# changelog

author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: songjuntao <songjuntao@kylinos.cn> - 2.34-19.skyworth01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: merge openEuler aarch64 EFI support and fix the compatibility issues


author: songjuntao <songjuntao@kylinos.cn> - 2.34-19.skyworth02
changelog:
  - Type:update
  - ID: TASK#150138
  - SUG:NA
  - DESC: port rebuild libbfd.a libiberty.a libopcodes.a with -fPIC for inclusion into shared libraries


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-43.0.v2207
changelog:
  - KYLIN: selftests/net: enable lo.accept_local in psock_snd (luyun) [task:84718]
  - selftests/net: improve descriptions for XFAIL cases in psock_snd.sh (Po-Hsu Lin) [task:84718]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn) [bug:120181] {CVE-2022-30594}
  - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) [bug:120187] {CVE-2022-29581}
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou) [bug:120196] {CVE-2022-1734}
  - nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)
  - KYLIN: 3rd/sietium: sietium driver update (yangdeyi)
  - pwm:loongson: Perfect pwm-ls driver (lvyanbing)
  - ls2k1000: pwm: build as module support (suijingfeng)
  - pwm:loongson: fix up variable overflow (Yangyinglu)
  - Loongson2K: pwm: Pass PWM controller clock-frequency through device tree. (Ming Wang)
  - LoongArch: Set CONFIG_MEGARAID_SAS to m by default (Tianli Xiong)
  - gmac:The initial value of rx_watchdog is reduced to 5 (zhangtianyang)
  - LoongArch: LSVZ: fix pmu function (zhaotianrui)
  - LoongArch: module: Add plt section support (liweihao)
  - Revert "LoongArch: LSVZ: handle irq directly in kvm exception context" (王建兴)
  - LoongArch: Add vbios passed through ACPI table (liuyun)
  - LoongArch: Add gop support (liuyun)
  - LoongArch: Fix the usage of the suspend address (yangqiming)
  - Loongarch: fixup gcsr (Wang liupu)
  - loongarch: configs: make r8111G nic use r8168 driver use by default (Yinbo Zhu)
  - LoongArch: kprobe: Rewrite kprobe_handler implementation (Qing Zhang)
  - LoongArch: Remove relocations of REL type (Youling Tang)
  - objtool: LoongArch: Remove unused macro definitions (Youling Tang)
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port (Jianmin Lv)
  - KYLIN: config: Supports KAE engine drivers (pengcan) [bug:119799]
  - selftests/seccomp: allow clock_nanosleep instead of nanosleep (Thadeu Lima de Souza Cascardo) [task:69904]
  - KYLIN: arm64: use correct format characters (huhai)
  - KYLIN: Revert "optee: add ACPI support for Phytium" (huanfuxi) [task:84829]
  - net: phy: improve phy_init_hw (Heiner Kallweit) [bug:118542]
  - KYLIN: found-commit-all-deps: tips max_level correct (Jackie Liu)
  - KYLIN: config: enable kfence for x86 and arm64 (Jackie Liu) [task:68770]
  - KYLIN: mm/kfence: print disabling or re-enabling message (Jackie Liu)
  - kfence: allow use of a deferrable timer (Marco Elver) [task:68770]
  - kfence: test: try to avoid test_gfpzero trigger rcu_stall (Peng Liu) [task:68770]
  - kunit: make kunit_test_timeout compatible with comment (Peng Liu) [task:68770]
  - kunit: fix UAF when run kfence test case test_gfpzero (Peng Liu) [task:68770]
  - kfence: alloc kfence_pool after system startup (Tianchen Ding) [task:68770]
  - kfence: allow re-enabling KFENCE after system startup (Tianchen Ding) [task:68770]
  - mm/kfence: remove unnecessary CONFIG_KFENCE option (tangmeng) [task:68770]
  - net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet) [task:68770]
  - net: add skb_set_end_offset() helper (Eric Dumazet) [task:68770]
  - kfence: make test case compatible with run time set sample interval (Peng Liu) [task:68770]
  - kfence: fix memory leak when cat kfence objects (Baokun Li) [task:68770]
  - kfence: default to dynamic branch instead of static keys mode (Marco Elver) [task:68770]
  - kfence: always use static branches to guard kfence_alloc() (Marco Elver) [task:68770]
  - kfence: shorten critical sections of alloc/free (Marco Elver) [task:68770]
  - kfence: add note to documentation about skipping covered allocations (Marco Elver) [task:68770]
  - kfence: limit currently covered allocations when pool nearly full (Marco Elver) [task:68770]
  - kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver) [task:68770]
  - kfence: count unexpectedly skipped allocations (Marco Elver) [task:68770]
  - net: add and use skb_unclone_keeptruesize() helper (Eric Dumazet) [task:68770]
  - kfence: test: fail fast if disabled at boot (Marco Elver) [task:68770]
  - kfence: show cpu and timestamp in alloc/free info (Marco Elver) [task:68770]
  - kfence: fix is_kfence_address() for addresses below KFENCE_POOL_SIZE (Marco Elver) [task:68770]
  - kfence, x86: only define helpers if !MODULE (Marco Elver) [task:68770]
  - kfence: skip all GFP_ZONEMASK allocations (Alexander Potapenko) [task:68770]
  - kfence: move the size check to the beginning of __kfence_alloc() (Alexander Potapenko) [task:68770]
  - kfence: defer kfence_test_init to ensure that kunit debugfs is created (Weizhao Ouyang) [task:68770]
  - kfence: unconditionally use unbound work queue (Marco Elver) [task:68770]
  - kfence: use TASK_IDLE when awaiting allocation (Marco Elver) [task:68770]
  - kfence: use power-efficient work queue to run delayed work (Marco Elver) [task:68770]
  - kfence: maximize allocation wait timeout duration (Marco Elver) [task:68770]
  - kfence: await for allocation using wait_event (Marco Elver) [task:68770]
  - kfence: zero guard page after out-of-bounds access (Marco Elver) [task:68770]
  - kfence, x86: fix preemptible warning on KPTI-enabled systems (Marco Elver) [task:68770]
  - kfence: make compatible with kmemleak (Marco Elver) [task:68770]
  - kfence, slab: fix cache_alloc_debugcheck_after() for bulk allocations (Marco Elver) [task:68770]
  - kfence: add test suite (Marco Elver) [task:68770]
  - kfence, Documentation: add KFENCE documentation (Marco Elver) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLUB (Alexander Potapenko) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLAB (Alexander Potapenko) [task:68770]
  - kfence: use pt_regs to generate stack trace on faults (Marco Elver) [task:68770]
  - arm64, kfence: enable KFENCE for ARM64 (Marco Elver) [task:68770]
  - x86, kfence: enable KFENCE for x86 (Alexander Potapenko) [task:68770]
  - mm: add Kernel Electric-Fence infrastructure (Alexander Potapenko) [task:68770]
  - kunit: Don't fail test suites if one of them is empty (Andy Shevchenko)
  - kunit: remove timeout dependence on sysctl_hung_task_timeout_seconds (Alan Maguire) [task:68770]
  - kunit: allow kunit tests to be loaded as a module (Alan Maguire)
  - kunit: hide unexported try-catch interface in try-catch-impl.h (Alan Maguire)
  - kunit: move string-stream.h to lib/kunit (Alan Maguire)
  - kunit: fix failure to build without printk (Brendan Higgins)
  - MAINTAINERS: add entry for KUnit the unit testing framework (Brendan Higgins)
  - Documentation: kunit: add documentation for KUnit (Brendan Higgins)
  - kunit: defconfig: add defconfigs for building KUnit tests (Brendan Higgins)
  - kunit: tool: add Python wrappers for running KUnit tests (Felix Guo)
  - kunit: test: add tests for KUnit managed resources (Avinash Kondareddy)
  - kunit: test: add the concept of assertions (Brendan Higgins)
  - kunit: test: add tests for kunit test abort (Brendan Higgins)
  - kunit: test: add support for test abort (Brendan Higgins)
  - objtool: add kunit_try_catch_throw to the noreturn list (Brendan Higgins)
  - kunit: test: add initial tests (Brendan Higgins)
  - lib: enable building KUnit in lib/ (Brendan Higgins)
  - kunit: test: add the concept of expectations (Brendan Higgins)
  - kunit: test: add assertion printing library (Brendan Higgins)
  - kunit: test: add string_stream a std::stream like string builder (Brendan Higgins)
  - kunit: test: add test resource management API (Brendan Higgins)
  - kunit: test: add KUnit test runner core (Brendan Higgins)
  - include/linux/slab.h: fix sparse warning in kmalloc_type() (Vlastimil Babka)
  - string.h: Add str_has_prefix() helper function (Steven Rostedt (VMware))
  - mm/vmalloc.c: improve vfree() kerneldoc (Andrey Ryabinin)
  - mm, slab: shorten kmalloc cache names for large sizes (Vlastimil Babka)
  - mm, proc: add KReclaimable to /proc/meminfo (Vlastimil Babka)
  - mm: rename and change semantics of nr_indirectly_reclaimable_bytes (Vlastimil Babka)
  - dcache: allocate external names from reclaimable kmalloc caches (Vlastimil Babka)
  - mm, slab/slub: introduce kmalloc-reclaimable caches (Vlastimil Babka)
  - mm, slab: combine kmalloc_caches and kmalloc_dma_caches (Vlastimil Babka)
  - mm/slub.c: switch to bitmap_zalloc() (Andy Shevchenko)
  - selftests: gpio: restructure Makefile (Fathi Boudra) [task:83556]
  - KYLIN: ACPI: Limit max_cstate to 1 on Hygon platforms (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: use IDLE_POLL to disable c-state and idle routine" (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: Can not use IDLE_POLL in hyper" (huhai)
  - KYLIN: config: add support for test_bpf (xiaolinkui) [task:84711]
  - selftests/tls: Add MSG_WAITALL in recv() syscall (Vakul Garg) [task:84719]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-44.0.v2207
changelog:
  - selftest: txtimestamp: fix net ns entry logic (Paolo Pisati) [task:88343]
  - selftests: timestamping: Fix SIOCGSTAMP undeclared build failure (Shuah Khan) [task:88343]
  - selftests: fix timestamping Makefile (Deepa Dinamani) [task:88343]
  - selftests: add missing include unistd (Deepa Dinamani) [task:88343]
  - selftests/txtimestamp: Fix an equals vs assign bug (Dan Carpenter) [task:88343]
  - selftests: add txtimestamp kselftest (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with ipv6 dgram + raw and pf_packet (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with cmsg support (Willem de Bruijn) [task:88343]
  - KYLIN: fs/pipe: Solve the problem of LTP smoketest failure (yijiangshan) [bug:120350]
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)
  - crypto: api - Check spawn->alg under lock in crypto_drop_spawn (Herbert Xu)
  - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [bug:121496] {CVE-2022-1729}
  - floppy: disable FDRAWCMD by default (Willy Tarreau) [bug:121514] {CVE-2022-1836}
  - KYLIN: configs: disable ser_gigaset & gigaset (Jackie Liu)
  - KYLIN: security/kysec: fix code style issue (huanfuxi)
  - KYLIN: sync-stable: discard unwanted newlines (Jackie Liu)
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) [bug:112032] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Halil Pasic) [bug:112032] {CVE-2022-0854}
  - KYLIN: configs: disable CMA all platform default (Jackie Liu) [task:87802]
  - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie) [task:84035]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie) [task:84035]
  - scsi: iscsi: Fix endpoint reuse regression (Mike Christie) [task:84035]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie) [task:84035]
  - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie) [task:84035]
  - scsi: iscsi: Drop temp workq_name (Mike Christie) [task:84035]
  - scsi: iscsi: Use the session workqueue for recovery (Mike Christie) [task:84035]
  - scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding (Mike Christie) [task:84035]
  - scsi: iscsi: Remove iscsi_scan_finished() (Mike Christie) [task:84035]
  - scsi: iscsi: Speed up session unblocking and removal (Mike Christie) [task:84035]
  - scsi: iscsi: Fix recovery and unblocking race (Mike Christie) [task:84035]
  - scsi: iscsi: Fix set_param() handling (Mike Christie) [task:84035]
  - scsi: iscsi: Flush block work before unblock (Mike Christie) [task:84035]
  - scsi: iscsi: Fix in-kernel conn failure handling (Mike Christie) [task:84035]
  - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() (Mike Christie) [task:84035]
  - scsi: iscsi: Force immediate failure during shutdown (Mike Christie) [task:84035]
  - scsi: iscsi: Stop queueing during ep_disconnect (Mike Christie) [task:84035]
  - scsi: iscsi: Fix iSCSI cls conn state (Mike Christie) [task:84035]
  - scsi: iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [task:84035]
  - scsi: iscsi: Optimize work queue flush use (Mike Christie) [task:84035]
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu) [task:84035]
  - scsi: iscsi: Fix deadlock on recovery path during GFP_IO reclaim (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu) [task:84035]
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Perform connection failure entirely in kernel space (Bharath Ravi) [task:84035]
  - kselftest: Minimise dependency of get_size on C library interfaces (Siddhesh Poyarekar)
  - arm64: Make debug exception handlers visible from RCU (Masami Hiramatsu) [task:87978]
  - KYLIN: xfs: fix xfs shutdown filesystem by security_inode_alloc failed (Jackie Liu) [task:85662]
  - KYLIN: Revert "signal: fix kabi changes in struct task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix kabi broken in task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix UAF when free futex_exit_mutex in free_task()" (Jackie Liu)
  - KYLIN: Revert "pid: fix imbalanced calling of cgroup_threadgroup_change_begin/end()" (Jackie Liu)
  - KYLIN: Revert "pid: fix return value when copy_process() failed" (Jackie Liu)
  - KYLIN: gitmessage: drop branch name in patchs comment (Jackie Liu)
  - KYLIN: tools/test: fix arm64 rtnetlink.sh fail. (zhaochenguang) [task:84712]
  - KYLIN: selftesting: update kylinos generic defcfg (zhaochenguang) [task:84712]
  - KYLIN: Revert "bpf, tests: Add tail call test suite" (xiaolinkui) [task:84711]
  - KYLIN: Revert "bpf/tests: Fix error in tail call limit tests" (xiaolinkui) [task:84711]
  - KYLIN: x86: config: add support for test_bpf (xiaolinkui) [task:84711]
  - bpf: test_bpf: add init_net to dev for flow_dissector (Song Liu) [task:84711]
  - UBUNTU: SAUCE: selftests: net: fix "from" match test in fib_rule_tests.sh (Marcelo Henrique Cerri) [task:84716]
  - KYLIN: x86/configs: Align default configuration options based on CentOS and openEuler (leixiang) [task:64045]
  - selftests: Update fib_tests to handle missing ping6 (David Ahern)
  - fib_tests: Add tests for invalid metric on route (David Ahern) [task:84713]
  - fib_tests: Add tests for metrics on routes (David Ahern) [task:84713]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-45.0.v2207
changelog:
  - KYLIN: sync-stable: support setting level (Jackie Liu)
  - tcp: resalt the secret every 10 seconds (Eric Dumazet)
  - Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)
  - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye) [task:91469]
  - Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)
  - KYLIN: arm64: Add kernel parameter for CPU0 hotplug and remove config switch (yijiangshan) [bug:122008]
  - KYLIN: ngbe: Make use of cpumask_local_spread to improve RSS locality (xiaolinkui)
  - KYLIN: ngbe: enable cpumask for wangxun (xiaolinkui)
  - crypto: arm64/ghash-neon - bump priority to 150 (Ard Biesheuvel)
  - crypto: xts - simplify error handling in ->create() (Eric Biggers) [task:90975]
  - crypto: lrw - simplify error handling in create() (Eric Biggers) [task:90975]
  - crypto: arm64/gcm-ce - implement 4 way interleave (Ard Biesheuvel) [task:91194]
  - crypto: aes-generic - drop key expansion routine in favor of library version (Ard Biesheuvel)
  - KYLIN: crypto: zhaoxin-aes - switch to library version of key expansion routine (Jackie Liu)
  - crypto: arm64/aes-ce - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-ccm - switch to AES library (Ard Biesheuvel)
  - crypto: arm/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/ghash - switch to AES library (Ard Biesheuvel) [task:91194]
  - crypto: safexcel/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: cesa/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: padlock/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: x86/aes - drop scalar assembler implementations (Ard Biesheuvel)
  - crypto: x86/aes-ni - switch to generic for fallback and key routines (Ard Biesheuvel)
  - crypto: aes - create AES library based on the fixed time AES code (Ard Biesheuvel)
  - crypto: aes/fixed-time - align key schedule with other implementations (Ard Biesheuvel)
  - crypto: aes - rename local routines to prevent future clashes (Ard Biesheuvel)
  - crypto: arm/aes-ce - cosmetic/whitespace cleanup (Ard Biesheuvel)
  - crypto: arm64/ghash - register PMULL variants as separate algos (Ard Biesheuvel) [task:91194]
  - tcp: increase source port perturb table to 2^16 (Willy Tarreau) [bug:123678] {CVE-2022-32296}
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso) [bug:123674] {CVE-2022-1966}
  - KYLIN: loongarch/config: enable some filesystem for loongarch (wangxuewen) [bug:122374]
  - KYLIN: include: Added an arm64 macro to limit the cacheline (pengcan) [task:85182]
  - KYLIN: scripts: add a script to compile and check kabi automatically (Zhengyuan Liu)
  - KYLIN: lib/raid: check recv algo performance for test (Zhengyuan Liu) [task:90865]
  - lib/raid6: Include <asm/ppc-opcode.h> for VPERMXOR (Paul Menzel) [task:90865]
  - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel) [task:90865]
  - lib/raid6/test: fix multiple definition linking error (Dirk Müller) [task:90865]
  - lib/raid6: Use strict priority ranking for pq gen() benchmarking (Dirk Müller) [task:90865]
  - lib/raid6: skip benchmark of non-chosen xor_syndrome functions (Dirk Müller) [task:90865]
  - lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin) [task:90865]
  - lib/raid6/test: fix build on distros whose /bin/sh is not bash (Masahiro Yamada) [task:90865]
  - md/raid6: fix algorithm choice under larger PAGE_SIZE (Zhengyuan Liu) [task:90865]
  - raid6/test: fix a compilation warning (Zhengyuan Liu) [task:90865]
  - lib/raid6: fix unnecessary rebuild of vpermxor*.c (Masahiro Yamada) [task:90865]
  - lib/raid6: refactor unroll rules with pattern rules (Masahiro Yamada) [task:90865]
  - kbuild: remove redundant target cleaning on failure (Masahiro Yamada) [task:90865]
  - lib/raid6: remove duplicated CFLAGS_REMOVE_altivec8.o (Masahiro Yamada) [task:90865]
  - RAID/s390: remove invalid 'r' inline asm operand modifier (Vasily Gorbik) [task:90865]
  - lib/raid6: arm: optimize away a mask operation in NEON recovery routine (Ard Biesheuvel) [task:90865]
  - lib/raid6: use vdupq_n_u8 to avoid endianness warnings (ndesaulniers@google.com) [task:90865]
  - lib/raid6: add option to skip algo benchmarking (Daniel Verkamp) [task:90865]
  - lib/raid6: sort algos in rough performance order (Daniel Verkamp) [task:90865]
  - lib/raid6: check for assembler SSSE3 support (Daniel Verkamp) [task:90865]
  - lib/raid6: avoid __attribute_const__ redefinition (Daniel Verkamp) [task:90865]
  - lib/raid6: add missing include for raid6test (Daniel Verkamp) [task:90865]
  - Revert "md/raid6: fix algorithm choice under larger PAGE_SIZE" (Zhengyuan Liu) [task:90865]
  - crypto: algapi - make crypto_drop_spawn() a no-op on uninitialized spawns (Eric Biggers) [task:90975]
  - dm: do not use waitqueue for request-based DM (Ming Lei) [task:88844]
  - blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Ming Lei) [task:88844]
  - dm mpath: pass IO start time to path selector (Gabriel Krisman Bertazi) [task:88844]
  - dm rq: remove unused arguments from rq_completed() (Mike Snitzer) [task:88844]
  - blk-mq: change blk_mq_queue_busy() to blk_mq_queue_inflight() (Jens Axboe) [task:88844]
  - KYLIN: Revert "KYLIN: kabi: fix kabi for part->in_flight" (zhanggenjian) [task:88844]
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies) [task:84718]
  - selftests/net: remove min gso test in packet_snd (Dust Li) [task:84718]
  - net: be more gentle about silly gso requests coming from user (Eric Dumazet) [task:84718]
  - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
  - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (Wang Hai)
  - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz)
  - net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)
  - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari) [bug:122252]
  - KYLIN: Optimized unixbench tests of Kunpeng 920 (pengcan) [task:85182]
  - KYLIN: security/kysec: optimize process path getting in ppro monitor (yangzhao)
  - KYLIN: security/kysec: remove script checking in kysec_task_kill() (yangzhao) [bug:119471]
  - KYLIN: KYLIN-MAINTAINER: add kylinos maintainer map (Jackie Liu)
  - KYLIN: optee: add ACPI support for Phytium (huanfuxi) [task:84829]
  - KYLIN: sort-commit-by-upstream: fix output patch's format (Jackie Liu)
  - KYLIN: security/kysec: allow killed by itself in kysec_task_kill() (yangzhao)
  - KYLIN: Revert "KYLIN: security/kysec: fix can kill protect task" (yangzhao) [bug:119840]
  - KYLIN: security/kysec: optimize kysec module code (yangzhao) [task:83026]
  - KYLIN: security/kysec: modify inode security mutex to spinlock (yangzhao) [task:83026]
  - KYLIN: security/kysec: implementation of exectl func in bprm_check hook (yangzhao) [task:83026]
  - KYLIN: Loongarch/pci: Set default vga boot device (Zhenneng Li) [task:88294, bug:120253]
  - KYLIN: vga: move fixup_vga to common code (Zhenneng Li)
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt failed when encrypted size is 64KB. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM3 ccp. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: Only handle interrupts by completion, eliminating by empty queue. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP. (Yabin Li) [task:84397]
  - HYGON: newfeature: Crypto: ccp: Optimize the exchanging context data between crypto and driver. (Yabin Li) [task:84397]
  - KYLIN: sync-stable: add feature find fix commit (Jackie Liu)
  - KYLIN: found-commit-all-deps: Prevent circular lookup dependencies (Jackie Liu)
  - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID (Paolo Bonzini) [bug:121506] {CVE-2022-1789}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-46.0.v2207
changelog:
  - LOONGSON: drm/loongson: Resolve 7A2000 vbltest and pageflip errors (liweitao) [task:90934]
  - LOONGSON: drm/loongson: Fixed 7A1000 fbcon screen failure (liweitao) [task:90934]
  - LOONGSON: drm/loongson: loongson_fbdev_init() should called after hotplug works (Sui Jingfeng) [task:90934]
  - LOONGSON: drm/loongson: fix black screen on netboot install of loongnix (Sui Jingfeng) [task:90934]
  - bpf: Add BTF_KIND_FLOAT to uapi (Ilya Leoshkevich) [task:91016]
  - libbpf: Fix type compatibility check copy-paste error (Andrii Nakryiko) [task:91016]
  - libbpf: Implement enum value-based CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Implement type-based CO-RE relocations support (Andrii Nakryiko) [task:91016]
  - libbpf: Improve relocation ambiguity detection (Andrii Nakryiko) [task:91016]
  - libbpf: Clean up and improve CO-RE reloc logging (Andrii Nakryiko) [task:91016]
  - libbpf: Improve error logging for mismatched BTF kind cases (Andrii Nakryiko) [task:91016]
  - libbpf: Disable -Wswitch-enum compiler warning (Andrii Nakryiko) [task:91016]
  - libbpf: Ignore incompatible types with matching name during CO-RE relocation (Andrii Nakryiko) [task:91016]
  - libbpf: Fix realloc usage in bpf_core_find_cands (Andrii Nakryiko) [task:91016]
  - libbpf: Improve handling of failed CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Support CO-RE relocations for LDX/ST/STX instructions (Andrii Nakryiko) [task:91016]
  - libbpf: Support flexible arrays in CO-RE (Andrii Nakryiko)
  - KYLIN: security/kysec: remove unused variables in kysec_task_kill() (yangzhao)
  - KYLIN: security/kysec: fix bug with .viminfo is set to readonly label (yangzhao) [bug:120931]
  - xfs: Fix false positive lockdep warning with sb_internal & fs_reclaim (Waiman Long) [bug:120083]
  - xfs: rename the speculative block allocation reclaim toggle functions (Darrick J. Wong) [bug:120083]
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Haimin Zhang) [bug:112037] {CVE-2022-0494}
  - KYLIN: sync-stable: force reset author every time (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-47.0.v2207
changelog:
  - afs: Fix infinite loop found by xfstest generic/676 (David Howells)
  - sctp: use call_rcu to free endpoint (Xin Long) [bug:124648] {CVE-2022-20154}
  - mmc: block: fix read single on recovery logic (Christian Löhle) [bug:124636] {CVE-2022-20008}
  - io_uring: clean up ->files grabbing (Pavel Begunkov) [task:91386]
  - io_uring: don't rely on weak ->files references (Jens Axboe) [task:91386]
  - io_uring: enable task/files specific overflow flushing (Jens Axboe) [task:91386]
  - io_uring: return cancelation status from poll/timeout/files handlers (Jens Axboe) [task:91386]
  - io_uring: unconditionally grab req->task (Jens Axboe) [task:91386]
  - io_uring: move dropping of files into separate helper (Jens Axboe) [task:91386]
  - io_uring: allow timeout/poll/files killing to take task into account (Jens Axboe) [task:91386]
  - KYLIN: security/kysec: fix panic when 3adm opened and kysec disabled (yangzhao) [bug:124729]
  - KYLIN: security: fix soft lockup bug in security_socket_getpeersec_stream() when security closed (yangzhao) [bug:124559]
  - KYLIN: security/kysec: remove set default rule in module (huanfuxi) [task:91912, bug:124516, bug:109500]
  - KYLIN: Revert "KYLIN: fs/proc: add PKS marking into /proc/osinfo" (huanfuxi)
  - dma-direct: Force unencrypted DMA under SME for certain DMA masks (Tom Lendacky) [bug:122774]
  - dma-direct: Make DIRECT_MAPPING_ERROR viable for SWIOTLB (Robin Murphy) [bug:122774]
  - MIPS: Fix `dma_alloc_coherent' returning a non-coherent allocation (Maciej W. Rozycki) [bug:122774]
  - swiotlb: don't dip into swiotlb pool for coherent allocations (Christoph Hellwig) [bug:122774]
  - swiotlb: refactor swiotlb_map_page (Christoph Hellwig) [bug:122774]
  - swiotlb: use swiotlb_map_page in swiotlb_map_sg_attrs (Christoph Hellwig) [bug:122774]
  - swiotlb: merge swiotlb_unmap_page and unmap_single (Christoph Hellwig) [bug:122774]
  - swiotlb: remove the overflow buffer (Christoph Hellwig) [bug:122774]
  - dma-mapping: merge direct and noncoherent ops (Christoph Hellwig) [bug:122774]
  - dma-mapping: move the dma_coherent flag to struct device (Christoph Hellwig) [bug:122774]
  - KYLIN: osinfo: show working platform (Jackie Liu)
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (Eric Dumazet)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-48.0.v2207
changelog:
  - KYLIN: config: set yutai phy driver config to M. (zhaochenguang) [task:94950]
  - KYLIN: security/kysec: allow record audit log when kysec enabled (yangzhao)
  - faddr2line: Fix overlapping text section failures, the sequel (Josh Poimboeuf)
  - scripts/faddr2line: Fix overlapping text section failures (Josh Poimboeuf)
  - KYLIN: kysec: fix potential out-of-bounds access issues of name (Jackie Liu)
  - KYLIN: kysec: Use pr_debug instead of manual implementation (Jackie Liu)
  - KYLIN: kysec: Remove unnecessary zeroing (Jackie Liu)
  - KYLIN: kysec: use pr_fmt auto generate prefix (Jackie Liu)
  - KYLIN: kysec: adjust kysec disabled state of hooks (Jackie Liu)
  - KYLIN: kysec: exit the thread when kysec is closed (Jackie Liu)
  - KYLIN: osinfo: make uptime pretty for human beings (Jackie Liu)
  - x86/speculation/mmio: Print SMT warning (Josh Poimboeuf) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add another Alder Lake CPU to the Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - cpu/speculation: Add prototype for cpu_show_srbds() (Guenter Roeck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob (Sean Christopherson) [bug:125047]
  - KVM: VMX: fix crash cleanup when KVM wasn't used (Vitaly Kuznetsov) [bug:125047]
  - KVM: s390: vsie: Fix delivery of addressing exceptions (David Hildenbrand) [bug:125047]
  - KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (David Hildenbrand) [bug:125047]
  - KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support (Sean Christopherson) [bug:125047]
  - KVM: nVMX: Properly handle userspace interrupt window request (Sean Christopherson) [bug:125047]
  - KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (Sean Christopherson) [bug:125047]
  - KVM: x86: Allocate new rmap and large page tracking when moving memslot (Sean Christopherson) [bug:125047]
  - x86/cpu: Add Jasper Lake to Intel family (Zhang Rui) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Elkhart Lake to Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs (Sean Christopherson) [bug:125047]
  - KVM: VMX: Zero out *all* general purpose registers after VM-Exit (Sean Christopherson) [bug:125047]
  - KYLIN: phy:fix fiber and utp can't up at the same time (zhaochenguang) [task:69009]
  - KYLIN: crypto: add sm2 module (yushanshan) [bug:125310]
  - KYLIN: config: enable logitech wheels configuration and force feedback support (Jackie Liu) [task:94256]
  - KYLIN: kernel.spec: fix upgrade from SP1 to SP3 (Jackie Liu) [bug:124466]
  - xfs: cover the log during log quiesce (Brian Foster) [task:82242]
  - xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster) [task:82242]
  - xfs: make use of the l_targ field in struct xlog (Christoph Hellwig) [task:82242]
  - xfs: separate log cleaning from log quiesce (Brian Foster) [task:82242]
  - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [task:82242]
  - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [task:82242]
  - xfs: ratelimit unmount time per-buffer I/O error alert (Brian Foster) [task:82242]
  - KYLIN: mod-blacklist.sh: drop blacklist of nft_chain_*.ko (Jackie Liu)
  - KYLIN: backport-tools: add convert-to-lts tool (Jackie Liu)
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace (Michael Ellerman) [bug:124640] {CVE-2022-32981}
  - libbpf: Avoid false unuinitialized variable warning in bpf_core_apply_relo (Andrii Nakryiko) [task:93705]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-49.0.v2207
changelog:
  - fs: sysfs_emit: Remove PAGE_SIZE alignment check (Lucas Wei)
  - workqueue: Add RCU annotation for pwq list walk (Sebastian Andrzej Siewior)
  - xfs: fix unused log variable in xfs_log_cover() (Brian Foster)
  - netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name (Eric Dumazet) [task:95868]
  - netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup() (Qian Cai) [task:95868]
  - netfilter: nf_tables: fix infinite loop when expr is not available (Florian Westphal) [task:95868]
  - netfilter: nf_tables: autoload modules from the abort path (Pablo Neira Ayuso) [task:95868]
  - netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks (Florian Westphal) [task:95868]
  - rcu: Add support for consolidated-RCU reader checking (Joel Fernandes (Google))
  - rcu: Remove redundant debug_locks check in rcu_read_lock_sched_held() (Joel Fernandes (Google))
  - treewide: Rename rcu_dereference_raw_notrace() to _check() (Joel Fernandes (Google))
  - netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module (Pablo Neira Ayuso)
  - netfilter: nf_tables: force module load in case select_ops() returns -EAGAIN (Pablo Neira Ayuso)
  - netfilter: nf_tables: add nft_expr_type_request_module() (Pablo Neira Ayuso)
  - ftrace: Create new ftrace_internal.h header (Steven Rostedt (VMware))
  - KYLIN: sched: Improve spawn test of UnixBench (liwanwu) [bug:119995]
  - KYLIN: net: socket server performance optimization (luoqing) [bug:120014]
  - KYLIN: security/kysec: reduce repeated judgments in kysec_get_status() (yangzhao)
  - KYLIN: fs: Optimize unixbench's file copy test (pengcan) [bug:121719]
  - KYLIN: usb: Improves USB2.0 write performance for External HDD device(0x0b05:0x1932) (Hu Xiaoying) [task:89793]
  - sched/fair: Add document for burstable CFS bandwidth (Huaixin Chang) [task:94280]
  - sched/fair: Add cfs bandwidth burst statistics (Huaixin Chang) [task:94280]
  - sched/fair: Introduce the burstable CFS controller (Huaixin Chang) [task:94280]
  - sched: Defend cfs and rt bandwidth quota against overflow (Huaixin Chang) [task:94280]
  - KYLIN: add linux_headers_install.sh script to build out of tree modules (George Guo) [task:94951]
  - KYLIN: loongarch/config: support parport as module (wangxuewen) [task:95203]
  - KYLIN: io_uring: fix missing remove ITER_KVEC (Jackie Liu) [task:96351]
  - KYLIN: ft-hda: solve ft-hda losing when reboot (songxiebing) [task:93001]
  - hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu) [bug:56117]
  - io_uring: fix ignoring xa_store errors (Pavel Begunkov) [task:95530]
  - io_uring: Fix XArray usage in io_uring_add_task_file (Matthew Wilcox (Oracle)) [task:95530]
  - io_uring: don't run task work on an exiting task (Jens Axboe) [task:95530]
  - task_work: only grab task signal lock when needed (Jens Axboe) [task:95530]
  - io_uring: no need to call xa_destroy() on empty xarray (Jens Axboe) [task:96230]
  - tc-tests: test denial of 'goto chain' for exceed traffic in police.json (Davide Caratti)
  - xfs: don't reserve per-AG space for an internal log (Darrick J. Wong) [task:82242]
  - KYLIN: Revert "KYLIN: logo: Change YHKYLIN logo to KYLINSOFT." (Jackie Liu) [task:74569]
  - KYLIN: kysec: Optimize the operation of kysec under file paths (Jackie Liu)
  - KYLIN: kysec: Use static_key instead of unlikely to further optimize efficiency (Jackie Liu)
  - KYLIN: loongarch/config: Add support for two filesystems on loongarch (wangxuewen) [bug:122374]
  - xhci: Keep interrupt disabled in initialization until host is running. (Hongyu Xie) [task:95460]
  - KYLIN: kysec: Fix kysec crash due to kysec_is_disabled bug (Jackie Liu) [task:95345]
  - KYLIN: kysec: Optimize kysec_is_disabled branch prediction (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-50.0.v2207
changelog:
  - KYLIN: fix errors when run ./linux-headers-$version.sh (George Guo) [task:94951]
  - KYLIN: net: replace cpumask_equal with cpumask_subset (xiaolinkui) [task:97876]
  - KYLIN: loongarch: fix io_uring series system call exception (Enze Li) [bug:124889]
  - selftests/x86/mov_ss_trap: Fix the SYSENTER test (Andy Lutomirski)
  - KYLIN: x86: debug_defconfig: more netfilter test module (Jackie Liu)
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:94748]
  - io_uring: Convert advanced XArray uses to the normal API (Matthew Wilcox (Oracle)) [task:98126]
  - exec: Move io_uring_task_cancel after the point of no return (Eric W. Biederman) [task:97817]
  - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI (Thomas Gleixner) [task:87159]
  - clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu) [task:87159]
  - futex: Adjust absolute futex timeouts with per time namespace offset (Andrei Vagin) [task:87159]
  - arm64: vdso32: make vdso32 install conditional (Frank van der Linden) [task:87159]
  - ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd) [task:87159]
  - vdso/treewide: Add vdso_data pointer argument to __arch_get_hw_counter() (Thomas Gleixner) [task:87159]
  - timekeeping/vsyscall: Provide vdso_update_begin/end() (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow to add architecture-specific vdso data (Sven Schnelle) [task:87159]
  - arm64: enable time namespace support (Andrei Vagin) [task:87159]
  - arm64/vdso: Restrict splitting VVAR VMA (Andrei Vagin) [task:87159]
  - arm64/vdso: Handle faults on timens page (Andrei Vagin) [task:87159]
  - arm64/vdso: Add time namespace page (Andrei Vagin) [task:87159]
  - arm64/vdso: Zap vvar pages when switching to a time namespace (Andrei Vagin) [task:87159]
  - arm64/vdso: use the fault callback to map vvar pages (Andrei Vagin) [task:87159]
  - futex: Remove unused or redundant includes (André Almeida) [task:87159]
  - arm64: compat: Allow 32-bit vdso and sigpage to co-exist (Will Deacon) [task:87159]
  - mmap locking API: initial implementation as rwsem wrappers (Michel Lespinasse) [task:87159]
  - x86/vdso: Unbreak paravirt VDSO clocks (Thomas Gleixner) [task:87159]
  - lib/vdso: Provide sanity check for cycles (again) (Thomas Gleixner) [task:87159]
  - clocksource: Remove obsolete ifdef (Thomas Gleixner) [task:87159]
  - selftests/timens: handle a case when alarm clocks are not supported (Andrei Vagin) [task:87159]
  - arm64: vdso: Add --eh-frame-hdr to ldflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Add -fasynchronous-unwind-tables to cflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: use consistent 'map' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: use consistent 'abi' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: simplify arch_vdso_type ifdeffery (Mark Rutland) [task:87159]
  - arm64: vdso: remove aarch32_vdso_pages[] (Mark Rutland) [task:87159]
  - arm64: vdso: Add '-Bsymbolic' to ldflags (Vincenzo Frascino) [task:87159]
  - kbuild: fix DT binding schema rule again to avoid needless rebuilds (Masahiro Yamada) [task:87159]
  - x86/vdso/vdso2c: Convert iterators to unsigned (Dmitry Safonov) [task:87159]
  - x86/vdso/vdso2c: Correct error messages on file open (Dmitry Safonov) [task:87159]
  - vdso/datapage: Use correct clock mode name in comment (Christian Brauner) [task:87159]
  - proc, time/namespace: Show clock symbolic names in /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - arm64: vdso: don't free unallocated pages (Mark Rutland) [task:87159]
  - time/namespace: Add max_time_namespaces ucount (Dmitry Safonov) [task:87159]
  - time/namespace: Fix time_for_children symlink (Michael Kerrisk (man-pages)) [task:87159]
  - um: Fix header inclusion (Vincenzo Frascino) [task:87159]
  - lib/vdso: Enable common headers (Vincenzo Frascino) [task:87159]
  - x86/vdso: Enable x86 to use common headers (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/processor.h (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Code clean up (Vincenzo Frascino) [task:87159]
  - linux/elfnote.h: Replace elf.h with UAPI equivalent (Vincenzo Frascino) [task:87159]
  - common: Introduce processor.h (Vincenzo Frascino) [task:87159]
  - linux/ktime.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/jiffies.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time32.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/math64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/clocksource.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - x86: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - linux/limits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/bits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/const.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Fix syscall number of compat_clock_getres (Vincenzo Frascino) [task:87159]
  - selftests/timens: Remove duplicated include <time.h> (YueHaibing) [task:87159]
  - sys/sysinfo: Respect boottime inside time namespace (Cyril Hrubis) [task:87159]
  - kbuild: fix DT binding schema rule to detect command line changes (Masahiro Yamada) [task:87159]
  - clocksource/drivers/arm_arch_timer: Fix vDSO clockmode when vDSO disabled (Vincenzo Frascino) [task:87159]
  - lib/vdso: Allow architectures to provide the vdso data pointer (Christophe Leroy) [task:87159]
  - lib/vdso: Allow architectures to override the ns shift operation (Christophe Leroy) [task:87159]
  - lib/vdso: Allow fixed clock mode (Christophe Leroy) [task:87159]
  - lib/vdso: Move VCLOCK_TIMENS to vdso_clock_modes (Thomas Gleixner) [task:87159]
  - lib/vdso: Avoid highres update if clocksource is not VDSO capable (Thomas Gleixner) [task:87159]
  - lib/vdso: Cleanup clock mode storage leftovers (Thomas Gleixner) [task:87159]
  - ARM/arm64: vdso: Use common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Use generic VDSO clock mode storage (Thomas Gleixner) [task:87159]
  - clocksource: Add common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Move VDSO clocksource state tracking to callback (Thomas Gleixner) [task:87159]
  - clocksource: Cleanup struct clocksource and documentation (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow the high resolution parts to be compiled out (Thomas Gleixner) [task:87159]
  - x86/vdso: Mark the TSC clocksource path likely (Thomas Gleixner) [task:87159]
  - selftests: use LDLIBS for libraries instead of LDFLAGS (Dmitry Safonov)
  - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [task:87159]
  - MAINTAINERS: Correct path to time namespace source file (Dmitry Safonov) [task:87159]
  - MIPS: syscalls: fix indentation of the 'SYSNR' message (Alexander Lobakin) [task:87159]
  - lib/vdso: Update coarse timekeeper unconditionally (Thomas Gleixner) [task:87159]
  - lib/vdso: Make __arch_update_vdso_data() logic understandable (Thomas Gleixner) [task:87159]
  - lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - selftests/timens: Check for right timens offsets after fork and exec (Andrei Vagin) [task:87159]
  - selftests/timens: Add a simple perf test for clock_gettime() (Andrei Vagin) [task:87159]
  - selftests/timens: Add timer offsets test (Andrei Vagin) [task:87159]
  - selftests/timens: Add procfs selftest (Dmitry Safonov) [task:87159]
  - selftests/timens: Add a test for clock_nanosleep() (Andrei Vagin) [task:87159]
  - selftests/timens: Add a test for timerfd (Andrei Vagin) [task:87159]
  - selftests/timens: Add Time Namespace test for supported clocks (Dmitry Safonov) [task:87159]
  - fs/proc: Introduce /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - x86/vdso: Zap vvar pages when switching to a time namespace (Dmitry Safonov) [task:87159]
  - x86/vdso: On timens page fault prefault also VVAR page (Dmitry Safonov) [task:87159]
  - x86/vdso: Handle faults on timens page (Dmitry Safonov) [task:87159]
  - time: Allocate per-timens vvar page (Dmitry Safonov) [task:87159]
  - x86/vdso: Add time napespace page (Dmitry Safonov) [task:87159]
  - x86/vdso: Provide vdso_data offset on vvar_page (Dmitry Safonov) [task:87159]
  - lib/vdso: Prepare for time namespace support (Thomas Gleixner) [task:87159]
  - x86/vdso: Restrict splitting VVAR VMA (Dmitry Safonov) [task:87159]
  - fs/proc: Respect boottime inside time namespace for /proc/uptime (Dmitry Safonov) [task:87159]
  - posix-timers: Make clock_nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - hrtimers: Prepare hrtimer_nanosleep() for time namespaces (Andrei Vagin) [task:87159]
  - alarmtimer: Make nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - posix-timers: Make timer_settime() time namespace aware (Andrei Vagin) [task:87159]
  - timerfd: Make timerfd_settime() time namespace aware (Andrei Vagin) [task:87159]
  - time: Add do_timens_ktime_to_host() helper (Andrei Vagin) [task:87159]
  - posix-clocks: Wire up clock_gettime() with timens offsets (Andrei Vagin) [task:87159]
  - posix-timers: Use clock_get_ktime() in common_timer_get() (Andrei Vagin) [task:87159]
  - posix-clocks: Introduce clock_get_ktime() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Provide get_timespec() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Rename gettime() callback to get_ktime() (Andrei Vagin) [task:87159]
  - posix-clocks: Rename .clock_get_timespec() callbacks accordingly (Andrei Vagin) [task:87159]
  - posix-clocks: Rename the clock_get() callback to clock_get_timespec() (Andrei Vagin) [task:87159]
  - time: Add timens_offsets to be used for tasks in time namespace (Andrei Vagin) [task:87159]
  - ns: Introduce Time Namespace (Andrei Vagin) [task:87159]
  - lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin) [task:87159]
  - lib/vdso: Avoid duplication in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - lib/vdso: Add unlikely() hint into vdso_read_begin() (Andrei Vagin) [task:87159]
  - lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy) [task:87159]
  - x86/vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove checks on return value for 32 bit vDSO (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Build 32 bit specific functions in the right context (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Expose BUILD_VDSO32 (Vincenzo Frascino) [task:87159]
  - raid6/test: fix a compilation error (Zhengyuan Liu) [task:87159]
  - lib/vdso: Make __cvdso_clock_getres() static (Vincenzo Frascino) [task:87159]
  - y2038: vdso: change time_t to __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - y2038: add __kernel_old_timespec and __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - selftests: gen_kselftest_tar.sh: Do not clobber kselftest/ (Kees Cook) [task:87159]
  - selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [task:87159]
  - timekeeping/vsyscall: Update VDSO data unconditionally (Huacai Chen) [task:87159]
  - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [task:87159]
  - lib/vdso: Make clock_getres() POSIX compliant again (Thomas Gleixner) [task:87159]
  - selftests: Add kselftest-all and kselftest-install targets (Shuah Khan) [task:87159]
  - um: Fix VDSO compiler warning (Johannes Berg) [task:87159]
  - ipc: fix sparc64 ipc() wrapper (Arnd Bergmann) [task:87159]
  - timekeeping/vsyscall: Prevent math overflow in BOOTTIME update (Thomas Gleixner) [task:87159]
  - selftests: use "$(MAKE)" instead of "make" (Ilya Leoshkevich) [task:87159]
  - arm64: compat: vdso: Use legacy syscalls as fallback (Thomas Gleixner) [task:87159]
  - x86/vdso/32: Use 32bit syscall fallback (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Provide legacy syscall fallbacks (Thomas Gleixner) [task:87159]
  - lib/vdso: Move fallback invocation to the callers (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Remove inconsistent NULL pointer checks (Thomas Gleixner) [task:87159]
  - kselftest: save-and-restore errno to allow for %m formatting (Aleksa Sarai)
  - arm64: vdso: Cleanup Makefiles (Vincenzo Frascino) [task:87159]
  - arm64: vdso: fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - linux/bits.h: make BIT(), GENMASK(), and friends available in assembly (Masahiro Yamada) [task:87159]
  - x86/vdso: Fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - timekeeping/vsyscall: Use __iter_div_u64_rem() (Arnd Bergmann) [task:87159]
  - arm64: compat: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - arm64: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Make delta calculation work correctly (Thomas Gleixner) [task:87159]
  - arm64: compat: No need for pre-ARMv7 barriers on an ARMv8 system (Catalin Marinas) [task:87159]
  - arm64: vdso: Remove unnecessary asm-offsets.c definitions (Catalin Marinas) [task:87159]
  - vdso: Remove superfluous #ifdef __KERNEL__ in vdso/datapage.h (Catalin Marinas) [task:87159]
  - x86/vdso: Add clock_gettime64() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Add clock_getres() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Switch to generic vDSO implementation (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Enable vDSO compat support (Vincenzo Frascino) [task:87159]
  - arm64: compat: Get sigreturn trampolines from vDSO (Vincenzo Frascino) [task:87159]
  - arm64: elf: VDSO code page discovery (Vincenzo Frascino) [task:87159]
  - arm64: compat: VDSO setup for compat layer (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Refactor vDSO code (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Generate asm offsets for signals (Vincenzo Frascino) [task:87159]
  - arm64: compat: Expose signal related structures (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add missing syscall numbers (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Build vDSO with -ffixed-x18 (Peter Collingbourne) [task:87159]
  - arm64: vdso: Substitute gettimeofday() with C implementation (Vincenzo Frascino) [task:87159]
  - timekeeping: Provide a generic update_vsyscall() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Add compat support (Vincenzo Frascino) [task:87159]
  - lib/vdso: Provide generic VDSO implementation (Vincenzo Frascino) [task:87159]
  - vdso: Define standardized vdso_datapage (Vincenzo Frascino) [task:87159]
  - hrtimer: Split out hrtimer defines into separate header (Vincenzo Frascino) [task:87159]
  - clocksource/drivers/arm_arch_timer: Don't trace count reader functions (Julien Thierry) [task:87159]
  - selftests: vm: Fix test build failure when built by itself (Shuah Khan) [task:87159]
  - tests: fix pidfd-test compilation (Christian Brauner) [task:87159]
  - arm64: arch_timer: mark functions as __always_inline (Anders Roxell) [task:87159]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 223 (Thomas Gleixner) [task:87159]
  - selftests: Remove forced unbuffering for test running (Kees Cook) [task:87159]
  - arm64: vdso: Explicitly add build-id option (Laura Abbott) [task:87159]
  - selftests: fix bpf build/test workflow regression when KBUILD_OUTPUT is set (Shuah Khan) [task:87159]
  - selftests: fix install target to use default install path (Shuah Khan) [task:87159]
  - x86/vdso: Remove hpet_page from vDSO (Jia Zhang) [task:87159]
  - clocksource/arm_arch_timer: Use arch_timer_read_counter to access stable counters (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Remove use of workaround static key (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Drop use of static key in arch_timer_reg_read_stable (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Direcly assign set_next_event workaround (Marc Zyngier) [task:87159]
  - arm64: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - watchdog/sbsa: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - arm64: arch_timer: Ensure counter register reads occur with seqlock held (Will Deacon) [task:87159]
  - selftests: Add test plan API to kselftest.h and adjust callers (Kees Cook)
  - selftests: Move test output to diagnostic lines (Kees Cook)
  - selftests: Distinguish between missing and non-executable (Kees Cook)
  - selftests: Add plan line and fix result line syntax (Kees Cook)
  - selftests: Extract logic for multiple test runs (Kees Cook)
  - selftests: Use runner.sh for emit targets (Kees Cook)
  - selftests: Extract single-test shell logic from lib.mk (Kees Cook)
  - arm64: compat: Add KUSER_HELPERS config option (Vincenzo Frascino) [task:87159]
  - arm64: compat: Refactor aarch32_alloc_vdso_pages() (Vincenzo Frascino) [task:87159]
  - arm64: compat: Split kuser32 (Vincenzo Frascino) [task:87159]
  - arm64: compat: Alloc separate pages for vectors and sigpage (Vincenzo Frascino) [task:87159]
  - selftests: fix headers_install circular dependency (Shuah Khan) [task:87159]
  - x86/vdso: Rename variable to fix -Wshadow warning (Leonardo Brás) [task:87159]
  - arm64: vdso: Fix clock_getres() for CLOCK_REALTIME (Vincenzo Frascino) [task:87159]
  - arch: add pidfd and io_uring syscalls everywhere (Arnd Bergmann)
  - arm64: vdso: use $(LD) instead of $(CC) to link VDSO (Masahiro Yamada) [task:87159]
  - arm64: vdso: fix and clean-up Makefile (Masahiro Yamada) [task:87159]
  - perf tools: Update x86's syscall_64.tbl, no change in tools/perf behaviour (Arnaldo Carvalho de Melo) [task:87159]
  - linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h> (Masahiro Yamada) [task:87159]
  - linux/kernel.h: use 'short' to define USHRT_MAX, SHRT_MAX, SHRT_MIN (Masahiro Yamada) [task:87159]
  - selftests: add tests for pidfd_send_signal() (Christian Brauner)
  - checksyscalls: fix up mq_timedreceive and stat exceptions (Arnd Bergmann) [task:87159]
  - time: Add time_types.h (Deepa Dinamani) [task:87159]
  - sh: fix build error for invisible CONFIG_BUILTIN_DTB_SOURCE (Masahiro Yamada) [task:87159]
  - y2038: add 64-bit time_t syscalls to all 32-bit architectures (Arnd Bergmann)
  - socket: Add struct __kernel_sock_timeval (Deepa Dinamani) [task:87159]
  - arch: sparc: Override struct __kernel_old_timeval (Deepa Dinamani) [task:87159]
  - kbuild: add real-prereqs shorthand for $(filter-out FORCE,$^) (Masahiro Yamada) [task:87159]
  - kbuild: simplify rules of data compression with size appending (Masahiro Yamada) [task:87159]
  - alpha: add generic get{eg,eu,g,p,u,pp}id() syscalls (Arnd Bergmann)
  - alpha: add standard statfs64/fstatfs64 syscalls (Arnd Bergmann)
  - sparc64: fix sparc_ipc type conversion (Arnd Bergmann)
  - sh: remove duplicate unistd_32.h file (Arnd Bergmann)
  - arch: add pkey and rseq syscall numbers everywhere (Arnd Bergmann)
  - ipc: rename old-style shmctl/semctl/msgctl syscalls (Arnd Bergmann)
  - arch: add split IPC system calls where needed (Arnd Bergmann)
  - sh: add statx system call (Arnd Bergmann)
  - m68k: assign syscall number for seccomp (Arnd Bergmann)
  - ARM: add kexec_file_load system call number (Arnd Bergmann)
  - ARM: add migrate_pages() system call (Arnd Bergmann)
  - alpha: wire up io_pgetevents system call (Arnd Bergmann)
  - ia64: assign syscall numbers for perf and seccomp (Arnd Bergmann)
  - ia64: add statx and io_pgetevents syscalls (Arnd Bergmann)
  - alpha: update syscall macro definitions (Arnd Bergmann)
  - s390: fix system call tracing (Heiko Carstens) [task:87159]
  - arm64: asm-offsets: remove unused offsets (Andrew Murray) [task:87159]
  - s390: remove compat_wrapper.c (Arnd Bergmann)
  - s390: autogenerate compat syscall wrappers (Arnd Bergmann)
  - s390: use generic UID16 implementation (Arnd Bergmann)
  - ipc: introduce ksys_ipc()/compat_ksys_ipc() for s390 (Arnd Bergmann)
  - s390: open-code s390_personality syscall (Arnd Bergmann)
  - kbuild: remove unused baseprereq (Masahiro Yamada) [task:87159]
  - kbuild: clean up rule_dtc_dt_yaml (Masahiro Yamada) [task:87159]
  - tools headers uapi: Sync copy of asm-generic/unistd.h with the kernel sources (Arnaldo Carvalho de Melo) [task:87159]
  - arm64: compat: Hook up io_pgetevents() for 32-bit tasks (Will Deacon)
  - arm64: replace arm64-obj-* in Makefile with obj-* (Masahiro Yamada) [task:87159]
  - alpha: generate uapi header and syscall table header files (Firoz Khan)
  - alpha: add system call table generation support (Firoz Khan)
  - alpha: add __NR_syscalls along with NR_SYSCALLS (Firoz Khan)
  - alpha: remove CONFIG_OSF4_COMPAT flag from syscall table (Firoz Khan)
  - alpha: move __IGNORE* entries to non uapi header (Firoz Khan)
  - powerpc: add system call table generation support (Firoz Khan)
  - sh: add system call table generation support (Firoz Khan)
  - sh: add __NR_syscalls along with NR_syscalls (Firoz Khan)
  - mips: add system call table generation support (Firoz Khan)
  - seccomp, s390: fix build for syscall type change (Tycho Andersen)
  - kbuild: Add support for DT binding schema checks (Rob Herring) [task:87159]
  - parisc: add system call table generation support (Firoz Khan)
  - parisc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - asm-generic: add kexec_file_load system call to unistd.h (AKASHI Takahiro)
  - x86/vdso: Remove obsolete "fake section table" reservation (Sean Christopherson) [task:87159]
  - m68k: Add system call table generation support (Firoz Khan)
  - xtensa: add system call table generation support (Firoz Khan)
  - riscv: add asm/unistd.h UAPI header (David Abdurachmanov) [task:87159]
  - sparc: add system call table generation support (Firoz Khan)
  - sparc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - microblaze: add system call table generation support (Firoz Khan)
  - ia64: add system call table generation support (Firoz Khan)
  - builddeb: Fix inclusion of dtbs in debian package (Rob Herring) [task:87159]
  - tools arch uapi: Update asm-generic/unistd.h and arm64 unistd.h copies (Arnaldo Carvalho de Melo) [task:87159]
  - x86: convert vdso to use vm_fault_t (Matthew Wilcox) [task:87159]
  - mm: introduce vmf_insert_pfn_prot() (Matthew Wilcox) [task:87978]
  - mm: remove vm_insert_mixed() (Matthew Wilcox) [task:87978]
  - cramfs: convert to use vmf_insert_mixed (Nicolas Pitre) [task:87978]
  - mm: convert to use vm_fault_t (Souptick Joarder) [task:87978]
  - kbuild: remove unneeded link_multi_deps (Masahiro Yamada) [task:87159]
  - x86/vdso: Initialize the CPU/node NR segment descriptor earlier (Chang S. Bae) [task:87159]
  - x86/vdso: Introduce helper functions for CPU and node number (Chang S. Bae) [task:87159]
  - x86/segments/64: Rename the GDT PER_CPU entry to CPU_NUMBER (Chang S. Bae) [task:87159]
  - x86/vdso: Rearrange do_hres() to improve code generation (Andy Lutomirski) [task:87159]
  - x86/vdso: Document vgtod_ts better (Andy Lutomirski) [task:87159]
  - x86/vdso: Remove "memory" clobbers in the vDSO syscall fallbacks (Andy Lutomirski) [task:87159]
  - x66/vdso: Add CLOCK_TAI support (Thomas Gleixner) [task:87159]
  - x86/vdso: Move cycle_last handling into the caller (Thomas Gleixner) [task:87159]
  - x86/vdso: Simplify the invalid vclock case (Thomas Gleixner) [task:87159]
  - x86/vdso: Replace the clockid switch case (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse coarse functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse high resolution functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Introduce and use vgtod_ts (Thomas Gleixner) [task:87159]
  - x86/vdso: Use unsigned int consistently for vsyscall_gtod_data:: Seq (Thomas Gleixner) [task:87159]
  - x86/vdso: Enforce 64bit clocksource (Thomas Gleixner) [task:87159]
  - x86/time: Implement clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - clocksource: Provide clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - kbuild: consolidate Devicetree dtb build rules (Rob Herring) [task:87159]
  - nios2: use common rules to build built-in dtb (Rob Herring) [task:87159]
  - powerpc: build .dtb files in dts directory (Rob Herring) [task:87159]
  - nios2: build .dtb files in dts directory (Rob Herring) [task:87159]
  - scripts/dtc: Update to upstream version v1.4.7-14-gc86da84d30e4 (Rob Herring) [task:87159]
  - RISC-V: Request newstat syscalls (Guenter Roeck) [task:87159]
  - y2038: socket: Change recvmmsg to use __kernel_timespec (Arnd Bergmann) [task:87159]
  - y2038: Remove newstat family from default syscall set (Arnd Bergmann)
  - y2038: globally rename compat_time to old_time32 (Arnd Bergmann) [task:87978]
  - alpha: use alpha_ni_syscall only for syscall zero (Al Viro)
  - KYLIN: Revert "arm64: arch_timer: Disable CNTVCT_EL0 trap if workaround is enabled" (Jackie Liu)
  - KYLIN: Revert "arm64:vdso: Rewrite gettimeofday into C." (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: Ensure counter register reads occur with seqlock held" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: Fix clock_getres() for CLOCK_REALTIME" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: do cntvct workaround in the VDSO" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: move vdso_fix into struct vdso_data" (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: only do cntvct workaround on VDSO path on D05" (Jackie Liu)
  - KYLIN: Revert "KYLIN: arm/arch_timer: fix build missing CONFIG_HISILICON_ERRATUM_161010101" (Jackie Liu)
  - KYLIN: Revert "clocksource/drivers/arch_timer: Fix vdso_fix compile error for arm32" (Jackie Liu)
  - KYLIN: Revert "arm64:ilp32: add vdso-ilp32 and use for signal return" (Jackie Liu)
  - netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c. (David Wilder) [task:95566]
  - netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c. (David Wilder) [task:95566]
  - netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netns: restore ops before calling ops_exit_list (Li RongQing) [task:95566]
  - netns: add pre_exit method to struct pernet_operations (Eric Dumazet) [task:95566]
  - KYLIN: scsi: Add SCSI_DH* config for loongarch. (cuitao) [task:92151]
  - KYLIN: security/kysec: update kysec_mempro module (huanfuxi) [bug:128578]
  - drm/ast: Create the driver for ASPEED proprietory Display-Port (KuoHsiang Chou) [task:94616]
  - drm/ast: Create threshold values for AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Enable the supporting of wide screen on AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Create chip AST2600 (KuoHsiang Chou) [task:94616]
  - NETSWIFT :txgbe: update the driver to 1.3.2 (luoqing) [task:92912]
  - NETSWIFT :txgbe: FIX : fix compile in linux 3.10 (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: ADD : add flash unlock when upgrade image (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: FIX : fix some kr flow (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: fix bug when 1820 is in 1G sfp speed mode, link partner (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: FIX : fix vxlan/geneve port not set to hardware (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: update the driver to 1.2.2 (luoqing) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt 101 mode support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: FIX : fix compile in ubuntu 21.10 (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: busfix linkspeed setup failed when link is down (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: ADD-add-link-retry-switch-to-configure (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt8531s id support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: read flash from flash only in phy init (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: ADD : add retry use an err bit (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: CH : use sw configure efuse (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix phy set to force 100M autoneg off with partner (zhengzhenpeng) [task:92912]
  - WIREGUARD-LINUX-COMPAT: net: WireGuard secure network tunnel (Jason A. Donenfeld) [task:90253]
  - vt: drop old FONT ioctls (Jiri Slaby) [bug:128721] {CVE-2021-33656}
  - KYLIN: debug_defconfig: enable CONFIG_UBSAN (Jackie Liu)
  - KYLIN: sync-stable: fix wrong exit status when failed (Jackie Liu)
  - crypto: hisilicon delete invlaid api and config (Yu'an Wang) [bug:122239]
  - crypto: hisilicon - add CRYPTO_TFM_REQ_MAY_BACKLOG flag judge in sec_process() (Yu'an Wang) [bug:122239]
  - uacce: misc fixes (Yu'an Wang) [bug:122239]
  - misc/uacce: fixup out-of-bounds array write (Yu'an Wang) [bug:122239]
  - crypto/sec: add aead support for user-side (Yu'an Wang) [bug:122239]
  - UACCE: backport from mainline (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-Cap block size at 2^31 (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-hpre add req check when callback (Yu'an Wang) [bug:122239]
  - crypto: hisilicon- count send_ref when sending bd (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-enhancement of qm DFX (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-memory management optimization (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix packet loss for acc (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: modify driver to adapt dm-crypt (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: reinforce reset failure scene (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: fix decompress a empty file (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: dfx for IO operation and delay (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: Overall optimization of sec code (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize the maximum number of VF and delete invalid addr (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize set hw_reset flag logic for user (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup the problem of wrong judgement of used (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: Move all the same logic functions of hisilicon crypto to qm (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix the way judge whether q stop in user space (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup compilation dependency (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/rde: optimize debug regs clear logic (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: change sec_control reg config (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: add likely and unlikey in result judgement (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: optimize key process before free (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: remove invalid addr print (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: use offset fields in sqe to avoid SG_SPLIT (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix wrong number of sg elements after dma map (Yu'an Wang) [bug:122239]
  - uacce: Remove uacce mode 1 relatives (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon: Remove uacce mode 1 logic below hisilicon (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon/sec2: add initial configuration in sec_engine_init (Yu'an Wang) [bug:122239]
  - KYLIN:crypto/hisilicon: The driver version is aligned to the Euler kernel (liyouhong) [bug:122239]
  - EULER: memcg: update the child's qos_level synchronously in memcg_qos_write() (Jing Xiangfeng) [task:85149]
  - EULER: memcg: Add static key for memcg priority (Jing Xiangfeng) [task:85149]
  - EULER: memcg: fix kabi broken when enable CONFIG_MEMCG_QOS (Jing Xiangfeng) [task:85149]
  - EULER: memcg: support priority for oom (Jing Xiangfeng) [task:85149]
  - selftest: kvm: Reorder vcpu_load_state steps for AMX (gehao) [task:88336]
  - selftests: kvm: Fix set_regs fail (gehao) [task:88363]
  - selftests: kvm/evmcs_test: complete I/O before migrating guest state (gehao) [task:88363]
  - KVM: selftests: complete IO before migrating guest state (gehao) [task:88336]
  - KVM: selftests: disable stack protector for all KVM tests (Sean Christopherson) [task:88336]
  - KVM: selftests: explicitly disable PIE for tests (Sean Christopherson) [task:88336]
  - KVM: arm64: vgic-its: Change default outer cacheability for {PEND, PROP}BASER (Alexander Graf) [task:97316]
  - Bluetooth: stop proccessing malicious adv data (Pavel Skripkin) [task:97308]
  - io_uring: Fix use of XArray in __io_uring_files_cancel (Matthew Wilcox (Oracle))
  - Bluetooth: hci_event: Fix checking for invalid handle on error status (Luiz Augusto von Dentz) [task:96848]
  - Bluetooth: hci_event: Ignore multiple conn complete events (Soenke Huster) [task:96848]
  - KYLIN: arm64: debug_defconfig: disable debug kobject (Jackie Liu)
  - KYLIN: debug_defconfig: make kmemleak off default (Jackie Liu)
  - KYLIN: net: genric phy driver 'ethtool -i' display error. (zhaochenguang) [task:90223]
  - KYLIN: net: loongson gmac add 'ethtool -i' info. (zhaochenguang) [bug:120208]
  - KYLIN: sound/soc: add the CJC8988 driver provided by loongson (Yongzhen Zhang) [task:91306]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-51.0.v2207
changelog:
  - KYLIN: sched: reserve some field for sched_statistics (Zhengyuan Liu)
  - ext4: make variable "count" signed (Ding Xiang)
  - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko) [bug:129870] {CVE-2022-33744}
  - xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129843] {CVE-2022-33742}
  - xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129847] {CVE-2022-33741}
  - xen/netfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129851] {CVE-2022-33740}
  - xen/blkfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129856] {CVE-2022-26365}
  - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou) [bug:129862] {CVE-2022-2318}
  - ext4: avoid cycles in directory h-tree (Jan Kara) [bug:129812] {CVE-2022-1184}
  - ext4: verify dir block before splitting it (Jan Kara) [bug:129812] {CVE-2022-1184}
  - floppy: use a statically allocated error counter (Willy Tarreau) [bug:129818] {CVE-2022-1652}
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - xen/pvcalls: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Juergen Gross) [bug:129758] {CVE-2022-23042}
  - xen/9p: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/gnttab: fix gnttab_end_foreign_access() without page specified (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen: remove gnttab_query_foreign_access() (Juergen Gross)
  - xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross) [bug:129771] {CVE-2022-23039}
  - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129767] {CVE-2022-23036}
  - xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross) [bug:129783, bug:129767] {CVE-2022-23036, CVE-2022-23038}
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross) [bug:129763] {CVE-2022-23040}
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129783] {CVE-2022-23038}
  - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129779] {CVE-2022-23037}
  - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller) [bug:129866] {CVE-2022-2380}
  - HID: holtek: fix mouse probing (Benjamin Tissoires)
  - hamradio: improve the incomplete fix to avoid NPD (Lin Ma) [bug:129795] {CVE-2022-1195}
  - HID: google: add eel USB id (xiazhengqiao) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-prodikeys (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-chicony (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy on some USB HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: check for valid USB device for many HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: wacom: fix problems when device is not a valid USB device (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add hid_is_usb() function to make it simpler for USB detection (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - hamradio: remove needs_free_netdev to avoid UAF (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer 6pack kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer ax25 kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin) [bug:129795] {CVE-2022-1195}
  - HID: google: add don USB id (Shou-Chieh Hsu) [bug:129822] {CVE-2022-20132}
  - xen/xenbus: Fix granting of vmalloc'd memory (Simon Leiner)
  - xen-netfront: fix potential deadlock in xennet_remove() (Andrea Righi)
  - HID: google: add moonball USB id (Chen-Tsung Hsieh) [bug:129822] {CVE-2022-20132}
  - net_sched: fix a crash in tc_new_tfilter() (Cong Wang) [bug:129750] {CVE-2021-39713}
  - net: sched: make function qdisc_free_cb() static (Wei Yongjun)
  - net: sched: use Qdisc rcu API instead of relying on rtnl lock (Vlad Buslov) [bug:129750] {CVE-2021-39713}
  - net: sched: add helper function to take reference to Qdisc (Vlad Buslov)
  - net: sched: extend Qdisc with rcu (Vlad Buslov)
  - net: sched: rename qdisc_destroy() to qdisc_put() (Vlad Buslov)
  - net: core: netlink: add helper refcount dec and lock function (Vlad Buslov)
  - netlink: fix doc about nlmsg_parse/nla_validate (Nicolas Dichtel) [task:96091]
  - netlink: Fix nlmsg_parse as a wrapper for strict message parsing (David Ahern) [task:96091]
  - bpf: Add classid helper only based on skb->sk (Daniel Borkmann) [task:96091]
  - bpf: Allow to retrieve cgroup v1 classid from v2 hooks (Daniel Borkmann) [task:96091]
  - tcp_cubic: refactor code to perform a divide only when needed (Eric Dumazet) [task:96091]
  - tcp_cubic: make Hystart aware of pacing (Eric Dumazet) [task:96091]
  - tcp_cubic: tweak Hystart detection for short RTT flows (Eric Dumazet) [task:96091]
  - tcp_cubic: switch bictcp_clock() to usec resolution (Eric Dumazet) [task:96091]
  - tcp_cubic: remove one conditional from hystart_update() (Eric Dumazet) [task:96091]
  - tcp_cubic: optimize hystart_update() (Eric Dumazet) [task:96091]
  - net: relax SO_TXTIME CAP_NET_ADMIN check (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not call fq_peek() twice per packet (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: add horizon attribute (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: enable use of hrtimer slack (Eric Dumazet) [task:96091]
  - net_sched: do not reprogram a timer about to expire (Eric Dumazet) [task:96091]
  - net_sched: add qdisc_watchdog_schedule_range_ns() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: properly set sk->sk_pacing_status (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: remove one obsolete check in fq_dequeue() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: handle non connected flows (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not assume EDT packets are ordered (Eric Dumazet) [task:96091]
  - netlink: add strict parsing for future attributes (Johannes Berg) [task:96091]
  - netlink: re-add parse/validate functions in strict mode (Johannes Berg) [task:96091]
  - netlink: make validation more configurable for future strictness (Johannes Berg) [task:96091]
  - netlink: add NLA_MIN_LEN (Johannes Berg) [task:96091]
  - netlink: add validation function to policy (Johannes Berg) [task:96091]
  - netlink: add attribute range validation to policy (Johannes Berg) [task:96091]
  - net_sched: sch_fq: avoid calling ktime_get_ns() if not needed (Eric Dumazet) [task:96091]
  - bpf: make bpf_skb_ecn_set_ce callable from BPF_PROG_TYPE_SCHED_ACT (Peter Oskolkov) [task:96091]
  - bpf: sync bpf.h to tools and update bpf_helpers.h (brakmo) [task:96091]
  - net_sched: sch_fq: add dctcp-like marking (Eric Dumazet) [task:96091]
  - tcp: tsq: no longer use limit_output_bytes for paced flows (Eric Dumazet) [task:96091]
  - tcp: get rid of tcp_tso_should_defer() dependency on HZ/jiffies (Eric Dumazet) [task:96091]
  - net: support 64bit rates for getsockopt(SO_MAX_PACING_RATE) (Eric Dumazet) [task:96091]
  - tcp: cdg: use tcp high resolution clock cache (Eric Dumazet) [task:96091]
  - KYLIN: LoongArch/spiflash: fix ls_spiflash initialization code error (wangxuewen) [bug:120279]
  - KYLIN: x86/config: enable QOS_SCHED and QOS_SCHED_SMT_EXPELLER (Zhengyuan Liu) [task:97062]
  - KYLIN: arm64/config: enable QOS_SCHED (Zhengyuan Liu) [task:97062]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:97063]
  - EULER: sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down} (Zhang Qiao) [task:85149]
  - EULER: sched: Throttle offline task at tracehook_notify_resume() (Zhang Qiao) [task:85149]
  - EULER: sched/qos: Remove dependency CONFIG_x86 (Zhang Qiao) [task:85149]
  - EULER: sched/fair: Add qos_throttle_list node in struct cfs_rq (Zhang Qiao) [task:85149]
  - EULER: sched: Introduce handle priority reversion mechanism (Zheng Zucheng) [task:85149]
  - unicore32: Fix __ARCH_WANT_STAT64 definition (Arnd Bergmann) [task:98950]
  - asm-generic: unistd.h: fixup broken macro include. (Guo Ren) [task:98950]
  - ntp/y2038: Remove incorrect time_t truncation (Arnd Bergmann) [task:98950]
  - ipc: fix semtimedop for generic 32-bit architectures (Arnd Bergmann) [task:98950]
  - asm-generic: Make time32 syscall numbers optional (Arnd Bergmann) [task:98950]
  - asm-generic: Drop getrlimit and setrlimit syscalls from default list (Yury Norov) [task:98950]
  - csky: System Call (Guo Ren) [task:98950]
  - compat ABI: use non-compat openat and open_by_handle_at variants (Yury Norov) [task:98950]
  - y2038: rename old time and utime syscalls (Arnd Bergmann) [task:98950]
  - y2038: remove struct definition redirects (Arnd Bergmann) [task:98950]
  - y2038: use time32 syscall names on 32-bit (Arnd Bergmann) [task:98950]
  - vfs: replace current_kernel_time64 with ktime equivalent (Arnd Bergmann) [task:98950]
  - y2038: syscalls: rename y2038 compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: socket: Add compat_sys_recvmmsg_time64 (Arnd Bergmann) [task:98950]
  - y2038: futex: Add support for __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: signal: Add compat_sys_rt_sigtimedwait_time64 (Arnd Bergmann) [task:98950]
  - x86/x32: use time64 versions of sigtimedwait and recvmmsg (Arnd Bergmann) [task:98950]
  - timex: change syscalls to use struct __kernel_timex (Deepa Dinamani) [task:98950]
  - timex: use __kernel_timex internally (Deepa Dinamani) [task:98950]
  - sparc64: add custom adjtimex/clock_adjtime functions (Arnd Bergmann) [task:98950]
  - time: fix sys_timer_settime prototype (Arnd Bergmann) [task:98950]
  - time: Add struct __kernel_timex (Deepa Dinamani) [task:98950]
  - time: make adjtime compat handling available for 32 bit (Arnd Bergmann) [task:98950]
  - y2038: signal: Change rt_sigtimedwait to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: sched: Change sched_rr_get_interval to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: utimes: Rework #ifdef guards for compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: Compile utimes()/futimesat() conditionally (Arnd Bergmann) [task:98950]
  - y2038: Change sys_utimensat() to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - asm-generic: Remove empty asm/unistd.h (Arnd Bergmann) [task:98950]
  - asm-generic: Remove unneeded __ARCH_WANT_SYS_LLSEEK macro (Arnd Bergmann) [task:98950]
  - y2038: Remove stat64 family from default syscall set (Arnd Bergmann) [task:98950]
  - y2038: __get_old_timespec32() can be static (kbuild test robot) [task:98950]
  - KYLIN: x86: debug_defconfig: more kselftest modules (Jackie Liu)
  - KYLIN: x86: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: arm64: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: mm: fix free_pages_bootmem bug in loongarch when system booting (husong)
  - GNET: change gnet_speed_flg priv to fix problem when rebind gnet. (liusicong) [task:96195]
  - LoongArch: Add generic efi stub support (liuyun) [task:96195]
  - efi/libstub: Move the function prototypes to header file (Atish Patra) [task:96195]
  - efi/libstub: Move arm-stub to a common file (Atish Patra) [task:96195]
  - LoongArch: adjust memory space for module load (liweihao) [task:96195]
  - LoongArch:LSVZ: disable pv timer when vcpu is reset (Mao Bibo) [task:96195]
  - LoongArch: LSVZ: redefine hypercall service return code (Jianxing Wang) [task:96195]
  - LoongArch: LSVZ: import no_pvipi and no_pvtime setup param (Jianxing Wang) [task:96195]
  - fdt: Update CRC check for rng-seed (Hsin-Yi Wang) [task:97875]
  - include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap (Christian Borntraeger) [task:97875]
  - random: quiet urandom warning ratelimit suppression message (Jason A. Donenfeld) [task:97875]
  - random: schedule mix_interrupt_randomness() less often (Jason A. Donenfeld) [task:97875]
  - random: credit cpu and bootloader seeds by default (Jason A. Donenfeld) [task:97875]
  - random: account for arch randomness in bits (Jason A. Donenfeld) [task:97875]
  - random: mark bootloader randomness code as __init (Jason A. Donenfeld) [task:97875]
  - random: avoid checking crng_ready() twice in random_init() (Jason A. Donenfeld) [task:97875]
  - crypto: drbg - make reseeding from get_random_bytes() synchronous (Nicolai Stange) [task:97875]
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller) [task:97875]
  - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() (Nicolai Stange) [task:97875]
  - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() (Nicolai Stange) [task:97875]
  - crypto: drbg - prepare for more fine-grained tracking of seeding state (Nicolai Stange) [task:97875]
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller) [task:97875]
  - crypto: drbg - add FIPS 140-2 CTRNG for noise source (Stephan Mueller) [task:97875]
  - Revert "random: use static branch for crng_ready()" (Jason A. Donenfeld) [task:97875]
  - random: check for signals after page of pool writes (Jason A. Donenfeld) [task:97875]
  - random: wire up fops->splice_{read,write}_iter() (Jens Axboe) [task:97875]
  - random: convert to using fops->write_iter() (Jens Axboe) [task:97875]
  - random: move randomize_page() into mm where it belongs (Jason A. Donenfeld) [task:97875]
  - random: move initialization functions out of hot pages (Jason A. Donenfeld) [task:97875]
  - random: use proper return types on get_random_{int,long}_wait() (Jason A. Donenfeld) [task:97875]
  - random: remove extern from functions in header (Jason A. Donenfeld) [task:97875]
  - random: use static branch for crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: credit architectural init the exact amount (Jason A. Donenfeld) [task:97875]
  - random: handle latent entropy and command line from random_init() (Jason A. Donenfeld) [task:97875]
  - random: use proper jiffies comparison macro (Jason A. Donenfeld) [task:97875]
  - random: remove ratelimiting for in-kernel unseeded randomness (Jason A. Donenfeld) [task:97875]
  - random: avoid initializing twice in credit race (Jason A. Donenfeld) [task:97875]
  - random: use symbolic constants for crng_init states (Jason A. Donenfeld) [task:97875]
  - siphash: use one source of truth for siphash permutations (Jason A. Donenfeld) [task:97875]
  - random: help compiler out with fast_mix() by using simpler arguments (Jason A. Donenfeld) [task:97875]
  - random: do not use input pool from hard IRQs (Jason A. Donenfeld) [task:97875]
  - random: order timer entropy functions below interrupt functions (Jason A. Donenfeld) [task:97875]
  - random: do not pretend to handle premature next security model (Jason A. Donenfeld) [task:97875]
  - random: do not use batches when !crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: insist on random_get_entropy() existing in order to simplify (Jason A. Donenfeld) [task:97875]
  - xtensa: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - sparc: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - um: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - x86/tsc: Use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - nios2: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - arm: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - mips: use fallback for random_get_entropy() instead of just c0 random (Jason A. Donenfeld) [task:97875]
  - m68k: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - timekeeping: Add raw clock fallback for random_get_entropy() (Jason A. Donenfeld) [task:97875]
  - powerpc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - alpha: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - parisc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - s390: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - ia64: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - init: call time_init() before rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: fix sysctl documentation nits (Jason A. Donenfeld) [task:97875]
  - random: document crng_fast_key_erasure() destination possibility (Jason A. Donenfeld) [task:97875]
  - random: make random_get_entropy() return an unsigned long (Jason A. Donenfeld) [task:97875]
  - random: check for signals every PAGE_SIZE chunk of /dev/[u]random (Jason A. Donenfeld) [task:97875]
  - random: check for signal_pending() outside of need_resched() check (Jann Horn) [task:97875]
  - random: do not allow user to keep crng key around on stack (Jason A. Donenfeld) [task:97875]
  - random: do not split fast init input in add_hwgenerator_randomness() (Jan Varho) [task:97875]
  - random: mix build-time latent entropy into pool at init (Jason A. Donenfeld) [task:97875]
  - random: re-add removed comment about get_random_{u32,u64} reseeding (Jason A. Donenfeld) [task:97875]
  - random: treat bootloader trust toggle the same way as cpu trust toggle (Jason A. Donenfeld) [task:97875]
  - random: skip fast_init if hwrng provides large chunk of entropy (Jason A. Donenfeld) [task:97875]
  - random: check for signal and try earlier when generating entropy (Jason A. Donenfeld) [task:97875]
  - random: reseed more often immediately after booting (Jason A. Donenfeld) [task:97875]
  - random: make consistent usage of crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: use SipHash as interrupt entropy accumulator (Jason A. Donenfeld) [task:97875]
  - random: replace custom notifier chain with standard one (Jason A. Donenfeld) [task:97875]
  - random: don't let 644 read-only sysctls be written to (Jason A. Donenfeld) [task:97875]
  - random: give sysctl_random_min_urandom_seed a more sensible value (Jason A. Donenfeld) [task:97875]
  - random: do crng pre-init loading in worker rather than irq (Jason A. Donenfeld) [task:97875]
  - random: unify cycles_t and jiffies usage and types (Jason A. Donenfeld) [task:97875]
  - random: cleanup UUID handling (Jason A. Donenfeld) [task:97875]
  - random: only wake up writers after zap if threshold was passed (Jason A. Donenfeld) [task:97875]
  - random: round-robin registers as ulong, not u32 (Jason A. Donenfeld) [task:97875]
  - random: clear fast pool, crng, and batches in cpuhp bring up (Jason A. Donenfeld) [task:97875]
  - random: pull add_hwgenerator_randomness() declaration into random.h (Jason A. Donenfeld) [task:97875]
  - random: check for crng_init == 0 in add_device_randomness() (Jason A. Donenfeld) [task:97875]
  - random: unify early init crng load accounting (Jason A. Donenfeld) [task:97875]
  - random: do not take pool spinlock at boot (Jason A. Donenfeld) [task:97875]
  - random: defer fast pool mixing to worker (Jason A. Donenfeld) [task:97875]
  - random: rewrite header introductory comment (Jason A. Donenfeld) [task:97875]
  - random: group sysctl functions (Jason A. Donenfeld) [task:97875]
  - random: group userspace read/write functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy collection functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy extraction functions (Jason A. Donenfeld) [task:97875]
  - random: group initialization wait functions (Jason A. Donenfeld) [task:97875]
  - random: remove whitespace and reorder includes (Jason A. Donenfeld) [task:97875]
  - random: remove useless header comment (Jason A. Donenfeld) [task:97875]
  - random: introduce drain_entropy() helper to declutter crng_reseed() (Jason A. Donenfeld) [task:97875]
  - random: deobfuscate irq u32/u64 contributions (Jason A. Donenfeld) [task:97875]
  - random: add proper SPDX header (Jason A. Donenfeld) [task:97875]
  - random: remove unused tracepoints (Jason A. Donenfeld) [task:97875]
  - random: remove ifdef'd out interrupt bench (Jason A. Donenfeld) [task:97875]
  - random: tie batched entropy generation to base_crng generation (Jason A. Donenfeld) [task:97875]
  - random: zero buffer after reading entropy from userspace (Jason A. Donenfeld) [task:97875]
  - random: remove outdated INT_MAX >> 6 check in urandom_read() (Jason A. Donenfeld) [task:97875]
  - random: use hash function for crng_slow_load() (Jason A. Donenfeld) [task:97875]
  - random: absorb fast pool into input pool after fast load (Jason A. Donenfeld) [task:97875]
  - random: do not xor RDRAND when writing into /dev/random (Jason A. Donenfeld) [task:97875]
  - random: ensure early RDSEED goes through mixer on init (Jason A. Donenfeld) [task:97875]
  - random: inline leaves of rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: use RDSEED instead of RDRAND in entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: fix locking in crng_fast_load() (Dominik Brodowski) [task:97875]
  - random: remove batched entropy locking (Jason A. Donenfeld) [task:97875]
  - random: remove use_input_pool parameter from crng_reseed() (Eric Biggers) [task:97875]
  - random: make credit_entropy_bits() always safe (Jason A. Donenfeld) [task:97875]
  - random: always wake up entropy writers after extraction (Jason A. Donenfeld) [task:97875]
  - random: use linear min-entropy accumulation crediting (Jason A. Donenfeld) [task:97875]
  - random: simplify entropy debiting (Jason A. Donenfeld) [task:97875]
  - random: use computational hash for entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: only call crng_finalize_init() for primary_crng (Dominik Brodowski) [task:97875]
  - random: access primary_pool directly rather than through pointer (Dominik Brodowski) [task:97875]
  - random: continually use hwgenerator randomness (Dominik Brodowski) [task:97875]
  - random: simplify arithmetic function flow in account() (Jason A. Donenfeld) [task:97875]
  - random: access input_pool_data directly rather than through pointer (Jason A. Donenfeld) [task:97875]
  - random: cleanup fractional entropy shift constants (Jason A. Donenfeld) [task:97875]
  - random: prepend remaining pool constants with POOL_ (Jason A. Donenfeld) [task:97875]
  - random: de-duplicate INPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: remove unused OUTPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: rather than entropy_store abstraction, use global (Jason A. Donenfeld) [task:97875]
  - random: remove unused extract_entropy() reserved argument (Jason A. Donenfeld) [task:97875]
  - random: remove incomplete last_data logic (Jason A. Donenfeld) [task:97875]
  - random: cleanup integer types (Jason A. Donenfeld) [task:97875]
  - random: cleanup poolinfo abstraction (Jason A. Donenfeld) [task:97875]
  - random: fix typo in comments (Schspa Shi) [task:97875]
  - random: don't reset crng_init_cnt on urandom_read() (Jann Horn) [task:97875]
  - random: avoid superfluous call to RDRAND in CRNG extraction (Jason A. Donenfeld) [task:97875]
  - random: early initialization of ChaCha constants (Dominik Brodowski) [task:97875]
  - random: initialize ChaCha20 constants with correct endianness (Eric Biggers) [task:97875]
  - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs (Jason A. Donenfeld) [task:97875]
  - random: harmonize "crng init done" messages (Dominik Brodowski) [task:97875]
  - random: mix bootloader randomness into pool (Jason A. Donenfeld) [task:97875]
  - random: do not re-init if crng_reseed completes before primary init (Jason A. Donenfeld) [task:97875]
  - random: do not sign extend bytes for rotation when mixing (Jason A. Donenfeld) [task:97875]
  - random: use BLAKE2s instead of SHA1 in extraction (Jason A. Donenfeld) [task:97875]
  - random: remove unused irq_flags argument from add_interrupt_randomness() (Sebastian Andrzej Siewior) [task:97875]
  - random: document add_hwgenerator_randomness() with other input functions (Mark Brown) [task:97875]
  - crypto: blake2s - adjust include guard naming (Eric Biggers) [task:97875]
  - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> (Eric Biggers) [task:97875]
  - MAINTAINERS: co-maintain random.c (Jason A. Donenfeld) [task:97875]
  - random: remove dead code left over from blocking pool (Eric Biggers) [task:97875]
  - random: avoid arch_get_random_seed_long() when collecting IRQ randomness (Ard Biesheuvel) [task:97875]
  - random: add arch_get_random_*long_early() (Mark Rutland) [task:97875]
  - powerpc: Use bool in archrandom.h (Richard Henderson) [task:97875]
  - linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check (Richard Henderson) [task:97875]
  - linux/random.h: Use false with bool (Richard Henderson) [task:97875]
  - linux/random.h: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - s390: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - powerpc: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - x86: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - random: avoid warnings for !CONFIG_NUMA builds (Mark Rutland) [task:97875]
  - random: split primary/secondary crng init paths (Mark Rutland) [task:97875]
  - random: remove some dead code of poolinfo (Yangtao Li) [task:97875]
  - random: fix typo in add_timer_randomness() (Yangtao Li) [task:97875]
  - random: Add and use pr_fmt() (Yangtao Li) [task:97875]
  - random: convert to ENTROPY_BITS for better code readability (Yangtao Li) [task:97875]
  - random: remove unnecessary unlikely() (Yangtao Li) [task:97875]
  - random: remove kernel.random.read_wakeup_threshold (Andy Lutomirski) [task:97875]
  - random: delete code to pull data into pools (Andy Lutomirski) [task:97875]
  - random: remove the blocking pool (Andy Lutomirski) [task:97875]
  - random: fix crash on multiple early calls to add_bootloader_randomness() (Dominik Brodowski) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: make /dev/random be almost like /dev/urandom (Andy Lutomirski) [task:97875]
  - random: ignore GRND_RANDOM in getentropy(2) (Andy Lutomirski) [task:97875]
  - random: add GRND_INSECURE to return best-effort non-cryptographic bytes (Andy Lutomirski) [task:97875]
  - random: Add a urandom_read_nowait() for random APIs that don't warn (Andy Lutomirski) [task:97875]
  - random: Don't wake crng_init_wait when crng_init == 1 (Andy Lutomirski) [task:97875]
  - lib/crypto: sha1: re-roll loops to reduce code size (Jason A. Donenfeld) [task:97875]
  - lib/crypto: blake2s: move hmac construction into wireguard (Jason A. Donenfeld) [task:97875]
  - crypto: blake2s - generic C library implementation and selftest (Jason A. Donenfeld) [task:97875]
  - Revert "hwrng: core - Freeze khwrng thread during suspend" (Herbert Xu) [task:97875]
  - char/random: Add a newline at the end of the file (Borislav Petkov) [task:97875]
  - random: Use wait_event_freezable() in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - fdt: add support for rng-seed (Hsin-Yi Wang) [task:97875]
  - random: Support freezable kthreads in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - random: fix soft lockup when trying to read from an uninitialized blocking pool (Theodore Ts'o) [task:97875]
  - latent_entropy: avoid build error when plugin cflags are not set (Vasily Gorbik) [task:97875]
  - random: document get_random_int() family (George Spelvin) [task:97875]
  - random: move rand_initialize() earlier (Kees Cook) [task:97875]
  - random: only read from /dev/random after its pool has received 128 bits (Theodore Ts'o) [task:97875]
  - drivers/char/random.c: make primary_crng static (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: remove unused stuct poolinfo::poolbits (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: constify poolinfo_table (Rasmus Villemoes) [task:97875]
  - random: fix data race on crng init time (Eric Biggers) [task:97875]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: try to actively add entropy rather than passively wait for it (Linus Torvalds) [task:97875]
  - Revert "alinux: random: speed up the initialization of module" (huhai) [task:97875]
  - Revert "random: only read from /dev/random after its pool has received 128 bits" (huhai) [task:97875]
  - Revert "random: fix soft lockup when trying to read from an uninitialized blocking pool" (huhai) [task:97875]
  - uapi: rename ext2_swab() to swab() and share globally in swab.h (Yury Norov) [task:97875]
  - KYLIN: xhci: fix Etron controller reset device problem (xuping) [bug:123907]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.0.v2207
changelog:
  - KYLIN: kabi_whitelist: remove the indentation in front of each item (Zhengyuan Liu) [task:74080]
  - KYLIN: scripts/make-kabi: support items in whitelist begin with indentation (Zhengyuan Liu) [task:74080]
  - KYLIN: Module.kabi: update Module.kabi based on the new whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append redhat8's kabi items (Zhengyuan Liu) [task:74080]
  - KYLIN: x86/paravirt: fix build if !CONFIG_PARAVIRT_SPINLOCKS & CONFIG_PARAVIRT (Jackie Liu) [task:101368, task:101367]
  - sched/core: Convert vcpu_is_preempted() from macro to an inline function (Qian Cai) [task:101368, task:101367]
  - KYLIN: kabi_whitelist: append HuaWei's ultrapath symbol to whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append TianGou's symbol to whitelist (Zhengyuan Liu) [task:90224]
  - KYLIN: kabi_whitelist: simplify current whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: sort the kabi whitelist (Zhengyuan Liu) [task:74080]
  - net: sched: don't set tunnel for decap action (Vlad Buslov) [bug:128966]
  - net: sched: flower: only return error from hw offload if skip_sw (Vlad Buslov) [bug:128966]
  - xsk: Fix xsk_umem_xdp_frame_sz() (Björn Töpel) [bug:128966]
  - xdp: For Intel AF_XDP drivers add XDP frame_s (Jesper Dangaard Brouer) [bug:128966]
  - cls_api: add translator to flow_action representation (Pablo Neira Ayuso) [bug:128966]
  - net: sched: sample: allow accessing psample_group with rtnl (Vlad Buslov) [bug:128966]
  - net/sched: add police action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - net/sched: add sample action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - flow_offload: add wake-up-on-lan and queue to flow_action (Pablo Neira Ayuso) [bug:128966]
  - net/flow_dissector: add connection tracking dissection (Paul Blakey) [bug:128966]
  - KYLIN: fbdev/efifb: enable efifb for inno card by default (yangdeyi) [task:88651]
  - tcp: use alloc_large_system_hash() to allocate table_perturb (Muchun Song)
  - xhci: turn off port power in shutdown (Mathias Nyman) [task:99634]
  - xhci: stop polling roothubs after shutdown (Henry Lin) [task:99634]
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman) [task:99634]
  - xhci: bail out early if driver can't accress host in resume (Mathias Nyman) [task:99634]
  - tcp: drop the hash_32() part from the index calculation (Willy Tarreau) [task:99634]
  - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau) [task:99634]
  - tcp: add small random increments to the source port (Willy Tarreau) [task:99634]
  - tcp: use different parts of the port_offset for index and offset (Willy Tarreau) [task:99634]
  - tcp: add some entropy in __inet_hash_connect() (Eric Dumazet) [task:99634]
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin) [task:99634]
  - KYLIN: add graphics card priority for x86 (yangdeyi) [task:88651]
  - KYLIN: vga: add inno graphics card priority (yangdeyi) [task:88651]
  - KYLIN: 3rd/inno: add inno driver support (yangdeyi) [task:88651]
  - i40iw: Remove setting of VMA private data and use rdma_user_mmap_io (Shiraz Saleem) [bug:130467]
  - KYLIN: x86/paravirt: useless assignment instructions cause Unixbench full core performance degradation (chenke) [task:99415]
  - x86/module: Fix the paravirt vs alternative order (Peter Zijlstra) [task:99415]
  - x86/paravirt: Add new features for paravirt patching (Juergen Gross) [task:99415]
  - crypto: drbg - fix error return code in drbg_alloc_state() (Wei Yongjun) [task:101008]
  - lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO (Vincenzo Frascino)
  - arm64: vdso32: Remove jump label config option in Makefile (Vincenzo Frascino)
  - arm64: vdso32: Detect binutils support for dmb ishld (Vincenzo Frascino)
  - arm64: vdso: Remove stale files from old assembly implementation (Vincenzo Frascino)
  - arm64: vdso32: Fix broken compat vDSO build warnings (Vincenzo Frascino)
  - arm64: vdso: Fix Makefile regression (Vincenzo Frascino)
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [bug:120191] {CVE-2022-1679}
  - drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions (Joe Perches) [bug:124652] {CVE-2022-20166}
  - drivers/base/cpu: Simplify s*nprintf() usages (Takashi Iwai)
  - xfs: don't set bmapi total block req where minleft is (Brian Foster) [bug:128797]
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [bug:129113] {CVE-2022-34918}
  - f2fs: fix to do sanity check on segment/section count (Chao Yu) [task:98376] {CVE-2019-19449}
  - f2fs: fix wrong total_sections check and fsmeta check (Wang Xiaojun) [task:98376] {CVE-2019-19449}
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik) [task:98376] {CVE-2019-19448}
  - KYLIN: box: Fix Use-After-Free caused by parallel access (Jackie Liu) [task:98126, task:99088, task:99013]
  - KYLIN: sw64: fix incompatible pointer of __kernel_timex (Jackie Liu) [task:99336, task:99333]
  - mips: generate uapi header and system call table files (Firoz Khan) [task:99337, task:99334]
  - mips: remove unused macros (Firoz Khan) [task:99337, task:99334]
  - mips: add +1 to __NR_syscalls in uapi header (Firoz Khan) [task:99337, task:99334]
  - mips: rename scall64-64.S to scall64-n64.S (Firoz Khan) [task:99337, task:99334]
  - mips: add __NR_syscalls along with __NR_Linux_syscalls (Firoz Khan) [task:99334, task:99337]
  - mips: remove syscall table entries (Firoz Khan) [task:99337, task:99334]
  - io_uring: drop 'ctx' ref on task work cancelation (Jens Axboe)


author: fuanan <fuanan3@h-partners.com> - 0.187-6
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: hubin <hubin73@huawei.com> - 0.187-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change permission to 750 and move debug tools into extra package


author: openEuler Buildteam <buildteam@openeuler.org> - 0.26-19
changelog:
  - Type:cves
  - ID:CVE-2019-13109
  - SUG:NA
  - DESC:fix CVE-2019-13109
         fix ICC profile in PNG images


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
         in grub2-tools to 644


author: mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loongarch modify the location where initrd is loaded into memory


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: songjuntao <songjuntao@kylinos.cn> - 1:2.06-22.skyworth01
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: add kylin cert to sign grub efi file while rpm package building


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.06-22.skyworth02
changelog:
  - Type: update
  - ID: task#144853
  - SUG: NA
  - DESC: add KYLIN-add-bootargs-for-security.patch
          add 0001-support-FT1500-and-FT2000-uboot.patch
          add 0001-fix-x86-legacy-problems.patch
          add 0001-modify-10_linux.patch
          add grub2 password


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.08
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的服务接口
  -         add patch: kysec-daemon-add-chpolicy.patch
  - Type: bugfix
  - ID: [Bug#122953]
  - SUG:NA
  - DESC: 修复添加内核防卸载时，Qstring导致的乱码的问题
  -         add patch: kysec-daemon-fix-add-kmod-protect-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.09
changelog:
  - Type: bugfix
  - ID: [Bug#131435][Bug#131574]
  - SUG:NA
  - DESC: 修复security-switch加固后切换strict模式失败的问题
  -       修复strict模式下，切换selinux模式为permissive失败的问题
  -         add patch: kysec-daemon-fix-kysec-command-bug.patch
  - Type:update
  - ID: NA
  - SUG:NA
  - DESC: 将kysec-module的dbus通信移植到kysec-daemon
  -         add patch: kysec-daemon-modify-dbus-module-to-daemon.patch
  - Type: bugfix
  - ID: [bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.10
changelog:
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-daemon-fix-failed-to-remove-exectl.patch
  - Type: update 
  - ID: []
  - SUG:NA
  - DESC: netctl添加pkg path的dbus接口
  -         add patch: kysec-daemon-netctl-add-pkg-path-dbus-interface.patch 
  - Type: bugfix
  - ID: [Bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kysec-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.3-36.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151059]
  - SUG:NA
  - DESC: 切换selinux的permissive及enforcing模式实时生效
  -         add patch: kysec-daemon-fix-selinux-status-changenow.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.02
changelog:
  - netctl自动添加联网程序，并设置为拦截
  -   add patch: kysec-syc-daemon-netctl-auto-add-xml.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -          add patch: kysec-sync-daemon-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.04
changelog:
  - Type: bugfix 
  - ID:[bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题
  -       修复网络控制自动探测时程序不是rpm或者dpkg安装，导致包名不正确的问题
  -           add patch: kysec-sync-daemon-fix-netctl-auto-add-pkg-is-not-rpm-install.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.05
changelog:
  - Type: update
  - ID:[]
  - SUG:NA
  - DESC: 修改netctl自动探测，对于不是rpm包安装的,pkg填写全路径
  -         add patch: kysec-sync-daemon-modify-netctl-auto-add-whlist.patch
  - Type: bugfix
  - ID:[bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-sync-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.07
changelog:
  - Type: update
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-utils-fix-fortify.patch
  - Type: bugfix
  - ID:[Bug#121813]
  - SUG:NA
  - DESC: 在secadm_list列表中加入semodule程序，修复三权模式下，secadm用户安装，卸载策略模块失败的问题 
  -         add patch: kysec-utils-add-semodule-to-secadm_list.patch
  - Type: bugfix
  - ID:[Bug#122812]
  - SUG:NA
  - DESC: 修复sh执行可执行程序失败的问题，libkysecwhlist.so调用失败
  -         add patch: kysec-utils-fix-sh-execute-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.08
changelog:
  - Type: update
  - ID:[Task#90053]
  - SUG:NA
  - DESC: 修改kysec相关命令
  -         add patch: kysec-utils-modify-kysec-command.patch
  - Type: bugfix
  - ID:[Bug#128959][Bug#128809]
  - SUG:NA
  - DESC: sh执行没有标记的脚本，度量成功后，允许执行并打上verified的标记
  -         add patch: kysec-utils-fix-sh-execute-set-label.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.09
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的库接口
  -         add patch: kysec-utils-add-chpolicy.patch
  - Type: update
  - ID:[Task#90053][Bug#131756]
  - SUG:NA
  - DESC: 优化部分kysec相关命令, 解决软件包标签获取命令执行报错的问题
  -         add patch: kysec-utils-kysec-command-optimize-and-fix-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.10
changelog:
  - Type: update
  - ID:[Task#90053][Bug#128917][Bug#131796][Bug#131599][Bug#131594]
  - SUG:NA
  - DESC: 优化部分kysec相关命令
  -       修复进程开启情况下，设置防杀死标签，不生效，下次打开的进程才生效的问题
  -       修复kysec_set设置应用程序联网管控失败的问题
  -       修复strict模式下关闭kysec后root用户执行setenforce 0提示权限不够的问题
  -       修复strict模式下关闭kysec后secadm和auditadm用户仍存在的问题
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: kysec-utils-fix-kysec-command-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.11
changelog:
  - Type: update
  - ID: NA
  - SUG:NA
  - DESC: kysec检查接口还原p标记检查，先做hash值检查，再检查p标记
  -         add patch: kysec-utils-kysec-check-lib-restore-parent-label-check.patch
  - Type: bugfix
  - ID: [bug#135468]
  - SUG:NA
  - DESC: 修复kysec组件命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-command-inject-bug.patch
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-utils-fix-failed-to-remove-exectl.patch
  - Type: bugfix
  - ID: [Bug#138094]
  - SUG:NA
  - DESC: 旧版本接口兼容
  -         add patch: kysec-utils-add-old-version-interface-compatible.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.12
changelog:
  - Type: bugfix
  - ID: [BUG#140008]
  - SUG:NA
  - DESC: setstatus设置disable提示重启生效
  -         add patch: kysec-utils-setstaus-disable-prompt-reboot.patch
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-utils-fix-not-set-status-when-close-3adm.patch
  - Type: bugfix
  - ID: [BUG#142102]
  - SUG:NA
  - DESC: 修复非secadm用户不可查看当前安全状态的问题
  -         add patch: kysec-utils-delete-security-switch-from-secadm-list.patch
  - Type: update
  - ID: [TASK#113906]
  - SUG:NA
  - DESC: 从auditadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-auditadm-list.patch
  - Type: update
  - ID: [TASK#113152]
  - SUG:NA
  - DESC: 命令行注入分析及解决
  -         add patch: kysec-utils-command-line-injection.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#143767][BUG#143772][BUG#143803]
  - SUG:NA
  - DESC: 修复kysec_get module打印的帮助信息提示无效的参数
  -       修复kysec_set module(exectl\kmod\fpro\ppro)显示的不是子模块帮助信息
  -       修复kysec_set kmod -v allow -n nbd.ko.xz后有两个防卸载模块的问题
  -         add patch: kysec-utils-fix-kysec-command-prompt-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: kysec-utils-fix-security-switch-disable-after-force-reboot-bug.patch
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-utils-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#164394]
  - SUG:NA
  - DESC: 修复当kysec关闭时不能通过软件包获取3adm的标记的问题
  -         add patch: kysec-utils-fix-can-not-get-3adm-label-when-kysec-disable-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#165082]
  - SUG:NA
  - DESC: 修复当修改内核模块文件后，仍可以insmod成功的问题
  -         add patch: kysec-utils-fix-insmod-success-when-modify-ko-file-after.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.06
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.07
changelog:
  - Type:update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: libsecurity1-netctl-set-off.patch


author: David Cantrell <dcantrell@redhat.com> - 1.14.5-5
changelog:
  - Split alternatives in to 4 sets (nforro)
  - Use default names for binaries and man pages (nforro)
  - Do not compress man pages (nforro)
  - Add missing %preun requirement (nforro)


author: Björn Esser <besser82@fedoraproject.org> - 1.14.5-10
changelog:
  - libmandoc.so must be linked with COMPAT_OBJS
  - Add patch to fix configure script
  - Replace plain make with %make_build


author: chenyanpanHW <chenyanpan@huawei.com> - 0.4.0-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Show-usage-instead-of-aborting-on-bad-flags.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-mokutil-bugfix-del-unused-opt-s.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Fix-leak-of-list-in-delete_data_from_req_var.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-leak-of-fd-in-mok_get_variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git
  git


author: songjuntao <songjuntao@kylinos.cn> - 8.2p1-26.skyworth01
changelog:
  - Type:update
  - CVE: NA
  - SUG: NA
  - DESC: rebuild and init version for IndustrialOS Custom Skyworth project


author: yuejiayuan <yuejiayuan@kylinos.cn> - 115-3.p01.skyworth01
changelog:
  - Type: update 
  - ID:task#141756
  - SUB:NA
  - DESC: chmod +006 to'/etc/pki/pesign' and '/etc/pki/pesign/*', append 'skyworth' after package's version


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.09
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:彻底删除auto-resetpw选项
  -      添加补丁security-switch-delete-auto-resetpw-completely.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#145103]
  - SUG:NA
  - DESC: 关闭kysec后,不重启机器的情况下，在root用户下使用security-switch切换strict模式，保证kysec-daemon的启动用户是secadm
  -         add patch: security-switch-fix-not-reboot-set-strict-when-kysec-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: security-switch-fix-security-switch-disable-after-force-reboot-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#147592]
  - SUG:NA
  - DESC: 解决切换模式失败后，无法再次切换的问题
  -       add patch: security-switch-fix-can-not-excute-after-switch-failed.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#157825]
  - SUG:NA
  - DESC: 【安全模式】切换default模式后，概率性报核心已转储提示
  -       add patch: security-switch-add-client-thread-wait.patch


author: songjuntao <songjuntao@kylinos.cn> - 15.6-8.skyworth02
changelog:
  - Type: update
  - ID: NA
  - SUG: NA 
  - DESC: add kylin cert to sign efi file while rpm package building


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-8.skyworth04
changelog:
  - Type: bugfix
  - ID: TASK#144853
  - SUG: NA
  - DESC: replace BOOTAA64.CSV and BOOTX86.CSV in order to fix bug that bios using label named "openEuler"


author: songjuntao <songjuntao@kylinos.cn> - 15.6-8.skyworth05
changelog:
  - Type: update 
  - ID: TASK#146470
  - SUG: NA
  - DESC: the signature generation package is provided for jit based on skyworth04


author: songjuntao <songjuntao@kylinos.cn> - 15.6-8.skyworth06
changelog:
  - Type: update 
  - ID: TASK#159761
  - SUG: NA
  - DESC: the signature generation package is provided for jit dbt ca certificate system


author: songjuntao <songjuntao@kylinos.cn> - 15.6-8.skyworth07
changelog:
  - Type: update
  - ID: TASK#163843
  - SUG: NA
  - DESC: the signature generation package is provided for ras 3072 and 4096 signed certificate increment


author: songjuntao <songjuntao@kylinos.cn> - 15.6-8.skyworth08
changelog:
  - Type: update
  - ID: TASK#163843
  - SUG: NA
  - DESC: the signature generation package is provided for fix 4096 signed data


author: Yue Jiayuan <yuejiayuan@kylinos.cn> - 5.0-3.p02
changelog:
  - Type:update 
  - ID:[84598]
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch


author: songjuntao <songjuntao@kylinos.cn> - 5.0.3.p02.skyworth01
changelog:
  - Type: update
  - ID: task#150142
  - SUG: NA
  - DESC: adapt for custom skyworth project openssl version


