor events arm64: Add some missing events for Hisi hip08 L3C PMU [T325607]
  - euler: perf vendor events arm64: Add some missing events for Hisi hip08 DDRC PMU [T325607]
  - euler: perf vendor events arm64: Fix Hisi hip08 DDRC PMU eventname [T325607]
  - euler: perf jevents: Add support for Hisi hip08 L3C PMU aliasing [T325607]
  - euler: perf jevents: Add support for Hisi hip08 HHA PMU aliasing [T325607]
  - euler: perf jevents: Add support for Hisi hip08 DDRC PMU aliasing [T325607]
  - euler: perf pmu: Support more complex PMU event aliasing [T325607]
  - euler: perf metricgroup: Support multiple events for metricgroup [T325607]
  - euler: perf metricgroup: Scale the metric result [T325607]
  - euler: perf pmu: Change convert_scale from static to global [T325607]
  - euler: perf metricgroup: Remove needless includes from metricgroup.h [T325607]
  - euler: perf metricgroup: Add missing list_del_init() when flushing egroups list [T325607]
  - euler: perf tools metric: Don't include duration_time in group [T325607]
  - euler: perf list: Avoid extra : for --raw metrics [T325607]
  - euler: perf jevents: Use nonlocal include statements in pmu-events.c [T325607]
  - euler: perf jevents: Remove unused variable [T325607]
  - euler: perf stat: Fix metrics with --no-merge [T325607]
  - euler: perf list: Output tool events [T325607]
  - euler: perf evsel: Support printing evsel name for 'duration_time' [T325607]
  - euler: perf stat: Implement duration_time as a proper event [T325607]
  - euler: perf stat: Revert checks for duration_time [T325607]
  - euler: perf tools: Fix legacy events symbol separator parsing [T325607]
  - euler: perf list: Display metric expressions for --details option [T325607]
  - euler: perf stat: Move 'metric_events' to 'struct perf_stat_config' [T325607]
  - euler: perf stat: Pass a 'struct perf_stat_config' argument to global print functions [T325607]
  - euler: perf stat: Pass 'struct perf_stat_config' argument to local print functions [T325607]
  - euler: perf stat: Add 'struct perf_stat_config' argument to perf_evlist__print_counters() [T325607]
  - euler: perf stat: Move STAT_RECORD out of perf_evlist__print_counters() [T325607]
  - euler: perf stat: Introduce perf_evlist__print_counters() [T325607]
  - euler: scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids [T325607]
  - euler: Fix the header file location error and adjust the function and structure version. [T325607]
  - euler: perf auxtrace arm64: Add support for parsing HiSilicon PCIe Trace packet [T325607]
  - euler: perf auxtrace arm64: Add support for HiSilicon PCIe Tune and Trace device driver [T325607]
  - euler: perf auxtrace arm: Refactor event list iteration in auxtrace_record__init() [T325607]
  - euler: perf tools: No need to cache the PMUs in ARM SPE auxtrace init routine [T325607]
  - euler: perf tools: Fix record failure when mixed with ARM SPE event [T325607]
  - euler: perf pmu: Move EVENT_SOURCE_DEVICE_PATH to PMU header file [T325607]
  - euler: spi: hisi-kunpeng: Fix the debugfs directory name incorrect [T325607]
  - euler: spi: hisi-kunpeng: Add debugfs support [T325607]
  - euler: spi: hisi-kunpeng: Fix Woverflow warning on conversion [T325607]
  - euler: spi: Add HiSilicon SPI Controller Driver for Kunpeng SoCs [T325607]
  - euler: Documentation: devres: add missing SPI helper [T325607]
  - euler: spi: <linux/spi/spi.h>: add missing struct kernel-doc entry [T325607]
  - euler: spi: core: allow reporting the effectivly used speed_hz for a transfer [T325607]
  - euler: arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled [T325607]
  - euler: arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() [T325607]
  - euler: arm64: Expose SVE2 features for userspace [T325607]
  - euler: arm64: HWCAP: add support for AT_HWCAP2 [T325607]
  - euler: perf/smmuv3: Add MODULE_ALIAS for module auto loading [T325607]
  - euler: perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 [T325607]
  - euler: perf/smmuv3: Enable HiSilicon Erratum 162001800 quirk [T325607]
  - euler: Revert "perf/smmuv3_pmu: Enable HiSilicon Erratum 162001800 quirk" [T325607]
  - euler: drivers/perf: hisi: add NULL check for name [T325607]
  - euler: drivers/perf: hisi: Remove redundant initialized of pmu->name [T325607]
  - euler: drivers/perf: hisi: Extract initialization of "cpa_pmu->pmu" [T325607]
  - euler: drivers/perf: hisi: Simplify the parameters of hisi_pmu_init() [T325607]
  - euler: drivers/perf: hisi: Advertise the PERF_PMU_CAP_NO_EXCLUDE capability [T325607]
  - euler: perf: hisi: Extract hisi_pmu_init [T325607]
  - euler: perf: hisi: Add configs for PMU isolation [T325607]
  - euler: perf: hisi: Fix read sccl_id and ccl_id error in TSV200 [T325607]
  - euler: drivers/perf: fixed kabi broken for SLLC and PA PMU [T325607]
  - euler: drivers/perf: fixed the issue that the kabi value changed [T325607]
  - euler: drivers/perf: hisi: Don't migrate perf to the CPU going to teardown [T325607]
  - euler: drivers/perf: hisi: Add TLP filter support [T325607]
  - euler: docs: perf: Fix PMU instance name of hisi-pcie-pmu [T325607]
  - euler: docs: fix 'make htmldocs' warning in perf [T325607]
  - euler: docs: perf: Address some html build warnings [T325607]
  - euler: docs: perf: Add description for HiSilicon PCIe PMU driver [T325607]
  - euler: docs: perf: Add new description on HiSilicon uncore PMU v2 [T325607]
  - euler: docs: perf: move to the admin-guide [T325607]
  - euler: drivers/perf: hisi: Fix some event id for hisi-pcie-pmu [T325607]
  - euler: drivers/perf: hisi: Add Support for CPA PMU [T325607]
  - euler: driver/perf: hisi: fix kabi broken for struct hisi_pmu [T325607]
  - euler: drivers/perf: hisi: Associate PMUs in SICL with CPUs online [T325607]
  - euler: drivers/perf: hisi: Add driver for HiSilicon PCIe PMU [T325607]
  - euler: PCI: Add pci_dev_id() helper [T325607]
  - euler: perf: hisi: Fix unexpected modifications in hisi_uncore_l3c_pmu.c [T325607]
  - euler: perf: hisi: Add support for HiSilicon SoC LPDDRC PMU [T325607]
  - euler: perf: hisi: Add support for HiSilicon SoC L3T PMU [T325607]
  - euler: perf: hisi: Fix read sccl_id and ccl_id error in some platform [T325607]
  - euler: openeuler_defconfig: Build HISI PMU drivers as modules. [T325607]
  - euler: arm64: perf: Expose some new events via sysfs [T325607]
  - euler: arm64: perf: Hook up new events [T325607]
  - euler: arm64: perf: Correct the event index in sysfs [T325607]
  - euler: arm64: perf: Add support for Armv8.1 PMCEID register format [T325607]
  - euler: perf/smmuv3: Don't trample existing events with global filter [T325607]
  - euler: drivers/perf: hisi: Add missing include of linux/module.h [T325607]
  - euler: drivers/perf: Prevent forced unbinding of PMU drivers [T325607]
  - euler: drivers/perf: hisi: Permit modular builds of HiSilicon uncore drivers [T325607]
  - euler: drivers/perf: hisi: Simplify hisi_read_sccl_and_ccl_id and its comment [T325607]
  - euler: drivers/perf: hisi: update the sccl_id/ccl_id for certain HiSilicon platform [T325607]
  - euler: perf: hisi: Make irq shared [T325607]
  - euler: drivers/perf: hisi: Fix data source control [T325607]
  - euler: perf/hisi: Use irq_set_affinity() [T325607]
  - euler: drivers/perf: hisi: Add support for HiSilicon PA PMU driver [T325607]
  - euler: drivers/perf: hisi: Add support for HiSilicon SLLC PMU driver [T325607]
  - euler: drivers/perf: hisi: Update DDRC PMU for programmable counter [T325607]
  - euler: drivers/perf: hisi: Add new functions for HHA PMU [T325607]
  - euler: drivers/perf: hisi: Add new functions for L3C PMU [T325607]
  - euler: drivers/perf: hisi: Add PMU version for uncore PMU drivers. [T325607]
  - euler: drivers/perf: hisi: Refactor code for more uncore PMUs [T325607]
  - euler: drivers/perf: hisi: Remove unnecessary check of counter index [T325607]
  - euler: drivers/perf: hisi: Add identifier sysfs file [T325607]
  - euler: perf: hisi: use devm_platform_ioremap_resource() to simplify code [T325607]
  - euler: For drivers that do not support context exclusion let's advertise the PERF_PMU_CAP_NO_EXCLUDE capability. This ensures that perf will prevent us from handling events where any exclusion flags are set. Let's also remove the now unnecessary check for exclusion flags. [T325607]
  - euler: drivers/perf: Fix kernel panic when rmmod PMU modules during perf sampling [T325607]
  - euler: docs: perf: convert to ReST [T325607]
  - euler: Revert "perf: hisi: remove duplicated code" [T325607]
  - euler: drivers/perf: Add support for ARMv8.3-SPE [T325607]
  - euler: perf arm-spe: Add support for ARMv8.3-SPE [T325607]
  - euler: perf arm_spe: Decode memory tagging properties [T325607]
  - euler: perf arm-spe: Add more sub classes for operation packet [T325607]
  - euler: perf arm-spe: Refactor operation packet handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_op_type() [T325607]
  - euler: perf arm-spe: Remove size condition checking for events [T325607]
  - euler: perf arm-spe: Refactor event type handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_event() [T325607]
  - euler: perf arm-spe: Refactor counter packet handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_counter() [T325607]
  - euler: perf arm-spe: Refactor context packet handling [T325607]
  - euler: perf arm-spe: Refactor address packet handling [T325607]
  - euler: perf arm-spe: Add new function arm_spe_pkt_desc_addr() [T325607]
  - euler: perf arm-spe: Refactor packet header parsing [T325607]
  - euler: perf arm-spe: Refactor printing string to buffer [T325607]
  - euler: perf arm-spe: Fix packet length handling [T325607]
  - euler: perf arm-spe: Refactor arm_spe_get_events() [T325607]
  - euler: perf arm-spe: Refactor payload size calculation [T325607]
  - euler: perf arm-spe: Fix a typo in comment [T325607]
  - euler: perf arm-spe: Include bitops.h for BIT() macro [T325607]
  - euler: Subject: [PATCH] crypto: hisilicon - fix different versions of devices driver compatibility issue [T325607]
  - euler: UACCE backport from mainline [T325607]
  - euler: crypto: hisilicon-Cap block size at 2^31 [T325607]
  - euler: crypto: hisilicon-hpre add req check when callback [T325607]
  - euler: crypto: hisilicon- count send_ref when sending bd [T325607]
  - euler: crypto: hisilicon-enhancement of qm DFX [T325607]
  - euler: crypto: hisilicon-memory management optimization [T325607]
  - euler: config: arm64: Enable config of hisi ptt [T325607]
  - euler: hwtracing: hisi_ptt: Add dummy callback pmu::read() [T325607]
  - euler: hwtracing: hisi_ptt: Keep to advertise PERF_PMU_CAP_EXCLUSIVE [T325607]
  - euler: hwtracing: hisi_ptt: Fix potential sleep in atomic context [T325607]
  - euler: hwtracing: hisi_ptt: Advertise PERF_PMU_CAP_NO_EXCLUDE for PTT PMU [T325607]
  - euler: hwtracing: hisi_ptt: Export available filters through sysfs [T325607]
  - euler: hwtracing: hisi_ptt: Add support for dynamically updating the filter list [T325607]
  - euler: hwtracing: hisi_ptt: Factor out filter allocation and release operation [T325607]
  - euler: hwtracing: hisi_ptt: Only add the supported devices to the filters list [T325607]
  - euler: hwtracing: hisi_ptt: Fix up for "iommu/dma: Make header private" [T325607]
  - euler: MAINTAINERS: Add maintainer for HiSilicon PTT driver [T325607]
  - euler: docs: trace: Add HiSilicon PTT device driver documentation [T325607]
  - euler: hwtracing: hisi_ptt: Add tune function support for HiSilicon PCIe Tune and Trace device [T325607]
  - euler: hwtracing: hisi_ptt: Add trace function support for HiSilicon PCIe Tune and Trace device [T325607]
  - euler: genirq: Export affinity setter for modules [T325607]
  - euler: iommu/arm-smmu-v3: Integrate the function for obtain the device domain type in bypass mode [T325607]
  - euler: iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity [T325607]
  - euler: iommu: Add def_domain_type() callback in iommu_ops [T325607]
  - euler: iommu: smmuv2: Using the SMMU_BYPASS_DEV to bypass SMMU for some SoCs [T325607]
  - euler: iommu: dev_bypass: cleanup dev bypass code [T325607]
  - euler: arm64: phytium: using MIDR_PHYTIUM_FT2000PLUS instead of ARM_CPU_IMP_PHYTIUM [T325607]
  - euler: PCI: Support BAR sizes up to 8TB [T325607]
  - uos: Open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF
  - uos: fix hyperv_cpuid testing failure [B240841]
  - stable: {CVE-2024-42232} libceph: fix race between delayed_work() and ceph_monc_stop() [T360521]
  - uos: dup: disable lazy_dup by default [G006301]
  - uos: srpm: even if with_btf is 0, it should still depends on dwarves [T354015]
  - uos: modify srpm source [T354015]
  - uos: add lts-1070 srpm source [T354015]
  - uos: diable irq limit of la64 by default [T358195]
  - mainline: PCI: Add ACS quirk for Wangxun NICs. [T358365]
  - uos: drm/phytium: Replace default efi fb0 with dc fb [T357571]
  - uos: Fix the misalignment between vm_ event_state. events [] and vmstat_text
  - update: lpfc.ko to 14.2.673.36 [T355279]
  - anolis: alinux: proc/stat: Add the missing rcu unlock. [T353137]
  - uos: fix ccp init failed for hygon c86-4g cpu machine [T353305]
  - uos: add loongarch64 macro to mkspec for %build [T354923]
  - uos: net/wangxun: update wangxun ngbevf driver to 1.2.2 [T353307]
  - stable: {CVE-2024-26816} x86/boot: Ignore relocations in .notes sections in walk_relocs() too [B262317]
  - stable: {CVE-2024-26816} x86, relocs: Ignore relocations in .notes section [B262317]
  - uos: fix kabi broken by modify struct sock {} [T343551]
  - stable: wifi: rtlwifi: 8192de: correct checking of IQK reload [T343551]
  - stable: regmap: Account for register length when chunking [T343551]
  - stable: fbcon: Fix null-ptr-deref in soft_cursor [T343551]
  - stable: ext4: add lockdep annotations for i_data_sem for ea_inode's [T343551]
  - stable: selinux: don't use make's grouped targets feature yet [T343551]
  - stable: tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK [T343551]
  - stable: mmc: vub300: fix invalid response handling [T343551]
  - stable: rsi: Remove unnecessary boolean condition [T343551]
  - stable: regulator: da905{2,5}: Remove unnecessary array check [T343551]
  - stable: hwmon: (scmi) Remove redundant pointer check [T343551]
  - stable: wifi: rtlwifi: remove always-true condition pointed out by GCC 12 [T343551]
  - stable: lib/dynamic_debug.c: use address-of operator on section symbols [T343551]
  - stable: kernel/extable.c: use address-of operator on section symbols [T343551]
  - stable: eth: sun: cassini: remove dead code [T343551]
  - stable: gcc-12: disable '-Wdangling-pointer' warning for now [T343551]
  - stable: ACPI: thermal: drop an always true check [T343551]
  - stable: x86/boot: Wrap literal addresses in absolute_pointer() [T343551]
  - stable: ata: libata-scsi: Use correct device no in ata_find_dev() [T343551]
  - stable: scsi: stex: Fix gcc 13 warnings [T343551]
  - stable: usb: gadget: f_fs: Add unbind event before functionfs_unbind [T343551]
  - stable: net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 [T343551]
  - stable: iio: dac: build ad5758 driver when AD5758 is selected [T343551]
  - stable: iio: dac: mcp4725: Fix i2c_master_send() return value handling [T343551]
  - stable: HID: wacom: avoid integer overflow in wacom_intuos_inout() [T343551]
  - stable: HID: google: add jewel USB id [T343551]
  - stable: iio: adc: mxs-lradc: fix the order of two cleanup operations [T343551]
  - stable: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() [T343551]
  - stable: atm: hide unused procfs functions [T343551]
  - stable: ALSA: oss: avoid missing-prototype warnings [T343551]
  - stable: netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT [T343551]
  - stable: wifi: b43: fix incorrect __packed annotation [T343551]
  - stable: scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed [T343551]
  - stable: arm64/mm: mark private VM_FAULT_X defines as vm_fault_t [T343551]
  - stable: ARM: dts: stm32: add pin map for CAN controller on stm32f7 [T343551]
  - stable: wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value [T343551]
  - stable: media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table [T343551]
  - stable: media: dvb_ca_en50221: fix a size write bug [T343551]
  - stable: media: netup_unidvb: fix irq init by register it at the end of probe [T343551]
  - stable: media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address [T343551]
  - stable: media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() [T343551]
  - stable: media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer [T343551]
  - stable: media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() [T343551]
  - stable: media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() [T343551]
  - stable: media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() [T343551]
  - stable: media: dvb_demux: fix a bug for the continuity counter [T343551]
  - stable: ASoC: ssm2602: Add workaround for playback distortions [T343551]
  - stable: xfrm: Check if_id in inbound policy/secpath match [T343551]
  - stable: ASoC: dwc: limit the number of overrun messages [T343551]
  - stable: nbd: Fix debugfs_create_dir error checking [T343551]
  - stable: fbdev: stifb: Fix info entry in sti_struct on error path [T343551]
  - stable: fbdev: modedb: Add 1920x1080 at 60 Hz video mode [T343551]
  - stable: media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE [T343551]
  - stable: ARM: 9295/1: unwind:fix unwind abort for uleb128 case [T343551]
  - stable: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() [T343551]
  - stable: watchdog: menz069_wdt: fix watchdog initialisation [T343551]
  - stable: net: dsa: mv88e6xxx: Increase wait after reset deactivation [T343551]
  - stable: udp6: Fix race condition in udp6_sendmsg & connect [T343551]
  - stable: net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report [T343551]
  - stable: ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use [T343551]
  - stable: net/sched: Prohibit regrafting ingress or clsact Qdiscs [T343551]
  - stable: net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs [T343551]
  - stable: net/sched: sch_clsact: Only create under TC_H_CLSACT [T343551]
  - stable: net/sched: sch_ingress: Only create under TC_H_INGRESS [T343551]
  - stable: tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set [T343551]
  - stable: tcp: deny tcp_disconnect() when threads are waiting [T343551]
  - stable: af_packet: do not use READ_ONCE() in packet_bind() [T343551]
  - stable: amd-xgbe: fix the false linkup in xgbe_phy_status [T343551]
  - stable: af_packet: Fix data-races of pkt_sk(sk)->num. [T343551]
  - stable: netrom: fix info-leak in nr_write_internal() [T343551]
  - stable: net/mlx5: fw_tracer, Fix event handling [T343551]
  - stable: dmaengine: pl330: rename _start to prevent build error [T343551]
  - stable: netfilter: ctnetlink: Support offloaded conntrack entry deletion [T343551]
  - stable: ipv{4,6}/raw: fix output xfrm lookup wrt protocol [T343551]
  - stable: bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() [T343551]
  - stable: cdc_ncm: Fix the build warning [T343551]
  - stable: power: supply: bq24190: Call power_supply_changed() after updating input current [T343551]
  - stable: power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() [T343551]
  - stable: power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize [T343551]
  - stable: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize [T343551]
  - stable: cdc_ncm: Implement the 32-bit version of NCM Transfer Block [T343551]
  - uos: fix kabi broken by modify enum cpuhp_state {} [T343551]
  - uos: fix kabi borken by modify struct proto {} [T343551]
  - stable: 3c589_cs: Fix an error handling path in tc589_probe() [T343551]
  - stable: forcedeth: Fix an error handling path in nv_probe() [T343551]
  - stable: ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg [T343551]
  - stable: x86/show_trace_log_lvl: Ensure stack pointer is aligned, again [T343551]
  - stable: xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() [T343551]
  - stable: coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() [T343551]
  - stable: power: supply: sbs-charger: Fix INHIBITED bit for Status reg [T343551]
  - stable: power: supply: bq27xxx: Fix poll_interval handling and races on remove [T343551]
  - stable: power: supply: bq27xxx: Fix I2C IRQ race on remove [T343551]
  - stable: power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition [T343551]
  - stable: power: supply: leds: Fix blink to LED on transition [T343551]
  - stable: ipv6: Fix out-of-bounds access in ipv6_find_tlv() [T343551]
  - stable: bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields [T343551]
  - stable: net: fix skb leak in __skb_tstamp_tx() [T343551]
  - stable: media: radio-shark: Add endpoint checks [T343551]
  - stable: USB: sisusbvga: Add endpoint checks [T343551]
  - stable: USB: core: Add routines for endpoint checks in old drivers [T343551]
  - stable: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). [T343551]
  - stable: ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G [T343551]
  - stable: ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported [T343551]
  - stable: parisc: Fix flush_dcache_page() for usage from irq context [T343551]
  - stable: selftests/memfd: Fix unknown type name build failure [T343551]
  - stable: x86/mm: Avoid incomplete Global INVLPG flushes [T343551]
  - stable: btrfs: use nofs when cleaning up aborted transactions [T343551]
  - stable: parisc: Allow to reboot machine after system halt [T343551]
  - stable: m68k: Move signal frame following exception on 68020/030 [T343551]
  - stable: ALSA: hda/ca0132: add quirk for EVGA X299 DARK [T343551]
  - stable: spi: fsl-cpm: Use 16 bit mode for large transfers with even size [T343551]
  - stable: spi: fsl-spi: Re-organise transfer bits_per_word adaptation [T343551]
  - stable: spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode [T343551]
  - stable: s390/qdio: fix do_sqbs() inline assembly constraint [T343551]
  - stable: s390/qdio: get rid of register asm [T343551]
  - stable: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF [T343551]
  - stable: vc_screen: rewrite vcs_size to accept vc, not inode [T343551]
  - stable: usb: gadget: u_ether: Fix host MAC address case [T343551]
  - stable: usb: gadget: u_ether: Convert prints to device prints [T343551]
  - stable: lib/string_helpers: Introduce string_upper() and string_lower() helpers [T343551]
  - stable: ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 [T343551]
  - stable: ALSA: hda/realtek - ALC897 headset MIC no sound [T343551]
  - stable: ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform [T343551]
  - stable: ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW [T343551]
  - stable: ALSA: hda/realtek - The front Mic on a HP machine doesn't work [T343551]
  - stable: ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 [T343551]
  - stable: ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 [T343551]
  - stable: ALSA: hda/realtek - Add Headset Mic supported for HP cPC [T343551]
  - stable: ALSA: hda/realtek - More constifications [T343551]
  - stable: Add Acer Aspire Ethos 8951G model quirk [T343551]
  - stable: HID: wacom: Force pen out of prox if no events have been received in a while [T343551]
  - stable: netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag [T343551]
  - stable: netfilter: nf_tables: stricter validation of element data [T343551]
  - stable: netfilter: nf_tables: allow up to 64 bytes in the set element data area [T343551]
  - stable: netfilter: nf_tables: add nft_setelem_parse_key() [T343551]
  - stable: netfilter: nf_tables: validate registers coming from userspace. [T343551]
  - stable: netfilter: nftables: statify nft_parse_register() [T343551]
  - stable: netfilter: nftables: add nft_parse_register_store() and use it [T343551]
  - stable: netfilter: nftables: add nft_parse_register_load() and use it [T343551]
  - stable: nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() [T343551]
  - stable: tpm/tpm_tis: Disable interrupts for more Lenovo devices [T343551]
  - stable: ceph: force updating the msg pointer in non-split case [T343551]
  - stable: serial: Add support for Advantech PCI-1611U card [T343551]
  - stable: statfs: enforce statfs[64] structure initialization [T343551]
  - stable: ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table [T343551]
  - stable: ALSA: hda: Fix Oops by 9.1 surround channel names [T343551]
  - stable: usb: typec: altmodes/displayport: fix pin_assignment_show [T343551]
  - stable: usb-storage: fix deadlock when a scsi command timeouts more than once [T343551]
  - stable: vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() [T343551]
  - stable: igb: fix bit_shift to be in [1..8] range [T343551]
  - stable: cassini: Fix a memory leak in the error handling path of cas_init_one() [T343551]
  - stable: net: bcmgenet: Restore phy_stop() depending upon suspend/close [T343551]
  - stable: net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() [T343551]
  - stable: drm/exynos: fix g2d_open/close helper function definitions [T343551]
  - stable: media: netup_unidvb: fix use-after-free at del_timer() [T343551]
  - stable: erspan: get the proto with the md version for collect_md [T343551]
  - stable: ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode [T343551]
  - stable: ip6_gre: Make o_seqno start from 0 in native mode [T343551]
  - stable: ip6_gre: Fix skb_under_panic in __gre6_xmit() [T343551]
  - stable: serial: arc_uart: fix of_iomap leak in `arc_serial_probe` [T343551]
  - stable: vsock: avoid to close connected socket after the timeout [T343551]
  - stable: net: fec: Better handle pm_runtime_get() failing in .remove() [T343551]
  - stable: af_key: Reject optional tunnel/BEET mode templates in outbound policies [T343551]
  - stable: cpupower: Make TSC read per CPU for Mperf monitor [T343551]
  - stable: btrfs: fix space cache inconsistency after error loading it from disk [T343551]
  - stable: btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid [T343551]
  - stable: mfd: dln2: Fix memory leak in dln2_probe() [T343551]
  - stable: phy: st: miphy28lp: use _poll_timeout functions for waits [T343551]
  - stable: Input: xpad - add constants for GIP interface numbers [T343551]
  - stable: clk: tegra20: fix gcc-7 constant overflow warning [T343551]
  - stable: recordmcount: Fix memory leaks in the uwrite function [T343551]
  - stable: sched: Fix KCSAN noinstr violation [T343551]
  - stable: mcb-pci: Reallocate memory region to avoid memory overlapping [T343551]
  - stable: serial: 8250: Reinit port->pm on port specific driver unbind [T343551]
  - stable: usb: typec: tcpm: fix multiple times discover svids error [T343551]
  - stable: HID: wacom: generic: Set battery quirk only when we see battery data [T343551]
  - stable: spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 [T343551]
  - stable: HID: logitech-hidpp: Reconcile USB and Unifying serials [T343551]
  - stable: HID: logitech-hidpp: Don't use the USB serial for USB devices [T343551]
  - stable: staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE [T343551]
  - stable: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp [T343551]
  - stable: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace [T343551]
  - stable: f2fs: fix to drop all dirty pages during umount() if cp_error is set [T343551]
  - stable: ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() [T343551]
  - stable: ext4: set goal start correctly in ext4_mb_normalize_request [T343551]
  - stable: gfs2: Fix inode height consistency check [T343551]
  - stable: scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition [T343551]
  - stable: lib: cpu_rmap: Avoid use after free on rmap->obj array entries [T343551]
  - stable: net: Catch invalid index in XPS mapping [T343551]
  - stable: net: pasemi: Fix return type of pasemi_mac_start_tx() [T343551]
  - stable: ext2: Check block size validity during mount [T343551]
  - stable: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex [T343551]
  - stable: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects [T343551]
  - stable: ACPICA: Avoid undefined behavior: applying zero offset to null pointer [T343551]
  - stable: drm/tegra: Avoid potential 32-bit integer overflow [T343551]
  - stable: ACPI: EC: Fix oops when removing custom query handlers [T343551]
  - stable: firmware: arm_sdei: Fix sleep from invalid context BUG [T343551]
  - stable: regmap: cache: Return error in cache sync operations for REGCACHE_NONE [T343551]
  - stable: drm/amd/display: Use DC_LOG_DC in the trasform pixel function [T343551]
  - stable: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() [T343551]
  - stable: af_unix: Fix data races around sk->sk_shutdown. [T343551]
  - stable: af_unix: Fix a data race of sk->sk_receive_queue->qlen. [T343551]
  - stable: net: datagram: fix data-races in datagram_poll() [T343551]
  - stable: ipvlan:Fix out-of-bounds caused by unclear skb->cb [T343551]
  - stable: tcp: add annotations around sk->sk_shutdown accesses [T343551]
  - stable: tcp: factor out __tcp_close() helper [T343551]
  - stable: tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit [T343551]
  - stable: tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT [T343551]
  - stable: net: annotate sk->sk_err write from do_recvmmsg() [T343551]
  - stable: netlink: annotate accesses to nlk->cb_running [T343551]
  - stable: net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). [T343551]
  - uos: drm/ast: Fixed display error for ps23xx when using ast bmc card [T353997]
  - uos: Revert "uos: drm/ast: Fixed display error for ps23xx when using ast bmc card [T342993]" [T353997]
  - uos: fix kabi broken for ipmi_smi_msg_received. [T343551]
  - uos: revert stable: uapi/linux/const.h: prefer ISO-friendly __typeof__ [T343551] [T343551]
  - stable: PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock [T343551]
  - stable: PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors [T343551]
  - stable: drbd: correctly submit flush bio on barrier [T343551]
  - stable: ext4: fix invalid free tracking in ext4_xattr_move_to_block() [T343551]
  - stable: ext4: remove a BUG_ON in ext4_mb_release_group_pa() [T343551]
  - stable: ext4: bail out of ext4_xattr_ibody_get() fails for any reason [T343551]
  - stable: ext4: add bounds checking in get_max_inline_xattr_value_size() [T343551]
  - stable: HID: wacom: Set a default resolution for older tablets [T343551]
  - stable: drm/panel: otm8009a: Set backlight parent to panel device [T343551]
  - stable: ARM: dts: s5pv210: correct MIPI CSIS clock name [T343551]
  - stable: ARM: dts: exynos: fix WM8960 clock name in Itop Elite [T343551]
  - stable: sh: nmi_debug: fix return value of __setup handler [T343551]
  - stable: sh: init: use OF_EARLY_FLATTREE for early init [T343551]
  - stable: sh: math-emu: fix macro redefined warning [T343551]
  - stable: platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i [T343551]
  - stable: cifs: fix pcchunk length type in smb2_copychunk_range [T343551]
  - stable: btrfs: print-tree: parent bytenr must be aligned to sector size [T343551]
  - stable: btrfs: fix btrfs_prev_leaf() to not return the same key twice [T343551]
  - stable: perf symbols: Fix return incorrect build_id size in elf_read_build_id() [T343551]
  - stable: perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() [T343551]
  - stable: perf vendor events power9: Remove UTF-8 characters from JSON files [T343551]
  - stable: ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` [T343551]
  - stable: drm/amdgpu: add a missing lock for AMDGPU_SCHED [T343551]
  - stable: drm/amdgpu: Add command to override the context priority. [T343551]
  - stable: drm/amdgpu: Put enable gfx off feature to a delay thread [T343551]
  - stable: rxrpc: Fix hard call timeout units [T343551]
  - stable: net/sched: act_mirred: Add carrier check [T343551]
  - stable: writeback: fix call of incorrect macro [T343551]
  - stable: net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu [T343551]
  - stable: net: dsa: mv88e6xxx: Add missing watchdog ops for 6320 family [T343551]
  - stable: dm verity: fix error handling for check_at_most_once on FEC [T343551]
  - stable: dm verity: skip redundant verity_handle_err() on I/O errors [T343551]
  - stable: ipmi: Fix how the lower layers are told to watch for messages [T343551]
  - stable: tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem [T343551]
  - stable: debugobject: Ensure pool refill (again) [T343551]
  - stable: perf auxtrace: Fix address filter entire kernel size [T343551]
  - stable: dm flakey: fix a crash with invalid table line [T343551]
  - stable: dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path [T343551]
  - stable: s390/dasd: fix hanging blockdevice after request requeue [T343551]
  - stable: btrfs: scrub: reject unsupported scrub flags [T343551]
  - stable: clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent [T343551]
  - stable: wifi: rtl8xxxu: RTL8192EU always needs full init [T343551]
  - stable: md/raid10: fix null-ptr-deref in raid10_sync_request [T343551]
  - stable: nilfs2: fix infinite loop in nilfs_mdt_get_block() [T343551]
  - stable: nilfs2: do not write dirty data after degenerating to read-only [T343551]
  - stable: parisc: Fix argument pointer in real64_call_asm() [T343551]
  - stable: dmaengine: at_xdmac: do not enable all cyclic channels [T343551]
  - stable: phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port [T343551]
  - stable: pwm: mtk-disp: Disable shadow registers before setting backlight values [T343551]
  - stable: pwm: mtk-disp: Adjust the clocks to avoid them mismatch [T343551]
  - stable: pwm: mtk-disp: Don't check the return code of pwmchip_remove() [T343551]
  - stable: openrisc: Properly store r31 to pt_regs on unhandled exceptions [T343551]
  - stable: RDMA/mlx5: Use correct device num_ports when modify DC [T343551]
  - stable: SUNRPC: remove the maximum number of retries in call_bind_status [T343551]
  - stable: NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease [T343551]
  - stable: IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order [T343551]
  - stable: clk: add missing of_node_put() in "assigned-clocks" property parsing [T343551]
  - stable: power: supply: generic-adc-battery: fix unit scaling [T343551]
  - stable: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() [T343551]
  - stable: RDMA/rdmavt: Delete unnecessary NULL check [T343551]
  - stable: powerpc/rtas: use memmove for potentially overlapping buffer copy [T343551]
  - stable: macintosh: via-pmu-led: requires ATA to be set [T343551]
  - stable: powerpc/sysdev/tsi108: fix resource printk format warnings [T343551]
  - stable: powerpc/wii: fix resource printk format warnings [T343551]
  - stable: powerpc/mpc512x: fix resource printk format warning [T343551]
  - stable: macintosh/windfarm_smu_sat: Add missing of_node_put() [T343551]
  - stable: spmi: Add a check for remove callback when removing a SPMI driver [T343551]
  - stable: staging: rtl8192e: Fix W_DISABLE# does not work after stop/start [T343551]
  - stable: serial: 8250: Add missing wakeup event reporting [T343551]
  - stable: tty: serial: fsl_lpuart: adjust buffer length to the intended size [T343551]
  - stable: usb: chipidea: fix missing goto in `ci_hdrc_probe` [T343551]
  - stable: sh: sq: Fix incorrect element size for allocating bitmap buffer [T343551]
  - stable: uapi/linux/const.h: prefer ISO-friendly __typeof__ [T343551]
  - stable: spi: cadence-quadspi: fix suspend-resume implementations [T343551]
  - stable: mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel [T343551]
  - stable: mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure [T343551]
  - stable: mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry [T343551]
  - stable: ia64: salinfo: placate defined-but-not-used warning [T343551]
  - stable: ia64: mm/contig: fix section mismatch warning/error [T343551]
  - stable: vmci_host: fix a race condition in vmci_host_poll() causing GPF [T343551]
  - stable: spi: fsl-spi: Fix CPM/QE mode Litte Endian [T343551]
  - stable: spi: qup: Don't skip cleanup in remove's error path [T343551]
  - stable: spi: qup: fix PM reference leak in spi_qup_remove() [T343551]
  - stable: linux/vt_buffer.h: allow either builtin or modular for macros [T343551]
  - stable: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition [T343551]
  - stable: fpga: bridge: fix kernel-doc parameter description [T343551]
  - stable: usb: host: xhci-rcar: remove leftover quirk handling [T343551]
  - stable: pstore: Revert pmsg_lock back to a normal mutex [T343551]
  - stable: net: amd: Fix link leak when verifying config failed [T343551]
  - stable: netlink: Use copy_to_user() for optval in netlink_getsockopt(). [T343551]
  - stable: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" [T343551]
  - stable: netfilter: nf_tables: don't write table validation state without mutex [T343551]
  - stable: ixgbe: Enable setting RSS table to default values [T343551]
  - stable: ixgbe: Allow flow hash to be set via ethtool [T343551]
  - stable: wifi: iwlwifi: mvm: check firmware response size [T343551]
  - stable: wifi: iwlwifi: make the loop for card preparation effective [T343551]
  - stable: md/raid10: fix memleak of md thread [T343551]
  - stable: md: update the optimal I/O size on reshape [T343551]
  - stable: md/raid10: fix memleak for 'conf->bio_split' [T343551]
  - stable: md/raid10: fix leak of 'r10bio->remaining' for recovery [T343551]
  - stable: bpftool: Fix bug for long instructions in program CFG dumps [T343551]
  - stable: wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() [T343551]
  - stable: wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() [T343551]
  - stable: rtlwifi: Replace RT_TRACE with rtl_dbg [T343551]
  - stable: rtlwifi: Start changing RT_TRACE into rtl_dbg [T343551]
  - stable: rtlwifi: rtl_pci: Fix memory leak when hardware init fails [T343551]
  - stable: scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS [T343551]
  - stable: scsi: target: iscsit: Fix TAS handling during conn cleanup [T343551]
  - stable: vlan: partially enable SIOCSHWTSTAMP in container [T343551]
  - stable: scm: fix MSG_CTRUNC setting condition for SO_PASSSEC [T343551]
  - stable: tools: bpftool: Remove invalid \' json escape [T343551]
  - stable: wifi: ath6kl: reduce WARN to dev_dbg() in callback [T343551]
  - stable: wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() [T343551]
  - stable: wifi: ath9k: hif_usb: fix memory leak of remain_skbs [T343551]
  - stable: wifi: ath6kl: minor fix for allocation size [T343551]
  - stable: debugobject: Prevent init race with static objects [T343551]
  - stable: debugobjects: Move printk out of db->lock critical sections [T343551]
  - stable: debugobjects: Add percpu free pools [T343551]
  - stable: arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step [T343551]
  - stable: x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() [T343551]
  - stable: media: rc: gpio-ir-recv: Fix support for wake-up [T343551]
  - stable: media: rcar_fdp1: Fix refcount leak in probe and remove function [T343551]
  - stable: media: rcar_fdp1: Fix the correct variable assignments [T343551]
  - stable: media: saa7134: fix use after free bug in saa7134_finidev due to race condition [T343551]
  - stable: media: dm1105: Fix use after free bug in dm1105_remove due to race condition [T343551]
  - stable: x86/apic: Fix atomic update of offset in reserve_eilvt_offset() [T343551]
  - stable: drm/msm/adreno: drop bogus pm_runtime_set_active() [T343551]
  - stable: drm/msm/adreno: Defer enabling runpm until hw_init() [T343551]
  - stable: firmware: qcom_scm: Clear download bit during reboot [T343551]
  - stable: media: av7110: prevent underflow in write_ts_to_decoder() [T343551]
  - stable: media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. [T343551]
  - stable: media: bdisp: Add missing check for create_workqueue [T343551]
  - stable: ARM: dts: qcom: ipq4019: Fix the PCI I/O port range [T343551]
  - stable: EDAC/skx: Fix overflows on the DRAM row address mapping arrays [T343551]
  - stable: drm/probe-helper: Cancel previous job before starting new one [T343551]
  - stable: drm/vgem: add missing mutex_destroy [T343551]
  - stable: drm/rockchip: Drop unbalanced obj unref [T343551]
  - stable: selinux: ensure av_permissions.h is built when needed [T343551]
  - stable: selinux: fix Makefile dependencies of flask.h [T343551]
  - stable: ubifs: Free memory for tmpfile name [T343551]
  - stable: ubi: Fix return value overwrite issue in try_write_vid_and_data() [T343551]
  - stable: ubifs: Fix memleak when insert_old_idx() failed [T343551]
  - stable: Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" [T343551]
  - stable: i2c: omap: Fix standard mode false ACK readings [T343551]
  - stable: KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted [T343551]
  - stable: reiserfs: Add security prefix to xattr name in reiserfs_security_write() [T343551]
  - stable: pwm: meson: Fix axg ao mux parents [T343551]
  - stable: MIPS: fw: Allow firmware to pass a empty env [T343551]
  - stable: xhci: fix debugfs register accesses while suspended [T343551]
  - stable: debugfs: regset32: Add Runtime PM support [T343551]
  - stable: staging: iio: resolver: ads1210: fix config mode [T343551]
  - stable: perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) [T343551]
  - stable: USB: dwc3: fix runtime pm imbalance on unbind [T343551]
  - stable: ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 [T343551]
  - stable: iio: adc: palmas_gpadc: fix NULL dereference on rmmod [T343551]
  - stable: USB: serial: option: add UNISOC vendor and TOZED LT70C product [T343551]
  - stable: ASN.1: Fix check for strdup() success [T343551]
  - stable: iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() [T343551]
  - stable: counter: 104-quad-8: Fix race condition between FLAG and CNTR reads [T343551]
  - stable: ext4: fix use-after-free in ext4_xattr_set_entry [T343551]
  - stable: ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() [T343551]
  - stable: Revert "ext4: fix use-after-free in ext4_xattr_set_entry" [T343551]
  - stable: x86/purgatory: Don't generate debug info for purgatory.ro [T343551]
  - stable: memstick: fix memory leak if card device is never registered [T343551]
  - stable: nilfs2: initialize unused bytes in segment summary blocks [T343551]
  - stable: xen/netback: use same error messages for same errors [T343551]
  - stable: s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling [T343551]
  - stable: net: dsa: b53: mmap: add phy ops [T343551]
  - stable: scsi: core: Improve scsi_vpd_inquiry() checks [T343551]
  - stable: scsi: megaraid_sas: Fix fw_crash_buffer_show() [T343551]
  - stable: selftests: sigaltstack: fix -Wuninitialized [T343551]
  - stable: Input: i8042 - add quirk for Fujitsu Lifebook A574/H [T343551]
  - stable: f2fs: Fix f2fs_truncate_partial_nodes ftrace event [T343551]
  - stable: e1000e: Disable TSO on i219-LM card to increase speed [T343551]
  - stable: mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() [T343551]
  - stable: i40e: fix i40e_setup_misc_vector() error handling [T343551]
  - stable: i40e: fix accessing vsi->active_filters without holding lock [T343551]
  - stable: ARM: dts: rockchip: fix a typo error for rk3288 spdif node [T343551]
  - stable: coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug [T343551]
  - stable: watchdog: sbsa_wdog: Make sure the timeout programming is within the limits [T343551]
  - stable: ubi: Fix deadlock caused by recursively holding work_sem [T343551]
  - stable: mtd: ubi: wl: Fix a couple of kernel-doc issues [T343551]
  - stable: ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size [T343551]
  - stable: x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot [T343551]
  - stable: scsi: ses: Handle enclosure with just a primary component gracefully [T343551]
  - stable: efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L [T343551]
  - stable: i2c: imx-lpi2c: clean rx/tx buffers upon new message [T343551]
  - stable: power: supply: cros_usbpd: reclassify "default case!" as debug [T343551]
  - stable: net: macb: fix a memory corruption in extended buffer descriptor mode [T343551]
  - stable: sctp: fix a potential overflow in sctp_ifwdtsn_skip [T343551]
  - stable: qlcnic: check pci_reset_function result [T343551]
  - stable: niu: Fix missing unwind goto in niu_alloc_channels() [T343551]
  - stable: mtdblock: tolerate corrected bit-flips [T343551]
  - stable: Bluetooth: Fix race condition in hidp_session_thread [T343551]
  - stable: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} [T343551]
  - stable: ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards [T343551]
  - stable: ALSA: i2c/cs8427: fix iec958 mixer control deactivation [T343551]
  - stable: ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard [T343551]
  - stable: ALSA: emu10k1: fix capture interrupt handler unlinking [T343551]
  - stable: Revert "pinctrl: amd: Disable and mask interrupts on resume" [T343551]
  - stable: ALSA: hda/realtek: Add quirk for Clevo X370SNW [T343551]
  - stable: nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() [T343551]
  - stable: tty: serial: sh-sci: Fix Rx on RZ/G2L SCI [T343551]
  - stable: tty: serial: sh-sci: Fix transmit end interrupt handler [T343551]
  - stable: iio: dac: cio-dac: Fix max DAC write value check for 12-bit [T343551]
  - stable: USB: serial: option: add Quectel RM500U-CN modem [T343551]
  - stable: USB: serial: option: add Telit FE990 compositions [T343551]
  - stable: USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs [T343551]
  - stable: gpio: davinci: Add irq chip flag to skip set wake [T343551]
  - stable: sctp: check send stream number after wait_for_sndbuf [T343551]
  - stable: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta [T343551]
  - stable: pwm: cros-ec: Explicitly set .polarity in .get_state() [T343551]
  - stable: NFSv4: Fix hangs when recovering open state after a server reboot [T343551]
  - stable: NFSv4: Check the return value of update_open_stateid() [T343551]
  - stable: NFSv4: Convert struct nfs4_state to use refcount_t [T343551]
  - stable: pinctrl: amd: Disable and mask interrupts on resume [T343551]
  - stable: pinctrl: amd: disable and mask interrupts on probe [T343551]
  - stable: pinctrl: amd: Use irqchip template [T343551]
  - stable: pinctrl: Added IRQF_SHARED flag for amd-pinctrl driver [T343551]
  - stable: gfs2: Always check inode size of inline inodes [T343551]
  - stable: firmware: arm_scmi: Fix device node validation for mailbox transport [T343551]
  - stable: usb: host: ohci-pxa27x: Fix and & vs | typo [T343551]
  - stable: s390/uaccess: add missing earlyclobber annotations to __clear_user() [T343551]
  - stable: drm/etnaviv: fix reference leak when mmaping imported buffer [T343551]
  - stable: ALSA: usb-audio: Fix regression on detection of Roland VS-100 [T343551]
  - stable: ALSA: hda/conexant: Partial revert of a quirk for Lenovo [T343551]
  - stable: pinctrl: at91-pio4: fix domain name assignment [T343551]
  - stable: xen/netback: don't do grant copy across page boundary [T343551]
  - stable: cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL [T343551]
  - stable: cifs: prevent infinite recursion in CIFSGetDFSRefer() [T343551]
  - stable: Input: focaltech - use explicitly signed char type [T343551]
  - stable: Input: alps - fix compatibility with -funsigned-char [T343551]
  - stable: net: mvneta: make tx buffer array agnostic [T343551]
  - stable: net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only [T343551]
  - stable: i40e: fix registers dump after run ethtool adapter self test [T343551]
  - stable: can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write [T343551]
  - stable: scsi: megaraid_sas: Fix crash after a double completion [T343551]
  - stable: ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() [T343551]
  - stable: fbdev: au1200fb: Fix potential divide by zero [T343551]
  - stable: fbdev: lxfb: Fix potential divide by zero [T343551]
  - stable: fbdev: intelfb: Fix potential divide by zero [T343551]
  - stable: fbdev: nvidia: Fix potential divide by zero [T343551]
  - stable: fbdev: tgafb: Fix potential divide by zero [T343551]
  - stable: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() [T343551]
  - stable: ALSA: asihpi: check pao in control_message() [T343551]
  - stable: md: avoid signed overflow in slot_store() [T343551]
  - stable: bus: imx-weim: fix branch condition evaluates to a garbage value [T343551]
  - stable: ocfs2: fix data corruption after failed write [T343551]
  - stable: dm crypt: add cond_resched() to dmcrypt_write() [T343551]
  - stable: nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() [T343551]
  - stable: usb: chipidea: core: fix possible concurrent when switch role [T343551]
  - stable: usb: chipdea: core: fix return -EINVAL if request role is the same with current role [T343551]
  - stable: igb: revert rtnl_lock() that causes deadlock [T343551]
  - stable: usb: gadget: u_audio: don't let userspace block driver unbind [T343551]
  - stable: scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR [T343551]
  - stable: cifs: empty interface list when server doesn't support query interfaces [T343551]
  - stable: sh: sanitize the flags on sigreturn [T343551]
  - stable: net: usb: qmi_wwan: add Telit 0x1080 composition [T343551]
  - stable: net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 [T343551]
  - stable: scsi: ufs: core: Add soft dependency on governor_simpleondemand [T343551]
  - stable: scsi: target: iscsi: Fix an error message in iscsi_check_key() [T343551]
  - stable: m68k: Only force 030 bus error if PC not in exception table [T343551]
  - stable: ca8210: fix mac_len negative array access [T343551]
  - stable: riscv: Bump COMMAND_LINE_SIZE value to 1024 [T343551]
  - stable: uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 [T343551]
  - stable: hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs [T343551]
  - stable: Bluetooth: btqcomsmd: Fix command timeout after setting BD address [T343551]
  - stable: net: mdio: thunder: Add missing fwnode_handle_put() [T343551]
  - stable: hvc/xen: prevent concurrent accesses to the shared ring [T343551]
  - stable: net/sonic: use dma_mapping_error() for error check [T343551]
  - stable: erspan: do not use skb_mac_header() in ndo_start_xmit() [T343551]
  - stable: atm: idt77252: fix kmemleak when rmmod idt77252 [T343551]
  - stable: net/mlx5: Read the TC mapping of all priorities on ETS query [T343551]
  - stable: bpf: Adjust insufficient default bpf_jit_limit [T343551]
  - stable: net/ps3_gelic_net: Use dma_mapping_error [T343551]
  - stable: net/ps3_gelic_net: Fix RX sk_buff length [T343551]
  - stable: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info [T343551]
  - stable: net: usb: smsc95xx: Limit packet length to skb->len [T343551]
  - stable: i2c: imx-lpi2c: check only for enabled interrupt flags [T343551]
  - stable: igbvf: Regard vf reset nack as success [T343551]
  - stable: intel/igbvf: free irq on the error path in igbvf_request_msix() [T343551]
  - stable: iavf: fix inverted Rx hash condition leading to disabled hash [T343551]
  - stable: iavf: diet and reformat [T343551]
  - stable: intel-ethernet: rename i40evf to iavf [T343551]
  - stable: i40evf: Change a VF mac without reloading the VF driver [T343551]
  - stable: HID: uhid: Over-ride the default maximum data buffer value with our own [T343551]
  - stable: HID: core: Provide new max_buffer_size attribute to over-ride the default [T343551]
  - stable: serial: 8250_em: Fix UART port type [T343551]
  - stable: drm/i915: Don't use stolen memory for ring buffers with LLC [T343551]
  - stable: fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks [T343551]
  - stable: tracing: Make tracepoint lockdep check actually test something [T343551]
  - stable: tracing: Check field value in hist_field_name() [T343551]
  - stable: sh: intc: Avoid spurious sizeof-pointer-div warning [T343551]
  - stable: drm/amdkfd: Fix an illegal memory access [T343551]
  - stable: ext4: fix task hung in ext4_xattr_delete_inode [T343551]
  - stable: jffs2: correct logic when creating a hole in jffs2_write_begin [T343551]
  - stable: mmc: atmel-mci: fix race between stop command and start of next command [T343551]
  - stable: media: m5mols: fix off-by-one loop termination error [T343551]
  - stable: hwmon: (adt7475) Fix masking of hysteresis registers [T343551]
  - stable: hwmon: (adt7475) Display smoothing attributes in correct order [T343551]
  - stable: ethernet: sun: add check for the mdesc_grab() [T343551]
  - stable: net/iucv: Fix size of interrupt data [T343551]
  - stable: net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull [T343551]
  - stable: ipv4: Fix incorrect table ID in IOCTL path [T343551]
  - stable: block: sunvdc: add check for mdesc_grab() returning NULL [T343551]
  - stable: nvmet: avoid potential UAF in nvmet_req_complete() [T343551]
  - stable: net: usb: smsc75xx: Limit packet length to skb->len [T343551]
  - stable: net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails [T343551]
  - stable: net: tunnels: annotate lockless accesses to dev->needed_headroom [T343551]
  - stable: qed/qed_dev: guard against a possible division by zero [T343551]
  - stable: nfc: pn533: initialize struct pn533_out_arg properly [T343551]
  - stable: tcp: tcp_make_synack() can be called from process context [T343551]
  - stable: clk: HI655X: select REGMAP instead of depending on it [T343551]
  - stable: fs: sysfs_emit_at: Remove PAGE_SIZE alignment check [T343551]
  - stable: xt4: fix cgroup writeback accounting with fs-layer encryption [T343551]
  - stable: ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() [T343551]
  - stable: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties [T343551]
  - stable: net: caif: Fix use-after-free in cfusbl_device_notify() [T343551]
  - stable: drm/i915: Don't use BAR mappings for ring buffers with LLC [T343551]
  - stable: tipc: improve function tipc_wait_for_cond() [T343551]
  - stable: media: ov5640: Fix analogue gain control [T343551]
  - stable: PCI: Add SolidRun vendor ID [T343551]
  - stable: macintosh: windfarm: Use unsigned type for 1-bit bitfields [T343551]
  - stable: alpha: fix R_ALPHA_LITERAL reloc for large modules [T343551]
  - stable: MIPS: Fix a compilation issue [T343551]
  - stable: Revert "spi: mt7621: Fix an error message in mt7621_spi_probe()" [T343551]
  - stable: scsi: core: Remove the /proc/scsi/${proc_name} directory earlier [T343551]
  - stable: kbuild: generate modules.order only in directories visited by obj-y/m [T343551]
  - stable: kbuild: fix false-positive need-builtin calculation [T343551]
  - stable: udf: Detect system inodes linked into directory hierarchy [T343551]
  - stable: udf: Preserve link count of system files [T343551]
  - stable: udf: Remove pointless union in udf_inode_info [T343551]
  - stable: udf: reduce leakage of blocks related to named streams [T343551]
  - stable: udf: Explain handling of load_nls() failure [T343551]
  - stable: nfc: change order inside nfc_se_io error path [T343551]
  - stable: ext4: fix WARNING in ext4_update_inline_data [T343551]
  - stable: ext4: move where set the MAY_INLINE_DATA flag is set [T343551]
  - stable: ext4: fix RENAME_WHITEOUT handling for inline directories [T343551]
  - stable: x86/CPU/AMD: Disable XSAVES on AMD family 0x17 [T343551]
  - stable: staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh [T343551]
  - stable: staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script [T343551]
  - stable: wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" [T343551]
  - stable: thermal: intel: powerclamp: Fix cur_state for multi package system [T343551]
  - stable: f2fs: fix cgroup writeback accounting with fs-layer encryption [T343551]
  - stable: media: uvcvideo: Fix race condition with usb_kill_urb [T343551]
  - stable: media: uvcvideo: Provide sync and async uvc_ctrl_status_event [T343551]
  - stable: s390/setup: init jump labels before command line parsing [T343551]
  - stable: s390/maccess: add no DAT mode to kernel_write [T343551]
  - stable: Bluetooth: hci_sock: purge socket queues in the destruct() callback [T343551]
  - stable: phy: rockchip-typec: Fix unsigned comparison with less than zero [T343551]
  - stable: usb: uvc: Enumerate valid values for color matching [T343551]
  - stable: usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math [T343551]
  - stable: iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() [T343551]
  - stable: iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() [T343551]
  - stable: tools/iio/iio_utils:fix memory leak [T343551]
  - stable: mei: bus-fixup:upon error print return values of send and receive [T343551]
  - stable: tty: serial: fsl_lpuart: disable the CTS when send break signal [T343551]
  - stable: media: uvcvideo: Silence memcpy() run-time false positive warnings [T343551]
  - stable: media: uvcvideo: Handle errors from calls to usb_string [T343551]
  - stable: media: uvcvideo: Handle cameras with invalid descriptors [T343551]
  - stable: firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 [T343551]
  - stable: tracing: Add NULL checks for buffer in ring_buffer_free_read_page() [T343551]
  - stable: thermal: intel: quark_dts: fix error pointer dereference [T343551]
  - stable: scsi: ipr: Work around fortify-string warning [T343551]
  - stable: vc_screen: modify vcs_size() handling in vcs_read() [T343551]
  - stable: tcp: tcp_check_req() can be called from process context [T343551]
  - stable: ARM: dts: spear320-hmi: correct STMPE GPIO compatible [T343551]
  - stable: nfc: fix memory leak of se_io context in nfc_genl_se_io [T343551]
  - stable: 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() [T343551]
  - stable: 9p/xen: fix connection sequence [T343551]
  - stable: 9p/xen: fix version parsing [T343551]
  - stable: net: fix __dev_kfree_skb_any() vs drop monitor [T343551]
  - stable: watchdog: pcwd_usb: Fix attempting to access uninitialized memory [T343551]
  - stable: watchdog: Fix kmemleak in watchdog_cdev_register [T343551]
  - stable: watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path [T343551]
  - stable: x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list [T343551]
  - stable: ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed [T343551]
  - stable: ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() [T343551]
  - stable: ubifs: ubifs_writepage: Mark page dirty after writing inode failed [T343551]
  - stable: ubifs: dirty_cow_znode: Fix memleak in error handling path [T343551]
  - stable: ubifs: Re-statistic cleaned znode count if commit failed [T343551]
  - stable: ubi: Fix possible null-ptr-deref in ubi_free_volume() [T343551]
  - stable: ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() [T343551]
  - stable: ubi: Fix use-after-free when volume resizing failed [T343551]
  - stable: ubifs: Reserve one leb for each journal head while doing budget [T343551]
  - stable: ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 [T343551]
  - stable: ubifs: Fix wrong dirty space budget for dirty inode [T343551]
  - stable: ubifs: Rectify space budget for ubifs_xrename() [T343551]
  - stable: ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted [T343551]
  - stable: ubi: ensure that VID header offset + VID header size <= alloc, size [T343551]
  - stable: um: vector: Fix memory leak in vector_config [T343551]
  - stable: pwm: stm32-lp: fix the check on arr and cmp registers update [T343551]
  - stable: fs/jfs: fix shift exponent db_agl2size negative [T343551]
  - stable: kbuild: Port silent mode detection to future gnu make. [T343551]
  - stable: wifi: ath9k: use proper statements in conditionals [T343551]
  - stable: drm/radeon: Fix eDP for single-display iMac11,2 [T343551]
  - stable: PCI: Avoid FLR for AMD FCH AHCI adapters [T343551]
  - stable: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() [T343551]
  - stable: scsi: ses: Fix possible desc_ptr out-of-bounds accesses [T343551]
  - stable: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses [T343551]
  - stable: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() [T343551]
  - stable: scsi: ses: Don't attach if enclosure has no components [T343551]
  - stable: scsi: qla2xxx: Fix erroneous link down [T343551]
  - stable: scsi: qla2xxx: Fix link failure in NPIV environment [T343551]
  - stable: ktest.pl: Add RUN_TIMEOUT option with default unlimited [T343551]
  - stable: ktest.pl: Fix missing "end_monitor" when machine check fails [T343551]
  - stable: ktest.pl: Give back console on Ctrt^C on monitor [T343551]
  - stable: media: ipu3-cio2: Fix PM runtime usage_count in driver unbind [T343551]
  - stable: mips: fix syscall_get_nr [T343551]
  - stable: alpha: fix FEN fault handling [T343551]
  - stable: rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails [T343551]
  - stable: ARM: dts: exynos: correct TMU phandle in Odroid XU [T343551]
  - stable: ARM: dts: exynos: correct TMU phandle in Exynos4 [T343551]
  - stable: dm flakey: don't corrupt the zero page [T343551]
  - stable: dm flakey: fix logic when corrupting a bio [T343551]
  - stable: wifi: cfg80211: Fix use after free for wext [T343551]
  - stable: wifi: rtl8xxxu: Use a longer retry limit of 48 [T343551]
  - stable: ext4: refuse to create ea block when umounted [T343551]
  - stable: ext4: optimize ea_inode block expansion [T343551]
  - stable: ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() [T343551]
  - stable: ima: Align ima_file_mmap() parameters with mmap_file LSM hook [T343551]
  - stable: Documentation/hw-vuln: Document the interaction between IBRS and STIBP [T343551]
  - stable: x86/microcode/AMD: Fix mixed steppings support [T343551]
  - stable: x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter [T343551]
  - stable: x86/reboot: Disable SVM, not just VMX, when stopping CPUs [T343551]
  - stable: x86/reboot: Disable virtualization in an emergency if SVM is supported [T343551]
  - stable: x86/crash: Disable virt in core NMI crash handler to avoid double shootdown [T343551]
  - stable: x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) [T343551]
  - stable: udf: Fix file corruption when appending just after end of preallocated extent [T343551]
  - stable: udf: Do not update file length for failed writes to inline files [T343551]
  - stable: udf: Do not bother merging very long extents [T343551]
  - stable: udf: Truncate added extents on failed expansion [T343551]
  - stable: ocfs2: fix non-auto defrag path not working issue [T343551]
  - stable: ocfs2: fix defrag path triggering jbd2 ASSERT [T343551]
  - stable: f2fs: fix information leak in f2fs_move_inline_dirents() [T343551]
  - stable: hfs: fix missing hfs_bnode_get() in __hfs_bnode_create [T343551]
  - stable: ARM: dts: exynos: correct HDMI phy compatible in Exynos4 [T343551]
  - stable: s390/kprobes: fix current_kprobe never cleared after kprobes reenter [T343551]
  - stable: s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler [T343551]
  - stable: s390: discard .interp section [T343551]
  - stable: rtc: pm8xxx: fix set-alarm race [T343551]
  - stable: firmware: coreboot: framebuffer: Ignore reserved pixel color bits [T343551]
  - stable: wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu [T343551]
  - stable: dm cache: add cond_resched() to various workqueue loops [T343551]
  - stable: dm thin: add cond_resched() to various workqueue loops [T343551]
  - stable: pinctrl: at91: use devm_kasprintf() to avoid potential leaks [T343551]
  - stable: regulator: s5m8767: Bounds check id indexing into arrays [T343551]
  - stable: regulator: max77802: Bounds check regulator id against opmode [T343551]
  - stable: ASoC: kirkwood: Iterate over array indexes instead of using pointer math [T343551]
  - stable: docs/scripts/gdb: add necessary make scripts_gdb step [T343551]
  - stable: drm/msm/dsi: Add missing check for alloc_ordered_workqueue [T343551]
  - stable: drm/radeon: free iio for atombios when driver shutdown [T343551]
  - stable: drm/amd/display: Fix potential null-deref in dm_resume [T343551]
  - stable: net/mlx5: fw_tracer: Fix debug print [T343551]
  - stable: ACPI: video: Fix Lenovo Ideapad Z570 DMI match [T343551]
  - stable: m68k: Check syscall_trace_enter() return code [T343551]
  - stable: net: bcmgenet: Add a check for oversized packets [T343551]
  - stable: ACPI: Don't build ACPICA with '-Os' [T343551]
  - stable: inet: fix fast path in __inet_hash_connect() [T343551]
  - stable: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds [T343551]
  - stable: thermal: intel: Fix unsigned comparison with less than zero [T343551]
  - stable: rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() [T343551]
  - stable: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() [T343551]
  - stable: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy [T343551]
  - stable: udf: Define EFSCORRUPTED error code [T343551]
  - stable: rpmsg: glink: Avoid infinite loop on intent for missing channel [T343551]
  - stable: media: i2c: ov7670: 0 instead of -EINVAL was returned [T343551]
  - stable: media: i2c: ov772x: Fix memleak in ov772x_probe() [T343551]
  - stable: powerpc: Remove linker flag from KBUILD_AFLAGS [T343551]
  - stable: media: platform: ti: Add missing check for devm_regulator_get [T343551]
  - stable: MIPS: vpe-mt: drop physical_memsize [T343551]
  - stable: powerpc/rtas: ensure 4KB alignment for rtas_data_buf [T343551]
  - stable: powerpc/rtas: make all exports GPL [T343551]
  - stable: powerpc/pseries/lparcfg: add missing RTAS retry status handling [T343551]
  - stable: clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() [T343551]
  - stable: powerpc/powernv/ioda: Skip unallocated resources when mapping to PE [T343551]
  - stable: Input: ads7846 - don't check penirq immediately for 7845 [T343551]
  - stable: Input: ads7846 - don't report pressure for ads7845 [T343551]
  - stable: mtd: rawnand: sunxi: Fix the size of the last OOB region [T343551]
  - stable: mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() [T343551]
  - stable: selftests/ftrace: Fix bash specific "==" operator [T343551]
  - stable: sparc: allow PM configs for sparc32 COMPILE_TEST [T343551]
  - stable: perf tools: Fix auto-complete on aarch64 [T343551]
  - stable: perf llvm: Fix inadvertent file creation [T343551]
  - stable: gfs2: jdata writepage fix [T343551]
  - stable: cifs: Fix warning and UAF when destroy the MR list [T343551]
  - stable: cifs: Fix lost destroy smbd connection when MR allocate failed [T343551]
  - stable: nfsd: fix race to check ls_layouts [T343551]
  - stable: dm: remove flush_scheduled_work() during local_exit() [T343551]
  - stable: hwmon: (mlxreg-fan) Return zero speed for broken fan [T343551]
  - stable: spi: bcm63xx-hsspi: Fix multi-bit mode setting [T343551]
  - stable: spi: bcm63xx-hsspi: fix pm_runtime [T343551]
  - stable: scsi: aic94xx: Add missing check for dma_map_single() [T343551]
  - stable: hwmon: (ltc2945) Handle error case in ltc2945_value_store [T343551]
  - stable: gpio: vf610: connect GPIO label to dev name [T343551]
  - stable: ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() [T343551]
  - stable: drm/mediatek: Clean dangling pointer on bind error path [T343551]
  - stable: drm/mediatek: Drop unbalanced obj unref [T343551]
  - stable: gpu: host1x: Don't skip assigning syncpoints to channels [T343551]
  - stable: drm/msm/dpu: Add check for pstates [T343551]
  - stable: drm/msm: use strscpy instead of strncpy [T343551]
  - stable: drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness [T343551]
  - stable: ALSA: hda/ca0132: minor fix for allocation size [T343551]
  - stable: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups [T343551]
  - stable: pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours [T343551]
  - stable: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue [T343551]
  - stable: gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() [T343551]
  - stable: drm/vc4: dpi: Fix format mapping for RGB565 [T343551]
  - stable: drm/vc4: dpi: Add option for inverting pixel clock and output enable [T343551]
  - stable: drm: Clarify definition of the DRM_BUS_FLAG_(PIXDATA|SYNC)_* macros [T343551]
  - stable: drm/bridge: megachips: Fix error handling in i2c_register_driver() [T343551]
  - stable: drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC [T343551]
  - stable: selftest: fib_tests: Always cleanup before exit [T343551]
  - stable: irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts [T343551]
  - stable: irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts [T343551]
  - stable: can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error [T343551]
  - stable: wifi: mac80211: make rate u32 in sta_set_rate_info_rx() [T343551]
  - stable: crypto: crypto4xx - Call dma_unmap_page when done [T343551]
  - stable: wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() [T343551]
  - stable: wifi: iwl4965: Add missing check for create_singlethread_workqueue() [T343551]
  - stable: wifi: iwl3945: Add missing check for create_singlethread_workqueue [T343551]
  - stable: RISC-V: time: initialize hrtimer based broadcast clock event device [T343551]
  - stable: m68k: /proc/hardware should depend on PROC_FS [T343551]
  - stable: rds: rds_rm_zerocopy_callback() correct order for list_add_tail() [T343551]
  - stable: libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() [T343551]
  - stable: Bluetooth: L2CAP: Fix potential user-after-free [T343551]
  - stable: irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe [T343551]
  - stable: irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains [T343551]
  - stable: net/mlx5: Enhance debug print in page allocation failure [T343551]
  - stable: powercap: fix possible name leak in powercap_register_zone() [T343551]
  - stable: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() [T343551]
  - stable: wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails [T343551]
  - stable: ath9k: htc: clean up statistics macros [T343551]
  - stable: ath9k: hif_usb: simplify if-if to if-else [T343551]
  - stable: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function [T343551]
  - stable: wifi: orinoco: check return value of hermes_write_wordrec() [T343551]
  - stable: lib/mpi: Fix buffer overrun when SG is too long [T343551]
  - stable: ACPICA: Drop port I/O validation for some regions [T343551]
  - stable: wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() [T343551]
  - stable: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() [T343551]
  - stable: wifi: ipw2200: fix memory leak in ipw_wdev_init() [T343551]
  - stable: wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: ipw2x00: switch from 'pci_' to 'dma_' API [T343551]
  - stable: wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() [T343551]
  - stable: rtlwifi: fix -Wpointer-sign warning [T343551]
  - stable: wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() [T343551]
  - stable: wifi: libertas: fix memory leak in lbs_init_adapter() [T343551]
  - stable: wifi: rsi: Fix memory leak in rsi_coex_attach() [T343551]
  - stable: block: bio-integrity: Copy flags when bio_integrity_payload is cloned [T343551]
  - stable: blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx [T343551]
  - stable: arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node [T343551]
  - stable: arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name [T343551]
  - stable: arm64: dts: amlogic: meson-gx: add missing unit address to rng node name [T343551]
  - stable: arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible [T343551]
  - stable: arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name [T343551]
  - stable: arm64: dts: meson-axg: enable SCPI [T343551]
  - stable: arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name [T343551]
  - stable: ARM: imx: Call ida_simple_remove() for ida_simple_get [T343551]
  - stable: ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato [T343551]
  - stable: ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() [T343551]
  - stable: arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address [T343551]
  - stable: arm64: dts: meson-gx: Fix Ethernet MAC address unit name [T343551]
  - stable: ARM: zynq: Fix refcount leak in zynq_early_slcr_init [T343551]
  - stable: ARM: OMAP2+: Fix memory leak in realtime_counter_init() [T343551]
  - stable: USB: core: Don't hold device lock while reading the "descriptors" sysfs file [T343551]
  - stable: USB: serial: option: add support for VW/Skoda "Carstick LTE" [T343551]
  - stable: dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size [T343551]
  - stable: vc_screen: don't clobber return value in vcs_read [T343551]
  - stable: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF [T343551]
  - stable: IB/hfi1: Assign npages earlier [T343551]
  - stable: btrfs: send: limit number of clones and allocated memory size [T343511]
  - stable: ARM: dts: rockchip: add power-domains property to dp node on rk3288 [T343511]
  - stable: ext4: Fix function prototype mismatch for ext4_feat_ktype [T343511]
  - stable: wifi: mwifiex: Add missing compatible string for SD8787 [T343511]
  - stable: mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh [T343551]
  - stable: powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 [T343551]
  - stable: can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len [T343551]
  - stable: random: always mix cycle counter in add_latent_entropy() [T343551]
  - stable: powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G [T343551]
  - stable: wifi: rtl8xxxu: gen2: Turn on the rate control [T342551]
  - phytium: 4.19 add crtc [T351611]
  - uos: add leak config for sw_64


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.184
changelog:
  - uos: fix not being able to install kernel-* after install kernel-debug-* [T00000]
  - anolis: LoongArch: Limit min pci msi-x/msi vector number [G005956]
  - uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]
  - uos: Revert "uos: diable irq limit of la64 by default [T358195]"
  - Revert "uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]"
  - euler: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers [T365775]
  - uos: PCI/MSI: Fix the nvec value when maxvec is greater than 32 for loongarch [G005956]
  - uos: net: hns3: fix the network kept restarting [T365939]
  - euler: net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode [T365939]
  - uos: fix merge issue of "mainline: net: hns3: use capabilities queried from firmware" [T365939]
  - euler: net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization [T365939]
  - euler: net: hns: fix fake link up on xge port [T365939]
  - euler: net: hns: fix wrong head when modify the tx feature when sending packets [T365939]
  - euler: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg [T365939]
  - euler: net: hns3: fix not call nic_call_event() problem when reset failed [T365939]
  - uos: arm64: fix crash kernel dump core failed [B277607]
  - uos: update crashkernel size with guestos [B277393]
  - uos: srpm: remove version number of whitelists and dw [T00000]
  - uos: Upgrade megaraid driver to version 07.727.03.00 [T364381]
  - uos: Add manufacturer's ps3stor driver, version:2.2.0.16 [T364379]
  - uos: update srpm to 4.19.0-91.183 [T00000]
  - uos: sw_64: fix implicit declaration of 'vzalloc'i by qla2xxx [T359831]
  - uos: fix cpufreq of la64 compile failed [T325607]
  - uos: srpm: disable sign-kernel in c7 [T362695]
  - uos: fix netswift compile error [T325607]
  - uos: fix compile error by update qla2xxx hda driver version to 10.02.12.01-k [T359831]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.185
changelog:
  - uos: diable irq limit of la64 by default again [T358195] [G005956]
  - uos: c7: Change the startup order of the kernel [T00000] [B302583]
  - uos: loongarch: LoongArch: Fixup extioi bounce [B282411]
  - uos: loongarch: LoongArch:irqchip/loongarch-extioi: Add compat support on mainline kvm [B282411]
  - uos: open configuration CONFIG_BPF_UNPRIV_DEFAULT_OFF for arm64 and loongarch [T364381]
  - uos: Revert "LS7A2000: PCIE: Fixup GPU card error" [B262995]
  - uos: delete useless logs and enable cn font [B276033]
  - uos: open sgx driver for x86 [T373551]
  - uos: move linux-sgx-driver to kernel [T373551]
  - uos: scsi: update ccusr to 1.0-b2354-g38486a40 [D2024110003]
  - uos: printk: Avoid logbuf_lock deadlock in oops_end() [D2024120001]
  - uos: i2c/zhaoxin: I2C controller driver enhancement and optimization [D2024120001]
  - uos: perf/x86/zhaoxin/uncore: update KX-7000 support [D2024120001]
  - uos: fs/address_space: move i_mmap_rwsem to mitigate a false sharing with i_mmap. [D2024120001]
  - uos: Move SM4 Block Cipher algorithm driver to the arch directory [D2024120001]
  - uos: Move SM3 Secure Hash algorithm driver to the arch directory [D2024120001]
  - uos: x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors [D2024120001]
  - uos: perf/x86/zhaoxin/uncore: add KX-7000 support [D2024120001]
  - uos: USB: UAS: return ENODEV when submit urbs fail with device not attached [D2024120001]
  - uos: PCI: Extend PCI root port device IDs for Zhaoxin platforms [D2024120001]
  - uos: crypto: x86/sm2: update SM2 algorithm driver using inline assembly [D2024120001]
  - uos: efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode [D2024120001]
  - uos: hwrng: add Zhaoxin rng driver base on rep_xstore instruction [D2024120001]
  - uos: i2c: zhaoxin: Add support for Zhaoxin KX-7000 [D2024120001]
  - uos: HDAC: Update support for Zhaoxin NB HDAC [D2024120001]
  - uos: Log for Add support for Zhaoxin Processors [D2024120001]
  - euler: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h [D2025020027]
  - euler: EDAC/amd64: Add support for Hygon family 18h model 7h [D2025020027]
  - euler: x86/amd_nb: Add support for Hygon family 18h model 7h [D2025020027]
  - euler: ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio [D2025020027]
  - euler: hwmon/k10temp: Add support for Hygon family 18h model 10h [D2025020027]
  - euler: EDAC/amd64: Add support for Hygon family 18h model 10h [D2025020027]
  - euler: x86/amd_nb: Add support for Hygon family 18h model 10h [D2025020027]
  - euler: x86/cpu: Get LLC ID for Hygon family 18h model 10h [D2025020027]
  - euler: perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU [D2025020027]
  - euler: KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog [D2025020027]
  - euler: KVM: x86: Adjust counter sample period after a wrmsr [D2025020027]
  - euler: KVM: x86: Fix perfctr WRMSR for running counters [D2025020027]
  - euler: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h [D2025020027]
  - euler: EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h [D2025020027]
  - euler: x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h [D2025020027]
  - euler: EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h [D2025020027]
  - euler: EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h [D2025020027]
  - euler: EDAC/mc_sysfs: Increase legacy channel support to 12 [D2025020027]
  - euler: hwmon: (k10temp) Remove unused definitions [D2025020027]
  - euler: hwmon: (k10temp) Remove residues of current and voltage [D2025020027]
  - euler: x86/cpu/amd: Set __max_die_per_package on AMD [D2025020027]
  - euler: ALSA: hda: Fix single byte write failure issue for Hygon [D2025020027]
  - euler: ALSA: hda: Add Hygon HD-Audio support [D2025020027]
  - uos: scsi/raid: update ps3stor from 2.2.0.16 to 2.5.0.30 [D2025020019]
  - uos: drivers/net: update ixgbe from 5.16.5 to 5.19.9 [D2025010010]
  - loongarch: LoongArch: Backport page table code [G006496]
  - loongarch: LoongArch: LSVZ: Replace set_pte with kvm_set_pte [G006496]
  - loongarch: LoongArch: KVM: Select huge page only if secondary mmu supports it [G006496]
  - loongarch: LoongArch: LSVZ: disable vcpu preempt detection [G006496]
  - loongarch: LoongArch: LSVZ: Delay secondary mmu tlb flush until guest entry [G006496]
  - loongarch: LoongArch: LSVZ: Remove SW timer switch when vcpu is halt polling [G006496]
  - loongarch: Loongarch: Revert quicklist [G006496]
  - uos: gpu/drm: update mwv207 from 1.2.0 to 1.5.0 [D2024110005]
  - euler: Revert "NFS: Don't interrupt file writeout due to fatal errors" [G006687]
  - uos: set the uos feature to off by default [T370941]
  - mainline: bpf: Avoid storing modifier to info->btf_id [G2024122000034]
  - euler: cpuidle: menu: Avoid computations when result will be discarded [G006912]
  - uos: Loongarch: fix rebooting failed with ls2k500 [B274249]
  - uos: perf: Fix the logical in ebtables optimise. [G005616]
  - uos: perf: ebtables: fix cpu 100% during wrk testing. [G005616]
  - uos: fix kernel panic caused by memory out of bounds [B255527]
  - uos: fix megaraid freeze during reboot [B262995]
  - uos: remove driver ps3stor identity equation [T364379]
  - feat: modify the hook add timing for network control
  - uos: update srpm to 4.19.0-91.184 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.186
changelog:
  - uos: add CRYPTO_DEV_ZHAOXIN depend for CRYPTO_ZHAOXIN_GMI_SM3/SM4 [D2024120001]
  - uos: Revert "uos: move linux-sgx-driver to kernel [T373551]" [T373551]
  - uos: Revert "uos: open sgx driver for x86 [T373551]" [T373551]
  - uos: update srpm to 4.19.0-91.185 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.187
changelog:
  - uos: net/linkdata: fix compile error [T363175]
  - uos: net/linkdata: fix error by ec52e84dc185 [T363175]
  - mainline: {CVE-2024-26974} crypto: qat - resolve race condition during AER recovery
  - mainline: crypto: qat - fix double free during reset
  - mainline: {CVE-2024-38612} ipv6: sr: fix invalid unregister error path
  - mainline: ipv6: sr: fix incorrect unregister order
  - mainline: ipv6: sr: add missing seg6_local_exit
  - mainline: ipv6: sr: fix possible use-after-free and null-ptr-deref
  - mainline: {CVE-2024-50278} dm cache: fix potential out-of-bounds access on the first resume
  - mainline: dm cache: optimize dirty bit checking with find_next_bit when resizing
  - mainline: {CVE-2024-27405} usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - mainline: usb: gadget: f_ncm: Always set current gadget in ncm_bind()
  - mainline: usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
  - mainline: usb: gadget: f_ncm: Fix NTP-32 support
  - mainline: usb: gadget: f_ncm: Add OS descriptor support
  - mainline: {CVE-2024-36940} pinctrl: core: delete incorrect free in pinctrl_enable()
  - mainline: {CVE-2024-27395} net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - mainline: net: openvswitch: ovs_ct_exit to be done under ovs_lock
  - mainline: {CVE-2024-35960} net/mlx5: Properly link new fs rules into the tree
  - Merge "uos: remove legacy traffic auditing code [B299895]" into uos_dev
  - uos: remove legacy traffic auditing code [B299895]
  - Merge "stable: scsi: core: Fix a procfs host directory removal regression [B308003]" into uos_dev
  - Merge "stable: scsi: core: Fix a comment in function scsi_host_dev_release() [B308003]" into uos_dev
  - stable: scsi: core: Fix a procfs host directory removal regression [B308003]
  - stable: scsi: core: Fix a comment in function scsi_host_dev_release() [B308003]
  - uos: ethtool: Disable netlink interface by default [B306455]
  - Merge "stable: serial: 8250_port: Check IRQ data before use [T370631] [B308255]" into uos_dev
  - Merge changes I5b7f7452,Ideef1c95,Ica5c9d7e,Ifb0aeb80,I27407e68, ... into uos_dev
  - Merge changes from topic "cve-dev" into uos_dev
  - Merge changes from topic "G2025031100008" into uos_dev
  - uos: arm64: HWCAP: Fix PACA/PACG without a {KERNEL_}HWCAP_ prefix [B306767]
  - Merge "stable: arm64: cpufeature: Rework ptr auth hwcaps using multi_entry_cap_matches [B306767]" into uos_dev
  - Merge "stable: arm64: cpufeature: Reduce number of pointer auth CPU caps from 6 to 4 [B306767]" into uos_dev
  - uos: net/wangxun: update wangxun txgbe driver to 1.3.6.4 [D20250327LIANTOG]
  - stable: arm64: cpufeature: Rework ptr auth hwcaps using multi_entry_cap_matches [B306767]
  - stable: arm64: cpufeature: Reduce number of pointer auth CPU caps from 6 to 4 [B306767]
  - stable: serial: 8250_port: Check IRQ data before use [T370631] [B308255]
  - uos: security: merge sid2 decoupling function from desktop 1070 kernel [T372497]
  - uos: open LOONGSON_SE_SDF [D20250320]
  - loongarch: LoongArch: irqchip/pch-lpc: fix irq_mask error. [D20250320]
  - loongarch: LoongArch: fix kexec and kdump kernel runtime error [D20250320]
  - loongarch: module: kallsyms: Filter out mapping symbols from module core kallsyms [D20250320]
  - loongarch: LoongArch: KVM: Add interrupt checking with Loongson AVEC [D20250320]
  - loongarch: LoongArch: KVM: Fixed VM migration failure after ptw was enabled [D20250320]
  - loongarch: /kvm: Fixed the virtual machine crash problem after the physical machine wakes up from sleep [D20250320]
  - loongarch: driver/irqchip: add extioi cpu encode support for 6.6 host [D20250320]
  - loongarch: cpufreq: loongson3-acpi: Change failed status to disable [D20250320]
  - loongarch: LoongArch:LSVZ: Fix typo issue using funtion kvm_gcsr_write() [D20250320]
  - loongarch: LoongArch: KVM: enable ptw for kvm [D20250320]
  - loongarch: Revert "locking/pvqspinlock: Use try_cmpxchg() in pv_unhash" [D20250320]
  - loongarch: LoongArch:LSVZ: Clear LLBCTL if secondary mmu mapping is changed [D20250320]
  - loongarch: LoongArch: Add retry support for handle_mm_fault [D20250320]
  - loongarch: PCI/portdrv: Do not disable PCIE ports for loongarch [D20250320]
  - loongarch: locking/pvqspinlock: Use try_cmpxchg() in pv_unhash [D20250320]
  - loongarch: cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 [D20250320]
  - loongarch: drivers/se: add ACPI support for Loongson SE and SDF driver [D20250320]
  - loongarch: LoongArch: add hypcall to emulate syscall in kvm [D20250320]
  - loongarch: LoongArch: Let pmd_present() return true when splitting pmd [D20250320]
  - loongarch: Loongarch:Fixup reserve screen info memory for above-4G firmware [D20250320]
  - loongarch: drivers/iommu: Repair the iommu pass-through TLB refresh and page table mapping problem [D20250320]
  - loongarch: LoongArch: Revert qspinlock to test-and-set simple lock on VM [D20250320]
  - loongarch: LoongArch: LSVZ: Detect host pagesize by page table walk [D20250320]
  - loongarch: LoongArch: LSVZ: Revert allocate page table with numa support [D20250320]
  - loongarch: misc: driver for loongson se sdf [D20250320]
  - loongarch: soc: driver for loongson se [D20250320]
  - loongarch: LoongArch: Make KASAN usable for variable cpu_vabits [D20250320]
  - loongarch: LoongArch: Add AVEC irqchip support [D20250320]
  - loongarch: LoongArch: Get correct cores_per_package for SMT systems [D20250320]
  - loongarch: LoongArch: fixup for hardware ptw [D20250320]
  - loongarch: drivers/pci: Enables the acs ability of loongson Bridge [D20250320]
  - loongarch: drivers/iommu: Support iommu for 3c6000 [D20250320]
  - loongarch: fbdev: ls2k500sfb fix default video memory size. [D20250320]
  - loongarch: acpi: mcfg quirk: Increased multi-chip support for the 3C6000, now capable of supporting up to eight chips. [D20250320]
  - loongarch: irqchip: irq-loongson-pch-msi: Use pch_msi_priv[0] as the default value [D20250320]
  - loongarch: fbdev: ls2k500sfb update var info according to resolution. [D20250320]
  - loongarch: PPTT: Supports SMT when physical cores are discontinuous. [D20250320]
  - loongarch: memblock,arm64: expand the static memblock memory table [D20250320]
  - loongarch: LoongArch: Fixup INIT_MEMBLOCK_RESERVED_REGIONS for loongarch [D20250320]
  - loongarch: pci/quirks: LS7A2000 enble msi [D20250320]
  - loongarch: LoongArch: Add irq_work support via self IPIs [D20250320]
  - loongarch: LoongArch: kdump: fix huge memory machine trigger capture kernel failure [D20250320]
  - loongarch: sizes.h: Add entries between SZ_8G and SZ_64T [D20250320]
  - loongarch: loongson: spi: fix repeated kfree() [D20250320]
  - loongarch: cpufreq: loongson3-acpi: Fixed the error of assigning the value of Mhz to Khz [D20250320]
  - loongarch: loongson: pic: update interrupt registration policy [D20250320]
  - loongarch: ACPI: Fix unmet direct dependencies detected for ACPI_PPTT [D20250320]
  - loongarch: LoongArch: Fix kernel boot failure with CONFIG_KASAN [D20250320]
  - anolis: ipvs: add sysctl_run_estimation to support disable estimation [G2025031100008]
  - uos: Revert "ipvs: move estimation from timer to kworker" [G2025031100008]
  - uos: Revert "net: ipvs: add sysctl_run_estimation to support disable estimation" [G2025031100008]
  - stable: {CVE-2022-48966} net: mvneta: Prevent out of bounds read in mvneta_config_rss() [T371989]
  - stable: {CVE-2024-26976} KVM: Always flush async #PF workqueue when vCPU is being destroyed [T371989]
  - stable: {CVE-2024-44999} gtp: pull network headers in gtp_dev_xmit() [T371989]
  - stable: {CVE-2023-52885} SUNRPC: Fix UAF in svc_tcp_listen_data_ready() [T371989]
  - stable: {CVE-2024-46800} sch/netem: fix use after free in netem_dequeue [T371989]
  - stable: {CVE-2024-26852} net/ipv6: avoid possible UAF in ip6_route_mpath_notify() [T371989]
  - stable: {CVE-2024-41046} net: ethernet: lantiq_etop: fix double free in detach [T371989]
  - stable: {CVE-2024-53061} media: s5p-jpeg: prevent buffer overflows [T371989]
  - stable: {CVE-2024-50230} nilfs2: fix kernel bug due to missing clearing of checked flag [T371989]
  - stable: {CVE-2024-40901} scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory [T371989]
  - stable: {CVE-2024-53155} ocfs2: fix uninitialized value in ocfs2_file_read_iter() [T371989]
  - stable: {CVE-2024-26934} USB: core: Fix deadlock in usb_deauthorize_interface() [T371989]
  - stable: {CVE-2024-53156} wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() [T371989]
  - stable: {CVE-2024-56548} hfsplus: don't query the device logical block size multiple times [T371989]
  - stable: {CVE-2023-52840} Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() [T371989]
  - stable: {CVE-2024-46782} ila: call nf_unregister_net_hooks() sooner [T371989]
  - stable: {CVE-2024-44998} atm: idt77252: prevent use after free in dequeue_rx() [T371989]
  - stable: {CVE-2024-26884} bpf: Fix hashtab overflow check on 32-bit arches [T371989]
  - stable: {CVE-2024-53057} net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT [T371989]
  - stable: {CVE-2024-38552} drm/amd/display: Fix potential index out of bounds in color transformation function [T371989]
  - stable: {CVE-2024-46738} VMCI: Fix use-after-free when removing resource in vmci_resource_remove() [T371989]
  - stable: {CVE-2024-38560} scsi: bfa: Ensure the copied buf is NUL terminated [T371989]
  - stable: {CVE-2024-50262} bpf: Fix out-of-bounds write in trie_get_next_key() [T371989]
  - stable: {CVE-2024-53227} scsi: bfa: Fix use-after-free in bfad_im_module_exit() [T371989]
  - stable: {CVE-2024-50267} USB: serial: io_edgeport: fix use after free in debug printk [T371989]
  - stable: {CVE-2024-35847} irqchip/gic-v3-its: Prevent double free on error [T371989]
  - stable: {CVE-2024-50302} HID: core: zero-initialize the report buffer [T371989]
  - stable: {CVE-2024-41087} ata: libata-core: Fix double free on error [T371989]
  - stable: {CVE-2023-52847} media: bttv: fix use after free error due to btv->timeout timer [T371989]
  - stable: {CVE-2024-50279} dm cache: fix out-of-bounds access to the dirty bitset when resizing [T371989]
  - stable: {CVE-2024-53173} NFSv4.0: Fix a use-after-free problem in the asynchronous open() [T371989]
  - stable: {CVE-2024-35821} ubifs: Set page uptodate in the correct place [T371989]
  - stable: {CVE-2024-38627} stm class: Fix a double free in stm_register_device() [T371989]
  - stable: {CVE-2024-27024} net/rds: fix WARNING in rds_conn_connect_if_down [T371989]
  - stable: {CVE-2024-53104} media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format [T371989]
  - stable: {CVE-2024-36886} tipc: fix UAF in error path [T371989]
  - stable: {CVE-2024-50269} usb: musb: sunxi: Fix accessing an released usb phy [T371989]
  - stable: {CVE-2024-56704} 9p/xen: fix release of IRQ [T371989]
  - stable: {CVE-2024-44987} ipv6: prevent UAF in ip6_send_skb() [T371989]
  - stable: {CVE-2024-50301} security/keys: fix slab-out-of-bounds in key_task_permission [T371989]
  - stable: {CVE-2024-46674} usb: dwc3: st: fix probed platform device ref count on probe error path [T371989]
  - stable: {CVE-2024-50264} vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans [T371989]
  - stable: {CVE-2024-53165} sh: intc: Fix use-after-free bug in register_intc_controller() [T371989]
  - stable: {CVE-2023-52922} can: bcm: Fix UAF in bcm_proc_show() [T371989]
  - stable: {CVE-2024-53142} initramfs: avoid filename buffer overrun [T371989]
  - stable: {CVE-2024-53239} ALSA: 6fire: Release resources at card release [T371989]
  - stable: {CVE-2024-46673} scsi: aacraid: Fix double-free on probe failure [T371989]
  - stable: {CVE-2024-42148} bnx2x: Fix multiple UBSAN array-index-out-of-bounds [T371989]
  - stable: {CVE-2024-27043} media: edia: dvbdev: fix a use-after-free [T371989]
  - stable: {CVE-2023-52691} drm/amd/pm: fix a double-free in si_dpm_init [T371989]
  - stable: {CVE-2023-52679} of: Fix double free in of_parse_phandle_with_args_map [T371989]
  - stable: {CVE-2024-38583} nilfs2: fix use-after-free of timer for log writer thread [T371989]
  - stable: {CVE-2024-53141} netfilter: ipset: add missing range check in bitmap_ip_uadt [T371989]
  - uos: update srpm to 4.19.0-91.186 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.188
changelog:
  - uos: fix kabi broken for loongarch
  - uos: fix slabtop bug with correct config[B276885]
  - uos: Revert "uos: fix slabtop bug [B276885]"
  - uos: Merge branch 'uos_dev' into uos_release [T000000]
  - uos: fix kabi broken for struct dst_ops and netns_xfrm
  - mainline: {CVE-2024-36971} net: fix __dst_negative_advice() race [G2025051600022]
  - mainline: mptcp: add sk_stop_timer_sync helper
  - mainline: net: annotate data-races around sk->sk_dst_pending_confirm
  - mainline: af_unix: Fix data race around sk->sk_err.
  - mainline: af_unix: Fix data-races around sk->sk_shutdown.
  - mainline: net: read sk->sk_family once in sk_mc_loop()
  - mainline: sock: Fix misuse of sk_under_memory_pressure()
  - mainline: net: add missing data-race annotation for sk_ll_usec
  - mainline: net: add missing data-race annotations around sk->sk_peek_off
  - mainline: netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - mainline: xfrm: fix a data-race in xfrm_gen_index()
  - euler: x86: Enhanced copy capabilities for Hygon processor [T000000]
  - mainline: waitid: Add support for waiting for the current process group [G2025051000002]
  - mainline: pidfd: add P_PIDFD to waitid() [G2025051000002]
  - uos: fix slabtop bug [B276885]
  - phytium: pswiotlb: Fix kernel panic when the dma phy address is DMA_MAPPING_ERROR [D2025030003]
  - phytium: pswiotlb: Add bypass rules of pswiotlb for specific application scenes [D2025030003]
  - phytium: pswiotlb: Add support for PS24080 [D2025030003]
  - phytium: pswiotlb: Adapt for coherent dma memory allocation bypass SMMU [D2025030003]
  - phytium: pswiotlb: Adapt for coherent dma memory allocation [D2025030003]
  - phytium: pswiotlb: Avoid dead lock when expansion occures [D2025030003]
  - phytium: pswiotlb: Avoid sleep when pswiotlb is used in interrupt contexts [D2025030003]
  - phytium: pswiotlb: Fix kernel panic when the dma phy address is 0 [D2025030003]
  - phytium: pswiotlb: Fix softlockup when PAGE_SIZE is 4KB [D2025030003]
  - phytium: pswiotlb: Add version information [D2025030003]
  - phytium: pswiotlb: Resolve KABI conflicts [D2025030003]
  - phytium: pswiotlb: Expansion is disabled when remaining memory is insufficient [D2025030003]
  - phytium: pswiotlb: Reduce overhead when pools are searched [D2025030003]
  - phytium: pswiotlb: Basic functions of OS are not affected by devices which are incompatible with pswiotlb [D2025030003]
  - phytium: pswiotlb: Add blacklist which are incompatible with pswiotlb temporarily [D2025030003]
  - phytium: pswiotlb: Fix abnormal expansion when PAGE_SIZE is 64KB [D2025030003]
  - phytium: pswiotlb: Enable PSWIOTLB by default [D2025030003]
  - phytium: pswiotlb: Adapt for iommu-translated mode [D2025030003]
  - phytium: pswiotlb: Adapt for iommu-passthrough mode [D2025030003]
  - phytium: pswiotlb: Distribute the traffic to PSWIOTLB or not [D2025030003]
  - phytium: pswiotlb: Add PSWIOTLB mechanism to improve DMA performance [D2025030003]
  - uos: mm/init: Add quirk for phytium ps23064 SoC [D2025030003]
  - uos: PCI/MSI: Set device flag indicating only 32-bit MSI support [D2025030003]
  - uos: PCI/MSI: Move MSI/MSI-X flags updaters to msi.c [D2025030003]
  - uos: PCI/MSI: Move MSI/MSI-X init to msi.c [D2025030003]
  - uos: update srpm to 4.19.0-91.187 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.189
changelog:
  - uos: Revert "euler: x86: Enhanced copy capabilities for Hygon processor [T000000]"
  - uos: update srpm to 4.19.0-91.188 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190
changelog:
  - uos: fix ice driver compile error in loongarch [T00000]
  - mainline: {CVE-2024-50051} spi: mpc52xx: Add cancel_work_sync before module remove [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: handle isoc Babble and Buffer Overrun events properly [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: process isoc TD properly when there was a transaction error mid TD. [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: store TD status in the td struct instead of passing it along [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: remove extra loop in interrupt context [G2025060400020]
  - mainline: {CVE-2024-26659} xhci: get isochronous ring directly from endpoint structure [G2025060400020]
  - uos: Revert "UOS: modify pipe read/write" [G2025061700021]
  - uos: fix "mainline: mptcp: add sk_stop_timer_sync helper"
  - mainline: {CVE-2024-57887} drm: adv7511: Fix use-after-free in adv7533_attach_dsi() [G2025060400020]
  - mainline: {CVE-2024-56659} net: lapb: increase LAPB_HEADER_LEN [G2025060400020]
  - mainline: {CVE-2024-56650} netfilter: x_tables: fix LED ID check in led_tg_check() [G2025060400020]
  - uos: net: update ice to 1.15.5 [DM2025030001]
  - uos: update srpm to 4.19.0-91.189 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.002
changelog:
  - Revert "mainline: {CVE-2025-38544} rxrpc: Fix bug due to prealloc collision"
  - Merge changes from topic "20250901-v20-419a-lts1070u1" into lts-1070u1
  - stable: {CVE-2025-38624} PCI: pnv_php: Clean up allocated IRQs on unplug
  - uos: stable: {CVE-2024-46761} pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv [G006936] [T372895]
  - stable: {CVE-2025-38591} bpf: Reject narrower access to pointer ctx fields
  - stable: {CVE-2025-38563} perf/core: Prevent VMA split of buffer mappings
  - stable: {CVE-2025-38565} perf/core: Exit early on perf_mmap() fail
  - stable: {CVE-2025-38546} atm: clip: Fix memory leak of struct clip_vcc.
  - stable: atm: clip: Fix potential null-ptr-deref in to_atmarpd().
  - mainline: {CVE-2025-38352} posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() [G2025091200016]
  - euler: sch_netem: acquire qdisc lock in netem_change()
  - mainline: {CVE-2025-38512} wifi: prevent A-MSDU attacks in mesh networks
  - mainline: {CVE-2025-38618} vsock: Do not allow binding to VMADDR_PORT_ANY
  - mainline: {CVE-2025-38663} nilfs2: reject invalid file types when reading inodes
  - mainline: {CVE-2025-38666} net: appletalk: Fix use-after-free in AARP proxy probe
  - mainline: {CVE-2025-38556} HID: core: Harden s32ton() against conversion to 0 bits
  - mainline: {CVE-2025-38612} staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
  - mainline: {CVE-2025-38617} net/packet: fix a race in packet_set_ring() and packet_notifier()
  - mainline: {CVE-2025-38572} ipv6: reject malicious packets in ipv6_gso_segment()
  - mainline: {CVE-2025-38578} f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
  - mainline: {CVE-2025-38630} fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  - mainline: {CVE-2025-38539} tracing: Add down_write(trace_event_sem) when adding trace event
  - mainline: depend: {CVE-2025-38503} btrfs: separate BLOCK_GROUP_TREE compat RO flag from EXTENT_TREE_V2
  - mainline: {CVE-2025-38503} btrfs: fix assertion when building free space tree
  - mainline: {CVE-2025-38544} rxrpc: Fix bug due to prealloc collision
  - mainline: {CVE-2025-38671} i2c: qup: jump out of the loop in case of timeout
  - mainline: {CVE-2025-38602} iwlwifi: Add missing check for alloc_ordered_workqueue
  - mainline: {CVE-2025-38604} wifi: rtl818x: Kill URBs before clearing tx status queue
  - mainline: {CVE-2025-38555} usb: gadget : fix use-after-free in composite_dev_cleanup()
  - mainline: {CVE-2025-38574} pptp: ensure minimal skb length in pptp_xmit()
  - mainline: {CVE-2025-38514} rxrpc: Fix oops due to non-existence of prealloc backlog struct
  - mainline: {CVE-2025-38581} crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - mainline: {CVE-2025-38635} clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  - mainline: {CVE-2025-38650} hfsplus: remove mutex_lock check in hfsplus_free_extents
  - mainline: {CVE-2025-38639} netfilter: xt_nfacct: don't assume acct name is null-terminated
  - mainline: {CVE-2025-38595} xen: fix UAF in dmabuf_exp_from_pages()
  - mainline: {CVE-2025-38553} net/sched: Restrict conditions for adding duplicating netems to qdisc tree
  - mainline: {CVE-2025-38538} dmaengine: nbpfaxi: Fix memory corruption in probe()
  - mainline: {CVE-2025-38542} net: appletalk: Fix device refcount leak in atrtr_create()
  - mainline: {CVE-2025-38513} wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
  - mainline: {CVE-2025-38515} drm/sched: Increment job count before swapping tail spsc queue
  - github: {CVE-2022-27666} esp: Fix possible buffer overflow in ESP transformation
  - mainline: net/mlx5: Fix eeprom support for SFP module [G2025052300009]
  - mainline: net/mlx5e: ethtool, Add support for EEPROM high pages query [G2025052300009]
  - mainline: ethtool: Add SFF-8436 and SFF-8636 max EEPROM length definitions [G2025052300009]
  - mainline: netfilter: nf_tables: fix oops during rule dump [G202507280007]
  - uos: update srpm to 4.19.0-91.190 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.003
changelog:
  - uos: block: suppress "I/O scheduler none not found" error [G2025101200001]
  - Merge "mainline: depend: {CVE-2024-26722} ASoC: rt5650: fix the wrong result of key button" into lts-1070u1
  - mainline: depend: {CVE-2024-26722} ASoC: rt5650: add mutex to avoid the jack detection failure
  - mainline: depend: {CVE-2024-26722} ASoC: rt5650: fix the wrong result of key button
  - uos: disable osq_cna_lock by default [G2025101300031]
  - Merge changes from topic "20251014-cve-419a-lts1070u1" into lts-1070u1
  - uos: fix kabi broken for struct netns_nftables
  - uos: fix kabi change of struct net_device_stats
  - mainline: {CVE-2022-48935} netfilter: nf_tables: unregister flowtable hooks on netns exit
  - mainline: depend: {CVE-2022-48935} netfilter: nf_tables: use net_generic infra for transaction data
  - mainline: depend: {CVE-2022-48935} netfilter: nftables: add helper function to set the base sequence number
  - mainline: {CVE-2023-52525} wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
  - mainline: depend: {CVE-2023-52525} wifi: mwifiex: Fix missed return in oob checks failed path
  - mainline: depend: {CVE-2023-52525} wifi: mwifiex: Fix OOB and integer underflow when rx packets
  - mainline: {CVE-2023-52577} dccp: fix dccp_v4_err()/dccp_v6_err() again
  - mainline: depend: {CVE-2023-52577} dccp: Fix out of bounds access in DCCP error handler
  - mainline: {CVE-2023-52796} ipvlan: add ipvlan_route_v6_outbound() helper
  - mainline: depend: {CVE-2023-52796} ipvlan: properly track tx_errors
  - mainline: depend: {CVE-2023-52796} net: add DEV_STATS_READ() helper
  - mainline: depend: {CVE-2023-52796} dev_forward_skb: do not scrub skb mark within the same name space
  - mainline: depend: {CVE-2023-52796} net: add atomic_long_t to net_device_stats fields
  - mainline: depend: {CVE-2023-52796} Remove DECnet support from kernel
  - mainline: depend: {CVE-2023-52796} rfs: annotate lockless accesses to RFS sock flow table
  - mainline: depend: {CVE-2023-52796} macsec: use DEV_STATS_INC()
  - mainline: depend: {CVE-2023-52796} macsec: Fix traffic counters/statistics
  - mainline: depend: {CVE-2023-52796} ipvlan: Fix return value of ipvlan_queue_xmit()
  - mainline: {CVE-2023-52799} jfs: fix array-index-out-of-bounds in dbFindLeaf
  - mainline: {CVE-2023-52810} fs/jfs: Add check for negative db_l2nbperpage
  - mainline: depend: {CVE-2023-52810} fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
  - mainline: depend: {CVE-2023-52810} fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
  - mainline: depend: {CVE-2023-52810} jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - mainline: {CVE-2023-52838} fbdev: imsttfb: fix a resource leak in probe
  - mainline: depend: {CVE-2023-52838} fbdev: imsttfb: Fix error path of imsttfb_probe()
  - mainline: depend: {CVE-2023-52838} fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  - mainline: depend: {CVE-2023-52838} video: imsttfb: check for ioremap() failures
  - mainline: {CVE-2023-52853} hid: cp2112: Fix duplicate workqueue initialization
  - mainline: depend: {CVE-2023-52853} HID: cp2112: Use irqchip template
  - mainline: {CVE-2023-52864} platform/x86: wmi: Fix opening of char device
  - mainline: depend: {CVE-2023-52864} platform/x86: wmi: remove unnecessary initializations
  - mainline: depend: {CVE-2023-52864} platform/x86: wmi: Fix probe failure when failing to register WMI devices
  - mainline: {CVE-2024-26820} hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
  - mainline: depend: {CVE-2024-26820} hv_netvsc: use netif_is_bond_master() instead of open code
  - mainline: depend: {CVE-2024-26820} hv_netvsc: Make netvsc/VF binding check both MAC and serial number
  - mainline: depend: {CVE-2024-26820} hv_netvsc: Mark VF as slave before exposing it to user-mode
  - mainline: depend: {CVE-2024-26820} hv_netvsc: Fix race of register_netdevice_notifier and VF register
  - mainline: {CVE-2024-26878} 15 quota: Fix potential NULL pointer dereference
  - mainline: depend: {CVE-2024-26878} quota: simplify drop_dquot_ref()
  - mainline: depend: {CVE-2024-26878} quota: check time limit when back out space/inode change
  - mainline: depend: {CVE-2024-26878} fs/quota: erase unused but set variable warning
  - mainline: depend: {CVE-2024-26878} quota: code cleanup for __dquot_alloc_space()
  - mainline: depend: {CVE-2024-26878} quota: explicitly forbid quota files from being encrypted
  - mainline: depend: {CVE-2024-26878} quota: Fix slow quotaoff
  - mainline: depend: {CVE-2024-26878} quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - mainline: depend: {CVE-2024-26878} quota: add new helper dquot_active()
  - mainline: depend: {CVE-2024-26878} quota: rename dquot_active() to inode_quota_active()
  - mainline: depend: {CVE-2024-26878} quota: factor out dquot_write_dquot()
  - mainline: depend: {CVE-2024-26878} quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
  - mainline: depend: {CVE-2024-26878} quota: add dqi_dirty_list description to comment of Dquot List Management
  - mainline: depend: {CVE-2024-26878} quota: fix warning in dqgrab()
  - mainline: depend: {CVE-2024-26878} quota: Properly disable quotas when add_dquot_ref() fails
  - mainline: {CVE-2024-26883} bpf: Fix stackmap overflow check on 32-bit arches
  - mainline: {CVE-2024-26917} scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
  - mainline: depend: {CVE-2024-26917} scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
  - mainline: {CVE-2024-35809} PCI/PM: Drain runtime-idle callbacks before driver removal
  - mainline: depend: {CVE-2024-35809} PCI: Drop pci_device_remove() test of pci_dev->driver
  - mainline: {CVE-2024-35955} kprobes: Fix possible use-after-free issue on kprobe registration
  - mainline: {CVE-2024-38381} nfc: nci: Fix kcov check in nci_rx_work()
  - mainline: depend: {CVE-2024-38381} nfc: nci: Fix uninit-value in nci_rx_work
  - mainline: depend: {CVE-2024-38381} nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - mainline: depend: {CVE-2024-38381} nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - mainline: depend: {CVE-2024-38381} nfc: nci: assert requested protocol is valid
  - mainline: {CVE-2024-38582} nilfs2: fix potential hang in nilfs_detach_log_writer()
  - mainline: depend: {CVE-2024-38582} nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - mainline: depend: {CVE-2024-38582} nilfs2: fix potential bug in end_buffer_async_write
  - mainline: depend: {CVE-2024-38582} nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
  - mainline: depend: {CVE-2024-38582} nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
  - mainline: depend: {CVE-2024-38582} nilfs2: fix buffer corruption due to concurrent device reads
  - mainline: {CVE-2024-38587} speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - mainline: depend: {CVE-2024-38587} speakup: Avoid crash on very long word
  - mainline: {CVE-2024-38598} md: fix resync softlockup when bitmap size is less than array size
  - mainline: depend: {CVE-2024-38598} md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
  - mainline: {CVE-2024-46675} usb: dwc3: core: Prevent USB core invalid event buffer address access
  - mainline: depend: {CVE-2024-46675} usb: dwc3: core: Skip setting event buffers for host only controllers
  - mainline: depend: {CVE-2024-46675} Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
  - mainline: depend: {CVE-2024-46675} Revert "usb: dwc3: Soft reset phy on probe for host"
  - mainline: depend: {CVE-2024-46675} usb: dwc3: set the dma max_seg_size
  - mainline: depend: {CVE-2024-46675} usb: dwc3: Soft reset phy on probe for host
  - mainline: depend: {CVE-2024-46675} usb: dwc3: don't reset device side if dwc3 was configured as host-only
  - mainline: depend: {CVE-2024-46675} Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
  - mainline: {CVE-2024-53060} drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  - mainline: depend: {CVE-2024-53060} drm/amd: Guard against bad data for ATIF ACPI method
  - mainline: {CVE-2024-53146} NFSD: Prevent a potential integer overflow
  - mainline: depend: {CVE-2024-53146} NFS: Remove print_overflow_msg()
  - mainline: {CVE-2023-52699} sysv: don't call sb_bread() with pointers_lock held
  - mainline: {CVE-2023-52703} net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - mainline: {CVE-2023-52705} nilfs2: fix underflow in second superblock position calculations
  - mainline: {CVE-2023-52730} mmc: sdio: fix possible resource leaks in some error paths
  - mainline: {CVE-2023-52742} net: USB: Fix wrong-direction WARNING in plusb.c
  - mainline: {CVE-2023-52747} IB/hfi1: Restore allocated resources on failed copyout
  - mainline: {CVE-2023-52753} drm/amd/display: Avoid NULL dereference of timing generator
  - mainline: {CVE-2023-52764} media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - mainline: {CVE-2023-52774} s390/dasd: protect device queue against concurrent access
  - mainline: {CVE-2023-52789} tty: vcc: Add check for kstrdup() in vcc_probe()
  - mainline: {CVE-2023-52804} fs/jfs: Add validity check for db_maxag and db_agpref
  - mainline: {CVE-2023-52805} jfs: fix array-index-out-of-bounds in diAlloc
  - mainline: {CVE-2023-52806} ALSA: hda: Fix possible null-ptr-deref when assigning a stream
  - mainline: {CVE-2023-52809} scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
  - mainline: {CVE-2023-52813} crypto: pcrypt - Fix hungtask for PADATA_RESET
  - mainline: {CVE-2023-52817} drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - mainline: {CVE-2023-52818} drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
  - mainline: {CVE-2023-52819} drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
  - mainline: {CVE-2023-52832} wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
  - mainline: {CVE-2023-52835} perf/core: Bail out early if the request AUX area is out of bound
  - mainline: {CVE-2023-52836} locking/ww_mutex/test: Fix potential workqueue corruption
  - mainline: {CVE-2023-52843} llc: verify mac len before reading mac header
  - mainline: {CVE-2023-52867} drm/radeon: possible buffer overflow
  - mainline: {CVE-2023-52868} thermal: core: prevent potential string overflow
  - mainline: {CVE-2023-52881} tcp: do not accept ACK of bytes we never sent
  - mainline: {CVE-2023-52915} media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
  - mainline: {CVE-2023-52918} media: pci: cx23885: check cx23885_vdev_init() return
  - mainline: {CVE-2024-26722} ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
  - mainline: {CVE-2024-26889} Bluetooth: hci_core: Fix possible buffer overflow
  - mainline: {CVE-2024-26957} s390/zcrypt: fix reference counting on zcrypt card objects
  - mainline: {CVE-2024-27396} net: gtp: Fix Use-After-Free in gtp_dellink
  - mainline: {CVE-2024-27412} power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - mainline: {CVE-2024-35849} btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - mainline: {CVE-2024-35902} net/rds: fix possible cp null dereference
  - mainline: {CVE-2024-35922} fbmon: prevent division by zero in fb_videomode_from_videomode()
  - mainline: {CVE-2024-35925} block: prevent division by zero in blk_rq_stat_sum()
  - mainline: {CVE-2024-35930} scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - mainline: {CVE-2024-35933} Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  - mainline: {CVE-2024-35947} dyndbg: fix old BUG_ON in >control parser
  - mainline: {CVE-2024-35973} geneve: fix header validation in geneve[6]_xmit_skb
  - mainline: {CVE-2024-36950} firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - mainline: {CVE-2024-36954} tipc: fix a possible memleak in tipc_buf_append
  - mainline: {CVE-2024-36959} pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - mainline: {CVE-2024-37356} tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - params: lift param_set_uint_minmax to common code
  - mainline: {CVE-2024-38578} ecryptfs: Fix buffer size for tag 66 packet
  - mainline: {CVE-2024-38596} af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - mainline: {CVE-2024-38599} jffs2: prevent xattr node from overflowing the eraseblock
  - mainline: {CVE-2024-38601} ring-buffer: Fix a race between readers and resize checks
  - mainline: {CVE-2024-38613} m68k: Fix spinlock race in kernel thread creation
  - mainline: {CVE-2024-38618} ALSA: timer: Set lower bound of start tick time
  - mainline: {CVE-2024-38621} media: stk1160: fix bounds checking in stk1160_copy_video()
  - mainline: {CVE-2024-38637} greybus: lights: check return of get_channel_from_mode
  - mainline: {CVE-2024-38661} s390/ap: Fix crash in AP internal function modify_bitmap()
  - mainline: {CVE-2024-39475} fbdev: savage: Handle err return when savagefb_check_var failed
  - mainline: {CVE-2024-39476} md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - mainline: {CVE-2024-39480} kdb: Fix buffer overflow during tab-complete
  - mainline: {CVE-2024-39488} arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - mainline: {CVE-2024-39493} crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - mainline: {CVE-2024-39499} vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - mainline: {CVE-2024-39509} HID: core: remove unnecessary WARN_ON() in implement()
  - mainline: {CVE-2024-40902} jfs: xattr: fix buffer overflow for invalid xattr
  - mainline: {CVE-2024-40932} drm/exynos/vidi: fix memory leak in .get_modes()
  - mainline: {CVE-2024-40942} wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - mainline: {CVE-2024-40943} ocfs2: fix races between hole punching and AIO+DIO
  - mainline: {CVE-2024-40968} MIPS: Octeon: Add PCIe link status check
  - mainline: {CVE-2024-40974} powerpc/pseries: Enforce hcall result buffer validity and size
  - mainline: {CVE-2024-40978} scsi: qedi: Fix crash while reading debugfs attribute
  - mainline: {CVE-2024-40981} batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - mainline: {CVE-2024-41006} netrom: Fix a memory leak in nr_heartbeat_expiry()
  - mainline: {CVE-2024-41020} filelock: Fix fcntl/close race recovery compat path
  - mainline: {CVE-2024-41059} hfsplus: fix uninit-value in copy_name
  - mainline: {CVE-2024-41063} Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - mainline: {CVE-2024-41089} drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - mainline: {CVE-2024-41095} drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - mainline: {CVE-2024-42086} iio: chemical: bme680: Fix overflows in compensate() functions
  - mainline: {CVE-2024-42092} gpio: davinci: Validate the obtained number of IRQs
  - mainline: {CVE-2024-42094} net/iucv: Avoid explicit cpumask var allocation on stack
  - mainline: {CVE-2024-42096} x86: stop playing stack games in profile_pc()
  - mainline: {CVE-2024-42104} nilfs2: add missing check for inode numbers on directory entries
  - mainline: {CVE-2024-42105} nilfs2: fix inode number range checks
  - mainline: {CVE-2024-42115} jffs2: Fix potential illegal address access in jffs2_free_inode
  - mainline: {CVE-2024-42145} IB/core: Implement a limit on UMAD receive List
  - mainline: {CVE-2024-42157} s390/pkey: Wipe sensitive data on failure
  - mainline: {CVE-2024-42223} media: dvb-frontends: tda10048: Fix integer overflow
  - mainline: {CVE-2024-42224} net: dsa: mv88e6xxx: Correct check for empty list
  - mainline: {CVE-2024-42236} usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - mainline: {CVE-2024-43882} exec: Fix ToCToU between perm check and set-uid/gid usage
  - mainline: {CVE-2024-43893} serial: core: check uartclk for zero to avoid divide by zero
  - mainline: {CVE-2024-43914} md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - mainline: {CVE-2024-44954} ALSA: line6: Fix racy access to midibuf
  - mainline: {CVE-2024-44969} s390/sclp: Prevent release of buffer in I/O
  - mainline: {CVE-2024-46721} apparmor: fix possible NULL pointer dereference
  - mainline: {CVE-2024-46743} of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - mainline: {CVE-2024-46744} Squashfs: sanity check symbolic link size
  - mainline: {CVE-2024-46745} Input: uinput - reject requests with unreasonable number of slots
  - mainline: {CVE-2024-46747} HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - mainline: {CVE-2024-46750} PCI: Add missing bridge lock to pci_bus_lock()
  - mainline: {CVE-2024-46755} wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - mainline: {CVE-2024-46759} hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - mainline: {CVE-2024-46777} udf: Avoid excessive partition lengths
  - mainline: {CVE-2024-46840} btrfs: clean up our handling of refs == 0 in snapshot delete
  - mainline: {CVE-2024-46844} um: line: always fill *error_out in setup_one_line()
  - mainline: {CVE-2024-47659} smack: tcp: ipv4, fix incorrect labeling
  - mainline: {CVE-2024-50234} wifi: iwlegacy: Clear stale interrupts before resuming device
  - mainline: {CVE-2024-50290} media: cx24116: prevent overflows on SNR calculus
  - mainline: {CVE-2024-50296} net: hns3: fix kernel crash when uninstalling driver
  - mainline: {CVE-2024-53101} fs: Fix uninitialized value issue in from_kuid and from_kgid
  - mainline: {CVE-2024-53103} hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  - mainline: {CVE-2024-53158} soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - mainline: {CVE-2024-53214} vfio/pci: Properly hide first-in-list PCIe extended capability
  - mainline: {CVE-2024-56531} ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  - mainline: {CVE-2024-56532} ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  - mainline: {CVE-2024-56700} media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - uos: fix kmalloc-1024 memoryleak [G2025032600004]
  - Revert "mainline: {CVE-2025-38544} rxrpc: Fix bug due to prealloc collision"
  - Merge changes from topic "20250901-v20-419a-lts1070u1" into lts-1070u1
  - stable: {CVE-2025-38624} PCI: pnv_php: Clean up allocated IRQs on unplug
  - uos: stable: {CVE-2024-46761} pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv [G006936] [T372895]
  - stable: {CVE-2025-38591} bpf: Reject narrower access to pointer ctx fields
  - stable: {CVE-2025-38563} perf/core: Prevent VMA split of buffer mappings
  - stable: {CVE-2025-38565} perf/core: Exit early on perf_mmap() fail
  - stable: {CVE-2025-38546} atm: clip: Fix memory leak of struct clip_vcc.
  - stable: atm: clip: Fix potential null-ptr-deref in to_atmarpd().
  - mainline: {CVE-2025-38352} posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() [G2025091200016]
  - euler: sch_netem: acquire qdisc lock in netem_change()
  - mainline: {CVE-2025-38512} wifi: prevent A-MSDU attacks in mesh networks
  - mainline: {CVE-2025-38618} vsock: Do not allow binding to VMADDR_PORT_ANY
  - mainline: {CVE-2025-38663} nilfs2: reject invalid file types when reading inodes
  - mainline: {CVE-2025-38666} net: appletalk: Fix use-after-free in AARP proxy probe
  - mainline: {CVE-2025-38556} HID: core: Harden s32ton() against conversion to 0 bits
  - mainline: {CVE-2025-38612} staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
  - mainline: {CVE-2025-38617} net/packet: fix a race in packet_set_ring() and packet_notifier()
  - mainline: {CVE-2025-38572} ipv6: reject malicious packets in ipv6_gso_segment()
  - mainline: {CVE-2025-38578} f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
  - mainline: {CVE-2025-38630} fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  - mainline: {CVE-2025-38539} tracing: Add down_write(trace_event_sem) when adding trace event
  - mainline: depend: {CVE-2025-38503} btrfs: separate BLOCK_GROUP_TREE compat RO flag from EXTENT_TREE_V2
  - mainline: {CVE-2025-38503} btrfs: fix assertion when building free space tree
  - mainline: {CVE-2025-38544} rxrpc: Fix bug due to prealloc collision
  - mainline: {CVE-2025-38671} i2c: qup: jump out of the loop in case of timeout
  - mainline: {CVE-2025-38602} iwlwifi: Add missing check for alloc_ordered_workqueue
  - mainline: {CVE-2025-38604} wifi: rtl818x: Kill URBs before clearing tx status queue
  - mainline: {CVE-2025-38555} usb: gadget : fix use-after-free in composite_dev_cleanup()
  - mainline: {CVE-2025-38574} pptp: ensure minimal skb length in pptp_xmit()
  - mainline: {CVE-2025-38514} rxrpc: Fix oops due to non-existence of prealloc backlog struct
  - mainline: {CVE-2025-38581} crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - mainline: {CVE-2025-38635} clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  - mainline: {CVE-2025-38650} hfsplus: remove mutex_lock check in hfsplus_free_extents
  - mainline: {CVE-2025-38639} netfilter: xt_nfacct: don't assume acct name is null-terminated
  - mainline: {CVE-2025-38595} xen: fix UAF in dmabuf_exp_from_pages()
  - mainline: {CVE-2025-38553} net/sched: Restrict conditions for adding duplicating netems to qdisc tree
  - mainline: {CVE-2025-38538} dmaengine: nbpfaxi: Fix memory corruption in probe()
  - mainline: {CVE-2025-38542} net: appletalk: Fix device refcount leak in atrtr_create()
  - mainline: {CVE-2025-38513} wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
  - mainline: {CVE-2025-38515} drm/sched: Increment job count before swapping tail spsc queue
  - github: {CVE-2022-27666} esp: Fix possible buffer overflow in ESP transformation
  - mainline: net/mlx5: Fix eeprom support for SFP module [G2025052300009]
  - mainline: net/mlx5e: ethtool, Add support for EEPROM high pages query [G2025052300009]
  - mainline: ethtool: Add SFF-8436 and SFF-8636 max EEPROM length definitions [G2025052300009]
  - mainline: netfilter: nf_tables: fix oops during rule dump [G202507280007]
  - uos: update srpm to 4.19.0-91.190 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.004
changelog:
  - Merge "uos: LoongArch: Fix the issue of incorrect calculation of thread count [T384057]" into lts-1070u1
  - uos: LoongArch: Fix the issue of incorrect calculation of thread count [T384057]
  - uos: LoongArch: Let cores_io_master cover the largest NR_CPUS [T384057]
  - uos: update srpm to 4.19.0-91.190.003 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.005
changelog:
  - uos: modify the CONFIG_SCSI_MVSAS the same config with arm64 and x86
  - euler: tools: fix implicit declaration of function __ALIGN_KERNEL
  - uos: fix the compile error with sk_is_tcp and sk_is_stream_unix from {CVE-2025-40080}
  - Merge "mainline: {CVE-2025-40081} perf: arm_spe: Prevent overflow in PERF_IDX2OFF()" into lts-1070u1
  - Merge changes from topic "net" into lts-1070u1
  - Merge changes Ibd96f506,I69126020,I774f0df8,Id7434bc1,If6c7b249, ... into lts-1070u1
  - Merge changes Iced2efc8,I12ead166,I2ccbfbd9,I6b99710d into lts-1070u1
  - mainline: {CVE-2025-40081} perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - Merge changes from topic "cve-419a-1070u1-20251127" into lts-1070u1
  - Merge changes from topic "cve-1070u1-lts-1070u1-20251127" into lts-1070u1
  - Merge "stable: {CVE-2025-40006} mm/hugetlb: fix folio is still mapped when deleted" into lts-1070u1
  - Merge changes Id5462223,I04ad2d7b,I3f0f41f7,I2a35ac3b,I2e8aca12, ... into lts-1070u1
  - Merge changes Ia537be09,I0e58f4ac,I8527c90a,Ibaf896bf,I976509e6, ... into lts-1070u1
  - mainline: depend {CVE-2023-52924} netfilter: nf_tables: GC transaction API to avoid race with control plane
  - mainline: depend {CVE-2023-52924} netfilter: nf_tables: reject unbound anonymous set before commit phase
  - mainline: depend {CVE-2023-52924} netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
  - mainline: depend {CVE-2023-52924} netfilter: nftables: rename set element data activation/deactivation functions
  - mainline: {CVE-2023-52924} netfilter: nf_tables: don't skip expired elements during walk
  - mainline: {CVE-2023-52923} netfilter: nf_tables: adapt set backend to use GC transaction API
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: fix overlap expiration walk
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: fix null deref on element insertion
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: Add missing expired checks
  - mainline: depend {CVE-2023-52923} netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  - mainline: depend {CVE-2023-52923} netfilter: nf_tables: drop map element references from  preparation phase
  - mainline: depend {CVE-2023-52923} netfilter: nf_tables: pass context to nft_set_destroy()
  - mainline: depend {CVE-2023-52923} mainline: depend {CVE-2023-52923} netfilter: nf_tables: report use refcount overflow
  - mainline: depend {CVE-2023-52923} netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush
  - mainline: {CVE-2023-53712} ARM: 9317/1: kexec: Make smp stop calls asynchronous
  - Merge "uos: update srpm to 4.19.0-91.190.004 [T00000]" into lts-1070u1
  - euler: {CVE-2024-45025} fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - euler: bitmap: introduce generic optimized bitmap_size()
  - mainline: {CVE-2023-53117} fs: prevent out-of-bounds array speculation when closing a file descriptor
  - euler: {CVE-2025-40044} fs: udf: fix OOB read in lengthAllocDescs handling
  - mainline: {CVE-2025-40099} cifs: parse_dfs_referrals: prevent oob on malformed input
  - mainline: {CVE-2025-40100} btrfs: do not assert we found block group item when creating free space tree
  - mainline: {CVE-2025-40053} net: dlink: handle copy_thresh allocation failure
  - mainline: {CVE-2025-40083} net/sched: sch_qfq: Fix null-deref in agg_dequeue
  - mainline: {CVE-2025-40027} net/9p: fix double req put in p9_fd_cancelled
  - mainline: {CVE-2025-40018} ipvs: Defer ip_vs_ftp unregister during netns cleanup
  - mainline: {CVE-2022-50556} drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
  - mainline: {CVE-2025-40011} drm/gma500: Fix null dereference in hdmi teardown
  - mainline: {CVE-2024-50282} drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  - mainline: depend: {CVE-2024-50282} drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
  - mainline: {CVE-2025-40105} vfs: Don't leak disconnected dentries on umount
  - mainline: {CVE-2025-40103} smb: client: Fix refcount leak for cifs_sb_tlink
  - mainline: {CVE-2025-40088} hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  - mainline: {CVE-2025-40087} NFSD: Define a proc_layoutcommit for the FlexFiles layout type
  - mainline: {CVE-2025-40080} nbd: restrict sockets to TCP and UDP
  - mainline: {CVE-2025-40055} ocfs2: fix double free in user_cluster_connect()
  - mainline: {CVE-2025-40049} Squashfs: fix uninit-value in squashfs_get_parent
  - uos: update srpm to 4.19.0-91.190.004 [T00000]
  - mainline: blk-mq: enforce op-specific segment limits in blk_insert_cloned_request [G2025112400006]
  - stable: {CVE-2025-40006} mm/hugetlb: fix folio is still mapped when deleted
  - mainline: block: respect queue limit of max discard segment [G2025112400006]
  - mainline: {CVE-2025-40030} pinctrl: check the return value of pinmux_ops::get_function_name()
  - mainline: {CVE-2024-38607} macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - mainline: depend: {CVE-2024-38607} macintosh/via-macii: Clarify definition of macii_init()
  - mainline: {CVE-2025-40035} Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - mainline: {CVE-2025-40001} scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
  - mainline: depend: {CVE-2025-40001} scsi: mvsas: Use sas_task_find_rq() for tagging
  - mainline: {CVE-2023-53696} scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()
  - mainline: {CVE-2025-39998} scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - mainline: {CVE-2025-39970} i40e: fix input validation logic for action_meta
  - mainline: {CVE-2025-39972} i40e: fix idx validation in i40e_validate_queue_map
  - mainline: {CVE-2025-39968} i40e: add max boundary check for VF filters
  - euler: {CVE-2023-53728} posix-timers: Ensure timer ID search-loop limit is valid
  - mainline: {CVE-2023-53722} md: raid1: fix potential OOB in raid1_remove_disk()
  - mainline: {CVE-2023-53729} soc: qcom: qmi_encdec: Restrict string length in decode
  - mainline: {CVE-2022-49034} sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - mainline: {CVE-2022-49558} netfilter: nf_tables: double hook unregistration in netns path
  - mainline: {CVE-2022-50001} netfilter: nft_tproxy: restrict to prerouting hook
  - mainline: {CVE-2023-52933} Squashfs: fix handling and sanity checking of xattr_ids count
  - mainline: {CVE-2023-52977} net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
  - mainline: {CVE-2023-52988} ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - mainline: {CVE-2023-52989} firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
  - mainline: {CVE-2023-53146} media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
  - mainline: {CVE-2024-26817} amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - mainline: {CVE-2024-31076} genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - mainline: {CVE-2024-33621} ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - mainline: {CVE-2024-38558} net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - mainline: {CVE-2024-38567} wifi: carl9170: add a proper sanity check for endpoints
  - mainline: {CVE-2024-38579} crypto: bcm - Fix pointer arithmetic
  - mainline: {CVE-2024-38634} serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - mainline: {CVE-2024-38659} enic: Validate length of nl attributes in enic_set_vf_port
  - mainline: {CVE-2024-40941} wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - mainline: {CVE-2024-40987} drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - mainline: {CVE-2024-40988} drm/radeon: fix UBSAN warning in kv_dpm.c
  - mainline: {CVE-2024-41015} ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - mainline: {CVE-2024-41017} jfs: don't walk off the end of ealist
  - mainline: {CVE-2024-41035} USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - mainline: {CVE-2024-41044} ppp: reject claimed-as-LCP but actually malformed packets
  - mainline: {CVE-2024-41068} s390/sclp: Fix sclp_init() cleanup on failure
  - mainline: {CVE-2024-41072} wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - mainline: {CVE-2024-41081} ila: block BH in ila_output()
  - mainline: {CVE-2024-42084} ftruncate: pass a signed offset
  - mainline: {CVE-2024-42087} drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - mainline: {CVE-2024-42097} ALSA: emux: improve patch ioctl data validation
  - mainline: {CVE-2024-42119} drm/amd/display: Skip finding free audio for unknown engine_id
  - mainline: {CVE-2024-43879} wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - mainline: {CVE-2024-43883} usb: vhci-hcd: Do not drop references before new references are gained
  - mainline: {CVE-2024-44948} x86/mtrr: Check if fixed MTRRs exist before saving them
  - mainline: {CVE-2024-45008} Input: MT - limit max slots
  - mainline: {CVE-2024-46685} pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - mainline: {CVE-2024-46722} drm/amdgpu: fix mc_data out-of-bounds read warning
  - mainline: {CVE-2024-46723} drm/amdgpu: fix ucode out-of-bounds read warning
  - mainline: {CVE-2024-50218} ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - mainline: {CVE-2024-53172} ubi: fastmap: Fix duplicate slab cache names while attaching
  - mainline: {CVE-2024-53181} um: vector: Do not use drvdata in release
  - mainline: {CVE-2024-53183} um: net: Do not use drvdata in release
  - mainline: {CVE-2024-53184} um: ubd: Do not use drvdata in release
  - mainline: {CVE-2024-53194} PCI: Fix use-after-free of slot->bus on hot remove
  - mainline: {CVE-2024-53197} ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - mainline: {CVE-2024-56539} wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - mainline: {CVE-2024-56681} crypto: bcm - add error check in the ahash_hmac_init function
  - mainline: {CVE-2024-56690} crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.006
changelog:
  - uos: Revert "mainline: bpf: Move owner type, jited info into array auxiliary data [T297485]" [G2025111800028]
  - uos: Revert "mainline: bpf: Add initial poke descriptor table for jit images [T297485]" [G2025111800028]
  - uos: Revert "mainline: bpf, x86: Generalize and extend bpf_arch_text_poke for direct jumps [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Introduce BPF dispatcher [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf, xdp: Start using the BPF dispatcher for XDP [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf, x86: Align dispatcher branch targets to 16B [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf, x86: Emit patchable direct jump as tail call [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Move bpf_free_used_maps into sleepable section [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Add poke dependency tracking for prog array maps [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Constant map key tracking for prog array pokes [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Fix missing prog untrack in release_maps [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Fix record_func_key to perform backtracking on r3 [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Declare __bpf_free_used_maps() unconditionally [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Don't use tnum_range on array range checking for poke descriptors [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Simplify __bpf_arch_text_poke poke type handling [T297489]" [G2025111800028]
  - uos: Revert "mainline: bpf: Move trampoline JIT image allocation to a function [T297489]" [G2025111800028]
  - uos: fix the compile error for hinic3 driver
  - euler: Enable Huawei Intelligent Network Card Driver: hinic3
  - euler: Add Huawei Intelligent Network Card Driver: hinic3
  - euler: blk-throtl: fix race in io dispatching [G2025121600015]
  - Merge changes Ice437032,I491e9c86 into lts-1070u1
  - mainline: timer: Use hlist_unhashed_lockless() in timer_pending() [G2025111200012]
  - mainline: list: Add hlist_unhashed_lockless() [G2025111200012]
  - uos: x86/arm64/loongarch: config: config ulnfs as module
  - uos: fs: introduce ulnfs.
  - uos: update srpm to 4.19.0-91.190.005 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.007
changelog:
  - stable: {CVE-2023-53343} icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
  - stable: depend {CVE-2023-53343} vrf: Increment Icmp6InMsgs on the original netdev
  - Merge changes I1292c90d,I5022d0e1 into lts-1070u1
  - Merge changes I519bc562,I79df3206 into lts-1070u1
  - Merge changes I190ff133,I089be8ab,I99de1c6b,Iea2c3548,I51212fa1, ... into lts-1070u1
  - stable: {CVE-2023-53324} drm/msm/mdp5: Don't leak some plane state
  - stable: drm/msm: Replace drm_framebuffer_{un/reference} with put, get functions
  - euler: {CVE-2024-50199} mm/swapfile: skip HugeTLB pages for unuse_vma
  - stable: {CVE-2024-50194} arm64: probes: Fix uprobes for big-endian kernels
  - Merge "uos: update srpm to 4.19.0-91.190.006 [T00000]" into lts-1070u1
  - mainline: {CVE-2023-53148} igb: Fix igb_down hung on surprise removal
  - mainline: {CVE-2023-53151} md/raid10: prevent soft lockup while flush writes
  - mainline: {CVE-2023-53165} udf: Fix uninitialized array access for some pathnames
  - mainline: {CVE-2023-53174} scsi: core: Fix possible memory leak if device_add() fails
  - mainline: {CVE-2023-53179} netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - mainline: {CVE-2023-53185} wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
  - mainline: {CVE-2023-53189} ipv6/addrconf: fix a potential refcount underflow for idev
  - mainline: {CVE-2023-53204} af_unix: Fix data-races around user->unix_inflight.
  - mainline: {CVE-2023-53215} sched/fair: Don't balance task to its current running CPU
  - mainline: {CVE-2023-53220} media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
  - mainline: {CVE-2023-53238} phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
  - mainline: {CVE-2023-53245} scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
  - mainline: {CVE-2023-53309} drm/radeon: Fix integer overflow in radeon_cs_parser_init
  - mainline: {CVE-2023-53313} md/raid10: fix wrong setting of max_corr_read_errors
  - mainline: {CVE-2023-53314} fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
  - mainline: {CVE-2023-53331} pstore/ram: Check start of empty przs during init
  - mainline: {CVE-2023-53339} btrfs: fix BUG_ON condition in btrfs_cancel_balance
  - mainline: {CVE-2023-53354} skbuff: skb_segment, Call zero copy functions before using skbuff frags
  - mainline: {CVE-2023-53365} ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - mainline: {CVE-2023-53379} usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  - mainline: {CVE-2023-53384} wifi: mwifiex: avoid possible NULL skb pointer dereference
  - mainline: {CVE-2023-53395} ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
  - mainline: {CVE-2023-53425} media: platform: mediatek: vpu: fix NULL ptr dereference
  - mainline: {CVE-2023-53436} scsi: snic: Fix possible memory leak if device_add() fails
  - mainline: {CVE-2024-50195} posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - mainline: xfs: take the ILOCK when readdir inspects directory mapping data [G2025112700008]
  - uos: update srpm to 4.19.0-91.190.006 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.008
changelog:
  - uos: add the gd25lq128d device support [B349199]
  - uos: open the hinic3 configuration in loongarch [B348901]
  - uos: block: fix uninitialized variable in __blk_recalc_rq_segments [G2026012200010]
  - Merge "blk-mq: fix kernel panic during iterating over flush request [G2026010800009]" into lts-1070u1
  - Merge "uos: update srpm to 4.19.0-91.190.007 [T00000]" into lts-1070u1
  - blk-mq: fix kernel panic during iterating over flush request [G2026010800009]
  - Merge "uos: fix the lscpu display error on Hygon machines [G2026010600031]" into lts-1070u1
  - uos: close CONFIG_UOS_PERIOD_POLL config [G2025071400018]
  - uos: fix the lscpu display error on Hygon machines [G2026010600031]
  - uos: update srpm to 4.19.0-91.190.007 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.009
changelog:
  - mainline: virtio_ring: don't update event idx on get_buf [B350913]
  - mainline: virtio: fix up virtio_disable_cb [B350913]
  - euler: net_sched: sch_sfq: move the limit validation
  - euler: net_sched: sch_sfq: use a temporary work area for validating configuration
  - euler: net_sched: sch_sfq: don't allow 1 packet limit
  - Merge "uos: scsi: megaraid_sas: Clear affinity hint [B348873]" into lts-1070u1
  - Merge "uos: update srpm to 4.19.0-91.190.008 [T00000]" into lts-1070u1
  - uos: scsi: megaraid_sas: Clear affinity hint [B348873]
  - Merge "mainline: perf/core: Fix potential NULL deref [G2026011900019]" into lts-1070u1
  - uos: update srpm to 4.19.0-91.190.008 [T00000]
  - mainline: perf/core: Fix potential NULL deref [G2026011900019]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.010
changelog:
  - Merge changes I1e65bf51,I64db705f,I05dedfe0,I07ffafbf,If30909c5, ... into lts-1070u1
  - mainline: vfio: Introduce interface to flush virqfd inject workqueue
  - mainline: genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
  - euler: {CVE-2024-26813} vfio/platform: Create persistent IRQ handlers
  - euler: vfio/platform: Disable virqfds on cleanup
  - euler:{CVE-2024-26812} vfio/pci: Create persistent INTx handler
  - euler: {CVE-2024-27437}vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - euler: {CVE-2024-26810} vfio/pci: Lock external INTx masking ops
  - mainline: {CVE-2023-53586} scsi: target: Fix multiple LUN_RESET handling
  - mainline: {CVE-2023-53627} scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list
  - mainline: PCI/ASPM: Fix link state exit during switch upstream function removal
  - mainline: {CVE-2023-53446}PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
  - mainline: net: fix geneve_opt length integer overflow [G2026032400001]
  - mainline: netfilter: validate user input for expected length [G2026032400001]
  - mainline: block: cancel all throttled bios in del_gendisk() [G2026031900012]
  - mainline: block: let blkcg_gq grab request queue's refcnt [G2026031900012]
  - mainline: block: avoid use-after-free on throttle data [G2026031900012]
  - uos: fix kabi broken!
  - uos: fix compile error!
  - mainline: {CVE-2023-53335} RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
  - euler: {CVE-2024-26668} netfilter: nft_limit: reject configurations that cause integer overflow
  - euler: {CVE-2024-27019} netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - euler: {CVE-2024-27020} netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  - euler: depend {CVE-2024-27020} netfilter: nf_tables: __nft_expr_type_get() selects specific family type
  - euler: {CVE-2024-27011} netfilter: nf_tables: fix memleak in map from abort path
  - mainline: {CVE-2023-53635} netfilter: conntrack: fix wrong ct->timeout value
  - mainline: depend {CVE-2023-53635} net: ip_tunnel: prevent perpetual headroom growth
  - euler: {CVE-2024-27010} net/sched: Fix mirred deadlock on device recursion
  - euler: {CVE-2024-26739} net/sched: act_mirred: don't override retval if we already lost the skb
  - euler: {CVE-2024-26740} net/sched: act_mirred: use the backlog for mirred ingress
  - euler: {CVE-2024-27014} net/mlx5e: Prevent deadlock while disabling aRFS
  - euler: {CVE-2024-26921}  inet: inet_defrag: prevent sk release while still in use
  - euler: depend {CVE-2024-26921} inet: frags: re-introduce skb coalescing for local delivery
  - euler: {CVE-2024-26876}  drm/bridge: adv7511: fix crash on irq during probe
  - Merge changes Iead5a1ce,Ia5d75d1b,I19802c1b,I64a339c9,Iebe59b92, ... into lts-1070u1
  - Merge changes I9b7dbe45,I11f1bc2d,I77d68582,I0021e70b,I811cd121, ... into lts-1070u1
  - mainline: {CVE-2024-26982} Squashfs: check the inode number is not the invalid value of zero
  - mainline: NFSD: Fix crash in nfsd4_read_release()
  - mainline: {CVE-2023-53241} nfsd: call op_release, even when op_func returns an error
  - mainline: {CVE-2023-53680} NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
  - mainline: {CVE-2023-53473} ext4: improve error handling from ext4_dirhash()
  - mainline: {CVE-2024-26828} cifs: fix underflow in parse_server_interfaces()
  - mainline: {CVE-2024-26689} ceph: prevent use-after-free in encode_cap_msg()
  - stable: {CVE-2023-53499} virtio_net: Fix error unwinding of XDP initialization
  - mainline: virtio-net: fix the race between refill work and close
  - euler: {CVE-2024-26614} tcp: make sure init the accept_queue's spinlocks once
  - euler: {CVE-2024-26872} RDMA/srpt: Do not register event handler until srpt device is fully setup
  - euler: {CVE-2024-26743} RDMA/qedr: Fix qedr_create_user_qp error flow
  - stable: {CVE-2023-53432} firewire: net: fix use after free in fwnet_finish_incoming_packet()
  - stable: {CVE-2023-53647} Drivers: hv: vmbus: Don't dereference ACPI root object handle
  - stable: {CVE-2023-53596} drivers: base: Free devm resources when unregistering a device
  - stable: {CVE-2023-53254} cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
  - stable: cacheinfo: Add helper to access any cache index for a given CPU
  - stable: bnxt: avoid overflow in bnxt_get_nvram_directory()
  - stable: {CVE-2023-53292} blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
  - euler: {CVE-2024-26923} af_unix: Fix garbage collector racing against connect() [T370671]
  - euler: {CVE-2024-26960} mm: swap: fix race between free_swap_and_cache() and swapoff() [T370671]
  - euler: {CVE-2024-26960} mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() [T370671]
  - stable: {CVE-2023-53482} iommu: Fix error unwind in iommu_group_alloc()
  - mainline: {CVE-2024-23307} md/raid5: fix atomicity violation in raid5_cache_count
  - mainline: {CVE-2023-53380} md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - mainline: {CVE-2024-26922} drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - mainline: {CVE-2024-27037} clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - mainline: {CVE-2023-53500} xfrm: fix slab-use-after-free in decode_session6
  - mainline: {CVE-2023-53259} VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
  - mainline: {CVE-2023-53391} shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
  - mainline: {CVE-2024-27051} cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  - mainline: {CVE-2023-53577} bpf, cpumap: Make sure kthread is running before map update returns
  - mainline: {CVE-2023-53438} x86/MCE: Always save CS register on AMD Zen IF Poison errors
  - mainline: {CVE-2023-53576} null_blk: Always check queue mode setting from configfs
  - mainline: required by {CVE-2023-53576} null_blk: fix zone size paramter check
  - mainline: {CVE-2023-53397} modpost: fix off by one in is_executable_section()
  - mainline: {CVE-2023-53338} lwt: Fix return values of BPF xmit ops
  - mainline: {CVE-2023-53476} iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
  - Merge changes Icb3b7556,Ibd0f0499,Idfd692bd,Ia3e00737,I3daad33b, ... into lts-1070u1
  - anolis: pinctrl: Add device HID for Hygon GPIO controller [T386865]
  - anolis: x86/cpu/hygon: Refactor the CPU topology deriving method for Hygon [T386865]
  - anolis: iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC [T386865]
  - anolis: x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h [T386865]
  - anolis: x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs [T386865]
  - anolis: x86/resctrl: Add Hygon QoS support [T386865]
  - Merge "uos: Revert "Revert "bpf: correct slot_type marking logic to allow more stack slot sharing"" [G2025122200005]" into lts-1070u1
  - Merge changes from topic "cve-1070a-lts-1070u1-20260309" into lts-1070u1
  - Merge changes I05d72d05,I8a49dc16,Ib118c79d,I5b36b3e1,I531dabec, ... into lts-1070u1
  - mainline: {CVE-2023-46813} x86/sev: Check for user-space IOIO pointing to kernel space
  - mainline: {CVE-2023-20569} x86/bugs: Increase the x86 bugs vector size to two u32s
  - mainline: {CVE-2022-50647} RISC-V: Make port I/O string accessors actually work
  - mainline: {CVE-2023-35827} ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  - mainline: {CVE-2025-40178} pid: Add a judgment for ns null in pid_nr_ns
  - mainline: {CVE-2023-21102} efi: rt-wrapper: Add missing include
  - mainline: {CVE-2025-68177} cpufreq/longhaul: handle NULL policy in longhaul_exit
  - stable: {CVE-2025-40168} smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
  - stable: {CVE-2025-40204} sctp: Fix MAC comparison to be constant-time
  - stable: {CVE-2025-40240} sctp: avoid NULL dereference when chunk data buffer is missing
  - stable: {CVE-2022-50670} mmc: omap_hsmmc: fix return value check of mmc_add_host()
  - stable: {CVE-2025-40153} mm: hugetlb: avoid soft lockup when mprotect to large memory area
  - stable: {CVE-2025-40121} ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - stable: {CVE-2025-40154} ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  - stable: {CVE-2025-40275} ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
  - mainline: {CVE-2023-28327} af_unix: Get user_ns from in_skb in unix_diag_get_exact().
  - mainline: net: Add UNIX_DIAG_UID to Netlink UNIX socket diagnostics.
  - stable: {CVE-2023-53515} virtio-mmio: don't break lifecycle of vm_dev
  - stable: {CVE-2023-53648} ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
  - mainline: {CVE-2025-40233} ocfs2: clear extent cache after moving/defragmenting extents
  - mainline: {CVE-2025-68185} nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
  - mainline: {CVE-2025-40271} fs/proc: fix uaf in proc_readdir_de()
  - mainline: {CVE-2025-68264} ext4: refresh inline data size before write operations
  - mainline: {CVE-2025-40167} ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - mainline: {CVE-2025-68261} ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
  - mainline: {CVE-2024-35815} fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - stable: {CVE-2024-26764} fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio [T334689]
  - stable: {CVE-2024-35807} ext4: fix corruption during on-line resize
  - mainline: {CVE-2025-40140} net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - mainline: {CVE-2025-68192} net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  - mainline: {CVE-2025-68302} net: sxgbe: fix potential NULL dereference in sxgbe_rx()
  - mainline: {CVE-2025-40278} net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
  - mainline: {CVE-2025-40254} net: openvswitch: remove never-working support for setting nsh fields
  - mainline: {CVE-2025-40363} net: ipv6: fix field-spanning memcpy warning in AH output
  - mainline: {CVE-2025-40187} net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - euler: {CVE-2025-68285} libceph: fix potential use-after-free in have_mon_and_osd_map()
  - mainline: {CVE-2025-40264} be2net: pass wrb_params in case of OS2BMC
  - mainline: {CVE-2024-26642} netfilter: nf_tables: disallow anonymous set with timeout flag
  - mainline: {CVE-2024-26654} ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - Merge changes I361082cc,I9be87c64,I0ef0902d,I008e0a04,Icd23f8f2, ... into lts-1070u1
  - Merge changes I2d148c79,I38951107,I3466b921,If70c29cb,Ib081de97, ... into lts-1070u1
  - Merge changes I43c3b1d5,Ideb09d45,I5af6a839,I3b754646,I73a15fc7, ... into lts-1070u1
  - mainline: {CVE-2024-26981} nilfs2: fix OOB in nilfs_set_de_type
  - mainline: {CVE-2024-26993} fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - mainline: {CVE-2024-26999} serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - mainline: {CVE-2024-27000} serial: mxs-auart: add spinlock around changing cts state
  - mainline: {CVE-2024-27001} comedi: vmk80xx: fix incomplete endpoint checking
  - mainline: {CVE-2024-27008} drm: nv04: Fix out of bounds access
  - mainline: {CVE-2024-27013} tun: limit printing rate when illegal packet received by tun dev
  - mainline: {CVE-2024-27401} firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - mainline: {CVE-2025-40304} fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  - euler: {CVE-2023-39198} drm/qxl: fix UAF on handle creation
  - mainline: {CVE-2023-53765} dm cache: free background tracker's queued work in btracker_destroy
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list
  - mainline: {CVE-2023-53560} tracing/histograms: Add histograms to hist_vars if they have referenced variables
  - mainline: {CVE-2023-53681} bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
  - mainline: {CVE-2025-68288} usb: storage: Fix memory leak in USB bulk transport
  - mainline: {CVE-2025-40315} usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
  - mainline: {CVE-2023-53840} usb: early: xhci-dbc: Fix a potential out-of-bound memory access
  - mainline: {CVE-2025-68229} scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - mainline: {CVE-2025-40259} scsi: sg: Do not sleep in atomic context
  - mainline: {CVE-2023-53754} scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - Merge changes Id77eacd3,I0552db51,Ib1d13003,Ia8f11fa6,Id7a54fce, ... into lts-1070u1
  - Merge "uos: update srpm to 4.19.0-91.190.009 [T00000]" into lts-1070u1
  - mainline: {CVE-2024-36946} phonet: fix rtm_phonet_notify() skb allocation
  - mainline: {CVE-2024-36934} bna: ensure the copied buf is NUL terminated
  - mainline: {CVE-2024-36933} nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - mainline: {CVE-2024-36919} scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - mainline: {CVE-2024-36905} net: relax socket state check at accept time.
  - mainline: {CVE-2024-36904} tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - mainline: {CVE-2024-36883} net: fix out-of-bounds access in ops_init
  - mainline: {CVE-2024-36020} i40e: fix vf may be used uninitialized in this function warning
  - mainline: {CVE-2024-36017} rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - mainline: {CVE-2024-35893} net/sched: act_skbmod: prevent kernel-infoleak
  - mainline: {CVE-2024-35886} ipv6: Fix infinite recursion in fib6_dump_done().
  - mainline: {CVE-2024-35877} x86/mm/pat: fix VM_PAT handling in COW mappings
  - mainline: {CVE-2024-35830} media: tc358743: register v4l2 async device only after successful setup
  - mainline: {CVE-2024-35825} usb: gadget: ncm: Fix handling of zero block length packets
  - mainline: {CVE-2024-27419} netrom: Fix data-races around sysctl_net_busy_read
  - mainline: {CVE-2024-27413} efi/capsule-loader: fix incorrect allocation size
  - mainline: {CVE-2024-27075} media: dvb-frontends: avoid stack overflow warnings with clang
  - mainline: {CVE-2024-26965} clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - mainline: {CVE-2024-26845} scsi: target: core: Add TMF to tmr_list handling
  - mainline: {CVE-2024-24861} media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - mainline: {CVE-2024-24857} drm: Move drm_mode_setcrtc() local re-init to failure path
  - mainline: {CVE-2023-53863} netlink: do not hard code device address lenth in fdb dumps
  - mainline: {CVE-2023-53821} ip6_vti: fix slab-use-after-free in decode_session6
  - mainline: {CVE-2023-53817} crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
  - mainline: {CVE-2023-53766} FS: JFS: Check for read-only mounted filesystem in txBegin
  - mainline: {CVE-2023-53687} tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk
  - mainline: {CVE-2023-53676} scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
  - mainline: {CVE-2023-53672} btrfs: output extra debug info if we failed to find an inline backref
  - mainline: {CVE-2023-53668} ring-buffer: Fix deadloop issue on reading trace_pipe
  - mainline: {CVE-2023-53658} spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
  - mainline: {CVE-2023-53650} fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
  - mainline: {CVE-2023-53622} gfs2: Fix possible data races in gfs2_show_options()
  - mainline: {CVE-2023-53619} netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
  - mainline: {CVE-2023-53616} jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
  - mainline: {CVE-2023-53611} ipmi_si: fix a memleak in try_smi_init()
  - mainline: {CVE-2023-53593} cifs: Release folio lock on fscache read hit.
  - mainline: {CVE-2023-53559} ip_vti: fix potential slab-use-after-free in decode_session6
  - mainline: {CVE-2023-53554} staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
  - mainline: {CVE-2023-53548} net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
  - mainline: {CVE-2023-53541} mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
  - mainline: {CVE-2023-53519} media: v4l2-mem2mem: add lock to protect parameter num_rdy
  - mainline: {CVE-2023-53518} PM / devfreq: Fix leak in devfreq_dev_release()
  - mainline: {CVE-2023-53488} IB/hfi1: Fix possible panic during hotplug remove
  - mainline: {CVE-2023-53487} powerpc/rtas_flash: allow user copy to flash block cache objects
  - mainline: {CVE-2023-53480} kobject: Add sanity check for kset->kobj.ktype in kset_register()
  - mainline: {CVE-2023-53472} pwm: lpc32xx: Remove handling of PWM channels
  - mainline: {CVE-2023-53457} FS: JFS: Fix null-ptr-deref Read in txBegin
  - mainline: {CVE-2023-53456} scsi: qla4xxx: Add length check when parsing nlattrs
  - mainline: {CVE-2023-53454} HID: multitouch: Correct devm device reference for hidinput input_dev name
  - mainline: {CVE-2023-52693} ACPI: video: check for error while searching for backlight device parent
  - mainline: {CVE-2023-52683} ACPI: LPIT: Avoid u32 multiplication overflow
  - mainline: {CVE-2023-52429} dm: limit the number of targets and parameter size area
  - mainline: {CVE-2023-42754} ipv4: fix null-deref in ipv4_link_failure
  - Merge "mainline: locking/rwsem: Remove rwsem_wake() wakeup optimization [G2026012200009]" into lts-1070u1
  - mainline: locking/rwsem: Remove rwsem_wake() wakeup optimization [G2026012200009]
  - uos: fix dup compile error [T370941]
  - uos: ulnfs: fix(readdir): handle XFS deferred emit cursor correctly to avoid truncation [G2026030300020]
  - mainline: CIFS: Fix retry mid list corruption on reconnects [G2026022700008]
  - uos: update srpm to 4.19.0-91.190.009 [T00000]
  - uos: Revert "Revert "bpf: correct slot_type marking logic to allow more stack slot sharing"" [G2025122200005]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.011
changelog:
  - mainline: {CVE-2026-31431} crypto: algif_aead - Revert to operating out-of-place
  - Revert "mainline: {CVE-2023-53391} shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs" [B356553/B356561]
  - Merge "uos: update srpm to 4.19.0-91.190.010 [T00000]" into lts-1070u1
  - Merge changes Ic1b22ab5,Ic1b42a25 into lts-1070u1
  - mainline: NFS: fix open_owner_id_maxsz and related fields. [G2026020400003]
  - mainline: nfs: simplify and guarantee owner uniqueness. [G2026020400003]
  - uos: update srpm to 4.19.0-91.190.010 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.012
changelog:
  - uos: fix the complile error!
  - crypto: algif_aead - Fix minimum RX size check for decryption
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c
  - Revert "mainline: {CVE-2026-31431} crypto: algif_aead - Revert to operating out-of-place"
  - uos: update srpm to 4.19.0-91.190.011 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.013
changelog:
  - CVE-2026-43284:mainline: xfrm: esp: avoid in-place decrypt on shared skb frags [G0001]
  - mainline: {CVE-2024-43829} drm/qxl: Add check for drm_cvt_mode
  - mainline: {CVE-2024-41060} drm/radeon: check bo_va->bo is non-NULL before using it
  - mainline: {CVE-2022-50350} scsi: target: iscsi: Fix a race condition between login_work and the login thread
  - mainline: {CVE-2023-52614} PM / devfreq: Fix buffer overflow in trans_stat_show
  - mainline: {CVE-2024-42124} scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - mainline: {CVE-2024-41073} nvme: avoid double free special payload
  - mainline: {CVE-2023-53512} scsi: mpt3sas: Fix a memory leak
  - mainline: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
  - mainline: {CVE-2022-50532} scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
  - Merge "mainline: {CVE-2022-50422} scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()" into lts-1070u1
  - mainline: {CVE-2022-50422} scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
  - mainline: {CVE-2022-50422} scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
  - Merge changes I8d8d848f,I486d22ff,I1c0e1e5f,Ifdc663a4,Ia4d43d9f, ... into lts-1070u1
  - Merge "mainline: {CVE-2024-43853} cgroup/cpuset: Prevent UAF in proc_cpuset_show()" into lts-1070u1
  - uos: update srpm to 4.19.0-91.190.012 [T00000]
  - mainline: {CVE-2024-56756} nvme-pci: fix freeing of the HMB descriptor table
  - mainline: {CVE-2024-56594} drm/amdgpu: set the right AMDGPU sg segment limitation
  - mainline: {CVE-2024-56369} drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  - mainline: nvme-pci: set doorbell config before unquiescing
  - mainline: {CVE-2024-50135} nvme-pci: fix race condition between reset and nvme_dev_disable()
  - mainline: {CVE-2024-49925} fbdev: efifb: Register sysfs groups through driver core
  - mainline: {CVE-2024-49899} drm/amd/display: Initialize denominators' default to 1
  - mainline: {CVE-2024-49890} drm/amd/pm: ensure the fw_info is not null before using it
  - mainline: {CVE-2024-46802} drm/amd/display: added NULL check at start of dc_validate_stream
  - mainline: {CVE-2024-46731} drm/amd/pm: fix the Out-of-bounds read warning
  - mainline: {CVE-2024-43907} drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
  - mainline: {CVE-2024-43905} drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
  - mainline: {CVE-2024-43863} drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - mainline: {CVE-2024-43853} cgroup/cpuset: Prevent UAF in proc_cpuset_show()


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.014
changelog:
  - uos: configs: disable CONFIG_SCSI_MVSAS on loongarch
  - uos: loongarch/ebpf: fix building issue on the return value of bpf_jit_binary_lock_ro()
  - Merge changes from topic "cve_2604" into lts-1070u1
  - Merge "uos: RDMA/hns: fix v1 destroy_qp CQ lock handling by CVE-2024-47735" into lts-1070u1
  - uos: RDMA/hns: fix v1 destroy_qp CQ lock handling by CVE-2024-47735
  - stable: {CVE-2024-47707} ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  - stable: {CVE-2024-46855} netfilter: nft_socket: fix sk refcount leaks
  - stable: {CVE-2024-46783} tcp_bpf: fix return value of tcp_bpf_sendmsg()
  - stable: {CVE-2024-46679} ethtool: check device is present when getting link settings
  - stable: {CVE-2024-44995} net: hns3: fix a deadlock problem when config TC during resetting
  - stable: {CVE-2024-42076} net: can: j1939: Initialize unused data in j1939_send_one()
  - stable: {CVE-2024-40961} ipv6: prevent possible NULL deref in fib6_nh_init()
  - stable: {CVE-2024-39490} ipv6: sr: fix missing sk_buff release in seg6_input_core
  - stable: {CVE-2024-36927} ipv4: Fix uninit-value access in __ip_make_skb()
  - stable: {CVE-2024-36923} fs/9p: fix uninitialized values during inode evict
  - stable: {CVE-2024-36270} netfilter: tproxy: bail out if IP has been disabled on the device
  - stable: depend: {CVE-2023-53131} SUNRPC: carry rqstp through choose_victim() on 4.19
  - stable: depend: {CVE-2023-53131} SUNRPC: fix missing rqstp declaration in 4.19 backport
  - stable: {CVE-2023-53131} SUNRPC: Fix a server shutdown leak
  - stable: {CVE-2023-53079} net/mlx5: Fix steering rules cleanup
  - stable: {CVE-2023-53068} net: usb: lan78xx: Limit packet length to skb->len
  - stable: {CVE-2023-53000} netlink: prevent potential spectre v1 gadgets
  - stable: {CVE-2023-52996} ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
  - stable: {CVE-2023-52887} net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - mainline: {CVE-2023-52784} bonding: stop the device in bond_setup_by_slave()
  - stable: {CVE-2022-50511} lib/fonts: fix undefined behavior in bit shift for get_default_font
  - stable: {CVE-2022-50356} net: sched: sfb: fix null pointer access issue when sfb_init() fails
  - stable: {CVE-2022-50335} 9p: set req refcount to zero to avoid uninitialized usage
  - uos: Revert "mainline: {CVE-2022-50304} mtd: core: fix possible resource leak in init_mtd()"
  - Merge "mainline: Fix: {CVE-2024-50039} net/sched: accept TCA_STAB only for root qdisc" into lts-1070u1
  - Merge changes from topic "cve-0509" into lts-1070u1
  - Merge changes Icff2d248,I720b827d,Id2237dbb,I643d8efb,I6867dcba, ... into lts-1070u1
  - mainline: Fix: {CVE-2024-50039} net/sched: accept TCA_STAB only for root qdisc
  - Merge changes from topic "cve-v20a-lts-1070u1-20260420" into lts-1070u1
  - Merge "uos: update srpm to 4.19.0-91.190.013 [T00000]" into lts-1070u1
  - uos: update srpm to 4.19.0-91.190.013 [T00000]
  - mainline: Fixes {CVE-2024-57883} mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
  - mainline: Fixes {CVE-2024-57883} mm/hugetlb: fix hugetlb_pmd_shared()
  - mainline: Fixes {CVE-2024-57884} mm: fix duplicate accounting of free pages in should_reclaim_retry()
  - mainline: Fixes {CVE-2023-53178} mm: zswap: fix missing folio cleanup in writeback race path
  - euler: {CVE-2024-57883} mm: hugetlb: independent PMD page table shared count
  - mainline: {CVE-2024-53198} xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - mainline: {CVE-2024-46707} KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - mainline: {CVE-2024-57890} RDMA/uverbs: Prevent integer overflow issue
  - mainline: {CVE-2024-53119} vsock/virtio: reject connects after listener shutdown
  - mainline: depend {CVE-2024-53119} vsock/virtio: discard packets only when socket is really closed
  - mainline: depend {CVE-2024-53119} virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - mainline: {CVE-2024-53058} net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
  - mainline: {CVE-2024-50256} netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  - mainline: {CVE-2024-50095} RDMA/mad: Improve handling of timed out WRs of mad agent
  - mainline: {CVE-2024-50039} net/sched: accept TCA_STAB only for root qdisc
  - mainline: {CVE-2024-47735} RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  - mainline: {CVE-2024-56568} iommu/arm-smmu: Defer probe of clients after smmu device bound
  - mainline: {CVE-2024-47674} mm: avoid leaving partial pfn mappings around in error case
  - mainline: {CVE-2023-53178} mm: fix zswap writeback race condition
  - mainline: {CVE-2023-52935} mm/khugepaged: fix ->anon_vma race
  - uos: {CVE-2024-50304} ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - euler: {CVE-2024-57903} net: restrict SO_REUSEPORT to inet sockets
  - euler: {CVE-2024-57802} netrom: check buffer length before accessing it
  - euler: {CVE-2024-56688} sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - euler: {CVE-2024-56647} net: Fix icmp host relookup triggering ip_rt_bug
  - euler: {CVE-2024-56644} net/ipv6: release expired exception dst cached in socket
  - euler: {CVE-2024-56643} dccp: Fix memory leak in dccp_feat_change_recv
  - euler: {CVE-2024-56637} netfilter: ipset: Hold module reference while requesting a module
  - euler: {CVE-2024-56601} net: inet: do not leave a dangling sk pointer in inet_create()
  - euler: {CVE-2024-56600} net: inet6: do not leave a dangling sk pointer in inet6_create()
  - euler: {CVE-2024-53168} sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - euler: {CVE-2024-53124} net: fix data-races around sk->sk_forward_alloc
  - euler: {CVE-2024-50304} ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - euler: {CVE-2024-50258} net: fix crash when config small gso_max_size/gso_ipv4_max_size
  - euler: {CVE-2024-57884} mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
  - euler: {CVE-2024-56611} mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - uos: update srpm to 4.19.0-91.190.013 [T00000]
  - mainline：{CVE-2024-46681}： pktgen: use cpus_read_lock() in pg_net_init()
  - mainline：{CVE-2024-46689}： soc: qcom: cmd-db: Map shared memory as WC, not WB
  - mainline：{CVE-2022-50420}： crypto: hisilicon/hpre - fix resource leak in remove process
  - mainline：{CVE-2024-46713}： perf/aux: Fix AUX buffer serialization
  - mainline：{CVE-2024-50082}： blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - mainline：{CVE-2024-46770}： ice: Add netif_device_attach/detach into PF reset flow
  - mainline：{CVE-2024-53148}： comedi: Flush partial mappings in error case
  - mainline：{CVE-2023-52482}： x86/srso: Add SRSO mitigation for Hygon processors
  - mainline：{CVE-2024-50067}： uprobe: avoid out-of-bounds memory access of fetching args
  - mainline：{CVE-2024-39495}： greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - mainline：{CVE-2024-37021}： fpga: manager: add owner module and take its refcount
  - mainline：{CVE-2024-36479}： fpga: bridge: add owner module and take its refcount
  - mainline：{CVE-2024-53680}： ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
  - mainline：{CVE-2024-49940}： l2tp: prevent possible tunnel refcount underflow
  - mainline：{CVE-2024-46787}： userfaultfd: fix checks for huge PMDs
  - mainline：{CVE-2024-46763}： fou: Fix null-ptr-deref in GRO.
  - mainline：{CVE-2024-44940}： fou: remove warn in gue_gro_receive on unsupported protocol
  - mainline：{CVE-2024-46754}： bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - mainline：{CVE-2024-42068}： bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - mainline：{CVE-2024-42082}： xdp: Remove WARN() from __xdp_reg_mem_model()
  - mainline：{CVE-2024-41077}： null_blk: fix validation of block size
  - mainline：{CVE-2024-42281}： bpf: Fix a segment issue when downgrading gso_size
  - mainline：{CVE-2024-40980}： drop_monitor: replace spin_lock by raw_spin_lock
  - mainline：{CVE-2024-57888}： workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker
  - mainline：{CVE-2022-50473}： cpufreq: Init completion before kobject_init_and_add()
  - mainline：{CVE-2024-49858}： efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - mainline：{CVE-2023-52976}： efi: fix potential NULL deref in efi_mem_reserve_persistent
  - mainline：{CVE-2022-50395}： integrity: Fix memory leakage in keyring allocation error path
  - mainline：{CVE-2024-49927}： x86/ioapic: Handle allocation failures gracefully
  - mainline：{CVE-2024-46848}： perf/x86/intel: Limit the period on Haswell
  - mainline: {CVE-2024-56630} ocfs2: free inode when ocfs2_get_init_inode() fails
  - mainline: {CVE-2024-50191} ext4: don't set SB_RDONLY after filesystem errors
  - mainline: {CVE-2024-49875} nfsd: map the EBADMSG to nfserr_io to avoid warning
  - mainline: {CVE-2024-47660} fsnotify: clear PARENT_WATCHED flags lazily
  - mainline: {CVE-2024-46841} btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - mainline: {CVE-2024-46751} btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
  - mainline: {CVE-2024-45003} vfs: Don't evict inode under the inode lru traversing context
  - mainline: {CVE-2024-38570} gfs2: Fix potential glock use-after-free on unmount
  - mainline: {CVE-2023-53149} ext4: avoid deadlock in fs reclaim with page writeback
  - mainline: {CVE-2023-52572} cifs: Fix UAF in cifs_demultiplex_thread()
  - mainline: {CVE-2022-50516} fs: dlm: fix invalid derefence of sb_lvbptr
  - mainline: {CVE-2022-50385} NFS: Fix an Oops in nfs_d_automount()
  - mainline: {CVE-2022-50341} cifs: fix oops during encryption
  - mainline: {CVE-2022-50313} erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
  - mainline: {CVE-2023-54321} driver core: fix potential null-ptr-deref in device_add()
  - mainline: {CVE-2023-53594} driver core: fix resource leak in device_add()
  - mainline: {CVE-2023-53080} xsk: Add missing overflow check in xdp_umem_reg
  - mainline: {CVE-2023-53039} HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
  - mainline: {CVE-2023-53020} l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
  - mainline: {CVE-2023-53020} l2tp: close all race conditions in l2tp_tunnel_register()
  - mainline: {CVE-2023-53010} bnxt: Do not read past the end of test names
  - mainline: {CVE-2023-0160} bpf, sockmap: fix deadlocks in the sockhash and sockmap
  - mainline: {CVE-2022-50554} blk-mq: avoid double ->queue_rq() because of early timeout
  - mainline: {CVE-2022-50552} blk-mq: use quiesced elevator switch when reinitializing queues
  - mainline: {CVE-2022-50445} xfrm: Reinject transport-mode packets through workqueue
  - mainline: {CVE-2022-50358} brcmfmac: return error when getting invalid max_flowrings from dongle
  - mainline: {CVE-2022-50304} mtd: core: fix possible resource leak in init_mtd()
  - mainline: {CVE-2022-50266} kprobes: Fix check for probe enabled in kill_kprobe()


author: Gou Hao <gouhao@uniontech.com> - 4.19.0-91.190.015
changelog:
  - Merge changes from topic "cve_46300_46333" into lts-1070u1
  - redhat: {CVE-2026-46300} net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - redhat: {CVE-2026-46300} net: skbuff: preserve shared-frag marker during coalescing
  - uos: ptrace: Fix kabi breakage in struct task_struct
  - euler: {CVE-2026-46333} ptrace: slightly saner 'get_dumpable()' logic
  - uos: update srpm to 4.19.0-91.190.014 [T00000]


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: wangqi <wangqia@uniontech.com> - 3.5.3-9.01
changelog:
  - update: update to a8 2003sp4
  - fix CVE-2026-4426 CVE-2026-5121
  - fix the regression caused by the fix for CVE-2025-60753


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-81
changelog:
  - Update to CKBI 2.48 from NSS 3.64
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-82
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Trustis FPS Root CA"
  -    Adding:
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-81
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-80.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-80.0
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "FNMT-RCM"
  -    Adding:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "Chambers of Commerce Root"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Use-explicit-usr-bin-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-9
changelog:
  - ci-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2229460]
  - Resolves: bz#2229460
    ([rhel-8.9] [RFE] Configure "ipv6.addr-gen-mode=eui64' as default in NetworkManager)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-10
changelog:
  - Resolves: bz#2233047
    ([RHEL 8.9] Inform user when cloud-init generated config files are left during uninstalling)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-11
changelog:
  - ci-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2046491]
  - Resolves: bz#2046491
    (cloud-init enable both DHCPv4 and DHCPv6 when network type is ipv6_dhcpv6-stateful/ipv6_dhcpv6-stateless)
  - Resolves: RHEL-2325
    ([RHEL8.9][cloud-init] Not inform user during upgrade that cloud-init generated config files are left )


author: zhangxianting <zhangxianting@uniontech.com> - 310.4-1.01
changelog:
  - spec: no BR gdb on loongarch64 
  - spec: add patch1 for gcc-7.3.0 based compilation
  - spec: Change the subscription-manager-cockpit dependency level
  - fix: delete arch/* empty link(bugid:123783)
  - fix: fix no display /usr/share/cockpit/motd/inactive.motd (bugid:192093)
  - fix: remove rhel and centos(bugid:198321)
  - fix: closed others brands(bugid:243459)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.19
changelog:
  - libio: Fix a deadlock after fork in popen
  - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018)


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-251.0.1.22
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)
  - Add Hygon Support (Jing Li)
  - Sync loongarch64 code to lnd.36. (fanpeng@loongson.cn)
  - SPECS: define glibc_ldso for LoongArch. (fanpeng@loongson.cn)


author: zengwei <zengwei1@uniontech.com> - 2.28-251.0.1.22.1
changelog:
  - feat: sync optmize from upstream
  - arch: loongarch64 shadow stack
  - optmize: from upstream bug#214497


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2.1
changelog:
  - Resolves: RHEL-163815
  - Resolves: RHEL-163836

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-4
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for "timer -r" option to display all the per-CPU clocks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-64
changelog:
  - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-65
changelog:
  - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.20.0-34.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(Weisson)


author: wanhui <wanhui@uniontech.com> - 7.71.1-45.up3.01
changelog:
  - update: update from openEuler and fix CVE-2025-10966 CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: maqi <maqi@uniontech.com> - 5.15.24-2.12
changelog:
  - fix: after Auto connection is enabled, the configuration file is displayed in other network connections(bugid:307255)


author: lichao <lichaod@uniontech.com> - 1.0.47-1.01
changelog:
  - update: update to 1.0.47
  - spec: limit opencv BuildRequires
  - fix: fix incorrect pkg replacing relation(bugid:219967)
  - spec: sw BuildRequires: opencv


author: qinzhiben <qinzhiben@uniontech.com> - 12:4.3.6-50.0.2
changelog:
  - feat: update 12:4.3.6-50.0.1
  - feat: dhcp-server sw_64 provides dhcp
  - rebrand: modify bug url for uos


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219)
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-7
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161630)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162282)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161669)


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Pavel Valena <pvalena@redhat.com> - 049-218.git20221019
changelog:
  - Dracut: only login to one target at a time
  - iscsi: don't continue waiting if the root device is present
  - network: stop waiting for interfaces if root device is
  - iscsiroot: parse_iscsi_root overwrites command line args
  - iscsiroot: there's never more than one target per call
  - iscsiroot: try targets only once
  - iscsiroot: remove bashisms
  - fixup "Dracut: only login to one target at a time"
  - 35network-legacy: only skip waiting for interfaces if netroot


author: Pavel Valena <pvalena@redhat.com> - 049-221.git20221214
changelog:
  - fix(80lvmthinpool-monitor): use systemsctl instead of
  - fix(squash): build ld cache for squash loader
  - fix(network-manager): write DHCP filename option to dhcpopts


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-6
changelog:
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
  - Resolves: bz#2150267
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-7
changelog:
  - edk2-add-8.6-machine-type-to-edk2-ovmf-cc.json.patch [RHEL-12626]
  - Resolves: RHEL-12626
    (Missing firmware descriptor with secureboot disabled in RHEL 8)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-8
changelog:
  - edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
  - Resolves: RHEL-7560
    (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-9
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-10
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-clone-ArmPlatformPkg-s-NOR-f.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-CheckBlockLocked-feat.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-disk-I-O-protocol-imp.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-drop-block-I-O-protocol-impl.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-array-mode-switch-afte.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-switching-between-mode.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-use-EFI_MEMORY_WC-and-drop-A.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariable2.patch [RHEL-17587]
  -  edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variable2.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-17587]
  - edk2-ArmVirtPkg-ArmVirtQemu-migrate-to-OVMF-s-VirtNorFlas.patch [RHEL-17587]
  - edk2-OvmfPkg-clone-NorFlashPlatformLib-into-VirtNorFlashP.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-11
changelog:
  - edk2-SecurityPkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Change-OPTIONAL-keyword-usage-style.patch [RHEL-21154 RHEL-21156]
  - edk2-MdePkg-Introduce-CcMeasurementProtocol-for-CC-Guest-.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpm2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpmM.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-418.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SEC-PATCH-4118-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SEC-PATCH-4117-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21154 RHEL-21156]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
  - Resolves: RHEL-21154
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
  - Resolves: RHEL-21156
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21842
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-12
changelog:
  - edk2-Apply-uncrustify-changes-to-.c-.h-files-in-the-Netwo.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes-p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21844
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-8])
  - Resolves: RHEL-21846
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-8])
  - Resolves: RHEL-21848
    (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-8])
  - Resolves: RHEL-21850
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21852
    (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - Resolves: RHEL-21158
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])


author: Jiang Xin <jiangxin@hygon.cn> - 20220126gitbb1bba3d77-13.0.1
changelog:
  - Support hygon CSV3 feature
  - Support SEV live migration
  - 0047-anolis-OvmfPkg-BaseMemEncryptLib-Save-memory-encrypt.patch
  - Fix the isue that interrupt is enabled in MMIO VC handler
  - 0048-OvmfPkg-AmdSev-SecretDxe-Allocate-secret-location-as.patch (fangbaoshun@hygon.cn)
  - Resolves: bz#8033


author: maqi <maqi@uniontech.com> - 20220126gitbb1bba3d77-13.0.1.01
changelog:
  - fix: add soft link to make UEFI fireware be detectable(bugid:240197)
  - fix: create symbolic link OVMF_CODE.fd(bugid:253393)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.2
changelog:
  * Wed Jul 03 2024 Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.1
  - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Apply-uncrustify-changes.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-Apply-uncrustify-changes.p2.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-RdRandGenerateEntropy-to-g.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Remove-ArchGetSupportedRngAlgorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Documentation-include-parameter-c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Check-before-advertising-Cpu-Rng-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-AArch64-RawAlgorithm-support-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-debug-warning-for-NULL-PcdCpu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-AArch64-RngDxe.c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-Arm-support-of-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Correctly-update-mAvailableAlgoAr.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Conditionally-install-EFI_RNG_PRO.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Duplicate-BaseRngLibTimerLib-to-MdeModu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Add-deprecated-warning-to-BaseRngLibTimer.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-SecurityPkg.dec-Move-PcdCpuRngSupportedA.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-DxeRngLib-Request-raw-algorithm-instead-of-de.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GUID-to-describe-Arm-Rndr-Rng-algorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Rng-Add-GUID-to-describe-unsafe-Rng-alg.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GetRngGuid-to-RngLib.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Use-GetRngGuid-when-probing-RngLi.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Simplify-Rng-algorithm-selection-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - Resolves: RHEL-21854
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-8])
  - Resolves: RHEL-21856
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-8])
  - Resolves: RHEL-40099
    (CVE-2024-1298 edk2: Temporary DoS vulnerability [rhel-8.10.z])


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-11.el9_5.1
changelog:
  - Fix man.el shell injection vulnerability (RHEL-79021)
  - Eliminate use of obsolete patch syntax (RHEL-80450)


author: Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 1:27.2-11.0.1.1
changelog:
  - Add doc sub package
  - update config.sub and config.guess for loongarch64 (Jingyun Hua)
  - cherry-pick `add sw patch #349896d0a48b80b530cfa5cc2bd1fc4ceff68e42`. (nijie@wxiat.com)


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-125
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14031


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-127
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5397
  - fence_zvmip: document required user permissions in metadata/manpage
    Resolves: RHEL-14343


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18132
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20915
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-22174


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.02
changelog:
  - bundled setuptools: fix CVE-2024-6345
    Resolves: RHEL-50223
  - bundled urllib3: fix CVE-2024-37891
    Resolves: RHEL-43568

  - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
    Resolves: RHEL-7734
  - bundled jinja2: fix CVE-2024-34064
    Resolves: RHEL-35655


author: maqi <maqi@uniontech.com> - 115.11.0-1.02
changelog:
  - spec: define rhel_minor_version 3 for uelc20 dist.
  - spec: requires uos-indexhtml.
  - spec: fix bookmark icon in English env:comment cp command.
  - arch: exclude loongarch.
  - rebrand: modify distribution.ini.
  - rebrand: rename centos js file to uos.
  - rebrand: Welcome page 'https://www.chinauos.com/home' in js file.


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Jan Horak <jhorak@redhat.com> - 128.3.1-1.02
changelog:
  - cve: modify redhat to uos
  -      add 13-gcc-c++  change nss version from 3.101 to 3.90
  -  chnage nss: 3.101 | rust: 1.76 | llvm : 7.0


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Parag Nemade <pnemade AT redhat DOT com> - 20200314-7
changelog:
  - Resolves: RHEL-138168
    CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability
  - Resolves: RHEL-138174
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138190
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138140	
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: José Expósito <jexposit@redhat.com> - 3.0.0-9
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25175
    Resolves: https://issues.redhat.com/browse/RHEL-25177


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-2
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142417, RHEL-142401, RHEL-142385, RHEL-142369, RHEL-142353
    Resolves: RHEL-142337, RHEL-142321


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-5
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147954, RHEL-147955, RHEL-147970, RHEL-147977, RHEL-147980
    Resolves: RHEL-148002, RHEL-148014, RHEL-148031, RHEL-148906, RHEL-148996
    Resolves: RHEL-149007, RHEL-149056, RHEL-155984


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
changelog:
  - Resolves: #2184870 - Reachable assertion in peek_for_as4_capability function
  - Resolves: #2196795 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196796 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196794 - out-of-bounds read exists in the BGP daemon of FRRouting


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Weisson <wenshu.hx@alibaba-inc.com> - 3.4.1-7.0.1
changelog:
  - Add doc sub package
  - Disable pie mode for loongarch64 (geliwei@openanolis.org)
  - Support loongarch build (geliwei@openanolis.org)


author: Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6
changelog:
  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-12
changelog:
  - Resolves RHEL-7503
  - Adds a selinux policy for grafana
  - Resolves RHEL-12650
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-14
changelog:
  - Resolves RHEL-19596
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory
  - Fixes postgresql AVC denial


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-15
changelog:
  - Resolves RHEL-23466
  - Resolves RHEL-21027
  - Allows for gid to be 0
  - Allows for postgreSQL datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-26
changelog:
  - Resolves RHEL-125664: CVE-2025-58183
  - Resolves RHEL-132759: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-28
changelog:
  - Resolves RHEL-145418: CVE-2025-61728
  - Resolves RHEL-146095: CVE-2025-61726
  - Resolves RHEL-149271: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-30
changelog:
  - Resolves RHEL-166519: CVE-2026-32282
  - Resolves RHEL-167380: CVE-2026-32280
  - Resolves RHEL-167542: CVE-2026-32283


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Sam Feifer <sfeifer@redhat.com> - 5.1.1-14
changelog:
  - Resolves RHEL-166520: CVE-2026-32282
  - Resolves RHEL-167381: CVE-2026-32280
  - Resolves RHEL-167543: CVE-2026-32283


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-3
changelog:
  - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615
    Resolves: RHEL-70979, RHEL-71015, RHEL-70991


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: wxiat <nijie@wxiat.com> - 1.22.12-5.0.1
changelog:
  - cherry-pick `add sw arch #fad368622f5593cd4a508ce291e7598e9139eaf3`.
  - Update bcond format (wb-zh951434@alibaba-inc.com)


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in
    FLAC image tag handling
  - Resolves: RHEL-19469


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-5
changelog:
  - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,
    CVE-2024-47613
    Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022
    Resolves: RHEL-70998


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230515-115.gitd1962891
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later
  Resolves: rhbz#2183606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230711-116.gitd3f66064
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later
  Resolves: rhbz#2218670


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230808-117.git0ab353f8
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Navi32 dGPU firmware
  - Update to fix multi monitor behind TBT3 dock & random flickers
  - AMD Zen2 firmware update for cross-process information leak
  Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230824-118.git0e048b06
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - AMD Zen3 and Zen4 firmware update for return address predictor velunerability
  Resolves: rhbz#2230415


author: Denys Vlasenko <dvlasenk@redhat.com> - 20231121-119.git9552083a
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update AMD cpu microcode
  - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
  Resolves: RHEL-16721, RHEL-14260


author: Denys Vlasenko <dvlasenk@redhat.com> - 20231121-120.git9552083a
changelog:
  - Work around absense of rdfind during build
  - Add file directives for new iwlwifi files
  Resolves: RHEL-16721, RHEL-14260


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240111-121.gitb3132c18
changelog:
  - Pass --ignore-duplicates to copy-firmware.sh
  - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity
  Resolves: RHEL-13982


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240610-122.git90df68d2
changelog:
  - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607)
  - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596)
  - amd-ucode early loading broken [rhel-8] (RHEL-16799)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  - linux-firmware: Add tuning parameter configs for CS35L41 Firmware
  - linux-firmware: Fix firmware names for Laptop SSID 104316a3
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - iwlwifi: add gl FW for core87-44 release
  - iwlwifi: add ty/So/Ma firmwares for core87-44 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update sdma 6.0.1 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update sdma 6.0.2 firmware
  - amdgpu: update ipsp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update raven firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update smu 13.0.6 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update sdma 6.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update  firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update gc 10.3.7 firmware
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
  - Merge https://github.com/pkshih/linux-firmware into rtw
  - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
  - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
  - i915: Add DG2 HuC 7.10.15
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mekdiatek: Update mt8186 SOF firmware to v2.0.1
  - rtw89: 8852c: update fw to v0.27.56.14
  - rtw89: 8922a: add firmware v0.35.18.0
  - rtw88: Add RTL8703B firmware v11.0.0
  - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
  - Montage: update firmware for Mont-TSSE
  - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
  - imx: sdma: update firmware to v3.6/v4.6
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: update 9000-family firmwares to core85-89
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
  - amdgpu: Update VCN firmware binaries
  - Intel IPU2: Add firmware files
  - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  - i915: Add Xe2LPD DMC v2.18
  - i915: Update MTL DMC v2.21
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - linux-firmware: add firmware for MT7996
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - check_whence: Add a check for duplicate link entries
  - WHENCE: Clean up section separators
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - Intel Bluetooth: Make spacing consistent with rest of WHENCE
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  Resolves: RHEL-35596, RHEL-16799, RHEL-15607


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240715-123.git4c8fb21e
changelog:
  - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  Resolves: RHEL-47353


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240827-141.git3cff7109
changelog:
  - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256)
  - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: update path for video firmware for vpu-1/2/3.0
  - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
  - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: Update ISP FW for isp v4.1.1
  - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
  - Merge https://github.com/zijun-hu/qca_btfw into list-20240802
  - mediatek: Update mt8195 SOF firmware
  - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
  - amdgpu: DMCUB updates for DCN314
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22
  - i915: update MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10
  - xe: Add GSC 104.0.0.1161 for LNL
  - xe: Add LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: add new ISP 4.1.1 firmware
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
  - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
  - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update ty/So/Ma firmwares for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - .gitignore: Ignore intermediate files
  - i915: Update Xe2LPD DMC to v2.21
  Resolves: RHEL-54256, RHEL-54237


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: zhangxianting <zhangxianting@uniontech.com> - 1:1.8.0.412-b08.5.up2.01
changelog:
  - update: sync openeuler pr526 pr556
  - cve: CVE-2024-21085 CVE-2024-21094 CVE-2024-21011 CVE-2024-21005 CVE-2024-21068 CVE-2024-20922 CVE-2024-20918 CVE-2024-20945 CVE-2024-20952 CVE-2024-20926 CVE-2024-20925 CVE-2024-20919 CVE-2024-20921 CVE-2024-20923


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: zengwei <zengwei1@uniontech.com> - 1:1.8.0.422-b05.up2.01
changelog:
  - update: sync openeuler pr584
  - cve: CVE-2024-21131 CVE-2024-21138 CVE-2024-21140 CVE-2024-21144 CVE-2024-21145 CVE-2024-21147


author: Tomas Halman <thalman@redhat.com> - 1.6-19.0.2
changelog:
  - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions
  - Resolves: RHEL-168184


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.72-79
changelog:
  - Fixed a bug which could result in the UDS index issuing I/O while
    suspended.
  - Resolves: rhbz#1990180


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-83
changelog:
  - Adjusted kernel dependencies to grab the right packages.
  - Resolves: rhbz#2011426
  - Rebuilt for latest kernel.
  - Relates: rhbz#2000909


author: Bin Hu<hubin73@huawei.com> -1:0.9.1-21.04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch-build: fix gcc version check when using OOT_MODULE
         already fixed in 9000


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Julien Rische <jrische@redhat.com> - 1.18.2-27
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27250
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27244
  - Make TCP waiting time configurable
    Resolves: RHEL-17131


author: Julien Rische <jrische@redhat.com> - 1.18.2-29.01
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45398 RHEL-45386
  - Fix leak of default credentials in gss_inquire_cred()
    Resolves: RHEL-32258


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: haomimi <haomimi@uniontech.com> - 2.35.2-12.up4.07
changelog:
  - build: sync from anolis
  - build: fix #2142496 - update upstream tests
  - build: fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - build: fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - build: fix #2180413 - Backport hint about systemd daemon-reload


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: lichao <lichaod@uniontech.com> - 2.9.4-3.01
changelog:
  - fix: adjust sssd service to speed up system-booting (bugid:240631)
  - fix: sssd service failed (bugid:240325)
  - fix: add default conf file at /etc/sssd/ (bugid:197047)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.1
changelog:
  - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z]
  - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z]
  - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z]
  - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z]
  - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z]
  - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.2
changelog:
  - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z]
  - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z]
  - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z]


author: Alejandro López <allopez@redhat.com> - 2.9.4-5.3
changelog:
  - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z]
  - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z]


author: Daniel Kopecek <dkopecek@redhat.com> - 9-3
changelog:
  - Enabled build gating
  - Synced layout test assumtions with recent cryptsetup changes
    Resolves: rhbz#1625683


author: Sergio Correia <scorreia@redhat.com> - 9-4
changelog:
  - LUKSMeta now sets error level from libcryptsetup to CRYPT_LOG_ERROR, and
    this output is logged to stderr
    Resolves: rhbz#1770395


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: xinghe <xinghe2@h-partners.com> - 2:1.6.37-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-7
changelog:
  - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
    Resolves: RHEL-76376


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-8
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85887
    Resolves: RHEL-85900
    Resolves: RHEL-85901
    Resolves: RHEL-87039
    Resolves: RHEL-87094
    Resolves: RHEL-87114
    Resolves: RHEL-88348
    Resolves: RHEL-88351


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-9
changelog:
  - Add patches to improve test reliability
  - Backport patches for various CVEs
    Resolves: RHEL-85879
    Resolves: RHEL-92280
    Resolves: RHEL-93031
    Resolves: RHEL-93032


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52530 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 0.9.6-7
changelog:
  - NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
  - authorization bypass in pki_verify_data_signature (CVE-2023-2283)


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: mahailiang <mahailiang@uniontech.com> - 2.9.0-9.01
changelog:
  - build: add udisks-mount-patch-changes.patch
  - spec: Modify redhat-rpm-config to uos-rpm-config and /media instead of /run/media


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: zengwei <zengwei1@uniontech.com> - 1.7.0-11.0.1.01
changelog:
  - Add patch to fix integer overflows.
  - Fix compilation by including limits.h
  - Resolves: RHEL-40650
  - fix: fix CVE-2024-5197 CVE-2023-6349


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Funda Wang <fundawang@yeah.net> - 2.9.10-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: Lili Zhu <lizhu@redhat.com> - 2.5.0-1
changelog:
  - Rebase to version 2.5.0
  - Fix the following CVEs
    CVE-2023-52425 CVE-2024-28757 CVE-2024-45490
    CVE-2024-45491 CVE-2024-45492 CVE-2024-50602
    CVE-2024-8176 CVE-2025-59375
  - Resolves: RHEL-114628


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-30
changelog:
  - fix crash when configured as proxy - issue 82 (RHEL-14454)
  - log once truncating issue (RHEL-13597)
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26650)


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - update the restore defaults for pkcs12


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 3.101.0-7.01
changelog:
  - disable unit test
  - cherry-pick `add sw patch #ce8dbcf775a1bf3d6bd0d5de53d3688e7caa00db`. (nijie@wxiat.com)


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150188]
  - Resolves: bz#2150188
    (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177068]
  - Resolves: bz#2177068
    ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215563]
  - Resolves: bz#2215563
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebase to open-vm-tools 12.2.5 [bz#2214861]
  - Resolves: bz#2214861
    ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
  - Resolves: bz#2216415
    ([ESXi][RHEL8] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - Rebuild CVE-2023-20900 for 8.10
  - Resolves: RHEL-4584
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.10.0])


author: Jon Maloy <jmaloy@redhat.com> - 12.2.5-4
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-7012]
  - Resolves: RHEL-7012
    ([RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5 [RHEL-15059]
  - Fix CVE-2023-34058 [RHEL-14649]
  - Fix CVE-2023-34059 [RHEL-14683]
  - Resolves: RHEL-15059
    ([ESXi][RHEL8]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14649
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
  - Resolves: RHEL-14683
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-17683]
  - Resolves: RHEL-17683
    (Add Restart=on-failure to vmtoolsd.service [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2.el8.1
changelog:
  - ovt-SDMP-Service-Discovery-Plugin.patch [RHEL-117388]
  - Resolves: RHEL-117388
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-8.10.z])


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.2p1-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: wangqia <wangqia@uniontech.com> - 8.2p1-34.01
changelog:
  - fix: ssh connect error(bugid:248801)
  - fix: fix the error of SSH login failure using SM public key(bugid:313335)
  - chore: change install dependency version
  - update: update from openEuler anolis


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.2p1-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: Nathan Scott <nathans@redhat.com> - 5.3.7-17
changelog:
  - Harden pmdaopenmetrics metric name validator (BZ 2139325)
  - Fix issues in pmdanfsclient srcport handling (BZ 2150889)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-18
changelog:
  - Improve pmproxy handling large HTTP requests (BZ 2159207)
  - Fix hacluster metrics with current Pacemaker (BZ 2219731)
  - Ensure pmcd.conf not needlessly over written (BZ 2211263)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-19
changelog:
  - Fix OpenMetrics PMDA mishandling systemd metrics (RHEL-7507)
  - Additional pmlogger_farm service SELinux policy (RHEL-7501)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-21
changelog:
  - Fix python API day-of-year out of range bug (RHEL-29708)
  - Added spec deps on ps and diffutils for diff (RHEL-17081)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-22
changelog:
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57796)
  - Guard against symlink attacks in pmpost program (RHEL-57799)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58002)
  - Update pmdahacluster for newer crm_mon versions (RHEL-57788)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991763)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-1
changelog:
  - Fix several issues in the pcp-ss(1) utility (BZ 1981886)
  - Document pmproxy archive discovery further (BZ 2026726)
  - Improve SQL Server PMDA secure settings (BZ 2057615)
  - Rebase to latest stable version of PCP (BZ 2059461)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign warning message from pmie systemd unit file.


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Michal Pospisil <mpospisi@redhat.com> - 0.10.18-2
changelog:
  - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack
    Resolves: RHEL-26445, RHEL-26447, RHEL-26449


author: Michal Pospisil <mpospisi@redhat.com> - 0.10.18-2.el8_10.3
changelog:
  - Prevented any future HTTP header-based attacks on puma/sinatra by removing any headers not recognized by pcsd
    Resolves: RHEL-65595


author: Michal Pospisil <mpospisi@redhat.com> - 0.10.18-2.uelc20.5
changelog:
  - Fixed CVE-2024-47287 by patching bundled Tornado
    Resolves: RHEL-93167
  - Fixed CVE-2025-46727 by updating bundled rubygem rack
    Resolves: RHEL-90147


author: Michal Pospíšil <mpospisi@redhat.com> - 0.10.18-2.uelc20.7
changelog:
  - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack
    Resolves: RHEL-120432, RHEL-120939, RHEL-121033, RHEL-123639, RHEL-124936


author: lichao <lichaod@uniontech.com> - 0.10.18-2..uelc20.8
changelog:
  - update: update to openanolis
  - build: fix dataclasses-0.8-euler.tar.gz not found error
  - build: add dataclasses-0.8-euler.tar.gz for euler
  - feat: enable i18n patch
  - cve: CVE-2022-27539 CVE-2022-27530
  - build: updated bundled rubygem rack
  - cve: CVE-2022-45442
  - build: remove unneeded rubygem webrick
  - build: limit ruby version to 2.5.9
  - arch: remove i686
  - arch: modify ffi gem to support loongarch


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-416
changelog:
  - 5.26.3 bump (bug #1655526)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924)
  - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-417
changelog:
  - Fix Time-Local tests to pass after year 2019 (bug #1807120)
  - Run-require perl(Encode) by perl-libs (bug #1903503)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-419
changelog:
  - Fix CVE-2020-10543 (bug #1839273)
  - Fix CVE-2020-10878 (bug #1839276)
  - Fix a file mode of a perl-example.stp example (bug #1913693)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-58
changelog:
  - Security fix for CVE-2022-48564
  Resolves: RHEL-16674
  - Skip tests failing on s390x
  Resolves: RHEL-19252


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-62.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - repair security fix for CVE-2007-4559 (sunxinpeng@inspur.com)
  - Fix CVE-2023-40217: Check for & avoid the ssl (hezhongkun@inspur.com)
  - Security fix for CVE-2022-48560 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2022-48564 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2023-27043 (liubo03@inspur.com)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: pangqing <pangqing@uniontech.com> - 3.6.8-62.0.1.01
changelog:
  - spec: change redhat-rpm-config to uos-rpm-config
  - rebrand: add uos platform
  - feat: add sm3 support
  - feat: add sw_64 support


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-70
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-73
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299
  Resolves: RHEL-143063, RHEL-143120, RHEL-144860


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-75.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: maqi <maqi@uniontech.com> - 3.6.8-75.0.1.01
changelog:
  - cve: CVE-2025-13837 CVE-2025-6069 CVE-2025-8291 
  - fix: check system version information is incorrect(bugid:266135)
  - spec: change redhat-rpm-config to uos-rpm-config
  - rebrand: add uos platform
  - feat: add sm3 support
  - feat: add sw_64 support


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-4
changelog:
  - New subpackage platform-python-setuptools without files from /usr/bin/*
  - python3-setuptools contains only files from /usr/bin/* and depends
    on platform-python-setuptools
  - Resolves: rhbz#1641973


author: Philip Kovacs <pkdevel@yahoo.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Added enviromnent module for pmi/pmix
  - Added pkgconfig files for pmix/pmi/pmi2
  - Ensure lexer sources are rebuilt
  - Removed obsolete sasl support
  - Use new ldconfig_scriplets macro


author: Jarod Wilson <jarod@redhat.com> - 2.1.1-2
changelog:
  - Add the --with-tests-examples flag to be able to better verify functionality
  - Related: rhbz#1682374


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-47
changelog:
  - Filesystem: improve stop-action and allow setting term/kill signals
    and signal_delay for large filesystems

    Resolves: rhbz#2189243


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-51
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter
    and AWS Policy based authentication type

    Resolves: RHEL-16248


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-53
changelog:
  - bundled urllib3: fix CVE-2023-45803
  - bundled pycryptodome: fix CVE-2023-52323

    Resolves: RHEL-22431, RHEL-20916


author: lichao <lichaod@uniontech.com> - 4.9.0-54.01
changelog:
  - build: use /usr/bin/ps instead of /bin/ps for 105xe
  - build: disable python bytecompilation for 105xe
  - build: fix httplib2 not found error for 105xe
  - feat: New Resource Agent for TongWeb
  - feat: Resource Agent for solution Two-node cluster brain split
  - fix: iSCSILogicalUnit: fix issue where resource was in stopped state when using allowed_initiators parameter
  - fix: podman: add podman parameter error judgment
  - build: add BuildRequires gettext


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.02
changelog:
  - bundled setuptools: fix CVE-2024-6345
    Resolves: RHEL-50360

  - gcp-pd-move: fix TLS_VERSION_1 issue
    Resolves: RHEL-50041

  - bundled urllib3: fix CVE-2024-37891
    Resolves: RHEL-44923

  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service
  - db2: fix OCF_SUCESS typo
    Resolves: RHEL-34137, RHEL-32828


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.15
changelog:
  - ocf-shellfuncs/AWS agents: dont sleep after the final try in
    curl_retry()

    Resolves: RHEL-102731


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.17
changelog:
  - db2: add "skip_basic_sql_health_check" parameter to avoid failing on
    systems with high load
  - db2: add "monitor_retries", "monitor_sleep", and "monitor_retry_all_errors"
    parameters to be able to avoid failing on first try

    Resolves: RHEL-115783, RHEL-115781


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.19
changelog:
  - db2: use reintegration flag to avoid race condition on cluster
    reintegration

    Resolves: RHEL-118625


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.20
changelog:
  - portblock: add promotable support, and method and status_check
    parameters

    Resolves: RHEL-116150


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.23
changelog:
  - nfsserver: add ability to set e.g. "pipefs-directory=/run/nfs/rpc_pipefs"
    in /etc/nfs.conf to avoid issues with non-clustered Kerberized mounts

    Resolves: RHEL-102979


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.27
changelog:
  - bundled urllib3: fix CVE-2025-66471
  - bundled urllib3: fix CVE-2026-21441

    Resolves: RHEL-139760, RHEL-140787


author: lichao <lichaod@uniontech.com> - 4.9.0-54.27.01
changelog:
  - update: update from openanolis
  - build: use /usr/bin/ps instead of /bin/ps for 105xe
  - build: disable python bytecompilation for 105xe
  - build: fix httplib2 not found error for 105xe
  - feat: New Resource Agent for TongWeb
  - feat: Resource Agent for solution Two-node cluster brain split
  - fix: iSCSILogicalUnit: fix issue where resource was in stopped state when using allowed_initiators parameter
  - fix: podman: add podman parameter error judgment
  - build: add BuildRequires gettext


author: Michal Ruprich <mruprich@redhat.com> - 3.1.3-19
changelog:
  - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.09
changelog:
  - fix: Error prompt during non root user authentication, unable to input authentication password (bugid:233697)
  - fix: List of saved passwords - View password removal not as expected (bugid:232243)


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.10
changelog:
  - feat: Update reinforcement manual
  - feat: Add a new feature to add content above a specified line (fn_usa)
  - fix: Root user can successfully modify their password after using the latest 5 attempts (bugid:238839)
  - fix: The issue of passwords being unable to be modified (bugid:233353)


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.12
changelog:
  - fix: Resolve the issue of incorrect issue display in upgrade scenarios (bugid:232697)
  - feat: update doc content


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-19.14
changelog:
  - feat: 从文件备份的方式改为文件的配置项备份，保证备份高等级切换低等级的功能完整
  - fix: 解决1050u2升级到1070-build4,系统中logo相关内容未更新的问题(bugid:232697)


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Jan Jansky <jjansky@redhat.com> = 4.6.0-1
changelog:
  - [ultrapath] Add new plugin for Huawei UltraPath
    Resolves: bz2187407
  - [cleaner] Use data filter for extraction
    Resolves: bz2217906
  - [discovery] Enable the plugin by containers
    Resolves: bz2222134


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Abhi Das <adas@redhat.com> - 4.3-20
changelog:
  - rhbz#1895017 - unsquashfs does not preserve file capabilities
    rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally
    Resolves: rhbz#1895017, rhbz#1754815


author: Abhi Das <adas@redhat.com> - 4.3-21
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    Resolves: rhbz#2007303 rhbz#2000637


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-1
changelog:
  RHEL 8.9.0.Z ERRATUM
  - Rebase to 1.9.5p2
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21825
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21831
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21820


author: Alejandro López <allopez@redhat.com> - 1.9.5p2-1.2
changelog:
  RHEL 8.10.0.Z ERRATUM
  - Reintroduce cmnd_no_wait
  Resolves: RHEL-51956
  - Missing separator in the log
  Resolves: RHEL-71913


author: Alejandro López <allopez@redhat.com> - 1.9.5p2-1.3
changelog:
  RHEL 8.10.0.Z ERRATUM
  - sudo passes SHELL environment variable twice to the shell being executed [rhel-8]
  Resolves: RHEL-127360


author: guo chuang <guo.chuang@zte.com.cn> - 1.9.5p2-1.0.1.3
changelog:
  - add patch for CVE-2022-43955
  - cherry-pick `add sw arch #67f107f94b2ae4b6376e750103f8f5fd1f3e6b31`.


author: mahailiang <mahailiang@uniontech.com> - 243-62.up9.13
changelog:
  - update: update to openeuler2003sp4
  - spec: disable backport-udev-make-algorithm-that-selects-highest-priority-de.patch


author: xujing <xujing125@huawei.com> - 243-86
changelog:
  - print the real reason for link update
  - run link_update() with increased retry count in second invocation


author: maqi <maqi@uniontech.com> - 115.11.0-1.02
changelog:
  - debrand: debrand from centos
  - arch:no build loongarch64
  - arch: add support mips64el
  - add Patch10010:0001-ChengJieOS-add-cflags.patch for build error.
  - add Patch10011:0001-add-mips64el-for-libffi.patch
  - add Patch10012:0001-add-n32.S-for-MIPS.patch
  - rebrand: rename js file and update vendor
  - rebrand: add zh_CN name on thunderbird.desktop
  - spec: define rhel_minor_version 3 for uelc20 dist
  - spec: modify RPM_BUILD_ROOT for uos build.


author: Angie.J <doucaixia@uniontech.com> - 115.14.0-1.02
changelog:
  - cve: CVE-2024-7518 CVE-2024-7519 CVE-2024-7520 CVE-2024-7521 CVE-2024-7522
         CVE-2024-7525 CVE-2024-7526 CVE-2024-7527 CVE-2024-7528 CVE-2024-7529


author: doucaixia <doucaixia@uniontech.com> - 128.3.1-1.01
changelog:
  - spec: no build loongarch64
  - spec: define rhel_minor_version 3 for uelc20 dist
  - spec: modify js filename from *redhat* to *uos*
  - rebrand: rename js file(uos) and update vendor
  - rebrand: add zh_CN name on thunderbird.desktop
  - spec: add some mips arch info , mips patch is not used


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com>
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-61999


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-15
changelog:
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-79397
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-79401
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-79386
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-79380
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-79369
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-79364
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-79360
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-79348


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-4
changelog:
  - Add option "ApproveLoggedUserOnly" allowing to connect only the user
    owning the running session
    Resolves: RHEL-91104


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
    Resolves: RHEL-97268
  - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294
  - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
    Resolves: RHEL-97364
  - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
    Resolves: RHEL-97397
  - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
    Resolves: RHEL-97232


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-7
changelog:
  - Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-16
changelog:
  - Resolves: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Remove JDK subpackges which are unused


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-27
changelog:
  - Related: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-28
changelog:
  - Resolves: RHEL-13907
    tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)
  - Resolves: RHEL-13904
    tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
  - Resolves: RHEL-12951
    tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
  - Resolves: RHEL-12544
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Resolves: RHEL-2386
    tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-29
changelog:
  - Resolves: RHEL-17602
    tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)
  - tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Sokratis Zappis <szappis@redhat.com> - 1:9.0.87-1.el8_10.1
changelog:
  - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly
  - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-29255
    tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672)
  - Resolves: RHEL-29250
    tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.3
changelog:
  - Resolves: RHEL-82934
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-71708
    tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.4
changelog:
  - Resolves: RHEL-91761
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-71971
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.5
changelog:
  - Resolves: RHEL-108486
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108494
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108502
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108510
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108524
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108518
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.6
changelog:
  - Resolves: RHEL-102193
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.7
changelog:
  - Resolves: RHEL-124507
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-91743
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: wanhui <wanhui@uniontech.com> - 1.2.0-1.17
changelog:
  - feat: fresh application control switch`s status after page change
  - feat: To determine if a restart is required after application control switch on


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-14
changelog:
  - Integrated the vdo to lvm conversion tool into the vdo management script
    and modified the tool itself to correctly convert the UDS index so that
    dedupe information is not lost by conversion.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-14
changelog:
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Added a parameter to the lvm conversion tool to specify the amount of
    space to free up.
  - Resolves: rhbz#1966827
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.74-14
changelog:
  - Renamed vdo2LVM to vdopreparelvm and moved its installation location to
    /usr/libexec so that it is not in common default paths as this utility is
    intended to be called from LVM, not directly by users.
  - Related: rhbz#1986930


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-14
changelog:
  - Added a check to vdopreparelvm to determine whether it has already been
    converted.
  - Resolves: rhbz#2017843


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.7-14
changelog:
  - Fixed bugs in the vdopreparelvm check to determine whether a device has
    already been converted.
  - Resolves: rhbz#2017843
  - Fixed an issue in the vdo-by-dev tool which could result in a failure to
    start vdo devices when some devices in the vdo config file do not exist.
  - Resolves: rhbz#2022154


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.14-14
changelog:
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#1999640


author: gouhao <gouhao@uniontech.com> - 6.2.6.14-14.0.1.02
changelog:
  - uos: add CACHE_LINE_BYTES macro for mips
  - uos: fix casting error
  - uos: add smp_rmb macro for mips


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
changelog:
  - Add patch for CVE-2023-28204
    Resolves: #2209744
  - Add patch for CVE-2023-32373
    Resolves: #2209727


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.40.5-1
changelog:
  - Upgrade to 2.40.5. Also, disable JIT
    Resolves: #2176269
    Resolves: #2185742
    Resolves: #2209728
    Resolves: #2209745
    Resolves: #2218649
    Resolves: #2218651
    Resolves: #2224611


author: Bo Ren <rb01097748@alibaba-inc.com> 2.42.5-1.0.1
changelog:
  - Exclude loongarch64
  - cherry-pick `add sw arch #ef8be098b07c4d8a9f809d32a607700f4a420676`. (nijie@wxiat.com)


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-8.10.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1770
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.12-3
changelog:
  - Update test repository snapshot urls rhel 8.10 and remove cs8 repos
    The snapshots for cs8 have been removed from the service
  - Rebuild for CVE-2025-22871
    Resolves: RHEL-89289


author: maqi <maqi@uniontech.com> - 1:2.6.2-14.3
changelog:
  - cve: CVE-2019-10894 CVE-2019-10896 CVE-2019-10899 
  - cve: CVE-2019-10901 CVE-2019-10903 CVE-2020-7045
  - cve: CVE-2019-12295 CVE-2019-13619 CVE-2019-9209 
  - cve: CVE-2020-26575 CVE-2020-9431  CVE-2020-11647
  - cve: CVE-2020-25862 CVE-2020-25863 CVE-2020-9428
  - rebuild: rebuild for c8.5


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: José Expósito <jexposit@redhat.com> - 1.20.11-20
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18321
    Resolves: https://issues.redhat.com/browse/RHEL-18327


author: José Expósito <jexposit@redhat.com> - 1.20.11-21
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21207
    Resolves: https://issues.redhat.com/browse/RHEL-20528
    Resolves: https://issues.redhat.com/browse/RHEL-20378
    Resolves: https://issues.redhat.com/browse/RHEL-20384
    Resolves: https://issues.redhat.com/browse/RHEL-21191
    Resolves: https://issues.redhat.com/browse/RHEL-21198


author: José Expósito <jexposit@redhat.com> - 1.20.14-23
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: zhangshaoning <zhangshaoning@uniontech.com> - 1.20.11-23.01
changelog:
  - update: xorg-x11-server-1.20.11-23.el8.src.rpm and sync patch
  - fix: workaround to resolve crash while changing resolution ratio(bugid:163293)(zhaoshuang)
  - feat: transplant deepin patch(liweigang)


