# changelog

author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/udf: Fix out of bounds access
         lib/relocator: Fix OOB write when initializing lo->freebytes[]
         util/grub-mount: Fix memory leak in fuse_getattr()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-40
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add TPCM support with ipmi channel
         change the name of module tpcm to tpcm_kunpeng
         skip verification when not loading grub.cfg


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-41
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-42
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 249-88
changelog:
  - wait-online: fix handling of unmanaged state
  - add backport-wait-online-make-manager_link_is_online-return-0-whe.patch


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 249-91
changelog:
  - add backport-cgroup-util-introduce-cg_is_threaded.patch
        backport-core-execute-warn-when-threaded-mode-is-detected.patch


author: huyubiao <huyubiao@huawei.com> - 249-94
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: zhangyao <zhangyao108@huawei.com> - 249-95
changelog:
  - add backport-logind-give-better-error-messages-when-failing-to-at.patch
        backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
        backport-fs-util-readlinkat-supports-an-empty-string.patch
        backport-exec-invoke-correct-dont_close-size.patch
        backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
        backport-core-service-fix-accept-socket-deserialization.patch
        backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
        backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
        backport-sysusers-handle-NSS-errors-gracefully.patch
        backport-shared-log-error-when-execve-fail.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-96
changelog:
  - add backport-run-split-out-creation-of-unit-creation-messages.patch
        backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
        backport-sd-event-do-not-assert-on-invalid-signal.patch
        backport-sd-event-change-error-code-EINVAL-EIO.patch
        backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
        backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
        backport-main-reopen-dev-console-for-user-service-manager.patch
        backport-log-add-common-helper-log_set_target_and_open.patch
        backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
        backport-journalctl-erase-verify-key-before-free.patch
        backport-core-service-use-log_unit_-where-appropriate.patch
        backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
        backport-Manager-also-log-caller-of-daemon-reexec.patch
        backport-manager-improve-message-about-Reload-Reexec-requests.patch
        backport-core-fix-null-in-output.patch
        backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
        backport-core-Log-in-more-scenarios-about-which-process-initi.patch


