# changelog

author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.78.0.102
changelog:
  - !357 Backport CVEs, bugfixes, performance and other
  - binder: fix UAF of alloc->vma in race with munmap()
  - io_uring: add missing item types for splice request
  - xfs: fix overfilling of reserve pool
  - xfs: always succeed at setting the reserve pool size
  - xfs: remove infinite loop when reserving free block pool
  - xfs: use current->journal_info for detecting transaction recursion
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - fix kabi broken due to may_pollfree
  - io_uring: disable polling pollfree files
  - sched: disable sched_autogroup by default
  - driver: char: delete svm.c
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
  - tracing/osnoise: Do not unregister events twice
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
  - mm/filemap.c: remove bogus VM_BUG_ON
  - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup"
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - fork: Allocate a new task_struct_resvd object for fork task
  - tmpfs: fix regressions from wider use of ZERO_PAGE
  - tmpfs: do not allocate pages on read


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.79.0.103
changelog:
  - !369 Backport CVEs and bugfixes
  - mm/vmpressure: fix data-race with memcg->socket_pressure
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - mm/memory: return vm_fault_t result from migrate_to_ram() callback
  - net: sched: disallow noqueue for qdisc classes
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  - xfs: Fix deadlock on xfs_inodegc_worker
  - net: sched: cbq: dont intepret cls results when asked to drop
  - net: sched: atm: dont intepret cls results when asked to drop
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.80.0.104
changelog:
  - !386 Backport CVEs and bugfixes
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: enforce a consistent minimal mtu
  - net: switch to storing KCOV handle directly in sk_buff
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - mm: memcontrol: fix potential oom_lock recursion deadlock
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: fix null-ptr-deref in ext4_write_info
  - xfs: fix potential log item leak


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.81.0.105
changelog:
  - !400 Backport fs and block bugfixes
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
  - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
  - ubifs: Re-statistic cleaned znode count if commit failed
  - ubifs: dirty_cow_znode: Fix memleak in error handling path
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - cifs: sanitize multiple delimiters in prepath
  - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios
  - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop
  - crypto: hisilicon/qm - modify event irq processing
  - crypto: hisilicon/qm - move alloc qm->wq to qm.c
  - crypto: hisilicon/qm - add functions for releasing resources


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.82.0.106
changelog:
  - !410 Backport CVEs and bugfixes
  - x86/kasan: Populate shadow for shared chunk of the CPU entry area
  - x86/kasan: Add helpers to align shadow addresses up and down
  - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
  - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
  - x86/mm: Recompute physical address for every page of per-CPU CEA mapping
  - x86/kasan: Map shadow for percpu pages on demand
  - x86/mm: Randomize per-cpu entry area
  - Huawei BMA: Fix iBMA driver bug
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - ppp: associate skb with a device at tx
  - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
  - bpf, sockmap: fix race in sock_map_free()
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - media: vivid: fix compose size exceed boundary
  - !405 kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.83.0.107
changelog:
  - !419 Backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - x86/bugs: Flush IBP in ib_prctl_set()
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
  - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
  - net/sched: sch_taprio: do not schedule in taprio_reset()
  - net/sched: sch_taprio: fix possible use-after-free
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - md/raid10: fix wrong setting of max_corr_read_errors
  - md/raid10: fix overflow in safe_delay_store
  - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
  - fix kabi broken due to import of 5.15-stable io_uring
  - io_uring: import 5.15-stable io_uring
  - task_work: add helper for more targeted task_work canceling
  - coredump: Limit what can interrupt coredumps
  - kernel: provide create_io_thread() helper
  - fs: provide locked helper variant of close_fd_get_file()
  - kernel: remove checking for TIF_NOTIFY_SIGNAL
  - entry: Add support for TIF_NOTIFY_SIGNAL
  - signal: Add task_sigpending() helper
  - arm: add support for TIF_NOTIFY_SIGNAL
  - arm64: add support for TIF_NOTIFY_SIGNAL
  - riscv: add support for TIF_NOTIFY_SIGNAL
  - powerpc: add support for TIF_NOTIFY_SIGNAL
  - x86: Wire up TIF_NOTIFY_SIGNAL
  - iov_iter: add helper to save iov_iter state
  - perf beauty: Update copy of linux/socket.h with the kernel sources
  - perf trace beauty: Update copy of linux/socket.h with the kernel sources
  - io_uring: correct pinned_vm accounting
  - file: Rename __close_fd_get_file close_fd_get_file
  - io_uring: don't hold uring_lock when calling io_run_task_work*
  - io_uring: don't take uring_lock during iowq cancel
  - fs: make do_renameat2() take struct filename
  - net: add accept helper not installing fd
  - net: provide __sys_shutdown_sock() that takes a socket
  - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
  - Make sure nd->path.mnt and nd->path.dentry are always valid pointers
  - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
  - fs: add support for LOOKUP_CACHED
  - Revert "io_uring: fix soft lockup when call __io_remove_buffers"
  - Revert "io_uring: deduplicate failing task_work_add"
  - Revert "io_uring: don't take uring_lock during iowq cancel"
  - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
  - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
  - Revert "[Huawei] io_uring:drop identity before creating a private one"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.84.0.108
changelog:
  - !454 Backport CVEs and bugfixes
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - neigh: make sure used and confirmed times are valid
  - HID: check empty report_list in bigben_probe()
  - HID: check empty report_list in hid_validate_values()
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - radi10: fix leak of 'r10bio->remaining' for recovery
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - raid10: fix leak of io accounting
  - tcp: Fix listen() regression in 5.15.88.
  - net/ulp: Remove redundant ->clone() test in inet_clone_ulp().
  - net/ulp: use consistent error code when blocking ULP
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - net/tls: tls_is_tx_ready() checked list_entry
  - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - splice: don't generate zero-len segement bvecs
  - rds: rds_rm_zerocopy_callback() use list_first_entry()
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - ring-buffer: Handle race between rb_move_tail and rb_check_pages
  - blk-mq: use quiesced elevator switch when reinitializing queues
  - ovl: fix use inode directly in rcu-walk mode


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.85.0.109
changelog:
  - !485 Backport CVEs and bugfixes
  - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit
  - fix compile error introduced by LoongArch commit
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - ring-buffer: Fix race between reset page and reading page
  - raid1, raid10: switch to precise io accounting
  - block: add precise io accouting apis
  - md/raid10: fix memleak for 'conf->bio_split'
  - sctp: fail if no bound addresses can be used for a given scope
  - ext4: fix WARNING in mb_find_extent
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - scsi: iscsi: Move pool freeing
  - xfs: aborting inodes on shutdown may need buffer lock
  - ext4: fix incorrect options show of original mount_opt and extend mount_opt2
  - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM
  - !474 [sync] PR-447: add perf loongarch support
  - tools/perf: Add basic support for LoongArch
  - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename)
  - !467 LoongArch: add kvm support
  - LoongArch: kvm: KVM support for 5.10
  - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig
  - LoongArch: fix compile error when using make allmodconfig
  - LoongArch: Export symbol for function smp_send_reschedule()
  - LoongArch: kvm: add initial kvm support
  - !453 Backport CVEs and bugfixes
  - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix
  - LoongArch: remove __ARCH_WANT_NEW_STAT
  - LoongArch: modify defconfig according to other architectures
  - LoongArch: Change definition of cpu_relax() for Loongson-3
  - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000
  - LoongArch: Use alternative to optimize libraries
  - LoongArch: Add alternative runtime patching mechanism
  - LoongArch: Remove the .fixup section usage
  - LoongArch: extable: Add a dedicated uaccess handler
  - LoongArch: extable: Add `type` and `data` fields
  - LoongArch: Switch to relative exception tables
  - LoongArch: Consolidate __ex_table construction
  - LoongArch: fix SECCOMP test error
  - LoongArch: fix vmlinux ld error
  - LoongArch: enable hugetlbfs support
  - LoongArch: save one instruction for arch_local_irq_{enable,disable}
  - LoongArch: optimize for syscall return
  - LoongArch: refresh usage of sync
  - LoongArch: use 40 bits address space for user
  - LoongArch: Support loader and kernel interface V40
  - LoongArch: Enhance booting and resume compatibility
  - LoongArch: Remove redudant csr save/restore
  - LoongArch: Support Power Manager
  - irqchip/loongson-liointc: Set different isr for differnt core
  - platform: Support loongson laptop generic driver
  - LoongArch: Adapted SECTION_SIZE_BITS with page size
  - ACPI: Support ACPI_MACHINE_WIDTH for 64
  - spi: loongson: Add LS7A spi driver support
  - i2c: loongson: Add LS7A i2c driver support
  - LoongArch: Call irq_find_matching_fwnode get irq domain
  - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch
  - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support
  - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC
  - LoongArch: convert p v s cache to l1 l2 l3 format
  - cpufreq: Add cpufreq driver for LoongArch
  - LoongArch: Fix section mismatch due to acpi_os_ioremap()
  - LoongArch: Add vector extensions support
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - openeuler: pci: workaround multiple functions can be assigned to only one VM


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.86.0.110
changelog:
  - !512 Backport CVEs and bugfixes
  - livepatch/core: Fix hungtask against cpu hotplug on x86
  - livepatch: Narrow the scope of the 'text_mutex' lock
  - livepatch: Cleanup klp_mem_prepare()
  - seccomp: Move copy_seccomp() to no failure path.
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
  - mm: optimize do_wp_page() for exclusive pages in the swapcache
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - mm/vmalloc: huge vmalloc backing pages should be split rather than compound
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - jbd2: fix data missing when reusing bh which is ready to be checkpointed
  - !502 [sync] PR-476: LoongArch: fix failed to boot
  - !498 [sync] PR-479: LoongArch: update network related default config
  - !496 [sync] PR-448: LoongArch: fix some pci problems
  - LoongArch: Initialize screen_info variable
  - LoongArch: Fixed EIOINTC structure members
  - LoongArch: Fix virtual machine startup error
  - loongarch/kvm: ls7a add iocsrw emulation
  - LoongArch: fix signal handler name changed
  - LoongArch: defconfig: update network configurations
  - LoongArch: pci root bridige set acpi companion only when not acpi_disabled.
  - pci: fix X server auto probe fail when both ast and etnaviv drm present
  - LS7A2000: PCIE: Fixup GPU card error
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port
  - LoongArch: Fixed some pcie card not scanning properly
  - pci: fix kabi error caused by pm_suspend_target_state
  - PCI: PM: Fix pcie mrrs restoring
  - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space
  - PCI: Check if entry->offset already exist for mem resource


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.87.0.111
changelog:
  - !529 Backport CVEs and bugfixes
  - block: fix use-after-free of q->q_usage_counter
  - block: move q_usage_counter release into blk_queue_release
  - Revert "block: fix null-deref in percpu_ref_put"
  - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
  - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
  - xfs, iomap: limit individual ioend chain lengths in writeback
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - fs/ntfs3: Validate resident attribute name
  - ima: Fix memory leakage in ima_store_template
  - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
  - coredump: fix kabi broken in struct coredump_params
  - coredump: Use the vma snapshot in fill_files_note
  - coredump/elf: Pass coredump_params into fill_note_info
  - coredump: Remove the WARN_ON in dump_vma_snapshot
  - coredump: Snapshot the vmas in do_coredump
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - mm: slince possible data races about pgdat->kswapd
  - mm: fix null-ptr-deref in kswapd_is_running()
  - fs/ntfs3: Validate MFT flags before replaying logs
  - fs/ntfs3: Validate attribute name offset
  - bpf: Fixes possible race in update_prog_stats() for 32bit arches
  - bpf: Avoid races in __bpf_prog_run() for 32bit arches
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact().
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
  - kernel: Initialize cpumask before parsing
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - bpf: Prevent decl_tag from being referenced in func_proto arg
  - bpf: Skip task with pid=1 in send_signal_common()
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
  - !460 Backport CVEs and bugfixes
  - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work
  - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work
  - irqchip/loongson: Fix syscore ops registration
  - irqchip/loongarch: Fix some issues of irq controllers
  - drm/loongson: using hdmi hot plug status register
  - malidp: Fix NULL vs IS_ERR() checking


author: gaihuiying <eaglegai@163.com> - 7.79.1-7
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: yanglu <yanglu72@h-partners.com> - 7.79.1-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
  - SUG:NA
  - DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: yangcheng <yangcheng87@huawei.com> - 1:27.2-3
changelog:
  - DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged


author: hanchao<hanchao47@huawei.com> - 1.17.3-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao <hanchao47@huawei.com> - 1.17.3-10
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loongarch modify the location where initrd is loaded into memory


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-4
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


