# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: wangkai <13474090681@163.com> - 1.4.3.36-8
changelog:
  - Fix dsidm role subtree-status fails with TypeError
  - Fix name cockpit_present is not defined.
  - Fix typo
  - Fix DirSrv has no attribute userid


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 2.37-24
changelog:
  - DESC:Add sw_64 support
  - DESC:Add LoongArch support
  - DESC:Fix LoongArch PLT entry generate bug
  - DESC:Add .equ support for LoongArch and fix some bugs


author: Funda Wang <fundawang@yeah.net> - 2.37-31
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-314
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-318
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.79.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: chenyi <chenyi211@huawei.com> - 21.11-78
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - bus/pci: fix UIO resource mapping in secondary process


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
  - SUG:NA
  - DESC: Batch fix cve through rebuild and sync release


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
    CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
    CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
    CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
    CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
    CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
    CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
    CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
    CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
    CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
    CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
    CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
    CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
    CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
    CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
    CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
    CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
    CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
    CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
    CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
    CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
    CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
    CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
    CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
    CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
    CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
    CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
    CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
    CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
    CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
    CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: Funda Wang <fundawang@yeah.net> - 9.55.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.55.0-19
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: chengyechun <chengyechun1@huawei.com> - 2.34-160
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:resolv: Track single-request fallback via _res._flags
         resolv: Allow short error responses to match any query


author: shixuantong <shixuantong1@huawei.com> - 2.34-162
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: avoid jumping over a needed declaration
         elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong1@huawei.com> - 2.34-163
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: Handle static PIE with non-zero load address
         elf: Introduce _dl_relocate_object_no_relro
         elf: Switch to main malloc after final ld.so self-relocation


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: xinghe <xinghe2@h-partners.com> - 2.6.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.6.6-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.51-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: mufengyan <mufengyan@hisilicon.com> - 1:5.15.0-15
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liubo <liubo335@huawei.com> - 1:5.15.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: liubo <liubo335@huawei.com> - 1:5.15.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:f_flower: Treat port 0 as valid
         ip: error out if iplink does not consume all options
         iplink_bridge: fix incorrect root id dump
         ss: change aafilter port from int to long (inode support)
         ss: Fix socket type check in packet_show_line()
         ss: print unix socket "ports" as unsigned int (inode)
         Add utility to convert an unsigned int to string
         Add get_long utility and adapt get_integer accordingly
         utils: fix get_integer() logic


author: liweigang <liweiganga@uniontech.com> - 1:5.15.0-19
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: lnstat: Fix deref of null in print_json() function
          iproute2: prevent memory leak
          libnetlink: validate nlmsg header length first
          tc: remove tcindex classifier
          ip: fix memory leak in 'ip maddr show'
          ila: fix potential snprintf buffer overflow
          bridge: fix potential snprintf overflow
          mnl_utils: sanitize incoming netlink payload size in callbacks


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: xinghe <xinghe2@h-partners.com> - 1:5.15.0-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: sunhai <sunhai10@huawei.com> - 0.16-5
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: Li Nan <linan122@huawei.com> - 5.10.0-244.0.0.143
changelog:
  - !14314  x86/sgx: Fix deadlock in SGX NUMA node search
  - !14315  media: v4l2-tpg: prevent the risk of a division by zero
  - !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14289 v2  erofs: add ondemand mode support
  - !14269  iomap: fix zero padding data issue in concurrent append writes
  - !14235  xfs: fix attr inactive issue
  - !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14330  mm/khugepaged: fix ->anon_vma race
  - !14305  RDMA/hns: Some patches are integrated into OLK-5.10
  - !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm/khugepaged: fix ->anon_vma race
  - !13006  Fix CVE-2024-50086
  - !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
  - !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
  - media: v4l2-tpg: prevent the risk of a division by zero
  - x86/sgx: Fix deadlock in SGX NUMA node search
  - printk: Fix the qspinlock deadloop caused by zap_locks()
  - RDMA/hns: Don't query *except on hip10*
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix bonding failure due to wrong reset_state
  - config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
  - IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14208 Fix perf coredump and refcnt inccoret
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: modify fscache_hash_cookie() to enhance security
  - cachefiles: prefault in user pages to aovid ABBA deadlock
  - fscache/cachefiles: add a memory barrier for page_write
  - fscache/cachefiles: add a memory barrier for waking and waiting
  - fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
  - wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
  - s390: provide arch_test_bit_acquire() for architecture s390
  - wait_on_bit: add an acquire memory barrier
  - erofs: unify anonymous inodes for blob
  - erofs: remove unused device mapping in meta routine
  - fscache: fix assertion failure in cachefiles_put_object()
  - cachefiles: cyclic allocation of msg_id to avoid reuse
  - fscache: fix op leak due to abort init after parent ready
  - cachefiles: Set object to close if ondemand_id < 0 in copen
  - erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
  - cachefiles: Change the mark inactive sequence in erofs ondemand mode
  - cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - cachefiles: disallow to complete open requests with uninitialised ondemand_id
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  - fscache: Add the unhash_cookie mechanism to fscache_drop_object()
  - cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
  - cachefiles: Fix cookie reference count leakage error
  - cachefiles: Restrict monitor calls to read_page
  - cachefiles: flush all requests after setting CACHEFILES_DEAD
  - fscache: set the default value of object_max_active to 256
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: make on-demand read killable
  - cachefiles: never get a new anon fd if ondemand_id is valid
  - cachefiles: add spin_lock for cachefiles_ondemand_info
  - cachefiles: flush ondemand_object_worker during clean object
  - fscache: limit fscache_object_max_active to avoid blocking
  - cachefiles: flush all requests for the object that is being dropped
  - cachefiles: stop sending new request when dropping object
  - cachefiles: add consistency check for copen/cread
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  - cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
  - fscache: Fix trace UAF in fscache_cookie_put()
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
  - cachefiles: use mainline xattr in ondemand mode
  - fscache: rename new_location to new_version
  - erofs: switch to use new location
  - erofs: remove erofs_fscache_netfs
  - cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
  - cachefiles: use key_hash as csum for new location
  - cachefiles: skip volum csum cachefiles_cook_key() for new location
  - cachefiles: skip acc in cachefiles_cook_key() for new location
  - cachefiles: use volume key directly in cachefiles_cook_key() for new location
  - cachefiles: factor out helper to generate csum from cachefiles_cook_key()
  - cachefiles: factor out helper to generate acc from cachefiles_cook_key()
  - fscache: generate new key_hash for new location
  - fscache: add new helper to determine cachefile location
  - fscache: add a waiting mechanism when duplicate cookies are detected
  - erofs: maintain cookies of share domain in self-contained list
  - fscache: fix kernel BUG at __fscache_read_or_alloc_page
  - erofs: fix handling kern_mount() failure
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
  - erofs: check the uniqueness of fsid in shared domain in advance
  - fscache: fix assertion failure in fscache_put_object()
  - fscache: fix reference count leakage during abort init
  - cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
  - erofs: relinquish volume with mutex held
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - erofs: fix page unlock advance during readahead
  - openeuler_defconfig: enable erofs ondemand for x86 and arm64
  - anolis: cachefiles: fix potential NULL in error path
  - anolis: cachefiles: add missing lock protection when polling
  - anolis: cachefiles: reset object->private to NULL when it's freed
  - anolis: cachefiles: add restore command to recover inflight ondemand read requests
  - anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
  - anolis: cachefiles: resend an open request if the read request's object is closed
  - anolis: cachefiles: extract ondemand info field from cachefiles_object
  - anolis: cachefiles: introduce object ondemand state
  - anolis: fscache: export fscache_object_wq
  - anolis: cachefiles: optimize on-demand IO path with buffer IO
  - erofs: remove unused EROFS_GET_BLOCKS_RAW flag
  - erofs: fix use-after-free of fsid and domain_id string
  - erofs: protect s_inodes with s_inode_list_lock for fscache
  - erofs: introduce 'domain_id' mount option
  - erofs: Support sharing cookies in the same domain
  - erofs: introduce a pseudo mnt to manage shared cookies
  - erofs: introduce fscache-based domain
  - erofs: code clean up for fscache
  - anolis: erofs: implement fscache-based data readahead
  - anolis: fscache,cachefiles: add fscache_prepare_read() helper
  - anolis: cachefiles: maintain a file descriptor to the backing file
  - erofs: leave compressed inodes unsupported in fscache mode for now
  - anolis: erofs: fix the name of erofs_fscache_super_index_def
  - erofs: use kill_anon_super() to kill super in fscache mode
  - erofs: scan devices from device table
  - erofs: add 'fsid' mount option
  - erofs: implement fscache-based data read for inline layout
  - erofs: implement fscache-based data read for non-inline layout
  - erofs: implement fscache-based metadata read
  - erofs: register fscache context for extra data blobs
  - erofs: register fscache context for primary data blob
  - erofs: add anonymous inode caching metadata for data blobs
  - erofs: add fscache context helper functions
  - erofs: register fscache volume
  - erofs: add fscache mode check helper
  - erofs: make erofs_map_blocks() generally available
  - cachefiles: make on-demand request distribution fairer
  - anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
  - cachefiles: fix error return code in cachefiles_ondemand_copen()
  - anolis: cachefiles: fix volume key setup for cachefiles_open
  - anolis: cachefiles: replace BUG_ON() with WARN_ON()
  - cachefiles: narrow the scope of flushed requests when releasing fd
  - anolis: cachefiles: skip check for n_children in on-demand mode
  - cachefiles: enable on-demand read mode
  - cachefiles: implement on-demand read
  - cachefiles: notify the user daemon when withdrawing cookie
  - cachefiles: unbind cachefiles gracefully in on-demand mode
  - cachefiles: notify the user daemon when looking up cookie
  - erofs: fix misbehavior of unsupported chunk format check
  - erofs: use meta buffers for erofs_read_superblock()
  - erofs: use meta buffers for zmap operations
  - erofs: use meta buffers for xattr operations
  - erofs: use meta buffers for super operations
  - erofs: use meta buffers for inode operations
  - erofs: introduce meta buffer operations
  - erofs: clean up erofs_map_blocks tracepoints
  - erofs: add multiple device support
  - erofs: decouple basic mount options from fs_context
  - erofs: introduce erofs_sb_has_xxx() helpers
  - erofs: fix double free of 'copied'
  - erofs: support reading chunk-based uncompressed files
  - erofs: introduce chunk-based file on-disk format
  - erofs: clean up file headers & footers
  - erofs: don't use erofs_map_blocks() any more
  - [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
  - [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
  - [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
  - [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
  - [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
  - [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
  - [Backport]scsi: hisi_sas: Add firmware information check
  - [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
  - [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
  - iomap: fix zero padding data issue in concurrent append writes
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - perf addr_location: Add init/exit/copy functions
  - perf maps: Use a pointer for kmaps
  - ksmbd: fix user-after-free from session log off
  - ksmbd: fix race condition between session lookup and expire


author: Li Nan <linan122@huawei.com> - 5.10.0-245.0.0.144
changelog:
  - !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14679  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14572  PCI: Fix use-after-free of slot->bus on hot remove
  - !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14777  tracing: Prevent bad count for tracing_cpumask_write
  - !14496  ovl: Filter invalid inodes with missing lookup function
  - !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14606  scsi: qla2xxx: Fix use after free on unload
  - !14579  io_uring: check for overflows in io_pin_pages
  - !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14734  Fix iBMA bug and change version
  - !14713  Fix CVE-2024-56705
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14601  nvme-pci: fix freeing of the HMB descriptor table
  - !14575  etmem: fix use-after-free of mm in the scan release process
  - !14381  virtiofs: use pages instead of pointer for kernel direct IO
  - !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - !14651  backport mainline bugfix patch
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14629  net/mlx5: Fix error path in multi-packet WQE transmit
  - !14627  crypto: hisilicon/qm - inject error before stopping queue
  - !14626  drm/amd/display: Check null pointers before using dc->clk_mgr
  - !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14700  CVE-2024-53158
  - !14457  cgroup: Fix potential overflow issue when checking max_depth
  - !14620  drm: zynqmp_kms: Unplug DRM device before removal
  - !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
  - media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: remove #ifdef HAS_NO_HMEM
  - !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14535  RDMA/mlx5: Move events notifier registration to be after device registration
  - !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14636  CVE-2024-56604_OLK-5.10
  - !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14523  The bugfix for LPM trie
  - !14650  memcg: fix soft lockup in the OOM process
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14436  crypto: bcm - add error check in the ahash_hmac_init function
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - memcg: fix soft lockup in the OOM process
  - !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - !14467  io_uring/tctx: work around xa_store() allocation error issue
  - !14503  net: phy: dp83869: fix memory corruption when enabling fiber
  - !14515  hfsplus: don't query the device logical block size multiple times
  - !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14388  CVE-2024-53173
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: Consolidate code around sk_alloc into a helper function
  - net/mlx5: Fix error path in multi-packet WQE transmit
  - crypto: hisilicon/qm - inject error before stopping queue
  - drm/amd/display: Check null pointers before using dc->clk_mgr
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - drm: zynqmp_kms: Unplug DRM device before removal
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: qla2xxx: Fix use after free on unload
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - nvme-pci: fix freeing of the HMB descriptor table
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - io_uring: check for overflows in io_pin_pages
  - etmem: fix use-after-free of mm in the scan release process
  - PCI: Fix use-after-free of slot->bus on hot remove
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14366  EDAC/bluefield: Fix potential integer overflow
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14380  io_uring: check if iowq is killed before queuing
  - !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - hfsplus: don't query the device logical block size multiple times
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14371 [OLK-5.10] update AMD Zen5 Turin feature
  - net: phy: dp83869: fix memory corruption when enabling fiber
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - ovl: Filter invalid inodes with missing lookup function
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - io_uring/tctx: work around xa_store() allocation error issue
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - cgroup: Fix potential overflow issue when checking max_depth
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14409  bpf: fix OOB devmap writes when deleting elements
  - !14419  HID: wacom: fix when get product name maybe null pointer
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14268  Revert "unicode: Don't special case ignorable code points"
  - !14397  backport some patches from upstream about HCCS low power
  - !14392  arm64: stacktrace: Handle 'lr' in interrupt context
  - !14317  exfat: fix out-of-bounds access of directory entries
  - !14402  gpio: grgpio: Add NULL check in grgpio_probe
  - !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14363  CVE-2024-53217
  - HID: wacom: fix when get product name maybe null pointer
  - !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  - !14407  NFSD: Prevent a potential integer overflow
  - !14378  ftrace: Fix regression with module command in stack_trace_filter
  - bpf: fix OOB devmap writes when deleting elements
  - !14375  fix CVE-2024-53197
  - NFSD: Prevent a potential integer overflow
  - gpio: grgpio: Add NULL check in grgpio_probe
  - soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
  - soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
  - soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
  - soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
  - soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
  - soc: hisilicon: kunpeng_hccs: Fix a PCC typo
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - arm64: stacktrace: Handle 'lr' in interrupt context
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - virtiofs: use pages instead of pointer for kernel direct IO
  - io_uring: check if iowq is killed before queuing
  - ftrace: Fix regression with module command in stack_trace_filter
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - EDAC/bluefield: Fix potential integer overflow
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - exfat: fix out-of-bounds access of directory entries
  - Revert "unicode: Don't special case ignorable code points"
  - gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans


author: Li Nan <linan122@huawei.com> - 5.10.0-246.0.0.145
changelog:
  - !14844  merge mainline patch into OLK-5.10
  - !14838 v2  fs: Filter specific inodes to prevent UAF issues
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  - mm: kfence: fix using kfence_metadata without initialization in show_object()
  - x86/mm: Do not shuffle CPU entry areas without KASLR
  - fs: Filter specific inodes to prevent UAF issues
  - !14599  CVE-2024-56701
  - !14560  CVE-2024-56567
  - !14801  CVE-2024-53237
  - !14793  jfs: fix shift-out-of-bounds in dbSplit
  - !14815  OLK-5.10
  - !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14822  ALSA: 6fire: Release resources at card release
  - !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
  - ALSA: 6fire: Release resources at card release
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - driver core: Introduce device_find_any_child() helper
  - Bluetooth: fix use-after-free in device_for_each_child()
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - jfs: fix shift-out-of-bounds in dbSplit
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - ad7780: fix division by zero in ad7780_write_raw()


author: Li Nan <linan122@huawei.com> - 5.10.0-247.0.0.146
changelog:
  - !14414 sdma-dae: add print in exceptional branch
  - !14870  quota: flush quota_release_work upon quota writeback
  - !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14866  NFS: Fix up nfs_ctx_key_to_expire()
  - !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - quota: flush quota_release_work upon quota writeback
  - !14663  xsk: Add generic xdp multi-buffer send support
  - NFS: Fix up nfs_ctx_key_to_expire()
  - !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14857  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - xsk: Add generic xdp multi-buffer send support
  - drivers:misc:sdma-dae: add print in exceptional branch


author: Li Nan <linan122@huawei.com> - 5.10.0-248.0.0.147
changelog:
  - !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14875  *** jffs2: Prevent rtime decompress memory corruption ***
  - !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
  - !14937 v2  Two CVE fixes for ksmbd
  - !14966  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14943  fix CVE-2024-57892
  - !14954  zram: fix NULL pointer in comp_algorithm_show()
  - !14948 Mainline patch to olk-5.10 v3
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
  - !14947  mm/slub: Reduce memory consumption in extreme scenarios
  - RDMA/hns: Fix different dgids mapping to the same dip_idx
  - Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
  - mm/slub: Reduce memory consumption in extreme scenarios
  - !14917  merge CVE patches into OLK-5.10
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: correct return value of ocfs2_local_free_info()
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - net: wangxun: change netdev uc addr num maxmium
  - net: wangxun: fix resolving ipv6 pakets extension header errors
  - net: wangxun: fix tx csum by soft except tcp udp sctp
  - drm/i915: Fix potential context UAFs
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
  - arm64: probes: Fix uprobes for big-endian kernels
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
  - media: uvcvideo: Require entities to have a non-zero unique ID
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - um: net: Do not use drvdata in release
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - 9p/xen: fix release of IRQ
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - fbdev/sh7760fb: Alloc DMA memory from hardware device
  - ionic: Fix netdev notifier unregister on failure
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-248.0.0.148
changelog:
  - kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel


author: Li Nan <linan122@huawei.com> - 5.10.0-249.0.0.152
changelog:
  - !15061  ALSA: seq: oss: Fix races at processing SysEx messages
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
  - !15059  RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - !15051  iio: light: vcnl4035: fix information leak in triggered buffer
  - !9883 AMD QoS new features BMEC and SMBA
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14956  nbd: don't allow reconnect after disconnect
  - !15046  pinmux: Use sequential access to access desc->pinmux data
  - !15015  spi: mpc52xx: Add cancel_work_sync before module remove
  - !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
  - [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - pinmux: Use sequential access to access desc->pinmux data
  - !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
  - !15014 v2  nilfs2: prevent use of deleted inode
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !15010  nvme-rdma: unquiesce admin_q before destroy it
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - nilfs2: prevent use of deleted inode
  - nvme-rdma: unquiesce admin_q before destroy it
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - tools headers cpufeatures: Sync with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Add per-rmid arch private storage for overflow and chunks
  - x86/resctrl: Group struct rdt_hw_domain cleanup
  - x86/resctrl: Add domain online callback for resctrl work
  - x86/resctrl: Merge mon_capable and mon_enabled
  - x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
  - x86/resctrl: Split struct rdt_domain
  - x86/resctrl: Add interface to write mbm_local_bytes_config
  - x86/resctrl: Add interface to write mbm_total_bytes_config
  - x86/resctrl: Add interface to read mbm_local_bytes_config
  - x86/resctrl: Add interface to read mbm_total_bytes_config
  - x86/resctrl: Support monitor configuration
  - x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
  - x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
  - x86/resctrl: Move MSR defines into msr-index.h
  - x86/resctrl: Include new features in command line options
  - x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
  - x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
  - x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
  - x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
  - x86/resctrl: Split struct rdt_resource
  - x86/resctrl: Fix kernel-doc in internal.h
  - x86/resctrl: Correct MBM total and local values
  - nbd: don't allow reconnect after disconnect
  - s390/cpum_sf: Handle CPU hotplug remove during sampling
  - fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference


author: Li Nan <linan122@huawei.com> - 5.10.0-250.0.0.154
changelog:
  - !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
  - !15085  ila: call nf_unregister_net_hooks() sooner
  - !15100  ila: serialize calls to nf_register_net_hooks()
  - !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
  - !15096  net: inet: do not leave a dangling sk pointer in inet_create()
  - !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - !15086  net: Fix CVE-2024-50125
  - !15117 v3  net: Fix CVE-2024-56658
  - !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - !15124 v2  fix CVE-2024-53056 for olk-5.10
  - !15129  comedi: Flush partial mappings in error case
  - !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
  - comedi: Flush partial mappings in error case
  - iomap: avoid avoid truncating 64-bit offset to 32 bits
  - mm: resolve faulty mmap_region() error path behaviour
  - mm: unconditionally close VMAs on error
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook
  - !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - ila: serialize calls to nf_register_net_hooks()
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
  - net: inet: do not leave a dangling sk pointer in inet_create()
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout
  - Bluetooth: call sock_hold earlier in sco_conn_del
  - ila: call nf_unregister_net_hooks() sooner
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error


author: Li Nan <linan122@huawei.com> - 5.10.0-251.0.0.155
changelog:
  - !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
  - !15137  net/mlx5: Fix variable not being completed when function returns
  - !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - !15134  usb: typec: altmode should keep reference to parent
  - !15198  CVE-2024-57857
  - !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15199  power: supply: gpio-charger: Fix set charge current limits
  - power: supply: gpio-charger: Fix set charge current limits
  - RDMA/siw: Remove direct link to net_device
  - RDMA/siw: Fabricate a GID on tun and loopback devices
  - RDMA/siw: Use helper function to set sys_image_guid
  - RDMA/siw: Enable siw on tunnel devices
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15186  CVE-2024-57795
  - !15177  iio: imu: kmx61: fix information leak in triggered buffer
  - RDMA/rxe: Remove the direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - iio: imu: kmx61: fix information leak in triggered buffer
  - !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !15139  apparmor: fix 'Do simple duplicate message elimination'
  - !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
  - !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - !15077  kasan: fix incorrect return type of quarantine_put()
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - apparmor: fix 'Do simple duplicate message elimination'
  - net/mlx5: Fix variable not being completed when function returns
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - usb: typec: altmode should keep reference to parent
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - kasan: fix incorrect return type of quarantine_put()
  - mm: Enhanced copy capabilities for Hygon processor


author: Li Nan <linan122@huawei.com> - 5.10.0-252.0.0.156
changelog:
  - !15293 ras: ACPI: HED: Always initialize before evged
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - ras: ACPI: HED: Always initialize before evged
  - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
  - EDAC/skx_common: Differentiate memory error sources
  - EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
  - EDAC, i10nm: make skx_common.o a separate module
  - !15246  UBI/UBIFS mainline patch backport
  - !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
  - ubi: Add a check for ubi_num
  - ubifs: skip dumping tnc tree when zroot is null
  - !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU


author: Li Nan <linan122@huawei.com> - 5.10.0-253.0.0.157
changelog:
  - !15447  Some bug fix patches for RDMA/hns to olk-5.10
  - !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - RDMA/hns: Fix default congestion control algorithm not set for kernel QP
  - RDMA/hns: Fix udca not unregistered when reset entry allocation failed
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15422  ocfs2: handle a symlink read error correctly
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - RDMA/hns: Fix ifnullfree static warning
  - RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
  - RDMA/hns: Fix unmatched kmalloc and kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
  - net: hns3: add command queue trace for hns3
  - net: hns3: Revert "net: hns3: add command queue trace for hns3"
  - ocfs2: handle a symlink read error correctly
  - net: hns3: add mac tunnel number query
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15413  CVE-2025-21756
  - !15413  CVE-2025-21756
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - net: hns3: fix oops when unload drivers paralleling
  - !15382  srcu: Tighten cleanup_srcu_struct() GP checks
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15387  crypto: qat - add param check for DH
  - !15389  orangefs: fix a oob in orangefs_debug_write
  - !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - !15241 KVM: arm64: pvsched bugfix and module param
  - orangefs: fix a oob in orangefs_debug_write
  - crypto: qat - add param check for DH
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15217 Add device HID for Hygon GPIO controller
  - !15217 Add device HID for Hygon GPIO controller
  - srcu: Tighten cleanup_srcu_struct() GP checks
  - !15232  smb: client: Fix netns refcount imbalance
  - !15232  smb: client: Fix netns refcount imbalance
  - !15348  Mainline Patch
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
  - !15307  net: sfc: add missing xdp queue reinitialization
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - net: sfc: add missing xdp queue reinitialization
  - netfilter: nf_set_pipapo: fix initial map fill
  - sw64: pci: add new files to help support ACPI-based PCI initialization
  - sw64: acpi: disable INTC initialization via ACPI MADT table
  - sw64: pci: bypass legacy PCI initialization when ACPI enabled
  - sw64: acpi: use early param to control whether ACPI is enabled
  - sw64: acpi: disable all ACPI features by default
  - pci: let pcibios_root_bridge_prepare() access bridge->windows
  - sw64: fix kernel crash caused by unaligned access exception
  - sw64: iommu: adjust iova map space
  - sw64: msi: split the msi file
  - sw64: use generic dma_direct_ops
  - sw64: fix cpu reduction bug in cpuautoplug
  - sw64: use generated macro in vrt_sigreturn.S
  - sw64: do not allow assembler reorder in __copy_user()
  - sw64: expand vmemmap
  - sw64: iommu: fix dma_supported of dma_ops
  - sw64: add support for TIF_NOTIFY_SIGNAL
  - sw64: fix stack trace error
  - sw64: register suspend entry for cpu 0 only
  - sw64: do not discard exit text at link time
  - sw64: fix syscall restart
  - sw64: usb: redefine some macros
  - sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
  - sw64: fix syscall sigreturn and rt_sigreturn
  - sw64: optimize hmcall rdusp() and wrusp()
  - sw64: rewrite syscall invocation in C
  - sw64: expand struct pt_regs
  - sw64: kvm: delete kvm_sw64_ops structure
  - sw64: add imemb at the end of fixup_hmcall()
  - sw64: c3b: get MCLK rate dynamically according to specification
  - sw64: fix default short clock rate
  - sw64: use call and br in kernel entry
  - sw64: modify do_[rt_]sigreturn
  - sw64: modify fixup_exception()
  - sw64: rewrite struct pt_regs
  - sw64: simplify pt_regs related code
  - sw64: fix pt_regs related code
  - sw64: avoid using wrusp()
  - sw64: use sp in pt_regs
  - sw64: kvm: move bind vcpu init code into kvm_core3.c
  - sw64: add arch/sw_64/Kbuild
  - sw64: Kconfig: clean up out-of-date deep sleep options
  - sw64: Kconfig: rename BUILTIN_DTB option
  - sw64: optimize C4 compilation
  - sw64: kprobe: allow kprobe in atomic sequence on C4
  - sw64: lib: optimize lib functions for C4
  - sw64: optimize __fpstate_save on C4
  - sw64: add new match interface for C4
  - sw64: add C4 FPE_INTDIV support
  - sw64: update default FPCR value
  - sw64: defconfig: add junzhang_defconfig for C4 serials
  - sw64: add basic support for C4 ISA
  - sw64: use PAGE_OFFSET as ktext address head
  - sw64: dts: add an empty dts to support SW8A temporarily
  - sw64: kconfig: add SW8A platform support
  - sw64: kvm: rebuild Core3 and Core4 virtualization
  - sw64: kvm: add support for Core4 memory virtualization
  - sw64: kvm: add config guard for C3B implementation
  - sw64: kvm: add C4 vcpu support
  - sw64: iommu: add new iommu v2 support
  - sw64: pci: add C4 PCI_MSI support
  - sw64: pci: add C4 PCI support
  - sw64: irq: add basic C4 irq support
  - sw64: timer: add C4 timer support
  - sw64: unify io operations interface for C3B and C4
  - sw64: add SW8A io addresses
  - sw64: mm: add C4 hugetlb support
  - sw64: mm: add C4 MMU support
  - sw64: topology: add C4 topology info
  - sw64: add C4 CSRs
  - sw64: add C4 barriers support
  - sw64: add C4 xchg operations support
  - sw64: add C4 bit operations support
  - sw64: add C4 atomic operations support
  - sw64: redesign __cpu_to_rcid initialization
  - sw64: topology: modify topology defines
  - sw64: rename some fields of struct vcpucb
  - sw64: mm: use static ZERO_PAGE
  - sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
  - sw64: mm: add more helpers to pgtable.h
  - sw64: mm: fix _PFN_MASK
  - sw64: mm: add _PAGE_CONT helpers
  - sw64: pci: rename PCI_DEVICE_ID_CHIP3
  - sw64: mm: rename _PAGE_PHU and _PAGE_PSE
  - sw64: remove unused file
  - sw64: remove out-of-date LOCK_FIXUP
  - sw64: fix compile error when CONFIG_PM is not set
  - sw64: kconfig: fix config error when PCI_MSI is not set
  - sw64: cpufreq: fix clockevents update method
  - sw64: fix excessive timer interrupts
  - sw64: simplify PMC interfaces
  - sw64: remove sw64_platform_ops
  - sw64: remove chip directory
  - sw64: reorganize pci setup related code
  - sw64: reorganize chip setup code
  - sw64: reorganize msi related code
  - sw64: reorganize basic irq handling code
  - sw64: reorganize pci related quirks
  - sw64: reorganize usb quirks related code
  - sw64: reorganize i2c related code
  - sw64: reorganize timer related code
  - sw64: reorganize cpu frequency related code
  - i2c: designware: add parameter MODEL_SUNWAY
  - sw64: fix compile warnings
  - sw64: cleanup hugetlb code
  - sw64: drop fpga and simulator support
  - sw64: fix indent of inline assembly
  - sw64: fix header include guards
  - sw64: add missing fallthrough
  - sw64: add missing break
  - sw64: Kconfig: remove out-of-date rwsem options
  - sw64: fix frequency in cpufreq_frequency_table
  - sw64: fix incorrect hmcalls in the virtual machine
  - sw64: remove arch overridden RLIM_INFINITY
  - sw64: do not set __ARCH_SI_TRAPNO
  - sw64: remove C3A support
  - sw64: fix s4 sleep bug
  - sw64: reorganize dependency of devmap helpers
  - i2c: sunway: do some cleanup for old i2c driver
  - i2c: designware: add sunway system I2C support
  - sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
  - sw64: modify lock instruction
  - sw64: update openeuler_defconfig
  - sw64: add save_stack_trace_regs()
  - sw64: tools: fix selftests/sigaltstack for sw64
  - sw64: determine external clock according to specification
  - sw64: fix uretprobe implementation
  - sw64: fix some cpu autoplug bugs
  - sw64: kvm: add support for cpu offline and online in guest
  - fbdev: sw64 use __raw I/O memory api
  - sw64: correct the definition of MAX_DMA_ADDRESS
  - sw64: remove S3 flag
  - sw64: rename ptrace macros
  - sw64: fix audit_syscall_exit()
  - sw64: fix some include format
  - sw64: update cpufreq's info when cpu frequency changed
  - sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
  - sw64: selftests/ftrace: add sw64 support for kprobe args tests
  - sw64: hibernation: update ktp to vcpucb after restoring it
  - sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
  - sw64: kvm: fix memory hotplug support for guest
  - sw64: hugetlbfs: add arch_hugetlb_valid_size
  - sw64: kvm: fix some build errors for KVM module
  - sw64: perf: add libbfd-buildid and disassembler-four-args support
  - sw64: fix a compile error for headers_install
  - sw64: fix shared_cpu_map of tcache's cacheinfo
  - sw64: kvm: fix an error with non-8MB aligned guest RAM size
  - sw64: selftests/vm: fix virtual address range mapping test
  - sw64: fix KBUILD_DEFCONFIG
  - sw64: send a fake signal to all blocking tasks
  - sw64: clean up useless cpu_idle wrap
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: fix TCP timers deadlock after rmmod
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - pinctrl: Add device HID for Hygon GPIO controller
  - block: fix kabi broken due to removing bip_slab
  - block: fix kabi broken
  - block: fix rq-qos breakage from skipping rq_qos_done_bio()
  - block: only mark bio as tracked if it really is tracked
  - block: add a BUILD_BUG_ON() for adding more bio flags than we have space
  - block: use bi_max_vecs to find the bvec pool
  - md/raid10: remove dead code in reshape_request
  - block: mark the bio as cloned in bio_iov_bvec_set
  - block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
  - block: remove the 1 and 4 vec bvec_slabs entries
  - block: streamline bvec_alloc
  - block: factor out a bvec_alloc_gfp helper
  - block: move struct biovec_slab to bio.c
  - block: reuse BIO_INLINE_VECS for integrity bvecs


author: Li Nan <linan122@huawei.com> - 5.10.0-254.0.0.158
changelog:
  - !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
  - !15456  soc: hisilicon: Fix one printing issue and simplify some printing
  - !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
  - soc: hisilicon: Add checks against NULL pointer reference
  - soc: hisilicon: Fix one printing issue and simplify some printing
  - !15391  backport mainline bugfix patch
  - RDMA/hns: Fix mbox timing out by adding retry mechanism
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available


author: Li Nan <linan122@huawei.com> - 5.10.0-256.0.0.159
changelog:
  - !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - !15606  Fix instance dir use-after-free in tracefs
  - !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
  - tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
  - tracing: Avoid use-after-free in tracing_open_file_tr()
  - !15591 【olk 5.10】revert and backport a bugfix
  - net: hns3: add mac tunnel number query
  - Revert "net: hns3: add mac tunnel number query"
  - !15501  module: fix [e_shstrndx
  - !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
  - !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
  - module: fix [e_shstrndx].sh_size=0 OOB access
  - !2893 igc: add default intel igc driver module support
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
  - igc:add default intel igc driver support


author: Li Nan <linan122@huawei.com> - 5.10.0-257.0.0.160
changelog:
  - !15643 drivers:misc:sdma-dae: sync code to openEuler
  - drivers:misc:sdma-dae: remove unnecessary return in void function
  - drivers:misc:sdma-dae fix incorrect resource release
  - drivers:misc:sdma-dae remove lock while pausing channels
  - drivers:misc:sdma-dae add mmu_notifier
  - drivers:misc:sdma-dae: add MODULE_VERSION to control version


author: Li Nan <linan122@huawei.com> - 5.10.0-258.0.0.161
changelog:
  - !15699  Push 2 self-developed patches to OLK-5.10
  - !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15669  arm64: mm: add mc support for __buffer_migrate_page
  - !15630  Fix CVE-2022-49553
  - !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
  - printk: Skip log flush in NMI context when logbuf_lock is held
  - x86: reboot: Initialize the printk locks to avoid deadlock
  - !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - !15646  nilfs2: do not force clear folio if buffer is referenced
  - !15676  sched/fair: Optimize the dynamic smt
  - !15330 [OLK-5.10]:update patches for sw64 architecture
  - sched/fair: Optimize the dynamic smt
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - arm64: mm: add mc support for __buffer_migrate_page
  - !15595  io_uring: prevent opcode speculation
  - nilfs2: do not force clear folio if buffer is referenced
  - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
  - fs/ntfs3: validate BOOT sectors_per_clusters
  - fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
  - io_uring: prevent opcode speculation
  - sw64: distribute intx interrupts by hose
  - sw64: kvm: use generic kvm mmu memory caches
  - sw64: fix msi interrupt for guest os
  - sw64: acpi: remove constraint that cid of boot core must be zero
  - sw64: pci: get register base address from firmware
  - sw64: fix compile warning of do_entUna()
  - sw64: fix save_ktp compatibility for C3
  - sw64: fix PTBR save/restore for hibernation
  - sw64: kvm: remove some unused codes
  - sw64: add syscall pfh_ops
  - sw64: fix broken rdfpcr()
  - sw64: force kernel stack to be 16 bytes aligned
  - sw64: match platform device by acpi method
  - sw64: iommu: support acpi init
  - sw64: spi: update spi controller driver
  - sw64: irqchip: fix compatibility with old dts
  - sw64: kvm: fix pmd_trans_cont
  - sw64: add -fno-sw-unalign-byte to cflags for C4
  - sw64: define cpu_relax() as imb()
  - sw64: kvm: fix size of struct kvm_regs for C3B
  - sw64: fix the .endm in hibernate_asm.S
  - sw64: fix compile error of efi.systab
  - sw64: pci: adjust the maximum number of RC per node
  - sw64: get mclk and external clk from firmware
  - sw64: fix compile error of MMSIZE
  - sw64: acpi: disable ACPI for xuelang
  - sw64: ahci: disable parallel bus scan
  - sw64: redesign run mode setup method
  - sw64: rename static key and related simd libraries
  - sw64: fix secondary cpu bring up bug
  - sw64: acpi: fix coding style and typos
  - sw64: irq: fix compilation error
  - sw64: improve the verification logic of DTB
  - sw64: kvm: add the member of the vcpucb structure
  - sw64: kvm: fix the check for THP
  - sw64: kvm: fix page walk error of unmap_apt_range()
  - sw64: apply new boot params from DTB chosen node
  - sw64: receive new boot params from firmware
  - sw64: setup stackframe at kernel entry point
  - sw64: save and restore CSR_WR_FREGS for SIMD libs
  - sw64: rename copy and set lib functions
  - sw64: rename copy and set lib files
  - sw64: choose lib at compile time
  - sw64: perf: add core4 pmu support
  - sw64: redesign struct kvm_regs for C4
  - sw64: store topology and numa info by each cpu itself
  - sw64: kvm: fix live migration bug
  - sw64: kvm: fix APT fault handler
  - sw64: work around suspend for C4
  - sw64: employ trick on regs.pc for specific exception
  - sw64: enable CONFIG_FRAME_POINTER by default for junzhang
  - sw64: fix syscall_fallback() for vdso gettimeofday
  - sw64: dts: add Junzhang
  - sw64: lpc: work around hardware flaws
  - sw64: improve cpu bring up method
  - sw64: introduce new entry framework for C4
  - sw64: irq: update the initial value of nr_irqs
  - sw64: msi: fix sw64_set_affinity function in msi-v2
  - sw64: dynamically switch between lib implementation
  - sw64: kvm: fix unmap_apt_{ptes, pmds}
  - sw64: msi: remove redundant interrupt enables
  - sw64: add unaligned access support for C4 new instructions
  - sw64: fix compilation warning
  - sw64: fix kconfig selections
  - sw64: iommu: adjust iova range
  - sw64: iommu: introduce generic DMA ops to iommu_v2
  - sw64: iommu: fix iommu_v2 compile problems
  - sw64: acpi: fix missed upper bits of rcid for junzhang
  - sw64: pci: remove duplicate pcie operations
  - sw64: irq: remove unnecessary initialization
  - sw64: acpi: enable generic GSI
  - sw64: irqchip: support ACPI-based interrupt controller initialization
  - sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
  - sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
  - sw64: mm: fix PTE bits check
  - sw64: use a new wrap_asid hmcall when asid wraps
  - sw64: rewrite fpcr and swcr conversion
  - sw64: enable hardware denorm by default
  - sw64: add four-socket system support
  - sw64: add a new kernel parameter to override mclk
  - sw64: improve sw64_printk()
  - sw64: msi: fix bugs in multi-msi interrupts allocation and release
  - sw64: pci: change pci transaction ordering rule settings
  - sw64: irqchip: fix virtual PINTC not working properly
  - sw64: dts: improve properties for PINTC
  - sw64: dts: improve properties for LPC-INTC
  - sw64: dts: fix interrupt related properties for GPIO
  - sw64: dts: add chosen node
  - sw64: dts: fix properties for spi controller device node
  - sw64: fix coding style and typos
  - sw64: acpi: fix function acpi_numa_processor_affinity_init()
  - sw64: fix rd_f compatibility issue for C4
  - sw64: export mclk for guest os
  - sw64: refactor device interrupt domain
  - sw64: kvm: fix clock sync of CORE4 live migration
  - sw64: kvm: delete memory hotplug codes for CORE3B
  - sw64: add missing c4 legacy power management code
  - sw64: add missing c4 intc kconfig
  - sw64: fix macro definition compilation error
  - i2c: designware: Do not complete i2c read without RX_FULL interrupt
  - sw64: add macros for mother board config info
  - sw64: kvm: scale up the range of target vcpu parsed by hypervisor
  - sw64: pci: reset dma mask for devices on zx200
  - sw64: kvm: fix return value of vmem_mmap
  - sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
  - sw64: iommu: add default DMA ops for passthrough domains
  - sw64: iommu: recognize potential multiple aliases for devices
  - sw64: iommu: fix group allocation semantics
  - sw64: iommu: rename sunway iommu filenames
  - sw64: iommu: remove unnecessary locking for sunway iommu driver
  - sw64: fix dtb address validity check
  - sw64: iommu: use a generic implementation of DMA ops
  - sw64: pci: fix compile error when CONFIG_ACPI=n
  - sw64: smp: suppress function setup_smp() when ACPI enabled
  - sw64: acpi: parse SW CINTC for SMP initialization
  - sw64: acpi: support MADT entry print for SW CINTC
  - sw64: acpi: add ACPI-style structures for SW CINTC
  - sw64: smp: add new structure to record rcid information
  - sw64: smp: modify function smp_rcb_init() to receive base address
  - sw64: pci: synchronize the OEM table ID of MCFG with BIOS
  - sw64: kvm: add trace kvm function
  - sw64: iommu: fix the bug when vfio_iommu unpin pages
  - sw64: use rvpcr() to setup run mode
  - sw64: kgdb: add single-step debug support
  - sw64: fix lockdep error
  - sw64: perf: do all event checks in sw64_pmu_event_init()
  - sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
  - sw64: pci: export some pci functions
  - sw64: uapi: fix a compile error for headers_install
  - sw64: perf: hide hardware performance events in guest os
  - sw64: fix hugepage support
  - sw64: extern vdso_start and vdso_end as char[]
  - sw64: remove useless current_policy
  - sw64: make sure _PAGE_LEAF is zero for swap pte
  - sw64: get cpufreq_policy with standard interface
  - sw64: mm: fix function numa_clear_node()
  - sw64: acpi: enable upgrade acpi tables via initrd
  - sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
  - sw64: acpi: fix the function for parsing CPU affinity
  - sw64: acpi: use common functions about parsing SRAT and SLIT
  - sw64: acpi: enable CONFIG_ACPI_NUMA
  - sw64: move function setup_smp() before NUMA initialization
  - sw64: acpi: move ACPI initialization before NUMA initialization
  - sw64: pci: adjust the directory structure of PCI-related source files
  - sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
  - sw64: pci: support ACPI-based PCI initialization
  - sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
  - sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
  - sw64: pci: use pci_bus_to_pci_controller to get pci_controller
  - sw64: pci: add quirks for ACPI-based ECAM


author: Li Nan <linan122@huawei.com> - 5.10.0-259.0.0.162
changelog:
  - !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
  - !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
  - !15802  hrtimers: Handle CPU state correctly on hotplug
  - hrtimers: Handle CPU state correctly on hotplug
  - !15679  list: fix a data-race around ep->rdllist
  - !15683  CVE-2025-21726
  - !15682  padata: fix UAF in padata_reorder
  - !15728  *** CVE-2025-21823 ***
  - !15782 sdma-dae: modify ttl_processes reduce logic
  - Revert "arm64: mm: add mc support for __buffer_migrate_page"
  - !15409  CVE-2025-21715
  - sdma-dae: modify ttl_processes reduce logic
  - !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15766  bpf, sockmap: Fix race between element replace and close()
  - !15765  CVE-2024-56642
  - drm/drm_vma_manager: Add drm_vma_node_allow_once()
  - !15769  gpio: aggregator: protect driver attr handlers against module unload
  - !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - gpio: aggregator: protect driver attr handlers against module unload
  - bpf, sockmap: Fix race between element replace and close()
  - tipc: fix NULL deref in cleanup_bearer()
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15365 mm/init: Add quirk for phytium ps23064 SoC
  - !15690  net: rose: fix timer races against user threads
  - !15716  CVE-2022-49513
  - !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15449  vrf: use RCU protection in l3mdev_l3_out()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - batman-adv: Drop initialization of flexible ethtool_link_ksettings
  - batman-adv: Add new include for min/max helpers
  - !15701  usb: gadget: f_tcm: Don't free command immediately
  - !15510 v3  CVE-2025-21816
  - !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - mm/init: Add quirk for phytium ps23064 SoC
  - cpufreq: governor: Use kobject release() method to free dbs_data
  - cpufreq: Move to_gov_attr_set() to cpufreq.h
  - usb: gadget: f_tcm: Don't free command immediately
  - net: rose: fix timer races against user threads
  - padata: avoid UAF for reorder_work
  - padata: add pd get/put refcnt helper
  - padata: fix UAF in padata_reorder
  - list: fix a data-race around ep->rdllist
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - hrtimer: Report offline hrtimer enqueue
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - vrf: use RCU protection in l3mdev_l3_out()
  - net: davicom: fix UAF in dm9000_drv_remove


author: Li Nan <linan122@huawei.com> - 5.10.0-260.0.0.163
changelog:
  - !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15837  CVE-2025-21858
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - geneve: Fix use-after-free in geneve_find_dev().
  - !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
  - !15717  media: uvcvideo: Fix double free in error path
  - !15759  Fix kmemleak false positive
  - mt76: fix use-after-free by removing a non-RCU wcid pointer
  - !15378  ASoC: atmel: Fix error handling in snd_proto_probe
  - !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15816 perf: Configure BRBE correctly on VHE host
  - perf: Configure BRBE correctly on VHE host
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - media: uvcvideo: Fix double free in error path
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - ASoC: atmel: Fix error handling in snd_proto_probe


author: Li Nan <linan122@huawei.com> - 5.10.0-261.0.0.164
changelog:
  - !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15791  CVE-2025-21877
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15894  ftrace: Avoid potential division by zero in function_stat_show()
  - !15892  bnxt: Do not read past the end of test names
  - !15840  block: fix bugs in blk_register_queue()
  - !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
  - !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15756  powerpc: Fix save r13 on kprobe/ftrace entry
  - ftrace: Avoid potential division by zero in function_stat_show()
  - bnxt: Do not read past the end of test names
  - iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - soc: hisilicon: Serialize the online and onfline the acpi devices
  - block: fix lock ordering in blk_register_queue() error path
  - block: fix resource leak in elevator registration error path
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - powerpc: Fix save r13 on kprobe/ftrace entry


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-262.0.0.165
changelog:
  - !16057 mailbox: pcc: Always clear the platform ack interrupt first
  - !16076  mpage: fix softlockup in mpage_readahead()
  - !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
  - !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - !16127  net: Fix CVE-2025-21763
  - !16125  ndisc: extend RCU protection in ndisc_send_skb()
  - !16129  arp: use RCU protection in arp_xmit()
  - arp: use RCU protection in arp_xmit()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: extend RCU protection in ndisc_send_skb()
  - !16088  CVE-2024-58094
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - mpage: fix softlockup in mpage_readahead()
  - !16063  ndisc: Fix CVE-2025-21764
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - mailbox: pcc: Always clear the platform ack interrupt first
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - !15776 [OLK-5.10] new bugfix from mainline for Turin
  - !15941  block: fix UAF in blk_mq_has_sqsched()
  - !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
  - !15938  md: bypass block throttle for superblock update
  - !15940  md/raid1: fix bitmap update when all write requests fail
  - !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
  - !15990  Backport the perf fix patch
  - perf: Really fix event_function_call() locking
  - perf: Fix event_function_call() locking
  - perf/core: Fix missing wakeup when waiting for context reference
  - perf/core: Fix perf_cgroup_switch()
  - block: Decode all flag names in the debugfs output
  - blk-mq: avoid to touch q->elevator without any protection
  - blk-mq: protect q->elevator by ->sysfs_lock in blk_mq_elv_switch_none
  - block: remove QUEUE_FLAG_DEAD
  - md/raid1: fix bitmap update when all write requests fail
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md: bypass block throttle for superblock update
  - nvme-pci: fix multiple races in nvme_setup_io_queues
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
  - x86/CPU/AMD: Do the common init on future Zens too
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-6
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: Funda Wang <fundawang@yeah.net> - 2.9.14-15
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate allow implicit ether vlan dep
  evaluate datatype memleak after binop transfer
  evaluate bogus datatype assertion in binary operation evaluation
  netlink delinearize do not transfer binary operation to non anonymous sets
  payload do not kill dependency for proto unknown
  monitor missing cache and set handle initialization
  netlink linearize fix timeout with map updates


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential array out of bounds access
  evaluate: fix shift exponent underflow in concatenation evaluation
  netlink: Fix for potential NULL-pointer deref
  mnl: dump_nf_hooks() leaks memory in error path


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: gaihuiying <eaglegai@163.com> - 2.4.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-35
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-36
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-37
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: Funda Wang <fundawang@yeah.net> - 3.9.9-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-11168
  - SUG:NA
  - DESC:fix CVE-2024-11168
         - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-5
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: wangkai <13474090681@163.com> - 1.76.0-1
changelog:
  - Update to 1.76.0 because firefox update 128ESR version
  - Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
  - Obsoletes rust-analysis


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: zhangyao <zhangyao108@huawei.com> - 249-92
changelog:
  - wait-online: fix handling of unmanaged state
  - add backport-wait-online-make-manager_link_is_online-return-0-whe.patch


author: zhangyao <zhangyao108@huawei.com> - 249-95
changelog:
  - add backport-cgroup-util-introduce-cg_is_threaded.patch
        backport-core-execute-warn-when-threaded-mode-is-detected.patch


author: zhangyao <zhangyao108@huawei.com> - 249-96
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: zhangyao <zhangyao108@huawei.com> - 249-97
changelog:
  - add backport-logind-give-better-error-messages-when-failing-to-at.patch
        backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
        backport-fs-util-readlinkat-supports-an-empty-string.patch
        backport-exec-invoke-correct-dont_close-size.patch
        backport-core-Fix-file-descriptor-leak.patch
        backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
        backport-core-service-fix-accept-socket-deserialization.patch
        backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
        backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
        backport-sysusers-handle-NSS-errors-gracefully.patch
        backport-shared-log-error-when-execve-fail.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-98
changelog:
  - add backport-run-split-out-creation-of-unit-creation-messages.patch
        backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
        backport-sd-event-do-not-assert-on-invalid-signal.patch
        backport-sd-event-change-error-code-EINVAL-EIO.patch
        backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
        backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
        backport-main-reopen-dev-console-for-user-service-manager.patch
        backport-log-add-common-helper-log_set_target_and_open.patch
        backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
        backport-journalctl-erase-verify-key-before-free.patch
        backport-core-service-use-log_unit_-where-appropriate.patch
        backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
        backport-Manager-also-log-caller-of-daemon-reexec.patch
        backport-manager-improve-message-about-Reload-Reexec-requests.patch
        backport-core-fix-null-in-output.patch
        backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
        backport-core-Log-in-more-scenarios-about-which-process-initi.patch


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-Fix-ul_path_read_buffer.patch
         backport-fsck.minix-fix-possible-overrun.patch
         backport-wall-fix-possible-memory-leak.patch
         backport-wall-make-sure-unsigned-variable-not-underflow.patch


author: liyuzhe <liyuzhe@cqsoftware.com.cn> - 2.37.2-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-login-su-pam_end-compliance.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lsmem-make-lsmem-to-check-for-the-nodes-more-robust.patch
         backport-cfdisk-fix-possible-integer-overflow-coverity-scan.patch
         backport-more-make-sure-we-have-data-on-stderr.patch
         backport-libblkid-apfs-validate-checksums.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-sys-utils-setpriv-fix-potential-memory-leak.patch
         backport-sys-utils-save_adjtime-fix-memory-leak.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: zhangting <dev03303@linx-info.com> - 2.37.2-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix an issue that mkfs.bfs fix memory leak
  	mkfs.bfs-fix-memory-leaks-and-weak-code.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patches
         [del] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-35
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


