Hi Stewards and all: I collect current patch lists in devel mail list. Those patch contributors request to add them for 201902 stable tag. Because we have enter into Soft Feature Freeze, I want to collect your feedback for them. If any patches are missing, please reply this mail to add them. Feature List (under review): https://edk2.groups.io/g/devel/topic/patch_v3_0_1_add_pcd_to/69401948 [PATCH v3 0/1] Add PCD to disable safe string constraint assertions (solution under discussion) https://edk2.groups.io/g/devel/message/54122 [PATCH 1/1] ShellPkg: Add support for input with separately reported modifiers (under review, is this a feature or bug in the disucssion) Bug List (reviewed): https://edk2.groups.io/g/devel/message/54416 [PATCH v2 00/10] Fix false negative issue in DxeImageVerificationHandler(CVE-2019-14575) https://edk2.groups.io/g/devel/message/54523 [PATCH v1][edk2-stable202002] MdeModulePkg/SdMmcPciHcDxe: Fix double PciIo Unmap in TRB creation (CVE-2019-14587) https://edk2.groups.io/g/devel/message/54510 [PATCH v6 0/2] Enhancement and Fixes to BaseHashApiLib https://edk2.groups.io/g/devel/message/53703 [PATCH V2] UefiCpuPkg RegisterCpuFeaturesLib: Match data type and format specifier https://edk2.groups.io/g/devel/message/53577 [PATCH v1 1/1] ShellPkg: acpiview: Remove duplicate ACPI structure size definitions https://edk2.groups.io/g/devel/message/54192 [PATCH v2 1/1] ShellPkg: acpiview: Validate ACPI table 'Length' field Bug List (under review) https://edk2.groups.io/g/devel/message/54361 [PATCH 1/1] NetworkPkg/ArpDxe: Recycle invalid ARP packets(CVE-2019-14559) https://edk2.groups.io/g/devel/message/54569 [PATCH v3] NetworkPkg/Ip4Dxe: Check the received package length (CVE-2019-14559) https://edk2.groups.io/g/devel/message/54448 [PATCH v1 1/1] ShellPkg: acpiview: Prevent infinite loop if structure length is 0 Thanks Liming