# changelog

author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.2.0.0181
changelog:
  - mm/sharepool: Fix a double free problem caused by init_local_group
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
  - macvlan: enforce a consistent minimal mtu
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - net: gso: fix panic on frag_list with mixed head alloc types
  - tcp/udp: Make early_demux back namespacified.
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - tcp: fix indefinite deferral of RTO with SACK reneging
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - security: commoncap: fix -Wstringop-overread warning
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - kprobe: reverse kp->flags when arm_kprobe failed
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - nfs4: Fix kmemleak when allocate slot failed
  - kernfs: fix use-after-free in __kernfs_remove
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref
  - signal handling: don't use BUG_ON() for debugging
  - ida: don't use BUG_ON() for debugging


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.3.0.0182
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
  - hv_netvsc: Add check for kvmalloc_array
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - !273 [openEuler-1.0-LTS] Fix mouse enumeration issue after wakeup from s4
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos
  - media: mceusb: Use new usb_control_msg_*() routines
  - media: mceusb: fix control-message timeouts
  - USB: add usb_control_msg_send() and usb_control_msg_recv()
  - Fix mouse enumeration issue after wakeup from s4


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.4.0.0183
changelog:
  - dm thin: Use last transaction's pmd->root when commit failed
  - drm: mali-dp: potential dereference of null pointer
  - power: supply: wm8350-power: Add missing free in free_charger_irq
  - sched: Reinit task's vruntime if a task sleep over 200 days
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - drm/amdkfd: Check for null pointer after calling kmemdup
  - !325 Support enabling dirty log gradually in small chunks
  - KVM: arm64: Support enabling dirty log gradually in small chunks
  - KVM: x86: enable dirty log gradually in small chunks
  - KVM: Introduce KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2
  - KVM: Fix kvm_clear_dirty_log_protect off-by-(minus-)one
  - KVM: Fix the bitmap range to copy during clear dirty
  - kvm_main: fix some comments
  - KVM: fix KVM_CLEAR_DIRTY_LOG for memory slots of unaligned size
  - Revert "KVM: Eliminate extra function calls in kvm_get_dirty_log_protect()"
  - KVM: validate userspace input in kvm_clear_dirty_log_protect()
  - kvm: introduce manual dirty log reprotect
  - kvm: rename last argument to kvm_get_dirty_log_protect
  - kvm: make KVM_CAP_ENABLE_CAP_VM architecture agnostic


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2301.3.0.0184
changelog:
  - arm64: Kconfig: default unset ARCH_LLC_128_LINE_SIZE
  - mm/sharepool: clean up ABI breakage
  - timekeeping: Avoiding false sharing in field access of tk_core
  - mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED
  - mm/memory-failure.c: fix race with changing page more robustly
  - mm,memory_failure: always pin the page in madvise_inject_error
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - mm/sharepool: Charge Buddy hugepage to memcg


author: Zheng Zengkai <zhengzengkai@huawei.com> - 4.19.90-2301.5.0.0185
changelog:
  - USB: Fix kABI for usb_device->reset_in_progress
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - ima: Directly assign the ima_default_policy pointer to ima_rules
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - KEYS: trusted: Fix migratable=1 failing
  - certs: Fix blacklist flag type confusion
  - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - ipv6: avoid use-after-free in ip6_fragment()
  - nvme initialize core quirks before calling nvme_init_subsystem
  - memcg: fix possible use-after-free in memcg_write_event_control()
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - nvme: restrict management ioctls to admin
  - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72
  - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - af_key: Fix send_acquire race with pfkey_register
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls
  - ima: Do not print policy rule with inactive LSM labels
  - lsm: Resolve KABI changes on lsm_notifier
  - ima: Evaluate error in init_ima()
  - ima: ima/lsm policy rule loading logic bug fixes
  - ima: Handle -ESTALE returned by ima_filter_rule_match()
  - ima: use the lsm policy update notifier
  - LSM: switch to blocking policy update notifiers
  - mm/hwpoison: do not lock page again when me_huge_page() successfully recovers


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2301.6.0.0186
changelog:
  - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - genirq: Introduce warn log when irq be reentrant
  - net: sched: disallow noqueue for qdisc classes
  - net: sched: atm: dont intepret cls results when asked to drop
  - block: check 'bd_super' before rescanning partition
  - net: sched: cbq: dont intepret cls results when asked to drop
  - swapfile: fix soft lockup in scan_swap_map_slots
  - Huawei BMA: Fix iBMA driver bug


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.1.0.0187
changelog:
  - ring-buffer: Fix race between reset page and reading page
  - block: don't allow a disk link holder to itself
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: lost matching-pair of trace in ext4_truncate
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - hugetlbfs: don't delete error page from pagecache
  - mm: hwpoison: refactor refcount check handling
  - dhugetlb: set DYNAMIC_HUGETLB to y for hulk_defconfig
  - dhugetlb: use enable_dhugetlb to disable huge_memory
  - dhugetlb: skip dissolve hugepage belonging to dynamic hugetlb
  - dhugetlb: only support 1G/2M hugepage and ARM64_4K_PAGES
  - dhugetlb: isolate dynamic hugetlb code
  - dhugetlb: backport dynamic hugetlb feature
  - !344 mm: fix false-positive OVERCOMMIT_GUESS failures
  - cfq: fix memory leak for cfqq
  - mm: fix false-positive OVERCOMMIT_GUESS failures


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.3.0.0188
changelog:
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - x86/bugs: Flush IBP in ib_prctl_set()
  - media: vivid: fix compose size exceed boundary
  - cifs: do not include page data when checking signature
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm: gup: fix the fast GUP race against THP collapse
  - prlimit: do_prlimit needs to have a speculation check
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - md: fix a crash in mempool_free
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - pnode: terminate at peers of source
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - device_cgroup: Roll back to original exceptions after copy failure
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list
  - ipmi: fix long wait in unload when IPMI disconnect
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - chardev: fix error handling in cdev_device_add()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - ipmi: fix memleak when unload ipmi driver
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - skbuff: Account for tail adjustment during pull operations
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - class: fix possible memory leak in __class_register()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - bonding: uninitialized variable in bond_miimon_inspect()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - blk-mq: fix possible memleak when register 'hctx' failed
  - perf: Fix possible memleak in pmu_dev_alloc()
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - pstore/ram: Fix error return code in ramoops_probe()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - sched/rt: Optimize checking group RT scheduler constraints
  - md: protect md_unregister_thread from reentrancy
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - lib/list_debug.c: Detect uninitialized lists
  - crypto: tcrypt - avoid signed overflow in byte count
  - mm: sharepool: fix hugepage_rsvd count increase error
  - config: enbale irq pending config for openeuler
  - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI
  - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ
  - md: fix uaf in md_wakeup_thread
  - genirq: add printk safe in irq context
  - jbd2: Fix data missing when reusing bh which is ready to be checkpointed
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - cifs: sanitize multiple delimiters in prepath
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.4.0.0189
changelog:
  - !213  net: bonding: Inherit MPLS features from slave devices
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - dhugetlb: set hpool to NULL for cont-bit hugepage
  - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig
  - arm64/ascend: Delete unused feature auto-tuning hugepage
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - !396 anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - net: bonding: Inherit MPLS features from slave devices


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.5.0.0190
changelog:
  - !423 genirq bugfix for arm64
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - !422 iscsi bugfixes backport
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - !420 backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - !415 mainline bugfix backport
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - iommu: Properly export iommu_group_get_for_dev()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Allow IOMMU bus ops to be unregistered
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - dhugetlb: isolate hwpoison hugepage when release
  - mm/sharepool: Fix null-pointer-deference in sp_free_area


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j16 V=1 VERBOSE=1 instead of make for building bootstrap


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


