# changelog

author: jchzhou <zhoujiacheng@iscas.ac.cn> - 6.6.0-48.0.0.54
changelog:
  - create & package symvers-kernelver.gz unconditionally to fix ISO installation
  faliures like in issue #I7MARC


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-50.0.0.55
changelog:
  - !12979  ext4: fix timer use-after-free on failed mount
  - ext4: fix timer use-after-free on failed mount
  - !12980  ext4: no need to continue when the number of entries is 1
  - ext4: no need to continue when the number of entries is 1
  - !12983  CVE-2024-49968
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - !12978  exfat: fix memory leak in exfat_load_bitmap()
  - exfat: fix memory leak in exfat_load_bitmap()
  - !12977  ext4: fix access to uninitialised lock in fc replay path
  - ext4: fix access to uninitialised lock in fc replay path
  - !13018 nebula-matrix: fix ci build warning when use clang
  - Net: nebula_matrix: fix ci build warning
  - !12866  fix CVE-2024-50041
  - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
  - !12595  scsi: fnic: Move flush_work initialization out of if block
  - scsi: fnic: Move flush_work initialization out of if block
  - !13004  CVE-2024-50064
  - zram: don't free statically defined names
  - zram: free secondary algorithms names
  - !13044  Some patches of RDMA/hns from Linux to OLK-6.6
  - RDMA/hns: Fix cpu stuck caused by printings during reset
  - RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
  - RDMA/hns: Modify debugfs name
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
  - Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
  - !13049  ext4: some dependencies of CVE-2024-47701
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: ext4_search_dir should return a proper error
  - !12682  smb: client: fix UAF in async decryption
  - smb: client: fix UAF in async decryption
  - !13023  l2tp: prevent possible tunnel refcount underflow
  - l2tp: prevent possible tunnel refcount underflow
  - !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - !13024  wifi: cfg80211: Set correct chandef when starting CAC
  - wifi: cfg80211: Set correct chandef when starting CAC
  - !12993  igb: Do not bring the device up after non-fatal error
  - igb: Do not bring the device up after non-fatal error
  - !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
  - mm/mremap: fix move_normal_pmd/retract_page_tables race
  - !12800  cachefiles: fix dentry leak in cachefiles_open_file()
  - cachefiles: fix dentry leak in cachefiles_open_file()
  - !12900  ext4: fix double brelse() the buffer of the extents path
  - ext4: fix double brelse() the buffer of the extents path
  - !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - !12960  ext4: update orig_path in ext4_find_extent()
  - ext4: update orig_path in ext4_find_extent()
  - !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
  - drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
  - !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
  - btrfs: fix uninitialized pointer free on read_alloc_one_name() error
  - !12906  io_uring: fix CVE-2024-50060
  - io_uring: check if we need to reschedule during overflow flush
  - io_uring: always lock __io_cqring_overflow_flush
  - !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
  - rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
  - !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
  - ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
  - !12497  drm/stm: Avoid use-after-free issues with crtc and plane
  - drm/stm: Avoid use-after-free issues with crtc and plane
  - !12775  vt: prevent kernel-infoleak in con_font_get()
  - vt: prevent kernel-infoleak in con_font_get()
  - !12883  CVE-2024-50016
  - drm/amd/display: Avoid overflow assignment in link_dp_cts
  - !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
  - net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
  - !12776  drm/amd/display: Check stream before comparing them
  - drm/amd/display: Check stream before comparing them
  - !12940 virtCCA feature: GPU supports maximum 1G page table mapping
  - virtcca feature : GPU supports maximum 1G page table mapping.
  - !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12942  fix CVE-2024-47704
  - drm/amd/display: Check link_res->hpo_dp_link_enc before using it
  - drm/amd/display: Check link_res->hpo_dp_link_enc before using it
  - !12953  mm: gup: stop abusing try_grab_folio
  - mm: gup: stop abusing try_grab_folio
  - !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
  - perf/x86/zhaoxin/uncore: update KX-7000 support
  - !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
  - USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
  - !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
  - x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
  - x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
  - x86/cpu/zhaoxin: Encapsulate access to global variables within functions
  - x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
  - x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
  - !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
  - iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
  - !12835 Net: nebula-matrix: fix ci build warning
  - Net: nebula_matrix: fix ci build warning
  - !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - !12871  Fix CVE-2024-47703
  - selftests/bpf: Add return value checks for failed tests
  - bpf: Fix kabi breakage in struct bpf_insn_access_aux
  - bpf: Fix kabi breakage in struct bpf_func_state
  - bpf: Fix compare error in function retval_range_within
  - bpf, lsm: Add check for BPF LSM return value
  - bpf, lsm: Add disabled BPF LSM hook list
  - bpf: enforce precise retval range on program exit
  - bpf: enforce exact retval range on subprog/callback exit
  - !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
  - ocfs2: reserve space for inline xattr before attaching reflink tree
  - !12372  fix CVE-2024-49954
  - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  - !12358  fix CVE-2024-49852
  - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
  - !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
  - i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
  - !12918  Input: adp5589-keys - fix NULL pointer dereference
  - Input: adp5589-keys - fix NULL pointer dereference
  - !12874  tipc: guard against string buffer overrun
  - tipc: guard against string buffer overrun
  - !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12843 v4  CVE-2024-50063
  - selftests/bpf: Add test for lsm tail call
  - bpf: Fix kabi breakage in struct bpf_map
  - bpf: Prevent tail call between progs attached to different hooks
  - !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
  - gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
  - tcp: fix mptcp DSS corruption due to large pmtu xmit
  - !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - !12913  drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
  - !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - !12769  uprobes: fix kernel info leak via "[uprobes
  - uprobes: fix kernel info leak via "[uprobes]" vma
  - !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
  - wifi: ath12k: fix array out-of-bound access in SoC stats
  - !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12738  r8169: add tally counter fields added with RTL8125
  - r8169: add tally counter fields added with RTL8125
  - !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - !12637  kthread: unpark only parked kthread
  - kthread: unpark only parked kthread
  - !12473  scsi: wd33c93: Don't use stale scsi_pointer value
  - scsi: wd33c93: Don't use stale scsi_pointer value
  - !12688  security/keys: fix slab-out-of-bounds in key_task_permission
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - !12791  slip: make slhc_remember() more robust against malicious packets
  - slip: make slhc_remember() more robust against malicious packets
  - !12607 virtcca compile warning clean and coda bugfix
  - virtcca bugfix: compile warning clean
  - virtcca bugfix: clear device msi address
  - virtcca bugfix: compile warning clean
  - !12773 v4  add vdpa support for x86 and enable vdpa migration.
  - vdpa: add support for x86 and open vdpa migration build config
  - virtio_blk: remove the broken zone revalidation support
  - !12759  CVE-2024-50055
  - driver core: bus: Fix double free in driver API bus_register()
  - !12772 MPTCP Upstream part 16
  - selftests: mptcp: diag: avoid extra waiting
  - configs/debug: add NET debug config
  - MAINTAINERS: update Geliang's email address
  - !12771 MPTCP Upstream part 15
  - selftests: mptcp: diag: change timeout_poll to 30
  - selftests: mptcp: join: change capture/checksum as bool
  - selftests: mptcp: simult flows: define missing vars
  - selftests: mptcp: netlink: drop duplicate var ret
  - !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
  - drivers: load Yunsilicon ethernet driver when xsc_pci probing
  - !12817  media: venus: fix use after free bug in venus_remove due to race condition
  - media: venus: fix use after free bug in venus_remove due to race condition
  - !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
  - iommufd: Require drivers to supply the cache_invalidate_user ops
  - !12793  uprobe: avoid out-of-bounds memory access of fetching args
  - uprobe: avoid out-of-bounds memory access of fetching args
  - !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
  - openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
  - !12829  drm/amd/display: Check null-initialized variables
  - drm/amd/display: Check null-initialized variables
  - !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
  - media: i2c: ar0521: Use cansleep version of gpiod_set_value()
  - !12827  drm/amd/display: Check null pointers before using them
  - drm/amd/display: Check null pointers before using them
  - !12767  x86/bugs: Use code segment selector for VERW operand
  - x86/bugs: Use code segment selector for VERW operand
  - !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
  - ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12482  device-dax: correct pgoff align in dax_set_mapping()
  - device-dax: correct pgoff align in dax_set_mapping()
  - !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12816 v2  bpf lts backport
  - Fix kabi breakage in struct bpf_map
  - bpf: Optimize the free of inner map
  - !12747  parport: Proper fix for array out-of-bounds access
  - parport: Proper fix for array out-of-bounds access
  - !12780 drivers: misc: uacce: bugfix for MAX_ORDER
  - drivers: misc: uacce: bugfix for MAX_ORDER
  - !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
  - drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
  - !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
  - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
  - !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
  - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
  - !12736  drm/amd/display: Fix system hang while resume with TBT monitor
  - drm/amd/display: Fix system hang while resume with TBT monitor
  - !12604  drm/amd/display: Check null pointer before dereferencing se
  - drm/amd/display: Check null pointer before dereferencing se
  - !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
  - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
  - !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
  - drm/amd/display: Initialize get_bytes_per_element's default to 1
  - !12755  pinctrl: stm32: check devm_kasprintf() returned value
  - pinctrl: stm32: check devm_kasprintf() returned value
  - !12715 MPTCP Upstream part 14
  - mptcp: check the protocol in mptcp_sk() with DEBUG_NET
  - mptcp: check the protocol in tcp_sk() with DEBUG_NET
  - mptcp: token kunit: set protocol
  - !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
  - btrfs: fix uninitialized pointer free in add_inode_ref()
  - !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
  - ima: Avoid blocking in RCU read-side critical section
  - Revert "ima: Avoid blocking in RCU read-side critical section"
  - !12516  fix CVE-2024-47742
  - firmware_loader: Block path traversal
  - !12710  fix CVE-2024-49924
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - !12729  CVE-2024-50059
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
  - !12720 drivers/crypto/ccp: fix a build error
  - drivers/crypto/ccp: fix a build error
  - !12666  block: fix integer overflow in BLKSECDISCARD
  - block: fix integer overflow in BLKSECDISCARD
  - !12608  blk_iocost: fix more out of bound shifts
  - blk_iocost: fix more out of bound shifts
  - !12656  CVE-2024-49955
  - ACPI: battery: Fix possible crash when unregistering a battery hook
  - ACPI: battery: Simplify battery hook locking
  - !12662  drm/amd/display: fix double free issue during amdgpu module unload
  - drm/amd/display: fix double free issue during amdgpu module unload
  - !12698  mm: memcg: don't periodically flush stats when memcg is disabled
  - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
  - mm: memcg: don't periodically flush stats when memcg is disabled
  - !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
  - drivers: update Yunsilicon driver to version 2406_rc16
  - !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
  - drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
  - !12545  Fix TX fifo corruption in patch [3
  - serial: sc16is7xx: fix TX fifo corruption
  - kfifo: add kfifo_out_linear{,_ptr}()
  - serial: sc16is7xx: refactor FIFO access functions to increase commonality
  - !12648  net: do not delay dst_entries_add() in dst_release()
  - net: do not delay dst_entries_add() in dst_release()
  - !12553  Fix CVE-2024-49996
  - cifs: Fix buffer overflow when parsing NFS reparse points
  - smb: client: fix parsing of device numbers


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-52.0.0.56
changelog:
  - !13117 nebula-matrix: fix ci build err
  - Net: nebula_matrix: fix ci build err
  - !12280 fix Hygon TKM may execute fail in CSV VM
  - drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
  - crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
  - !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
  - !13109  RDMA/hns: Fix DCA mmap area PUAF
  - RDMA/hns: Fix DCA mmap area PUAF
  - !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
  - Bluetooth: ISO: Fix multiple init when debugfs is disabled
  - !13112  fix CVE-2024-49926
  - rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
  - rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
  - rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
  - rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop
  - !13087 MPTCP Upstream part 18
  - selftests: mptcp: add mptcp_lib_check_output helper
  - selftests: mptcp: add token for dump_addr
  - selftests: mptcp: add userspace pm subflow flag
  - mptcp: check userspace pm flags
  - !13086 MPTCP Upstream part 17
  - mptcp: dump addrs in userspace pm list
  - mptcp: add token for get-addr in yaml
  - mptcp: implement mptcp_userspace_pm_dump_addr
  - mptcp: export mptcp_genl_family & mptcp_nl_fill_addr
  - mptcp: implement TCP_NOTSENT_LOWAT support
  - mptcp: cleanup writer wake-up
  - !13084  ksmbd: add refcnt to ksmbd_conn struct
  - ksmbd: add refcnt to ksmbd_conn struct
  - !12943  bpf: Fix a sdiv overflow issue
  - bpf: Fix a sdiv overflow issue
  - !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
  - sched/fair: Take the scheduling domain into account in select_idle_smt()
  - !13066  Fix UAF of rpc_task
  - nfs: fix rpc_task use-after-free when open and close different files concurrently
  - NFSv4: release seqid when open failed for nfs4.0
  - !13069  NFSD: Mark filecache "down" if init fails
  - NFSD: Mark filecache "down" if init fails
  - !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
  - perf python: Allow checking for the existence of warning options in clang
  - Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path"
  - perf report: Fix segfault when 'sym' sort key is not used
  - drm/amd/display: Revert Avoid overflow assignment
  - crypto: octeontx* - Select CRYPTO_AUTHENC
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - rxrpc: Fix a race between socket set up and I/O thread creation
  - platform/x86: think-lmi: Fix password opcode ordering for workstations
  - drm/bridge: adv7511: fix crash on irq during probe
  - net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
  - netfilter: nf_tables: restore set elements when delete set fails
  - netfilter: nf_tables: fix memleak in map from abort path
  - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
  - Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
  - drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
  - btrfs: drop the backref cache during relocation if we commit
  - btrfs: relocation: constify parameters where possible
  - btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
  - clk: qcom: gcc-sc8180x: Add GPLL9 support
  - iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
  - iio: pressure: bmp280: Fix regmap for BMP280 device
  - iio: pressure: bmp280: Use BME prefix for BME280 specifics
  - iio: pressure: bmp280: Improve indentation and line wrapping
  - iio: pressure: bmp280: Allow multiple chips id per family of devices
  - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
  - dt-bindings: clock: qcom: Add missing UFS QREF clocks
  - remoteproc: k3-r5: Delay notification of wakeup event
  - remoteproc: k3-r5: Acquire mailbox handle during probe routine
  - media: imx335: Fix reset-gpio handling
  - media: i2c: imx335: Enable regulator supplies
  - RDMA/mana_ib: use the correct page table index based on hardware page size
  - net: mana: Add support for page sizes other than 4KB on ARM64
  - net: mana: Enable MANA driver on ARM64 with 4K page size
  - lib/buildid: harden build ID parsing logic
  - build-id: require program headers to be right after ELF header
  - drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
  - io_uring/net: harden multishot termination case for recv
  - arm64: cputype: Add Neoverse-N3 definitions
  - platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
  - platform/x86: x86-android-tablets: Create a platform_device from module_init()
  - kconfig: qconf: fix buffer overflow in debug links
  - cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
  - drm/amd/display: Add HDR workaround for specific eDP
  - drm/sched: Add locking to drm_sched_entity_modify_sched
  - drm/i915/gem: fix bitwise and logical AND mixup
  - close_range(): fix the logics in descriptor table trimming
  - rtla: Fix the help text in osnoise and timerlat top tools
  - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
  - tracing/hwlat: Fix a race during cpuhp processing
  - ceph: fix cap ref leak via netfs init_request
  - mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
  - net: pcs: xpcs: fix the wrong register that was written back
  - gpio: davinci: fix lazy disable
  - btrfs: send: fix invalid clone operation for file that got its size decreased
  - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
  - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
  - Input: adp5589-keys - fix adp5589_gpio_get_value()
  - rtc: at91sam9: fix OF node leak in probe() error path
  - net: stmmac: Fix zero-division error when disabling tc cbs
  - tomoyo: fallback to realpath if symlink's pathname does not exist
  - vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
  - iio: magnetometer: ak8975: Fix reading for ak099xx sensors
  - smb3: fix incorrect mode displayed for read-only files
  - smb: client: use actual path when queryfs
  - clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
  - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
  - media: qcom: camss: Fix ordering of pm_runtime_enable
  - media: qcom: camss: Remove use_count guard in stop_streaming
  - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
  - clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
  - clk: qcom: clk-rpmh: Fix overflow in BCM vote
  - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
  - clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
  - media: sun4i_csi: Implement link validate for sun4i_csi subdev
  - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
  - remoteproc: k3-r5: Fix error handling when power-up failed
  - clk: rockchip: fix error for unknown clocks
  - media: ov5675: Fix power on/off delay timings
  - aoe: fix the potential use-after-free problem in more places
  - riscv: Fix kernel stack size when KASAN is enabled
  - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
  - NFSD: Fix NFSv4's PUTPUBFH operation
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
  - perf hist: Update hist symbol when updating maps
  - perf python: Disable -Wno-cast-function-type-mismatch if present on clang
  - riscv: define ILLEGAL_POINTER_VALUE for 64bit
  - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
  - ocfs2: fix null-ptr-deref when journal load failed.
  - ocfs2: fix uninit-value in ocfs2_get_block()
  - ocfs2: fix the la space leak when unmounting an ocfs2 volume
  - mm: krealloc: consider spare memory for __GFP_ZERO
  - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - of/irq: Support #msi-cells=<0> in of_msi_get_domain
  - of: address: Report error on resource bounds overflow
  - drm/rockchip: vop: clear DMA stop bit on RK3066
  - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
  - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
  - parisc: Fix 64-bit userspace syscall path
  - ext4: mark fc as ineligible using an handle in ext4_xattr_set()
  - ext4: use handle to mark fc as ineligible in __track_dentry_update()
  - ext4: fix fast commit inode enqueueing during a full journal commit
  - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
  - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
  - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
  - ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
  - ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
  - ext4: correct encrypted dentry name hash when not casefolded
  - ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
  - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
  - ALSA: line6: add hw monitor volume control to POD HD500X
  - ALSA: usb-audio: Add native DSD support for Luxman D-08u
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
  - ALSA: core: add isascii() check to card ID generator
  - ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
  - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
  - drm/mediatek: ovl_adaptor: Add missing of_node_put()
  - parisc: Fix itlb miss handler for 64-bit programs
  - perf/core: Fix small negative period being ignored
  - power: supply: hwmon: Fix missing temp1_max_alarm attribute
  - spi: bcm63xx: Fix missing pm_runtime_disable()
  - spi: bcm63xx: Fix module autoloading
  - dt-bindings: clock: exynos7885: Fix duplicated binding
  - memory: tegra186-emc: drop unused to_tegra186_emc()
  - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
  - ovl: fail if trusted xattrs are needed but caller lacks permission
  - rust: sync: require `T: Sync` for `LockedBy::access`
  - i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
  - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
  - i2c: xiic: Wait for TX empty to avoid missed TX NAKs
  - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
  - Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
  - selftests: vDSO: fix vdso_config for s390
  - selftests: vDSO: fix ELF hash table entry size for s390x
  - powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
  - selftests/mm: fix charge_reserved_hugetlb.sh test
  - selftests: vDSO: fix vDSO symbols lookup for powerpc64
  - selftests: vDSO: fix vdso_config for powerpc
  - selftests: vDSO: fix vDSO name for powerpc
  - perf: Really fix event_function_call() locking
  - perf callchain: Fix stitch LBR memory leaks
  - spi: rpc-if: Add missing MODULE_DEVICE_TABLE
  - accel/ivpu: Add missing MODULE_FIRMWARE metadata
  - selftests: breakpoints: use remaining time to check if suspend succeed
  - spi: s3c64xx: fix timeout counters in flush_fifo
  - selftest: hid: add missing run-hid-tools-tests.sh
  - spi: spi-cadence: Fix missing spi_controller_is_target() check
  - spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
  - spi: spi-cadence: Use helper function devm_clk_get_enabled()
  - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
  - bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
  - bpftool: Fix undefined behavior caused by shifting into the sign bit
  - bpf: Make the pointer returned by iter next method valid
  - ksmbd: add refcnt to ksmbd_conn struct
  - platform/x86: lenovo-ymc: Ignore the 0x0 state
  - drm/amdgpu/gfx10: use rlc safe mode for soft recovery
  - drm/amdgpu/gfx11: use rlc safe mode for soft recovery
  - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
  - of/irq: Refer to actual buffer size in of_irq_parse_one()
  - drm/amd/pm: ensure the fw_info is not null before using it
  - drm/amdgpu/gfx9: use rlc safe mode for soft recovery
  - drm/amdgpu: Block MMR_READ IOCTL in reset
  - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
  - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
  - perf: Fix event_function_call() locking
  - drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
  - scsi: lpfc: Update PRLO handling in direct attached topology
  - drm/printer: Allow NULL data in devcoredump printer
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - drm/stm: ltdc: reset plane transparency after plane disable
  - platform/x86: touchscreen_dmi: add nanote-next quirk
  - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
  - drm/amdkfd: Fix resource leak in criu restore queue
  - drm/amdgpu: enable gfxoff quirk on HP 705G4
  - drm/amdgpu: add raven1 gfxoff quirk
  - scsi: smartpqi: correct stream detection
  - jfs: UBSAN: shift-out-of-bounds in dbFindBits
  - drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
  - drm/amd/display: Check null pointers before using dc->clk_mgr
  - drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  - iommu/vt-d: Always reserve a domain ID for identity setup
  - power: reset: brcmstb: Do not go into infinite loop if reset fails
  - rcuscale: Provide clear error when async specified without primitives
  - fbdev: efifb: Register sysfs groups through driver core
  - hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
  - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
  - selftests/nolibc: avoid passing NULL to printf("%s")
  - tools/nolibc: powerpc: limit stack-protector workaround to GCC
  - ALSA: hdsp: Break infinite MIDI input flush loop
  - x86/kexec: Add EFI config table identity mapping for kexec kernel
  - x86/pkeys: Restore altstack access in sigreturn()
  - x86/pkeys: Add PKRU as a parameter in signal handling functions
  - tools/x86/kcpuid: Protect against faulty "max subleaf" values
  - ASoC: codecs: wsa883x: Handle reading version failure
  - ALSA: usb-audio: Add logitech Audio profile quirk
  - ALSA: usb-audio: Replace complex quirk lines with macros
  - ALSA: usb-audio: Define macros for quirk table entries
  - ALSA: usb-audio: Add input value sanity checks for standard types
  - nfp: Use IRQF_NO_AUTOEN flag in request_irq()
  - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
  - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
  - can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
  - drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
  - ACPICA: iasl: handle empty connection_node
  - wifi: mac80211: fix RCU list iterations
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - wifi: iwlwifi: mvm: use correct key iteration
  - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
  - netpoll: Ensure clean state on setup failures
  - crypto: simd - Do not call crypto_alloc_tfm during registration
  - net: atlantic: Avoid warning about potential string truncation
  - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
  - wifi: rtw89: correct base HT rate mask for firmware
  - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
  - bnxt_en: Extend maximum length of version string by 1 byte
  - net: mvpp2: Increase size of queue_name buffer
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
  - ACPI: EC: Do not release locks during operation region accesses
  - wifi: rtw88: select WANT_DEV_COREDUMP
  - wifi: ath11k: fix array out-of-bound access in SoC stats
  - ACPI: CPPC: Add support for setting EPP register in FFH
  - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
  - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
  - net: sched: consistently use rcu_replace_pointer() in taprio_change()
  - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
  - e1000e: avoid failing the system during pm_suspend
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
  - ACPI: PAD: fix crash in exit_round_robin()
  - net: hisilicon: hns_mdio: fix OF node leak in probe()
  - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
  - net: hisilicon: hip04: fix OF node leak in probe()
  - wifi: iwlwifi: mvm: drop wrong STA selection in TX
  - wifi: iwlwifi: mvm: Fix a race in scan abort flow
  - ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
  - crypto: octeontx2 - Fix authenc setkey
  - crypto: octeontx - Fix authenc setkey
  - crypto: x86/sha256 - Add parentheses around macros' single arguments
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  - wifi: rtw89: avoid to add interface to list twice when SER
  - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
  - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
  - ALSA: gus: Fix some error handling paths related to get_bpos() usage
  - cifs: Do not convert delimiter when parsing NFS-style symlinks
  - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
  - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
  - cifs: Remove intermediate object of failed create reparse call
  - ALSA: hda/realtek: Fix the push button function for the ALC257
  - ALSA: mixer_oss: Remove some incorrect kfree_const() usages
  - ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
  - Bluetooth: hci_sock: Fix not validating setsockopt user input
  - loop: don't set QUEUE_FLAG_NOMERGES
  - i2c: xiic: Try re-initialization on bus busy timeout
  - i2c: xiic: improve error message when transfer fails to start
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  - dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
  - iomap: constrain the file range passed to iomap_file_unshare
  - ppp: do not assume bh is held in ppp_channel_bridge_input()
  - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
  - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
  - net: fec: Reload PTP registers after link-state change
  - net: fec: Restart PPS after link state change
  - net: ethernet: lantiq_etop: fix memory disclosure
  - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
  - net: Add netif_get_gro_max_size helper for GRO
  - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - selftests: netfilter: Fix nft_audit.sh for newer nft binaries
  - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
  - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
  - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
  - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
  - net/mlx5: Added cond_resched() to crdump collection
  - net/mlx5: Fix error path in multi-packet WQE transmit
  - net: sparx5: Fix invalid timestamps
  - ieee802154: Fix build error
  - ceph: remove the incorrect Fw reference check when dirtying pages
  - mailbox: bcm2835: Fix timeout during suspend mode
  - mailbox: rockchip: fix a typo in module autoloading
  - drm/amdgpu: Fix get each xcp macro
  - scsi: pm8001: Do not overwrite PCI queue mapping
  - scsi: st: Fix input/output error on empty drive reset
  - jump_label: Fix static_key_slow_dec() yet again
  - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
  - static_call: Handle module init failure correctly in static_call_del_module()
  - !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
  - net: test for not too small csum_start in virtio_net_hdr_to_skb()
  - !13060  net: add more sanity checks to qdisc_pkt_len_init()
  - net: add more sanity checks to qdisc_pkt_len_init()
  - !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-54.0.0.57
changelog:
  - !12859 intel: backport GNR and SRF intel_idle fix for 6.6
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms
  - intel_idle: add Granite Rapids Xeon support
  - !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
  - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
  - !13161  Some patches of RDMA from Linux to olk-6.6
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
  - !13133  CVE-2024-50145
  - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
  - octeon_ep: Implement helper for iterating packets in Rx queue
  - !13142  tracing: Consider the NULL character when validating the event length
  - tracing: Consider the NULL character when validating the event length
  - !13137  drm/amd/display: Check null pointers before multiple uses
  - drm/amd/display: Check null pointers before multiple uses
  - !13120  smb: client: fix possible double free in smb2_set_ea()
  - smb: client: fix possible double free in smb2_set_ea()
  - !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
  - PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
  - !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
  - Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
  - !12886  LoongArch: disable cpufreq driver
  - LoongArch: disable cpufreq driver
  - cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
  - !12840  drm/loongson: use old version of ast driver for LoongArch platform
  - drm/loongson: use old version of ast driver for LoongArch platform
  - !12496  LoongArch: add loongson SE support
  - LoongArch: add loongson SE SDF support
  - dt-bindings: security: add loongson_se
  - !12492  LoongArch: Add AVEC irqchip support
  - LoongArch: Add AVEC irqchip support
  - !13111 MPTCP Upstream part 20
  - mptcp: drop lookup_by_id in lookup_addr
  - mptcp: set error messages for set_flags
  - mptcp: update set_flags interfaces
  - mptcp: drop duplicate header inclusions
  - !13110 MPTCP Upstream part 19
  - selftests: mptcp: add token for get_addr
  - mptcp: get addr in userspace pm list
  - mptcp: implement mptcp_userspace_pm_get_addr
  - mptcp: add userspace_pm_lookup_addr_by_id helper
  - !13115  smb: client: Handle kstrdup failures for passwords
  - smb: client: Handle kstrdup failures for passwords
  - !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
  - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
  - nilfs2: propagate directory read errors from nilfs_find_entry()
  - serial: qcom-geni: fix receiver enable
  - serial: qcom-geni: fix dma rx cancellation
  - serial: qcom-geni: revert broken hibernation support
  - serial: qcom-geni: fix polled console initialisation
  - irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
  - pinctrl: apple: check devm_kasprintf() returned value
  - pinctrl: ocelot: fix system hang on level based interrupts
  - x86/entry_32: Clear CPU buffers after register restore in NMI return
  - x86/entry_32: Do not clobber user EFLAGS.ZF
  - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
  - x86/apic: Always explicitly disarm TSC-deadline timer
  - x86/resctrl: Annotate get_mem_config() functions as __init
  - serial: imx: Update mctrl old_status on RTSD interrupt
  - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
  - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
  - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
  - usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
  - USB: serial: option: add Telit FN920C04 MBIM compositions
  - USB: serial: option: add support for Quectel EG916Q-GL
  - xhci: Mitigate failed set dequeue pointer commands
  - xhci: Fix incorrect stream context type macro
  - xhci: tegra: fix checked USB2 port number
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
  - Bluetooth: Remove debugfs directory on module init failure
  - Bluetooth: Call iso_exit() on module unload
  - iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
  - iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
  - iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
  - iio: light: opt3001: add missing full-scale range value
  - iio: light: veml6030: fix IIO device retrieval from embedded device
  - iio: light: veml6030: fix ALS sensor resolution
  - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
  - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
  - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
  - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
  - drm/amdgpu: prevent BO_HANDLES error from being overwritten
  - drm/amdgpu/swsmu: Only force workload setup on init
  - drm/vmwgfx: Handle surface check failure correctly
  - drm/radeon: Fix encoder->possible_clones
  - scsi: ufs: core: Fix the issue of ICU failure
  - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
  - Input: xpad - add support for MSI Claw A1M
  - selftest: hid: add the missing tests directory
  - ublk: don't allow user copy for unprivileged device
  - io_uring/sqpoll: close race on waiting for sqring entries
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
  - x86/bugs: Skip RSB fill at VMEXIT
  - x86/entry: Have entry_ibpb() invalidate return predictions
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler
  - KVM: s390: gaccess: Check if guest address is in memslot
  - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
  - s390/sclp: Deactivate sclp after all its users
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
  - mptcp: prevent MPC handshake on port-based signal endpoints
  - net: fec: Remove duplicated code
  - net: fec: Move `fec_ptp_read()` to the top of the file
  - xfs: restrict when we try to align cow fork delalloc to cowextsz hints
  - xfs: allow unlinked symlinks and dirs with zero size
  - xfs: fix freeing speculative preallocations for preallocated files
  - xfs: make sure sb_fdblocks is non-negative
  - xfs: allow symlinks with short remote targets
  - xfs: use dontcache for grabbing inodes during scrub
  - xfs: revert commit 44af6c7e59b12
  - xfs: enforce one namespace per attribute
  - xfs: validate recovered name buffers when recovering xattr items
  - xfs: check shortform attr entry flags specifically
  - xfs: fix missing check for invalid attr flags
  - xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
  - xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
  - xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
  - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
  - xfs: fix error returns from xfs_bmapi_write
  - mm/mglru: only clear kswapd_failures if reclaimable
  - selftests/mm: fix deadlock for fork after pthread_create on ARM
  - selftests/mm: replace atomic_bool with pthread_barrier_t
  - fat: fix uninitialized variable
  - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
  - arm64: probes: Fix uprobes for big-endian kernels
  - arm64: probes: Fix simulate_ldr*_literal()
  - arm64: probes: Remove broken LDR (literal) uprobe support
  - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - net: enetc: add missing static descriptor and inline keyword
  - net: enetc: disable NAPI after all rings are disabled
  - net: enetc: disable Tx BD rings after they are empty
  - net: enetc: block concurrent XDP transmissions during ring reconfiguration
  - net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
  - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
  - ksmbd: fix user-after-free from session log off
  - !13122  fs: 6.6 performance improve patches
  - mm/rmap: minimize folio->_nr_pages_mapped updates when batching PTE (un)mapping
  - mm: batch unlink_file_vma calls in free_pgd_range
  - maple_tree: remove rcu_read_lock() from mt_validate()
  - fs: rearrange general fastpath check now that O_CREAT uses it
  - fs: remove audit dummy context check
  - fs: pull up trailing slashes check for O_CREAT
  - fs: move audit parent inode
  - fs: try an opportunistic lookup for O_CREAT opens too
  - fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
  - fs/file.c: add fast path in find_next_fd()
  - !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
  - e1000e: fix force smbus during suspend flow
  - net: ethernet: cortina: Restore TSO support
  - secretmem: disable memfd_secret() if arch cannot set direct map
  - fs/proc/kcore.c: allow translation of physical memory addresses
  - btrfs: split remaining space to discard in chunks
  - selftests/rseq: Fix mm_cid test failure
  - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
  - powercap: intel_rapl_tpmi: Fix bogus register reading
  - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
  - mptcp: pm: do not remove closing subflows
  - mptcp: handle consistently DSS corruption
  - net: phy: Remove LED entry from LEDs list on unregister
  - net: dsa: lan9303: ensure chip reset and wait for READY status
  - net: Fix an unsafe loop on the list
  - net: explicitly clear the sk pointer, when pf->create fails
  - ata: libata: avoid superfluous disk spin down + spin up during hibernation
  - mptcp: fallback when MPTCP opts are dropped after 1st data
  - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
  - drm/i915/hdcp: fix connector refcounting
  - drm/vc4: Stop the active perfmon before being destroyed
  - drm/v3d: Stop the active perfmon before being destroyed
  - hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
  - usb: gadget: core: force synchronous registration
  - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
  - usb: xhci: Fix problem with xhci resume from suspend
  - usb: dwc3: core: Stop processing of pending events if controller is halted
  - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
  - HID: plantronics: Workaround for an unexcepted opposite volume key
  - HID: multitouch: Add support for lenovo Y9000P Touchpad
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
  - hwmon: (adt7470) Add missing dependency on REGMAP_I2C
  - hwmon: (adm9240) Add missing dependency on REGMAP_I2C
  - hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
  - hwmon: (tmp513) Add missing dependency on REGMAP_I2C
  - hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
  - hid-asus: add ROG Ally X prod ID to quirk list
  - HID: asus: add ROG Z13 lightbar
  - HID: asus: add ROG Ally N-Key ID and keycodes
  - HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
  - HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
  - HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
  - rcu/nocb: Fix rcuog wake-up from offline softirq
  - rcu/nocb: Make IRQs disablement symmetric
  - ppp: fix ppp_async_encode() illegal access
  - mctp: Handle error of rtnl_register_module().
  - bridge: Handle error of rtnl_register_module().
  - vxlan: Handle error of rtnl_register_module().
  - rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
  - netfilter: fib: check correct rtable in vrf setups
  - netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
  - btrfs: zoned: fix missing RCU locking in error message when loading zone info
  - net: ibm: emac: mal: fix wrong goto
  - net/sched: accept TCA_STAB only for root qdisc
  - e1000e: change I219 (19) devices to ADP
  - ice: Flush FDB entries before reset
  - ice: rename switchdev to eswitch
  - ice: Fix netif_is_ice() in Safe Mode
  - powercap: intel_rapl_tpmi: Ignore minor version change
  - platform/x86/intel/tpmi: Add defines to get version information
  - gpio: aspeed: Use devm_clk api to manage clock source
  - gpio: aspeed: Add the flush write to ensure the write complete.
  - nouveau/dmem: Fix privileged error in copy engine channel
  - drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
  - net: dsa: b53: fix jumbo frames on 10/100 ports
  - net: dsa: b53: allow lower MTUs on BCM5325/5365
  - net: dsa: b53: fix max MTU for BCM5325/BCM5365
  - net: dsa: b53: fix max MTU for 1g switches
  - net: dsa: b53: fix jumbo frame mtu check
  - net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
  - Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
  - thermal: intel: int340x: processor: Fix warning during module unload
  - thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
  - net: phy: bcm84881: Fix some error handling paths
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
  - netfilter: br_netfilter: fix panic with metadata_dst skb
  - rxrpc: Fix uninitialised variable in rxrpc_send_data()
  - tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
  - tcp: new TCP_INFO stats for RTO events
  - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
  - tcp: fix to allow timestamp undo if no retransmits were sent
  - net: phy: dp83869: fix memory corruption when enabling fiber
  - SUNRPC: Fix integer overflow in decode_rc_list()
  - ice: fix VLAN replay after reset
  - ice: set correct dst VSI in only LAN filters
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
  - x86/amd_nb: Add new PCI IDs for AMD family 0x1a
  - fbdev: sisfb: Fix strbuf array overflow
  - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
  - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
  - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
  - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
  - staging: vme_user: added bound check to geoid
  - tools/iio: Add memory allocation failure check for trigger_name
  - virtio_pmem: Check device status before requesting flush
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
  - netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
  - LoongArch: Fix memleak in pci_acpi_scan_root()
  - comedi: ni_routing: tools: Check when the file could not be opened
  - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
  - usb: chipidea: udc: enable suspend interrupt after usb reset
  - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
  - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
  - media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
  - riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
  - soundwire: cadence: re-check Peripheral status with delayed_work
  - RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
  - riscv: avoid Imbalance in RAS
  - mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
  - RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
  - i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken
  - i2c: i801: Use a different adapter-name for IDF adapters
  - PCI: Add ACS quirk for Qualcomm SA8775P
  - clk: bcm: bcm53573: fix OF node leak in init
  - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
  - soundwire: intel_bus_common: enable interrupts before exiting reset
  - RDMA/mad: Improve handling of timed out WRs of mad agent
  - ktest.pl: Avoid false positives with grub2 skip regex
  - s390/cpum_sf: Remove WARN_ON_ONCE statements
  - ext4: nested locking for xattr inode
  - bpf, x64: Fix a jit convergence issue
  - s390/mm: Add cond_resched() to cmm_alloc/free_pages()
  - s390/facility: Disable compile time optimization for decompressor code
  - bpf: Check percpu map value size first
  - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
  - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
  - virtio_console: fix misc probe bugs
  - fs/ntfs3: Refactor enum_rstbl to suppress static checker
  - fs/ntfs3: Fix sparse warning in ni_fiemap
  - fs/ntfs3: Do not call file_modified if collapse range failed
  - drm/amd/display: Revert "Check HDCP returned status"
  - drm/amd/display: Remove a redundant check in authenticated_dp
  - lib/build_OID_registry: avoid non-destructive substitution for Perl < 5.13.2 compat
  - jbd2: fix kernel-doc for j_transaction_overhead_buffers
  - selftests: Introduce Makefile variable to list shared bash scripts
  - selftests: net: Remove executable bits from library scripts
  - libsubcmd: Don't free the usage string
  - perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
  - perf sched: Move curr_thread initialization to perf_sched__map()
  - perf sched: Fix memory leak in perf_sched__map()
  - perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
  - bootconfig: Fix the kerneldoc of _xbc_exit()
  - e1000e: move force SMBUS near the end of enable_ulp function
  - i40e: Include types.h to some headers
  - i40e: Fix ST code value for Clause 45
  - ASoC: tas2781: mark dvc_tlv with __maybe_unused
  - ata: ahci: Add mask_port_map module parameter
  - spi: spi-fsl-lpspi: remove redundant spi_controller_put call
  - riscv: cpufeature: Fix thead vector hwcap removal
  - tracing: Have saved_cmdlines arrays all in one allocation
  - libceph: init the cursor when preparing sparse read in msgr2
  - pds_core: no health-thread in VF path
  - Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
  - bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
  - bus: mhi: ep: Add support for async DMA read operation
  - bus: mhi: ep: Add support for async DMA write operation
  - bus: mhi: ep: Introduce async read/write callbacks
  - bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
  - drm/crtc: fix uninitialized variable use even harder
  - ALSA: hda/realtek: cs35l41: Fix device ID / model name
  - ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
  - tracing: Remove precision vsnprintf() check from print event
  - drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
  - net: ethernet: cortina: Drop TSO support
  - riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
  - gfs2: Revert "ignore negated quota changes"
  - gfs2: qd_check_sync cleanups
  - gfs2: Revert "introduce qd_bh_get_or_undo"
  - phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
  - phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
  - ASoC: cs35l56: Load tunings for the correct speaker models
  - Revert "PCI/MSI: Provide stubs for IMS functions"
  - net: fec: don't save PTP state if PTP is unsupported
  - unicode: Don't special case ignorable code points
  - Revert "perf callchain: Fix stitch LBR memory leaks"
  - !12160 Add the spidev.ko to OLK-6.6
  - Open the CONFIG for spidev.ko
  - !13113  f2fs: fix to wait dio completion
  - f2fs: fix to wait dio completion
  - !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
  - Revert "perf callchain: Fix stitch LBR memory leaks"
  - !13064  CVE-2024-47702
  - bpf: Fix kabi breakage in struct bpf_insn_access_aux
  - bpf: Fail verification for sign-extension of packet data/data_end/data_meta


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-55.0.0.58
changelog:
  - !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive
  - !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
  - Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - irqchip/gic-v3: Force propagation of the active state with a read-back
  - USB: serial: option: add Quectel RG650V
  - USB: serial: option: add Fibocom FG132 0x0112 composition
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
  - USB: serial: io_edgeport: fix use after free in debug printk
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended
  - usb: musb: sunxi: Fix accessing an released usb phy
  - signal: restore the override_rlimit logic
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
  - filemap: Fix bounds checking in filemap_read()
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
  - Revert "wifi: mac80211: fix RCU list iterations"
  - btrfs: reinitialize delayed ref list after deleting it from the list
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
  - arm64: Kconfig: Make SME depend on BROKEN for now
  - arm64/sve: Discard stale CPU state when handling SVE traps
  - mptcp: use sock_kfree_s instead of kfree
  - net: vertexcom: mse102x: Fix possible double free of TX skb
  - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
  - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
  - dm cache: fix potential out-of-bounds access on the first resume
  - dm cache: optimize dirty bit checking with find_next_bit when resizing
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  - dm cache: correct the number of origin blocks to match the target length
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
  - drm/amdgpu: Adjust debugfs register access permissions
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
  - rpmsg: glink: Handle rejected intent request better
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
  - ksmbd: Fix the missing xa_store error check
  - ksmbd: check outstanding simultaneous SMB operations
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
  - media: v4l2-tpg: prevent the risk of a division by zero
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
  - media: cx24116: prevent overflows on SNR calculus
  - media: s5p-jpeg: prevent buffer overflows
  - media: ar0521: don't overflow when checking PLL values
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  - thermal/of: support thermal zones w/o trips subnode
  - tools/lib/thermal: Fix sampling handler context ptr
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
  - media: adv7604: prevent underflow condition when reporting colorspace
  - media: dvb_frontend: don't play tricks with underflow values
  - media: dvbdev: prevent the risk of out of memory access
  - media: stb0899_algo: initialize cfr before using it
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
  - rxrpc: Fix missing locking causing hanging calls
  - net: arc: rockchip: fix emac mdio node support
  - net: arc: fix the device for dma_map_single/dma_unmap_single
  - virtio_net: Add hash_key_length check
  - netfilter: nf_tables: wait for rcu grace period on net_device removal
  - netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
  - netfilter: nf_tables: cleanup documentation
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
  - net: hns3: fix kernel crash when uninstalling driver
  - e1000e: Remove Meteor Lake SMBUS workarounds
  - i40e: fix race condition by adding filter's intermediate sync state
  - ice: change q_index variable type to s16 to store -1 value
  - can: c_can: fix {rx,tx}_errors statistics
  - net: enetc: allocate vf_state during PF probes
  - sctp: properly validate chunk size in sctp_sf_ootb()
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
  - net: enetc: set MAC address to the VF net_device
  - regulator: rtq2208: Fix uninitialized use of regulator_config
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
  - platform/x86/amd/pmc: Detect when STB is not available
  - HID: core: zero-initialize the report buffer
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
  - ARM: dts: rockchip: Fix the spi controller on rk3036
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
  - ARM: dts: rockchip: fix rk3036 acodec node
  - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
  - arm64: dts: imx8mp: correct sdhc ipg clk
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
  - arm64: dts: imx8qxp: Add VPU subsystem file
  - arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
  - arm64: dts: rockchip: Remove undocumented supports-emmc property
  - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
  - !13269  Revert "Loongarch: Dynamic enable writecombine"
  - Revert "Loongarch: Dynamic enable writecombine"
  - !13193  fix CVE-2024-50115
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - !13179  bpf: Use raw_spinlock_t in ringbuf
  - bpf: Use raw_spinlock_t in ringbuf
  - !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
  - Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
  - !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
  - mm: enable PMD anouymous mapping by default
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
  - !13215  fork: do not expose incomplete mm on fork
  - fork: only invoke khugepaged, ksm hooks if no error
  - fork: do not invoke uffd on fork if error occurs
  - mm/ksm: remove redundant code in ksm_fork
  - !13047 virtcca feature :SM Cryptographic Acceleration
  - virtcca feature : SM Cryptographic Aacceleration.
  - !13210  Script execution control
  - fix kabi breakage due to exec is_check
  - IMA support script execution check
  - exec: Add a new AT_CHECK flag to execveat(2)
  - uselib: remove use of __FMODE_EXEC
  - exec: Check __FMODE_EXEC instead of in_execve for LSMs
  - execve: open the executable file before doing anything else
  - !13257  IMA RoT
  - ima: rot: Adapt VirtCCA into Rot
  - ima: Rename ima_cvm to ima_virtcca
  - ima: rot: Make RoT kick in
  - ima: rot: Prepare TPM as an RoT
  - ima: rot: Introduce basic framework
  - !13240 virtcca feature: support transfer smmu_vmid to tmm
  - virtcca feature : transfer smmu_vmid
  - !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
  - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  - ASoC: SOF: ipc4-control: Add support for ALSA enum control
  - ASoC: SOF: ipc4-control: Add support for ALSA switch control
  - ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
  - SUNRPC: Remove BUG_ON call sites
  - mtd: spi-nor: winbond: fix w25q128 regression
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction
  - nilfs2: fix kernel bug due to missing clearing of checked flag
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - arm64: dts: imx8ulp: correct the flexspi compatible string
  - vmscan,migrate: fix page count imbalance on node stats when demoting pages
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  - kasan: remove vmalloc_percpu test
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive
  - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
  - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
  - xfs: fix finding a last resort AG in xfs_filestream_pick_ag
  - mctp i2c: handle NULL header address
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - x86/traps: move kmsan check after instrumentation_begin
  - x86/traps: Enable UBSAN traps on x86
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
  - mei: use kvmalloc for read buffer
  - mptcp: init: protect sched with rcu_read_lock
  - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
  - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
  - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
  - riscv: Remove duplicated GET_RM
  - riscv: Remove unused GENERATING_ASM_OFFSETS
  - riscv: Use '%u' to format the output of 'cpu'
  - riscv: efi: Set NX compat flag in PE/COFF header
  - ALSA: hda/realtek: Limit internal Mic boost on Dell platform
  - Input: edt-ft5x06 - fix regmap leak when probe fails
  - riscv: vdso: Prevent the compiler from inserting calls to memset()
  - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
  - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
  - block: fix sanity checks in blk_rq_map_user_bvec
  - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
  - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
  - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
  - thunderbolt: Honor TMU requirements in the domain when setting TMU mode
  - tools/mm: -Werror fixes in page-types/slabinfo
  - mm: shmem: fix data-race in shmem_getattr()
  - RISC-V: ACPI: fix early_ioremap to early_memremap
  - nilfs2: fix potential deadlock with newly created symlinks
  - iio: light: veml6030: fix microlux value calculation
  - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
  - iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
  - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - wifi: iwlegacy: Clear stale interrupts before resuming device
  - wifi: cfg80211: clear wdev->cqm_config pointer on free
  - wifi: ath10k: Fix memory leak in management tx
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
  - Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
  - Revert "driver core: Fix uevent_show() vs driver detach race"
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems
  - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
  - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
  - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy
  - usbip: tools: Fix detach_port() invalid port error path
  - ALSA: usb-audio: Add quirks for Dell WD19 dock
  - USB: gadget: dummy-hcd: Fix "task hung" problem
  - usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
  - usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
  - usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
  - misc: sgi-gru: Don't disable preemption in GRU driver
  - NFS: remove revoked delegation from server's delegation list
  - net: amd: mvme147: Fix probe banner message
  - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
  - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
  - cifs: Fix creating native symlinks pointing to current or parent directory
  - cifs: Improve creating native symlinks pointing to directory
  - scsi: scsi_transport_fc: Allow setting rport state to current state
  - fs/ntfs3: Additional check in ntfs_file_release
  - fs/ntfs3: Fix general protection fault in run_is_mapped_full
  - fs/ntfs3: Additional check in ni_clear()
  - fs/ntfs3: Fix possible deadlock in mi_read
  - fs/ntfs3: Add rough attr alloc_size check
  - fs/ntfs3: Stale inode instead of bad
  - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
  - fs/ntfs3: Check if more than chunk-size bytes are written
  - ntfs3: Add bounds checking to mi_enum_attr()
  - cxl/events: Fix Trace DRAM Event Record
  - smb: client: set correct device number on nfs reparse points
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock
  - afs: Fix missing subdir edit when renamed between parent dirs
  - afs: Automatically generate trace tag enums
  - kasan: Fix Software Tag-Based KASAN with GCC
  - iomap: turn iomap_want_unshare_iter into an inline function
  - fsdax: dax_unshare_iter needs to copy entire blocks
  - fsdax: remove zeroing code from dax_unshare_iter
  - iomap: share iomap_unshare_iter predicate code with fsdax
  - iomap: don't bother unsharing delalloc extents
  - iomap: improve shared block detection in iomap_unshare_iter
  - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
  - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
  - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  - netfilter: Fix use-after-free in get_info()
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
  - bpf: Force checkpoint when jmp history is too long
  - selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - gtp: allow -1 to be specified as file description from userspace
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
  - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
  - macsec: Fix use-after-free while sending the offloading packet
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
  - wifi: iwlwifi: mvm: don't add default link in fw restart flow
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
  - RDMA/bnxt_re: synchronize the qp-handle table array
  - RDMA/bnxt_re: Fix the usage of control path spin locks
  - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
  - RDMA/cxgb4: Dump vendor specific QP details
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING
  - wifi: ath11k: Fix invalid ring usage in full monitor mode
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
  - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
  - spi: geni-qcom: Fix boot warning related to pm_runtime and devres
  - cgroup: Fix potential overflow issue when checking max_depth
  - Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
  - Input: xpad - sort xpad_device by vendor and product ID
  - thermal: core: Free tzp copy along with the thermal zone
  - thermal: core: Rework thermal zone availability check
  - thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
  - !9721  drm: vc4: Fix possible null pointer dereference
  - drm: vc4: Fix possible null pointer dereference
  - !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - !13140  CVE-2024-50056
  - usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
  - usb: gadget: uvc: fix try format returns on uncompressed formats
  - !13180  Add objtool, orc and livepatch support for LoongArch
  - LoongArch: Update Loongson-3 default config file
  - compiler.h: specify correct attribute for .rodata..c_jump_table
  - LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
  - LoongArch: Enable objtool for Clang
  - objtool: Handle frame pointer related instructions
  - LoongArch: Add ifdefs to fix LSX and LASX related warnings
  - LoongArch: Only allow OBJTOOL & ORC unwinder if toolchain supports -mthin-add-sub
  - LoongArch: Add kernel livepatching support
  - LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
  - LoongArch: Add ORC stack unwinder support
  - objtool: Check local label in read_unwind_hints()
  - objtool: Check local label in add_dead_ends()
  - objtool/LoongArch: Enable orc to be built
  - objtool/x86: Separate arch-specific and generic parts
  - objtool/LoongArch: Implement instruction decoder
  - objtool/LoongArch: Enable objtool to be built
  - !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
  - exec: don't WARN for racy path_noexec check
  - Revert "exec: Remove redundant check in do_open_execat/uselib"
  - !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
  - net/ncsi: Disable the ncsi work before freeing the associated structure
  - !13079  serial: core: Fix atomicity violation in uart_tiocmget
  - serial: core: Fix atomicity violation in uart_tiocmget
  - !13074  selinux: clarify return code in filename_trans_read_helper_compat()
  - selinux: clarify return code in filename_trans_read_helper_compat()
  - !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
  - net: hibmcge: Add maintainer for hibmcge
  - net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
  - net: hibmcge: Add a Makefile and update Kconfig for hibmcge
  - net: hibmcge: Implement some ethtool_ops functions
  - net: hibmcge: Implement rx_poll function to receive packets
  - net: hibmcge: Implement .ndo_start_xmit function
  - net: hibmcge: Implement some .ndo functions
  - net: hibmcge: Add interrupt supported in this module
  - net: hibmcge: Add mdio and hardware configuration supported in this module
  - net: hibmcge: Add read/write registers supported through the bar space
  - net: hibmcge: Add pci table supported in this module
  - !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - RDMA/bnxt_re: Fix unconditional fence for newer adapters
  - RDMA/bnxt_re: Avoid creating fence MR for newer adapters
  - RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
  - ACPI: PRM: Clean up guid type in struct prm_handler_info
  - platform/x86: dell-wmi: Ignore suspend notifications
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  - ata: libata: Set DID_TIME_OUT for commands that actually timed out
  - net: phy: dp83822: Fix reset pin definitions
  - selinux: improve error checking in sel_write_load()
  - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
  - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
  - xfrm: fix one more kernel-infoleak in algo dumping
  - LoongArch: Make KASAN usable for variable cpu_vabits
  - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
  - LoongArch: Get correct cores_per_package for SMT systems
  - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
  - ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
  - x86/lam: Disable ADDRESS_MASKING in most cases
  - KVM: arm64: Don't eagerly teardown the vgic on init error
  - KVM: arm64: Fix shift-out-of-bounds bug
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
  - drm/amd: Guard against bad data for ATIF ACPI method
  - btrfs: zoned: fix zone unusable accounting for freed reserved extent
  - btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
  - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
  - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
  - ALSA: hda/realtek: Update default depop procedure
  - powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  - ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
  - ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
  - ASoC: max98388: Fix missing increment of variable slot_found
  - ASoC: loongson: Fix component check failed on FDT systems
  - ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
  - ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
  - net: dsa: mv88e6xxx: support 4000ps cycle counter period
  - net: dsa: mv88e6xxx: read cycle counter period from hardware
  - net: dsa: mv88e6xxx: group cycle counter coefficients
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  - r8169: avoid unsolicited interrupts
  - net: sched: use RCU read-side critical section in taprio_dump()
  - net: sched: fix use-after-free in taprio_change()
  - net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
  - bpf: Simplify checking size of helper accesses
  - net: usb: usbnet: fix name regression
  - net: fix races in netdev_tx_sent_queue()/dev_watchdog()
  - net/sched: adjust device watchdog timer to detect stopped queue at right time
  - net: wwan: fix global oob in wwan_rtnl_policy
  - netfilter: xtables: fix typo causing some targets not to load on IPv6
  - fsl/fman: Fix refcount handling of fman-related devices
  - fsl/fman: Save device references taken in mac_probe()
  - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
  - net: plip: fix break; causing plip to never transmit
  - be2net: fix potential memory leak in be_xmit()
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
  - netfilter: bpf: must hold reference on net namespace
  - xfrm: respect ip protocols rules criteria when performing dst lookups
  - xfrm: extract dst lookup parameters into a struct
  - tracing/probes: Fix MAX_TRACE_ARGS limit handling
  - jfs: Fix sanity check in dbMount
  - LoongArch: Don't crash in stack_top() for tasks without vDSO
  - platform/x86: dell-sysman: add support for alienware products
  - cifs: Validate content of NFS reparse point buffer
  - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
  - udf: fix uninit-value use in udf_get_fileshortad
  - udf: refactor inode_bmap() to handle error
  - udf: refactor udf_next_aext() to handle error
  - udf: refactor udf_current_aext() to handle error
  - arm64: Force position-independent veneers
  - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
  - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
  - ASoC: amd: yc: Add quirk for HP Dragonfly pro one
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
  - tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
  - tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
  - usb: dwc3: core: Fix system suspend on TI AM62 platforms
  - XHCI: Separate PORT and CAPs macros into dedicated file
  - usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
  - usb: gadget: f_uac2: fix non-newline-terminated function name
  - usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
  - xhci: dbc: honor usb transfer size boundaries.
  - xhci: dbgtty: use kfifo from tty_port struct
  - xhci: dbgtty: remove kfifo_out() wrapper
  - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  - cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
  - bpf: Fix iter/task tid filtering
  - nvme-pci: fix race condition between reset and nvme_dev_disable()
  - nvme-pci: set doorbell config before unquiescing
  - riscv, bpf: Make BPF_CMPXCHG fully ordered
  - bpf, vsock: Drop static vsock_bpf_prot initialization
  - vsock: Update msg_count on read_skb()
  - vsock: Update rx_bytes on read_skb()
  - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
  - net/mlx5: Unregister notifier on eswitch init failure
  - net/mlx5: Fix command bitmask initialization
  - net/mlx5: Check for invalid vector index on EQ creation
  - vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - bpf: Fix link info netfilter flags to populate defrag flag
  - s390: Initialize psw mask in perf_arch_fetch_caller_regs()
  - usb: typec: altmode should keep reference to parent
  - smb: client: fix OOBs when building SMB2_IOCTL request
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
  - ravb: Remove setting of RX software timestamp
  - genetlink: hold RCU in genlmsg_mcast()
  - net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - net: bcmasp: fix potential memory leak in bcmasp_xmit()
  - drm/msm/dpu: don't always program merge_3d block
  - irqchip/renesas-rzg2l: Fix missing put_device
  - irqchip/renesas-rzg2l: Add support for suspend to RAM
  - irqchip/renesas-rzg2l: Document structure members
  - irqchip/renesas-rzg2l: Align struct member names to tabs
  - net: systemport: fix potential memory leak in bcm_sysport_xmit()
  - bpf: Fix truncation bug in coerce_reg_to_size_sx()
  - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
  - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
  - netdevsim: use cond_resched() in nsim_dev_trap_report_work()
  - macsec: don't increment counters for an unrelated SA
  - drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
  - octeontx2-af: Fix potential integer overflows on integer shifts
  - net: stmmac: dwmac-tegra: Fix link bring-up sequence
  - net: usb: usbnet: fix race in probe failure
  - net/smc: Fix memory leak when using percpu refs
  - firmware: arm_scmi: Queue in scmi layer for mailbox implementation
  - drm/msm: Allocate memory for disp snapshot with kvzalloc()
  - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
  - drm/msm/dsi: improve/fix dsc pclk calculation
  - drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
  - drm/msm/dpu: make sure phys resources are properly initialized
  - accel/qaic: Fix the for loop used to walk SG table
  - RDMA/bnxt_re: Fix the GID table length
  - RDMA/bnxt_re: Update the BAR offsets
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  - RDMA/bnxt_re: Return more meaningful error
  - RDMA/bnxt_re: Fix out of bound check
  - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
  - RDMA/bnxt_re: Support new 5760X P7 devices
  - ipv4: give an IPv4 dev to blackhole_netdev
  - RDMA/srpt: Make slab cache names unique
  - RDMA/irdma: Fix misspelling of "accept*"
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
  - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
  - ALSA: hda/cs8409: Fix possible NULL dereference
  - selftests/bpf: Fix cross-compiling urandom_read
  - drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
  - iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
  - iio: frequency: {admv4420,adrf6780}: format Kconfig entries
  - bpf: fix kfunc btf caching for modules
  - s390/pci: Handle PCI error codes other than 0x3a
  - selftests/bpf: fix perf_event link info name_len assertion
  - selftests/bpf: Add cookies check for perf_event fill_link_info test
  - selftests/bpf: Use bpf_link__destroy in fill_link_info tests
  - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
  - RDMA/core: Fix ENODEV error for iWARP test over vlan
  - RDMA/bnxt_re: Add a check for memory allocation
  - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
  - RDMA/bnxt_re: Fix a possible memory leak
  - bpf: Fix memory leak in bpf_core_apply
  - lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
  - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
  - bpf: devmap: provide rxq after redirect
  - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
  - iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-16
changelog:
  - Ignored the `-Wa,--generate-missing-build-notes=` option, update llvm-lit config to support macro `build_for_openeuler`


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-17
changelog:
  - Complete -fgcc-compatible option scope to Langopts and Diagopts, and handling of option `-Wall` and `-Werror=format=2` override `-Wno`


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 17.0.6-18
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add python3-passlib to BuildRequires
         skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'
         fix: unpin jsonschema and update tests
         test: fix tmpdir in test_cc_apk_configure
         bug(tests): mock reads of host's /sys/class/net via  get_sys_class_path
         test: fix disable_sysfs_net mock
         tests: drop CiTestCase and convert to pytest


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix growpart race
         handle error when log file is empty
         ec2: Do not enable dhcp6 on EC2


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: zhangzikang <zhangzikang@kylinos.cn> - 1.6.22-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add loong64 to THP patch, fix build error for loongarch64
         fix incorrect dates


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-33
changelog:
  - Type: Sync
  - DESC: Optimize the loading of immediate numbers.
  -       Fixed bug in bstrins_<mode>for_ior_mask.


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cfgable: free {proxy_}cipher13_list on exit


author: yanglu <yanglu72@h-partners.com> - 8.1.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:vtls:avoid memory leak if sha256 call fails
         urlapi:make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 8.1.2-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: zhangbowei<zhangbowei@kylinos.cn> - 25.0.3-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix bug by using docker-proxy in the source file to get better compatibility


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: huangdengdui <huangdengui@huawei.com> - 23.11-10
changelog:
  Sync some patches for hns3 about PFC and RSS
   - net/hns3: support new device
   - app/testpmd: fix RSS algorithm choice
   - net/hns3: enable PFC for all user priorities


author: huangdengdui <huangdengui@huawei.com> - 23.11-14
changelog:
  Package the following example to dpdk-tools:
   dpdk-l3fwd, dpdk-l3fwd-power, dpdk-ethtool, dpdk-dma, dpdk-ptpclient


author: huangdengdui <huangdengui@huawei.com> - 23.11-17
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - dma/hisilicon: remove support for HIP09 platform
   - net/hns3: disable SCTP verification tag for RSS hash input
   - net/hns3: fix variable overflow
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix offload flag of IEEE 1588
   In addition, the following patch synchronizes the latest version
   - ethdev: fix strict aliasing lead to link cannot be up


author: yinbin <yinbin8@huawei.com> - 23.11-18
changelog:
  - change dpdk-* in dpdk-tools  from dynamic build to static build
  - add -s flag to remove symbols of dpdk-* in dpdk-tools


author: huangdengdui <huangdengui@huawei.com> - 23.11-19
changelog:
  Support more VLAN fields matching for hns3 and sync a bugfix
   - net/hns3: add Rx DMA address align check
   - net/hns3: support more VLAN fields matching


author: - Chenxi Mao <chenxi.mao@suse.com> - 1.25-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Upgrade dwarves version to 1.25 to fix build error
          if kernel version upgrade to 6.4


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202308-5
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: wangkai <13474090681@163.com> - 115.9.0-1
changelog:
  - Update to 115.9.0
  - Fix CVE-2024-2616 CVE-2024-2608 CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-2607 CVE-2024-2611
  - CVE-2024-1546 CVE-2024-1549 CVE-2024-1547 CVE-2024-1553 CVE-2024-1551 CVE-2024-1548 CVE-2024-1552 CVE-2024-1550
  - CVE-2024-0750 CVE-2024-0746 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0751 CVE-2024-0749 CVE-2024-0753 CVE-2024-0755
  - CVE-2023-6856 CVE-2023-6859 CVE-2023-6857 CVE-2023-6860 CVE-2023-6867 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861 CVE-2023-6864


author: wangkai <13474090681@163.com> - 115.12.0-1
changelog:
  - Update to 115.12.0
  - Fix CVE-2024-29944 CVE-2024-3302 CVE-2024-3852 CVE-2024-3854
    CVE-2024-3857 CVE-2024-3859 CVE-2024-3861 CVE-2024-3864 CVE-2024-4367
    CVE-2024-4767 CVE-2024-4768 CVE-2024-4769 CVE-2024-4770 CVE-2024-4777
    CVE-2024-5688 CVE-2024-5690 CVE-2024-5691 CVE-2024-5692 CVE-2024-5693
    CVE-2024-5696 CVE-2024-5700 CVE-2024-5702


author: wangkai <13474090681@163.com> - 115.14.0-1
changelog:
  - Update to 115.14.0
  - Fix CVE-2024-7519 CVE-2024-7521 CVE-2024-7522 CVE-2024-7524
    CVE-2024-7525 CVE-2024-7526 CVE-2024-7527 CVE-2024-7529 CVE-2024-7531


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-47
changelog:
  - fix coredump when get empty from udp sendring
  - [virtio]: distribute pkg by dst_port
  - parse packages type in rx_poll
  - [virtio]: cfg ipv4 and ipv6 addr
  - fix build failed in 2003sp4
  - fix dpdk_bond_primary_set bug
  - cfg: del unnecessary logs
  - perftool: add latency tool


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-48
changelog:
  - add flow_bifurcation switch in lstack_cfg file
  - virtio: dfx data of virtio
  - virtio: update g_rule_port by reg_ring_type enum
  - virtio: mode actual_queue_num
  - fix poll init not clear old fd


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-50
changelog:
  - cleancode: rename gazelle files in lwip
  - add .gitignore
  - cleancode: improving makefile readability


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-64
changelog:
  - cleancode: declare different cfg_params types
  - cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
  - cleancode: move some API from stack to rpc and rtw
  - cleancode: refactor rtc_api rtw_api and dummy_api


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-66
changelog:
  - af_xdp: set rlimit unlimit when gazelle init
  - add interrupt mode support
  - add pingpong dfx support


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: zhangxianting <zhangxianting@uniontech.com> - 9.56.1-6
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-34158
  - SUG:NA
  - DESC:fix CVE-2024-34158
  -      optimize the names of the first two patch files


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ignore signing failure
         Revert "templates: Disable the os-prober by default"
         Revert "templates: Properly disable the os-prober by default"
         Add grub-get-kernel-settings and use it in 10_linux
         Replace a lot of man pages with slightly nicer ones


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-15
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Export all variables from the initial context when creating a submenu


author: peng.zou <peng.zou@shingroup.cn> - 1:2.12-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove BuildRequires:pesign >= 0.99-8 and fix bug about petitboot doesn't ignore EFI entries for ppc64le


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:10_linux: fix missing "ro" in kernel boot parameters
         Disable LTO


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-3
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-5
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802, CVE-2023-43622
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802 and CVE-2023-43622


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: zhongtao<zhongtao17@huawei.com> - 2.1.4-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add enable pod events field and Add oomkilled field in inspect.json


author: chengyechun <chengyechun1@huawei.com> - 4.9.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix second find_cmd Segmentation fault
         Ensure that PollVec enum matches poll values


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: chenhaixing <chenhaixing@huawei.com> - 0.70.2-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: yinbin <yinbin8@huawei.com> - 2.2.0-60
changelog:
  - IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
  - IPV6: fix array out of bounds in function ip6_ntoa_r
  - IPV6: add group check while mld6 schedule a report


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The python-setup tools causes an error in the nftables packaging path,This macro is added to ensure that path remains unchanged


author: xinghe <xinghe2@h-partners.com> - 1:1.0.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cache prepare nft_cache evaluate to return error
         fix cache validate handle string length
         add src support for implicit chain bindings
         fix cache release pending rules
         fix segtree map listing
         parser_json fix device parsing in netdev family
         fix src Don't parse string as verdict in map


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: wangkai <13474090681@163.com> - 1:20.11.1-1
changelog:
  - Update to 20.11.1
  - Fix CVE-2023-46809 CVE-2024-21896 CVE-2024-22019 CVE-2024-21892 CVE-2024-24758 CVE-2024-22025


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: renmingshuai<renmingshuai@huawei.com> - 9.3p1-3
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: wangcheng <wangcheng156@huawei.com> - 1:3.0.12-1
changelog:
  - Upgrade to 3.0.12
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650
    Resolves: CVE-2023-5363
    Resolves: CVE-2023-6237
    Resolves: CVE-2023-6129
    Resolves: CVE-2023-5678
    Resolves: CVE-2024-0727


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: dillon chen <dillon.chen@gmail.com> - 13.3-7
changelog:
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat 
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bufix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: Chenxi Mao <chenxi.mao@suse.com> - 3.10.9-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package with version 2.13.0
    Add an option to have authentication enabled for all endpoints by default
    Websockets: add configurations for ping interval and timeout
    Log extension import time at debug level unless it's actually slow
    Add support for async Authorizers
    Support get file(notebook) md5
    Update kernel env to reflect changes in session
    Support external kernels


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30689 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30689 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.17.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.17-2
changelog:
  - Type:CVE
  - ID:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped form HTTP requests


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-6
changelog:
  - coro: support live patch for libcare
  - tests/acpi: Update expected ACPI tables for vcpu hotplug(Update BinDir)
  - arm/virt: Require mc->has_hotpluggable_cpus for cold-plugged vcpu
  - arm/virt: Consider has_ged when set mc->has_hotpluggable_cpus
  - arm/virt-acpi: Require possible_cpu_arch_ids for build_cpus_aml()
  - acpi/ged: Remove cpuhp field of ged
  - acpi/ged: Init cpu hotplug only when machine support it
  - intc/gicv3: Fixes for vcpu hotplug
  - arm/kvm: Set psci smccc filter only with vcpu hotplug
  - accel/kvm: Use correct id for parked vcpu
  - arm/virt: Fix adjudgement of core_id for vcpu hotplugged
  - arm/virt.c: Convey local_err when set psci-conduit
  - system/cpus: Fix resume_all_vcpus() under vCPU hotplug condition
  - system/cpus: Fix pause_all_vcpus() under concurrent environment
  - acpi/cpu: Fix cpu_hotplug_hw_init()
  - arm/cpu: Some fixes for arm_cpu_unrealizefn()
  - system/physmem: Fix possible double free when destroy cpu as
  - hw/arm/virt: Expose cold-booted CPUs as MADT GICC Enabled
  - tcg/mttcg: enable threads to unregister in tcg_ctxs[]
  - hw/arm: Support hotplug capability check using _OSC method
  - target/arm/kvm,tcg: Register/Handle SMCCC hypercall exits to VMM/Qemu
  - target/arm/kvm: Write CPU state back to KVM on reset
  - target/arm: Add support of *unrealize* ARMCPU during vCPU Hot-unplug
  - physmem,gdbstub: Common helping funcs/changes to *unrealize* vCPU
  - hw/arm: Changes required for reset and to support next boot
  - arm/virt: Update the guest(via GED) about CPU hot-(un)plug events
  - hw/intc/arm-gicv3*: Changes required to (re)init the vCPU register info
  - hw/arm,gicv3: Changes to update GIC with vCPU hot-plug notification
  - arm/virt: Changes to (un)wire GICC<->vCPU IRQs during hot-(un)plug
  - arm/virt: Add/update basic hot-(un)plug framework
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - arm/virt: Release objects for *disabled* possible vCPUs after init
  - hw/acpi: Make _MAT method optional
  - hw/arm: MADT Tbl change to size the guest with possible vCPUs
  - hw/acpi: Update GED _EVT method AML with cpu scan
  - hw/acpi: ACPI/AML Changes to reflect the correct _STA.{PRES,ENA} Bits to Guest
  - arm/virt: Make ARM vCPU *present* status ACPI *persistent*
  - arm/virt/acpi: Build CPUs AML with CPU Hotplug support
  - tests/acpi/bios-tables-test: Allow changes to virt/DSDT file
  - acpi/cpu: Add cpu_cppc building support
  - arm/virt/acpi: Factor out CPPC building from DSDT CPU aml
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - arm/virt: Create GED dev before *disabled* CPU Objs are destroyed
  - arm/virt: Add cpu hotplug events to GED during creation
  - hw/acpi: Init GED framework with cpu hotplug events
  - hw/acpi: Use qemu_present_cpu() API in ACPI CPU hotplug init
  - hw/acpi: Add ACPI CPU hotplug init stub
  - arm/acpi: Enable ACPI support for vcpu hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - arm/virt: Init PMU at host for all possible vcpus
  - arm/virt,gicv3: Changes to pre-size GIC with possible vcpus @machine init
  - arm/virt,kvm: Pre-create disabled possible vCPUs @machine init
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - arm/virt,target/arm: Machine init time change common to vCPU {cold|hot}-plug
  - hw/arm/virt: Move setting of common CPU properties in a function
  - cpus-common: Add common CPU utility for possible vCPUs
  - arm/virt,target/arm: Add new ARMCPU {socket,cluster,core,thread}-id property


author: Keqian Zhu <zhukeqian1@huawei.com> - 11:8.2.0-7
changelog:
  - arm/virt: Use max_cpus to calculate redist1_count
  - arm/virt: Use separate filed to identify cpu-hotplug enable


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-11
changelog:
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum()
  - hw/nvme: fix -Werror=maybe-uninitialized
  - block/virtio-blk: Fix memory leak from virtio_blk_zone_report
  - hw/net/virtio-net: fix qemu set used ring flag even vhost started
  - hw/scsi/scsi-generic: Fix io_timeout property not applying
  - tests: bios-tables-test: Rename smbios type 4 related test functions


author: zhangxianting <zhangxianting@uniontech.com> - 11:8.2.0-12
changelog:
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately
  - kvm/arm: Fix compatibility of cold-plug CPU with SVE
  - arm/virt/acpi: Extend cpufreq to support max_cpus
  - kvm/arm: Fix SVE related logic for vcpu hotplug feature
  - arm/virt: Don't modify smp.max_cpus when vcpu hotplug disabled
  - acpi/cpu: Fix detection of present cpu


author: Song Gao <gaosong@loongson.cn> - 11:8.2.0-13
changelog:
  - target/loongarch: Fix qemu-system-loongarch64 assert
  - target/loongarch: Fix qemu-loongarch64 hang when executing 'll.d $t0, $t0, 0'
  - target/loongarch: Fix tlb huge page loading issue
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch/kvm: sync kernel header files
  - hw/intc/loongarch_extioi: Add virt extension support
  - target/loongarch/kvm: Add pmu support
  - target/loongarch/kvm: Fix vm restore failed
  - target/loongarch/kvm: Add pv steal time support
  - target/loongarch/kvm: fpu save the vreg registers high


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-14
changelog:
  - target/riscv/cpu.c: fix Zvkb extension config
  - target/i386: Add new Hygon 'Dharma' CPU model
  - target/i386: Add Hygon Dhyana-v3 CPU model
  - ui/gtk: Fix mouse/motion event scaling issue with GTK display backend
  - hw/ufs: Fix buffer overflow bug
  - arm/virt: Set vcpus_count of CPU as 1 to compatible with libvirt
  - ppc/pnv: I2C controller is not user creatablei


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-15
changelog:
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - migration/dirtyrate: Fix segmentation fault
  - target/hexagon: idef-parser fix leak of init_list


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-16
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100 
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-17
changelog:
  - cvm : bug fix for undefined reference to 'virtcca_cvm_allowed' while compiling
  - cvm : bug-fix for incorrect device name check for vhost-user-fs
  - target/i386: add control bits support for LAM
  - target/i386: add support for LAM in CPUID enumeration
  - Add support for the virtcca cvm feature.
  - target/sparc: use signed denominator in sdiv helper
  - crypto: Introduce SM4 symmetric cipher algorithm
  - ppc/vof: Fix unaligned FDT property access
  - vl: fix "type is NULL" in -vga help
  - hw/display/bcm2835_fb: fix fb_use_offsets condition
  - aspeed/smc: Fix possible integer overflow
  - hw/nvme: fix number of PIDs for FDP RUH update
  - hw/nvme: fix memory leak in nvme_dsm
  - hvf: arm: Do not advance PC when raising an exception
  - physmem: Bail out qemu_ram_block_from_host() for invalid ram addrs


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-18
changelog:
  - hw/loongarch/virt: Fix FDT memory node address width
  - hw/loongarch: Fix fdt memory node wrong 'reg'
  - load_elf: fix iterator's type for elf file processing
  - migration/colo: Fix bdrv_graph_rdlock_main_loop: Assertion `!qemu_in_…
  - target/i386: no single-step exception after MOV or POP SS
  - char-stdio: Restore blocking mode of stdout on exit
  - backends/cryptodev-builtin: Fix local_error leaks
  - target/loongarch: fix a wrong print in cpu dump
  - virtio-pci: fix use of a released vector
  - target/arm: Disable SVE extensions when SVE is disabled
  - hw/misc/bcm2835_property: Fix handling of FRAMEBUFFER_SET_PALETTE
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - virtio-net: Ensure queue index fits with RSS (CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - update io/trace-events. Parameters should remain consistent.
  - update docs/tools/virtfs-proxy-helper.rst. This place is spelled wrong.
  - kvm: Add support for CSV2 reboot
  - target/i386/kvm: Fix the resettable info when emulate Hygon CSV2 guest
  - target/i386: get/set/migrate GHCB state
  - target/i386: csv: Add support for migrate VMSA for CSV2 guest
  - migration/ram: Accelerate the loading of CSV guest's encrypted pages
  - migration/ram: Accelerate the transmission of CSV guest's encrypted pages
  - target/i386: csv: add support to load incoming encrypted pages queued in the CMD list
  - target/i386: csv: add support to queue the incoming page into a list
  - target/i386: csv: add support to encrypt the outgoing pages in the list queued before.
  - target/i386: csv: add support to queue the outgoing page into a list
  - target/i386: csv: Read cert chain from file when prepared for CSV live migration
  - target/i386: Introduce header file csv.h
  - migration/ram: Fix calculation of gfn correpond to a page in ramblock
  - target/i386: sev: Clear shared_regions_list when reboot CSV Guest
  - migration/ram: Force encrypted status for VGA vram
  - target/i386: sev: Return 0 if sev_send_get_packet_len() fails
  - kvm: Add support for userspace MSR filtering and handling of MSR_KVM_MIGRATION_CONTROL.
  - migration/ram: Force encrypted status for flash0 & flash1 devices.
  - migration/ram: add support to send encrypted pages
  - migration: add support to migrate shared regions list
  - kvm: Add support for SEV shared regions list and KVM_EXIT_HYPERCALL.
  - target/i386: sev: add support to load incoming encrypted page
  - target/i386: sev: add support to encrypt the outgoing page
  - target/i386: sev: do not create launch context for an incoming guest
  - target/i386: sev: provide callback to setup outgoing context
  - confidential guest support: introduce ConfidentialGuestMemoryEncryptionOps for encrypted VMs
  - migration.json: add AMD SEV specific migration parameters
  - doc: update AMD SEV to include Live migration flow
  - crypto/tlscredspsk: Free username on finalize
  - hw/nvme: fix leak of uninitialized memory in io_mgmt_recv
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - cvm : Implement command blacklist for cvm security enhancement
  - crypto: Introduce SM3 hash hmac pbkdf algorithm
  - virtio-net: Use virtual time for RSC timers
  - vvfat: Fix bug in writing to middle of file
  - hw/core/ptimer: fix timer zero period condition for freq > 1GHz
  - hw/misc: support vpsp


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-19
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-20
changelog:
  - Added CoDA feature support in the context of CVM. When virtcca cvm is enabled, the iommu is tagged as secure.
  - hw/block: fix uint32 overflow
  - hw/ufs: add basic info of query response upiu
  - crypto: avoid leak of ctx when bad cipher mode is given Fixes: Coverity CID 1546884


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-21
changelog:
  - tests: bump QOS_PATH_MAX_ELEMENT_SIZE again
  - softmmu/physmem: fix memory leak in dirty_memory_extend()
  - crypto: run qcrypto_pbkdf2_count_iters in a new thread
  - hw/audio/virtio-sound: fix heap buffer overflow
  - hw/intc/arm_gic: fix spurious level triggered interrupts
  - ui/sdl2: set swap interval explicitly when OpenGL is enabled
  - target/riscv/kvm: tolerate KVM disable ext errors
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - block: fix -Werror=maybe-uninitialized false-positive
  - hw/remote/vfio-user: Fix config space access byte order
  - hw/loongarch/virt: Fix memory leak
  - hw/intc/riscv_aplic: APLICs should add child earlier than realize
  - stdvga: fix screen blanking
  - ui/gtk: Draw guest frame at refresh cycle
  - target/i386: fix size of EBP writeback in gen_enter()
  - virtio-net: drop too short packets early
  - target/ppc: Fix lxv/stxv MSR facility check
  - target/ppc: Fix lxvx/stxvx facility check
  - virtio-snd: add max size bounds check in input cb(CVE-2024-7730)


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.1.0-12
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: pengyi <pengyi37@huawei.com> - 8.2210.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2210.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-41
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


