# changelog

author: chenyi <chenyi211@huawei.com> - 4.19.90-2502.1.0.0314
changelog:
  - !14942  fix CVE-2024-57892
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: correct return value of ocfs2_local_free_info()
  - !14933  scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - !14919  bpf: fix OOB devmap writes when deleting elements
  - bpf: fix OOB devmap writes when deleting elements


author: chenyi <chenyi211@huawei.com> - 4.19.90-2502.2.0.0315
changelog:
  - !15050  brd: fix AA deadlock for concurrent brd_probe()
  - !15030  nbd: don't allow reconnect after disconnect
  - brd: fix AA deadlock for concurrent brd_probe()
  - !15017  spi: mpc52xx: Add cancel_work_sync before module remove
  - !15042  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - !14978  CVE-2024-56604_openEuler-1.0-LTS
  - !15012  Bluetooth: L2CAP: fix CVE-2024-56605
  - !14999  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - !14992  ALSA: seq: oss: Fix races at processing SysEx messages
  - !14996  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - nbd: don't allow reconnect after disconnect
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: Consolidate code around sk_alloc into a helper function


author: chenyi <chenyi211@huawei.com> - 4.19.90-2502.3.0.0316
changelog:
  - !15116  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15115  netfilter: x_tables: fix LED ID check in led_tg_check()
  - !15114 v3  net: Fix CVE-2024-56658
  - !14895  ceph: prevent use-after-free in encode_cap_msg()
  - !15131  xsk: fix OOB map writes when deleting elements
  - xsk: fix OOB map writes when deleting elements
  - !15058  net: let net.core.dev_weight always be non-zero
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - net: let net.core.dev_weight always be non-zero
  - ceph: prevent use-after-free in encode_cap_msg()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2502.4.0.0317
changelog:
  - !9357 Add support for Hygon model 7h processors
  - !15138  drm/amdgpu: fix usage slab after free
  - drm/amdgpu: fix usage slab after free
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.1.0.0318
changelog:
  - !15314  drm/imx: Fix memory leak in imx_pd_connector_get_modes
  - !15313  video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  - !15285  tcp: Defer ts_recent changes until req is owned
  - !15256  ata: sata_dwc_460ex: Fix crash due to OOB write
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  - tcp: Defer ts_recent changes until req is owned
  - !15262  blk-iolatency: Fix inflight count imbalances and IO hangs on offline
  - !15193  Roll back the setting of nfs superblock s_flags.
  - blk-iolatency: Fix inflight count imbalances and IO hangs on offline
  - ata: sata_dwc_460ex: Fix crash due to OOB write
  - Revert "nfs: ignore SB_RDONLY when mounting nfs"
  - Revert "nfs: pass flags to second superblock"
  - Revert "nfs: fix the loss of superblock's initialized flags"


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.3.0.0319
changelog:
  - !15415  tracing/histograms: Fix memory leak problem
  - !15415  tracing/histograms: Fix memory leak problem
  - tracing/histograms: Fix memory leak problem
  - !15398  RDMA/hfi1: Prevent use of lock before it is initialized
  - !15401  hfsplus: don't query the device logical block size multiple times
  - !15401  hfsplus: don't query the device logical block size multiple times
  - !15399  drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - !15399  drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - !15411 v2  Ignore SB_RDONLY when mounting and remounting nfs
  - !15411 v2  Ignore SB_RDONLY when mounting and remounting nfs
  - !15337  net: tipc: fix possible refcount leak in tipc_sk_create()
  - !15336  CVE-2025-21702
  - !15335  net: sched: Disallow replacing of child qdisc from one parent to another
  - !15335  net: sched: Disallow replacing of child qdisc from one parent to another
  - nfs: ignore SB_RDONLY when remounting nfs
  - nfs: clear SB_RDONLY before getting superblock
  - !15393  powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  - !15392  ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - !15392  ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - !15275  scsi: libfc: Fix use after free in fc_exch_abts_resp()
  - !15297  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - !15297  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - hfsplus: don't query the device logical block size multiple times
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - RDMA/hfi1: Prevent use of lock before it is initialized
  - !15374  can: gs_usb: gs_usb_open/close(): fix memory leak
  - !15332  Fix CVE-2022-49253
  - !15381  iio: trigger: sysfs: fix use-after-free on remove
  - !15386  crypto: qat - add param check for DH
  - !15353  rtl818x: Prevent using not initialized queues
  - !15354  drm/amdkfd: Check for potential null return of kmalloc_array()
  - !15231  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  - ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - !15240  smb: client: Fix netns refcount imbalance
  - crypto: qat - add param check for DH
  - iio: trigger: sysfs: fix use-after-free on remove
  - !15361  md/bitmap: don't set sb values if can't pass sanity check
  - !15361  md/bitmap: don't set sb values if can't pass sanity check
  - !15351  dm integrity: fix memory corruption when tag_size is less than digest size
  - !15350  video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  - can: gs_usb: gs_usb_open/close(): fix memory leak
  - !15075 v4  Fix CVE-2023-52572 in openEuler-1.0-LTS
  - !15287  bpf, arm64: Clear prog->jited_len along prog->jited
  - md/bitmap: don't set sb values if can't pass sanity check
  - !15324  Fix Fix CVE-2022-49351
  - !15329  Fix CVE-2022-49308
  - drm/amdkfd: Check for potential null return of kmalloc_array()
  - rtl818x: Prevent using not initialized queues
  - dm integrity: fix memory corruption when tag_size is less than digest size
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  - !15282  fix CVE-2022-49404
  - !15282  fix CVE-2022-49404
  - !15273  ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - !15273  ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - !15303  md/raid1: fix memory leak in raid1_run() if no active rdev
  - !15304  md: bypass block throttle for superblock update
  - !15318  md/raid1: fix bitmap update when all write requests fail
  - !15318  md/raid1: fix bitmap update when all write requests fail
  - net: tipc: fix possible refcount leak in tipc_sk_create()
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - net_sched: sch_fifo: implement lockless __fifo_dump()
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - media: usb: go7007: s2250-board: fix leak in probe()
  - extcon: Modify extcon device to be created after driver data is set
  - extcon: Fix error handling in extcon_dev_register
  - net: altera: Fix refcount leak in altera_tse_mdio_create
  - md/raid1: fix bitmap update when all write requests fail
  - md: bypass block throttle for superblock update
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - bpf, arm64: Clear prog->jited_len along prog->jited
  - RDMA/hfi1: Fix potential integer multiplication overflow errors
  - scsi: libfc: Fix use after free in fc_exch_abts_resp()
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: fix TCP timers deadlock after rmmod
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - cifs: Fix UAF in cifs_demultiplex_thread()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.4.0.0320
changelog:
  - !15574  some CVE fixes
  - rtc: mt6397: check return value after calling platform_get_resource()
  - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
  - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
  - !15503  ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  - !15500  Fix 4 CVEs in JFFS2
  - !15544  ext4: fix race condition between ext4_write and ext4_convert_inline_data
  - !15521  ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  - !15495  drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
  - !15372  xtensa: Fix refcount leak bug in time.c
  - !15494  mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  - !15448  vrf: use RCU protection in l3mdev_l3_out()
  - !15433  scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  - !15432  CVE-2022-49087
  - !15486  mm: fix unexpected zeroed page mapping with zram swap
  - !15487  CVE-2022-49514
  - !15485  media: venus: hfi: avoid null dereference in deinit
  - !15484  drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
  - jffs2: fix memory leak in jffs2_do_fill_super
  - jffs2: fix memory leak in jffs2_do_mount_fs
  - jffs2: fix memory leak in jffs2_scan_medium
  - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
  - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
  - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  - !15371  pinctrl: ralink: Check for null return of devm_kcalloc
  - !15343  ipw2x00: Fix potential NULL dereference in libipw_xmit()
  - !15342  drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
  - !15425  CVE-2022-49513
  - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
  - ASoC: mediatek: mt8173: fix device_node leak
  - mm: fix unexpected zeroed page mapping with zram swap
  - media: venus: hfi: avoid null dereference in deinit
  - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
  - !15461  be2net: Fix buffer overflow in be_get_module_eeprom
  - !15443  i40e: Fix call trace in setup_tx_descriptors
  - !15442  nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  - !15458  sfc: fix kernel panic when creating VF
  - be2net: Fix buffer overflow in be_get_module_eeprom
  - sfc: fix kernel panic when creating VF
  - vrf: use RCU protection in l3mdev_l3_out()
  - i40e: Fix call trace in setup_tx_descriptors
  - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  - rxrpc: Restore removed timer deletion
  - rxrpc: fix a race in rxrpc_exit_net()
  - cpufreq: governor: Use kobject release() method to free dbs_data
  - cpufreq: Move to_gov_attr_set() to cpufreq.h
  - xtensa: Fix refcount leak bug in time.c
  - pinctrl: ralink: Check for null return of devm_kcalloc
  - ipw2x00: Fix potential NULL dereference in libipw_xmit()
  - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes


author: chenyi <chenyi211@huawei.com> - 4.19.90-2503.5.0.0321
changelog:
  - !15605  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - !15600  vfio/platform: check the bounds of read/write syscalls
  - !15633  ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  - !15634  ALSA: oss: Fix PCM OSS buffer allocation overflow
  - ALSA: oss: Fix PCM OSS buffer allocation overflow
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  - !15582  CVE-2022-49508
  - !15467  net: mdio: unexport __init-annotated mdio_bus_init()
  - !15465  CVE-2022-49490
  - !15604 v3  rtc: Fix race when disable/enable UIE in rtc_set_time()
  - !15583  block: fix error unwinding in blk_register_queue
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - rtc: Fix race when disable/enable UIE in rtc_set_time()
  - rtc: Cleanup for UIE timer/polling emulation support
  - vfio/platform: check the bounds of read/write syscalls
  - !15586  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - !15569  ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  - !15579  block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
  - !15578  scsi: target: tcmu: Fix possible page UAF
  - !15577  drm/plane: Move range check for format_count earlier
  - !15576  drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  - block: fix error unwinding in blk_register_queue
  - HID: elan: Fix potential double free in elan_input_configured
  - HID: elan: Fix memleak in elan_input_configured
  - block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
  - scsi: target: tcmu: Fix possible page UAF
  - drm/plane: Move range check for format_count earlier
  - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  - ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  - net: mdio: unexport __init-annotated mdio_bus_init()
  - drm/msm/mdp5: Fix global state lock backoff
  - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected


author: chenyi <chenyi211@huawei.com> - 4.19.90-2504.1.0.0322
changelog:
  - !15491  dlm: fix plock invalid read
  - !15468  ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  - !15466  ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  - !15653  tty: goldfish: Fix free_irq() on remove
  - !15654  media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  - !15703  tracing: Make sure trace_printk() can output as soon as it can be used
  - !15702  trace_events_hist: add check for return value of 'create_hist_field'
  - !15708  f2fs: fix dereference of stale list iterator after loop body
  - f2fs: fix dereference of stale list iterator after loop body
  - tracing: Make sure trace_printk() can output as soon as it can be used
  - !15508  scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  - !15509  ath9k_htc: fix uninit value bugs
  - !15506  phy: qcom-qmp: fix struct clk leak on probe errors
  - !15505  net: sfp: fix memory leak in sfp_probe()
  - trace_events_hist: add check for return value of 'create_hist_field'
  - !15647  nilfs2: do not force clear folio if buffer is referenced
  - !15628  ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  - !15629  ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  - !15674  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - !15661  ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  - !15662  media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  - !15663  ARM: versatile: Add missing of_node_put in dcscb_init
  - !15504  um: Fix out-of-bounds read in LDT setup
  - !15311  net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
  - ARM: versatile: Add missing of_node_put in dcscb_init
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  - !15502  wifi: mac80211: fix use-after-free in chanctx code
  - !15316  ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  - !15322  can: m_can: m_can_tx_handler(): fix use after free of skb
  - !15497  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - !15655  cifs: Revert two patches to prevent statistics leakage on the lo device.
  - Revert "smb: client: fix TCP timers deadlock after rmmod"
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free"
  - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  - tty: goldfish: Fix free_irq() on remove
  - nilfs2: do not force clear folio if buffer is referenced
  - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  - ath9k_htc: fix uninit value bugs
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  - phy: qcom-qmp: fix struct clk leak on probe errors
  - net: sfp: fix memory leak in sfp_probe()
  - um: Fix out-of-bounds read in LDT setup
  - wifi: mac80211: fix use-after-free in chanctx code
  - cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - dlm: fix plock invalid read
  - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  - can: m_can: m_can_tx_handler(): fix use after free of skb
  - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register


author: chenyi <chenyi211@huawei.com> - 4.19.90-2504.2.0.0323
changelog:
  - !15796  ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - !15805  dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - !15806  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - !15377  virtio_console: eliminate anonymous module_init & module_exit
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - !15784  HID: betop: check shape of output reports
  - HID: betop: check shape of output reports
  - !15740  ftrace: Avoid potential division by zero in function_stat_show()
  - !15747  bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - !15637  net_sched: sch_sfq: don't allow 1 packet limit
  - !15763  dmaengine: Fix double increment of client_count in dma_chan_get()
  - !15761  EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - !15638  CVE-2022-49374
  - !15692  tty: fix deadlock caused by calling printk() under tty_port->lock
  - !15693  rxrpc: Fix listen() setting the bar too high for the prealloc rings
  - !15694  firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  - !15691  media: uvcvideo: Fix double free in error path
  - !15732  drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  - !15695  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - dmaengine: Fix double increment of client_count in dma_chan_get()
  - EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15514  cpufreq: pmac32-cpufreq: Fix refcount leak bug
  - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  - !15677  regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  - !15678  drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  - !15632  macsec: fix UAF bug for real_dev
  - !15687  drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  - !15688  usb: usbip: fix a refcount leak in stub_probe()
  - !15713  CVE-2022-49370
  - !15712  drbd: Fix five use after free bugs in get_initial_state
  - !15619  partitions: mac: fix handling of bogus partition table
  - !15723  phy: qcom-qmp: fix reset-controller leak on probe errors
  - !15720  nfc: nci: add flush_workqueue to prevent uaf
  - phy: qcom-qmp: fix reset-controller leak on probe errors
  - nfc: nci: add flush_workqueue to prevent uaf
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
  - drbd: Fix five use after free bugs in get_initial_state
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings
  - tty: fix deadlock caused by calling printk() under tty_port->lock
  - media: uvcvideo: Fix double free in error path
  - usb: usbip: fix a refcount leak in stub_probe()
  - drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  - tipc: check attribute length for bearer name
  - tipc: add extack messages for bearer/media failure
  - net_sched: sch_sfq: don't allow 1 packet limit
  - macsec: fix UAF bug for real_dev
  - partitions: mac: fix handling of bogus partition table
  - cpufreq: pmac32-cpufreq: Fix refcount leak bug
  - virtio_console: eliminate anonymous module_init & module_exit


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-6
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


