# changelog

author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.32.v2401
changelog:
  - OPENEULER: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: icrypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Only wake up when ctx->more is zero (Herbert Xu) [task:622625]
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Taeyang Lee) [task:593631] {CVE-2026-23060}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.33.v2401
changelog:
  - thirdly update changelog for incoming 4.19.90-89.33.v2401 (Zhengyuan Liu)
  - Revert "PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Move pswiotlb dma functions behind dma_map_ops" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Adjust the location of the platform-identification process" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Fix a issue of member variable force not being initialized" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Bypass pswiotlb when the numa node the device belongs to is invalid" (taowei) [task:601439]
  - Revert "net/mlx5e: Rx, Update page pool numa node when changed" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Use fast DMA domain lookup" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Move platform-identification to cpu errata" (taowei) [task:601439]
  - secondly update changelog for incoming 4.19.90-89.33.v2401 (Zhengyuan Liu)
  - PHYTIUM: pswiotlb: Move platform-identification to cpu errata (Cui Chao) [bug:533139]
  - Revert "PHYTIUM: pswiotlb: Move platform-identification to cpu errata" (taowei) [bug:533139]
  - update changelog for incoming 4.19.90-89.33.v2401 (Zhengyuan Liu)
  - sched/core: Extend struct cfs_rq (Bing Huang) [task:588907]
  - sched/core: Fix RQCF_ACT_SKIP leak (Hao Jia) [task:588907]
  - sched/core: Avoid multiple calling update_rq_clock() in __cfsb_csd_unthrottle() (Hao Jia) [task:588907]
  - sched: Async unthrottling for cfs bandwidth (Josh Don) [task:588907]
  - sched: Provide raw_spin_rq_*lock*() helpers (Peter Zijlstra) [task:588907]
  - sched/fair: Remove superfluous lock section in do_sched_cfs_slack_timer() (Hui Su) [task:588907]
  - sched/fair: Remove distribute_running from CFS bandwidth (Josh Don) [task:588907]
  - sched/fair: Fix race between runtime distribution and assignment (Huaixin Chang) [task:588907]
  - sched/fair: Don't push cfs_bandwith slack timers forward (bsegall@google.com) [task:588907]
  - fix kabi issue for "clocksource: Reduce clocksource-skew threshold" (Wang Yan) [task:618319]
  - ipmi: ssif: add soft dependency on hisi_ipmi_pso (jianghaoran) [task:604185]
  - OPENEULER: ipmi: Add HiSilicon IPMI Page Soft Offline driver (hewanhan) [task:604185]
  - OPENEULER: uce: Prevent kernel panic for kernel-context UCE with recovery path (Qi Xi) [task:604185]
  - ext4: fix e4b bitmap inconsistency reports (Yongjian Sun) [task:604185]
  - OPENEULER: apei/ghes: Add sysctl interface to control soft-offline page isolation (Qi Xi) [task:604185]
  - OPENEULER: arm64: mm: Add copy mc support for migrate_page (Wupeng Ma) [task:604185]
  - OPENEULER: Revert "OPENEULER: arm64: mm: Add copy mc support for migrate_page" (Qi Xi) [task:604185]
  - f2fs: invalidate dentry cache on failed whiteout creation (Deepanshu Kartikey) [task:590061] {CVE-2025-71069}
  - regulator: core: Fix resolve supply lookup issue (ChiYuan Huang) [task:569843]
  - regulator: core: Use different devices for resource allocation and DT lookup (ChiYuan Huang) [task:569843] {CVE-2022-50616}
  - regulator: gpio: Convert to devm_regulator_register (Axel Lin) [task:569843]
  - regulator: dummy: Use devm_regulator_register() (Zenghui Yu) [task:569843]
  - regulator: Avoid a double 'of_node_get' in 'regulator_of_get_init_node()' (Christophe JAILLET) [task:569843]
  - regulator: of: Add of_node_put() before return in function (Nishka Dasgupta) [task:569843]
  - regulator: Factor out location of init data OF node (Charles Keepax) [task:569843]
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein) [task:606289]
  - locks: eliminate false positive conflicts for write lease (Amir Goldstein) [task:606289]
  - locks: Use inode_is_open_for_write (Nikolay Borisov) [task:606289]
  - PHYTIUM: pswiotlb: Use fast DMA domain lookup (Cui Chao) [task:601439]
  - net/mlx5e: Rx, Update page pool numa node when changed (Saeed Mahameed) [task:601439]
  - PHYTIUM: pswiotlb: Bypass pswiotlb when the numa node the device belongs to is invalid (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Fix a issue of member variable force not being initialized (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Adjust the location of the platform-identification process (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Move platform-identification to cpu errata (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Move pswiotlb dma functions behind dma_map_ops (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance" (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly (Cui Chao) [task:601439]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Thomas Gleixner) [task:608211]
  - clocksource: Set cs_watchdog_read() checks based on .uncertainty_margin (Paul E. McKenney) [task:608211]
  - clocksource: Reduce clocksource-skew threshold (Paul E. McKenney) [task:608211]
  - bfq: Avoid false marking of bic as stably merged (Jan Kara) [task:579359]
  - block, bfq: reset last_bfqq_created on group change (Paolo Valente) [task:579359]
  - block, bfq: avoid delayed merge of async queues (Paolo Valente) [task:579359]
  - block, bfq: boost throughput by extending queue-merging times (Pietro Pedroni) [task:579359]
  - block, bfq: consider also creation time in delayed stable merge (Paolo Valente) [task:579359]
  - block, bfq: fix delayed stable merge check (Luca Mariotti) [task:579359]
  - block, bfq: avoid circular stable merges (Paolo Valente) [task:579359]
  - mm/khugepaged: fix ->anon_vma race (Jann Horn) [task:448841] {CVE-2023-52935}
  - vga: ignore gpu which support SRIOV to use as boot_vga. (Lu Yao) [task:603255]
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [task:554177] {CVE-2025-40149}
  - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala) [task:554177]
  - net/tls: Device offload to use lowest netdevice in chain (Tariq Toukan) [task:554177]
  - net: netdevice: Add operation ndo_sk_get_lower_dev (Tariq Toukan) [task:554177]
  - PHYTIUM: gpio: phytium: Get the max IRQ number from device tree (Li Yuze) [task:562453]
  - PHYTIUM: drivers/perf: phytium: Rename DDR PMU event names (Tan Rui) [task:562453]
  - PHYTIUM: drivers/perf: phytium: Fix issue with PS23X00 DDR PMU on PBF < 1.20. (Tan Rui) [task:562453]
  - PHYTIUM: drivers/perf: phytium: Modify the name of PMU cycles event (Tan Rui) [task:562453]
  - PHYTIUM: i2c-2.0: phytium: Fixed the bug that processed unupdated data (Wu Jinyong) [task:562453]
  - PHYTIUM: i2c-2.0: phytium: Fixed the bug of delayed response to interrupts (Wu Jinyong) [task:562453]
  - PHYTIUM: i2c: phytium: Support MCTP over I2C (Wu Jinyong) [task:562453]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [task:606589] {CVE-2026-23274}
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Takashi Iwai) [task:567349] {CVE-2025-40269}
  - ALSA: usb-audio: Replace s/frame/packet/ where appropriate (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Fix packet size calculation (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Improve frames size computation (Alexander Tsoy) [task:567349]
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Aditya Garg) [task:593597, task:604597] {CVE-2026-23054}
  - hv_netvsc: Allocate rx indirection table size dynamically (Shradha Gupta) [task:593597, task:604597]
  - cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [task:539197, task:604597] {CVE-2025-39945}
  - wifi: mwifiex: Initialize the chan_stats array to zero (Qianfeng Rong) [task:539911, task:604597] {CVE-2025-39891}
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang) [task:532589, task:604597] {CVE-2023-53305}
  - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [task:527683, task:604597] {CVE-2025-38708}
  - jfs: upper bound check of tree index in dbAllocAG (Arnaud Lecomte) [task:527301, task:604597] {CVE-2025-38697}
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Yongzhen Zhang) [task:527563, task:604597] {CVE-2025-38702}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [task:597119] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Eric Dumazet) [task:597119]
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [task:593609] {CVE-2026-23099}
  - bonding: combine netlink and console error messages (Jonathan Toppins) [task:593609]
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [task:539841] {CVE-2025-39911}
  - tcp: add a fast path in tcp_delack_timer() (Eric Dumazet) [task:603877]
  - tcp: add a fast path in tcp_write_timer() (Eric Dumazet) [task:603877]
  - tcp: annotate data-races around icsk->icsk_pending (Eric Dumazet) [task:603877]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [task:535605] {CVE-2025-39883}
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [task:566429] {CVE-2025-40248}
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin) [task:569275] {CVE-2022-50630}
  - xfs: make inode reclaim almost non-blocking (Dave Chinner) [task:603105]
  - tls: separate no-async decryption request handling from async (Sabrina Dubroca) [task:525255] {CVE-2024-58240}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [task:596501] {CVE-2026-23216}
  - scsi: qla2xxx: Fix bsg_done() causing double free (Anil Gurumurthy) [task:600165] {CVE-2025-71238}
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Manish Rangankar) [task:600165]
  - scsi: qla2xxx: Fix sparse warning for dport_data (Nilesh Javali) [task:600165]
  - scsi: qla2xxx: Add a new v2 dport diagnostic feature (Bikash Hazarika) [task:600165]
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [task:593557] {CVE-2026-23089}
  - net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [task:593593] {CVE-2026-23074}
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [task:593625] {CVE-2026-23073}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [task:593607] {CVE-2026-23076}
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Will Rosenberg) [task:589013] {CVE-2025-71085}
  - sfc: complete the next packet when we receive a timestamp (Tom Zhao) [task:582061]
  - OPENEULER: livepatch: support for super-long symbol repositioning (caixiaomeng 00662745) [task:479611]
  - sched: move the process identification module to the proper place (gonglinkai) [task:554493]
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima) [task:593627] {CVE-2026-23083}
  - netdevsim: fix a race issue related to the operation on bpf_bound_progs list (Yun Lu) [task:583035]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Cryolitia PukNgae) [task:589059] {CVE-2025-71118}
  - net: Fix kabi caused linux/sched/isolation.h (Xiangqian Zhang) [task:550259]
  - net: auto affinity to exclude isolated CPU cores (Xiangqian Zhang) [task:550259]
  - ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [task:554287] {CVE-2025-40190}
  - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi) [task:576303] {CVE-2022-50735}
  - vsock/virtio: cap TX credit to local buffer size (Melbin K Mathew) [task:593641] {CVE-2026-23086}
  - vsock/virtio: fix potential underflow in virtio_transport_get_credit() (Melbin K Mathew) [task:593641]
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov) [task:593641]
  - x86/unwind/orc: Fall back to using frame pointers for generated code (Josh Poimboeuf) [task:605427]
  - bpf: Fix invalid prog->stats access when update_effective_progs fails (Pu Lehui) [task:577043] {CVE-2025-68742}
  - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) [task:371789]
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [task:497317] {CVE-2025-38337}
  - hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init() (Yang Jihong) [task:592331]
  - sched: add lightweight tracing for rq lock (liwanwu) [task:569877]
  - sched/core: Extend struct rq (Bing Huang) [task:569877]
  - xfs: check buffer pin state after locking in delwri_submit (Dave Chinner) [task:602811]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.34.v2401
changelog:
  - MAILLIST: esp: Force skb_cow_data() on RX when the skb is non-linear (Hyunwoo Kim) [task:626683]
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [task:623091] {CVE-2026-31668}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.35.v2401
changelog:
  - MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:629903] {CVE-2026-46300}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.36.v2401
changelog:
  - Revert "sched/fair: Don't push cfs_bandwith slack timers forward" (Bing Huang)
  - Revert "sched/fair: Fix race between runtime distribution and assignment" (Bing Huang)
  - Revert "sched/fair: Remove distribute_running from CFS bandwidth" (Bing Huang)
  - Revert "sched/fair: Remove superfluous lock section in do_sched_cfs_slack_timer()" (Bing Huang)
  - Revert "sched: Provide raw_spin_rq_*lock*() helpers" (Bing Huang)
  - Revert "sched: Async unthrottling for cfs bandwidth" (Bing Huang)
  - Revert "sched/core: Avoid multiple calling update_rq_clock() in __cfsb_csd_unthrottle()" (Bing Huang)
  - Revert "sched/core: Fix RQCF_ACT_SKIP leak" (Bing Huang)
  - Revert "sched/core: Extend struct cfs_rq" (Bing Huang)


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.37.v2401
changelog:
  - sched: fix issues introduced by the previous commit. (cuitao) [task:630943]
  - sched: fix kabi problem due to dot (Zhengyuan Liu)
  - ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [task:630943]
  - crypto: af_alg - Fix request acceptance condition in af_alg_tsgl_sendmsg (chengang) [task:629353]
  - crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek) [task:629353]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.39.v2401
changelog:
  - update changelog for incoming 4.19.90-89.39.v2401 (Zhengyuan Liu)
  - PHYTIUM: pswiotlb: Use fast DMA domain lookup (Cui Chao) [task:601439]
  - net/mlx5e: Rx, Update page pool numa node when changed (Saeed Mahameed) [task:601439]
  - PHYTIUM: pswiotlb: Bypass pswiotlb when the numa node the device belongs to is invalid (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Fix a issue of member variable force not being initialized (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Adjust the location of the platform-identification process (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Move pswiotlb dma functions behind dma_map_ops (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance" (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly (Cui Chao) [task:601439]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Pablo Neira Ayuso) [task:626475] {CVE-2026-43116}
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - i2c: i801: Fix block process call transactions (Jean Delvare) [bug:552725]
  - i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit) [bug:552725]
  - i2c: i801: Add support for Intel Alder Lake PCH-M (Jarkko Nikula) [bug:552725]
  - i2c: i801: Bring back Block Process Call support for certain platforms (Jarkko Nikula) [bug:552725]
  - i2c: i801: Use iTCO version 6 in Cannon Lake PCH and beyond (Mika Westerberg) [bug:552725]
  - i2c: i801: Add Block Write-Block Read Process Call support (Alexander Sverdlin) [bug:552725]
  - Revert "scsi: restrict softirq rerun deferral to Phytium S5000C/S5000C-E" (Yang Xiuwei) [task:603047]
  - arm64: crashkernel: implement fallback mechanism for memory reservation (Youling Tang) [task:606257]
  - revert "arm64/kdump: try more time if allocation failed" (Youling Tang) [task:606257]
  - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup (Zilin Guan) [task:606421] {CVE-2026-23256}
  - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup (Zilin Guan) [task:606421]
  - net: liquidio: Initialize netdev pointer before queue setup (Zilin Guan) [task:606421]
  - liquidio: remove obsolete functions and data structures (Felix Manlunas) [task:606421]
  - liquidio: change octnic_ctrl_pkt to do synchronous soft commands (Felix Manlunas) [task:606421]
  - liquidio: make soft command calls synchronous (Felix Manlunas) [task:606421]
  - liquidio: improve soft command handling (Felix Manlunas) [task:606421]
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang) [task:622889] {CVE-2026-31663}
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu) [task:622889]
  - xen/privcmd: unregister xenstore notifier on module exit (GuoHan Zhao) [task:622715]
  - xen/privcmd: restrict usage in unprivileged domU (Juergen Gross) [task:622715] {CVE-2026-31788}
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (Zecheng Li) [task:625243]
  - sched/fair: Ensure that the CFS parent is added after unthrottling (Rik van Riel) [task:625243]
  - f2fs: fix out-of-bounds access in sysfs attribute read/write (Yongpeng Yang) [task:600181] {CVE-2026-23235}
  - f2fs: fix to avoid UAF in f2fs_write_end_io() (Chao Yu) [task:600273] {CVE-2026-23234}
  - lsm: Fix uncleaned security domain in inode init (mengdehui) [task:624405]
  - Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz) [task:613213] {CVE-2026-23462}
  - sched/fair: Add ancestors of unthrottled undecayed cfs_rq (Michal Koutný) [task:620621]
  - ALSA: aloop: Fix racy access at PCM trigger (Takashi Iwai) [task:597107] {CVE-2026-23191}
  - ALSA: aloop: Introduce a function to get if access is interleaved mode (Chancel Liu) [task:597107]
  - ALSA: aloop: Add control element for getting the access mode (Ivan Orlov) [task:597107]
  - ALSA: aloop: Add support for the non-interleaved access mode (Ivan Orlov) [task:597107]
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [task:623139] {CVE-2026-31532}
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (YunJe Shin) [task:597059] {CVE-2026-23112}
  - drivers: base: Free devm resources when unregistering a device (David Gow) [task:540545] {CVE-2023-53596}
  - security/lsm: Fix crash empty inode security field (mengdehui) [task:616919]
  - ext4: no need to verify new add extent block (yangerkun) [task:613187]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Zicheng Qu) [task:613155]
  - sched/fair: Prevent unlimited runtime on throttled group (Vincent Guittot) [task:613155]
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim) [task:614475] {CVE-2026-31408}
  - OPENEULER: PCI: Fix AB-BA deadlock between aer_isr() and device_shutdown() (Ziming Du) [task:612083]
  - PCI: Fix pci_slot_trylock() error handling (Jinhui Guo) [task:612081]
  - fs: move file_start_write() into direct_splice_actor() (Amir Goldstein) [task:604191, task:607439]
  - sched/fair: Prevent dead task groups from regaining cfs_rq's (Mathias Krause) [task:600509]
  - sched/fair: Correctly insert cfs_rq's to list on unthrottle (Odin Ugedal) [task:600509]
  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe) [task:606387] {CVE-2026-23253}
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [task:626683] {CVE-2026-43284}
  - Revert "MAILLIST: esp: Force skb_cow_data() on RX when the skb is non-linear" (Jackie Liu)
  - net: use dst_dev_rcu() in sk_setup_caps() (Eric Dumazet) [task:554291] {CVE-2025-40170}
  - net: dst: introduce dst->dev_rcu (Eric Dumazet) [task:554291]
  - net: dst: add four helpers to annotate data-races around dst->dev (Eric Dumazet) [task:554291]
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Eric Dumazet) [task:554291]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Eric Dumazet) [task:554291]
  - MAILLIST: net/rds: reset op_nents when zerocopy page pin fails (Allison Henderson) [task:632491]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.40.v2401
changelog:
  - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [task:638287] {CVE-2025-38727}
  - MAINTAINERS: remove inactive maintainers (Haofeng.Li) [task:636057]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.41.v2401
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}
  - Revert "net/sched: act_pedit: check static offsets a priori" (luoxuanqiang)
  - Revert "net/sched: act_pedit: free pedit keys on bail from offset check" (luoxuanqiang)
  - Revert "net/sched: fix pedit partial COW leading to page cache corruption" (luoxuanqiang)
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}
  - net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [task:642737]
  - net/sched: act_pedit: check static offsets a priori (Pedro Tammela) [task:642737]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.42.v2401
changelog:
  - fix KABI change in eth_parse_header (YANGANG) [task:623005]
  - bonding: Fix kabi change in struct header_ops (Wang Yan) [task:623005]
  - bonding: prevent potential infinite loop in bond_header_parse() (Eric Dumazet) [task:623005]
  - bonding: fix type confusion in bond_setup_by_slave() (Jiayuan Chen) [task:623005]
  - net: fix tcp r/wmem sysctl data for non-init netns (luoxuanqiang) [task:648883]
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:634641]
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [task:634641] {CVE-2026-43503}
  - Revert "MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers" (Yun Lu) [task:634641]
  - sched: fix compilation errors caused by the rqlock record (liwanwu) [task:645243]
  - update changelog for incoming 4.19.90-89.42.v2401 (Zhengyuan Liu)
  - block: Disable async bio dispatch to avoid S5000C-E boot hang (chengkaitao) [task:601701]
  - kabi: fix kabi break caused by addition in struct file_lock (Zhao Mengmeng) [task:627261]
  - ceph: avoid use-after-free in ceph_fl_release_lock() (Xiubo Li) [task:627261]
  - ceph: check if file lock exists before sending unlock request (Yan, Zheng) [task:627261]
  - ceph: switch to vfs_inode_has_locks() to fix file lock bug (Xiubo Li) [task:627261]
  - filelock: new helper: vfs_inode_has_locks (Jeff Layton) [task:627261]
  - ceph: return -EIO if read/write against filp that lost file locks (Yan, Zheng) [task:627261]
  - crypto: af_alg - Fix regression on empty requests (Herbert Xu) [task:642503]
  - libbpf: Support BTF_KIND_FLOAT during type compatibility checks in CO-RE (Andrii Nakryiko) [task:631035]
  - libbpf: Add BTF_KIND_FLOAT support (Ilya Leoshkevich) [task:631035]
  - netfilter: conntrack: fix wrong ct->timeout value (Tzung-Bi Shih) [task:540091] {CVE-2023-53635}
  - net: netfilter: Remove ifdefs for code shared by BPF and ctnetlink (Kumar Kartikeya Dwivedi) [task:540091]
  - net: netfilter: Add kfuncs to allocate and insert CT (Lorenzo Bianconi) [task:540091]
  - net: add a sysctl interface for SO_REUSEPORT socket option setting (zhulei) [task:639891]
  - SUNRPC/cache: don't allow invalid entries to be flushed (J. Bruce Fields) [bug:582829]
  - SUNRPC/cache: Allow garbage collection of invalid cache entries (Trond Myklebust) [bug:582829]
  - cpupower: fix TSC MHz calculation (He Rongguang) [bug:585843]
  - OPENEULER: genirq: Increase the number of IRQ descriptors (Kunkun Jiang) [task:632897]
  - waive CVE-2025-38085 security fix via kernel parameter (liuye) [task:634893]
  - xfs: fix TOCTOU race in xfs_log_force_umount IOERROR check (Chi Zhiling) [task:584559, task:536191]
  - tcp: Add memory barrier to tcp_push() (Salvatore Dipietro) [task:613823]
  - tcp: tcp_wfree() refactoring (Eric Dumazet) [task:613823]
  - Use bitwise AND instead of logical AND (luoxuanqiang) [bug:526781]
  - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger (Takashi Iwai) [task:635877] {CVE-2026-46157}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (Cássio Gabriel) [task:635373] {CVE-2026-46090}
  - ALSA: aloop: Rename all jiffies timer specific functions (Timo Wischer) [task:635373]
  - ALSA: aloop: Use callback functions for timer specific implementations (Timo Wischer) [task:635373]
  - ALSA: aloop: Support return of error code for timer start and stop (Timo Wischer) [task:635373]
  - wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou) [task:626371] {CVE-2026-43110}
  - isofs: validate block number from NFS file handle in isofs_export_iget (Michael Bommarito) [task:635849] {CVE-2026-46124}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira) [task:624589] {CVE-2026-31758}
  - USB: usbtmc: prevent kernel-usb-infoleak (Edward Adam Davis) [task:624589]
  - usb: usbtmc: Add ioctl for vendor specific write (Guido Kiener) [task:624589]
  - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (Jiasheng Jiang) [task:627851] {CVE-2026-43424}
  - usb: gadget: f_hid: move list and spinlock inits from bind to alloc (Michael Zimmermann) [task:624579] {CVE-2026-31721}
  - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (Yuhao Jiang) [task:624579]
  - USB: gadget: f_hid: Add GET_REPORT via userspace IOCTL (Chris Wulff) [task:624579]
  - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (Kevin Cheng) [task:636333] {CVE-2026-46082}
  - netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso) [task:626421] {CVE-2026-43060}
  - nfc: nci: Fix race between rfkill and nci_unregister_device(). (Kuniyuki Iwashima) [task:597225] {CVE-2026-23167}
  - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write (Deepanshu Kartikey) [task:597225]
  - wifi: radiotap: reject radiotap with unknown bits (Johannes Berg) [task:608749] {CVE-2026-23367}
  - RDMA/umad: Reject negative data_len in ib_umad_write (YunJe Shin) [task:606433] {CVE-2026-23243}
  - f2fs: fix to do sanity check on direct node in truncate_dnode() (Chao Yu) [task:569831] {CVE-2023-53846}
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (Cen Zhang) [task:623217] {CVE-2026-31500}
  - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (Chen Jun) [task:460260] {CVE-2022-49901}
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [task:597115] {CVE-2026-23125}
  - sctp: sm_statefuns: Fix spelling mistakes (Zheng Yongjun) [task:597115]
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [task:622523] {CVE-2026-31607}
  - netfilter: nf_conntrack_expect: use expect->helper (Pablo Neira Ayuso) [task:616139] {CVE-2026-31414}
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [task:590359] {CVE-2025-71120}
  - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes (Yongpeng Yang) [task:606399] {CVE-2026-23267}
  - f2fs: fix to detect potential corrupted nid in free_nid_list (Chao Yu) [task:572643] {CVE-2025-68315}
  - f2fs: fix return value of f2fs_recover_fsync_data() (Chao Yu) [task:589011] {CVE-2025-68769}
  - romfs: check sb_set_blocksize() return value (Deepanshu Kartikey) [task:600233] {CVE-2026-23238}
  - f2fs: fix to avoid updating zero-sized extent in extent cache (Chao Yu) [task:590163] {CVE-2025-68796}
  - btrfs: do not strictly require dirty metadata threshold for metadata writepages (Qu Wenruo) [task:597229] {CVE-2026-23157}
  - net: add proper RCU protection to /proc/net/ptype (Eric Dumazet) [task:605985] {CVE-2026-23255}
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei) [task:616145] {CVE-2026-31422}
  - net: fix memory leak in tcp_conn_request() (Wang Liang) [task:613981] {CVE-2024-57841}
  - netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu) [task:616153] {CVE-2026-31418}
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (Selvarasu Ganesan) [task:531819] {CVE-2025-39801}
  - wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges) [task:609599] {CVE-2026-23281}
  - wifi: libertas: Remove unused auto deep sleep code (Dr. David Alan Gilbert) [task:609599]
  - wifi: libertas: main: remove unused functions (Dr. David Alan Gilbert) [task:609599]
  - wifi: mac80211: fix NULL deref in mesh_matches_local() (Xiang Mei) [task:609143] {CVE-2026-23396}
  - drm/amd/pm: fix null pointer access (Umio Yasuno) [task:527671] {CVE-2025-38705}
  - tracing: Do not let histogram values have some modifiers (Steven Rostedt (Google)) [task:461323] {CVE-2023-53093}
  - Input: pegasus-notetaker - fix potential out-of-bounds access (Seungjin Bae) [task:573169] {CVE-2025-68217}
  - comedi: multiq3: sanitize config options in multiq3_attach() (Nikita Zhandarovich) [task:573265] {CVE-2025-68258}
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Owen Gu) [task:575757] {CVE-2025-68331}
  - USB: UAS: use macro for reporting results (Oliver Neukum) [task:575757]
  - drm/i915/gvt: fix vgpu debugfs clean in remove (Zhenyu Wang) [task:540245] {CVE-2023-53625}
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [task:566427]
  - xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [task:566427]
  - Revert "xfrm: destroy xfrm_state synchronously on net exit path" (Sabrina Dubroca) [task:566427]
  - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) [task:566427] {CVE-2025-40215}
  - drm/amdgpu: Fix potential NULL dereference (Luben Tuikov) [task:540403]
  - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (Luben Tuikov) [task:540403] {CVE-2022-50527}
  - gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [task:566421] {CVE-2025-40242}
  - KVM: Don't clobber irqfd routing type when deassigning irqfd (Sean Christopherson) [task:596653] {CVE-2026-23198}
  - locking/lockdep: Provide lockdep_assert{,_once}() helpers (Peter Zijlstra) [task:596653]
  - lockdep: Add lockdep_assert_not_held() (Shuah Khan) [task:596653]
  - ASoC: stm32: sai: fix OF node leak on probe (Johan Hovold) [task:590363] {CVE-2025-71081}
  - ASoC: stm32: sai: fix device leak on probe (Johan Hovold) [task:590363]
  - ASoC: stm32: sai: fix set_sync service (Olivier Moysan) [task:590363]
  - bpf: Check the helper function is valid in get_helper_proto (Jiri Olsa) [task:542883] {CVE-2025-39990}
  - wifi: ath10k: fix dma_free_coherent() pointer (Thomas Fourier) [task:596507] {CVE-2026-23133}
  - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (Roberto Sassu) [task:533635] {CVE-2023-53391}
  - mm/mempool: fix poisoning order>0 pages with HIGHMEM (Vlastimil Babka) [task:573397] {CVE-2025-68231}
  - mm/mempool: replace kmap_atomic() with kmap_local_page() (Fabio M. De Francesco) [task:573397]
  - io_uring: wait interruptibly for request completions on exit (Jens Axboe) [task:539833] {CVE-2023-53461}
  - media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer (Zhang Shurong) [task:576555] {CVE-2023-54066}
  - media: gl861: re-implement I2C adapter logic (Antti Palosaari) [task:576555]
  - platform/x86: classmate-laptop: Add missing NULL pointer checks (Rafael J. Wysocki) [task:600157] {CVE-2026-23237}
  - netfilter: nf_tables: avoid chain re-validation if possible (Florian Westphal) [task:589955] {CVE-2025-71160}
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang) [task:577031] {CVE-2022-50771}
  - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (Gui-Dong Han) [task:590075] {CVE-2025-71111}
  - ocfs2: fix kernel BUG in ocfs2_find_victim_chain (Prithvi Tambewagh) [task:590365] {CVE-2025-68771}
  - libceph: make free_choose_arg_map() resilient to partial allocation (Tuo Li) [task:590171] {CVE-2026-22991}
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (Ilya Dryomov) [task:590125] {CVE-2026-22990}
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Zilin Guan) [task:592301] {CVE-2026-23038}
  - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (Jamal Hadi Salim) [task:593799] {CVE-2026-23105}
  - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593615] {CVE-2026-23108}
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593621] {CVE-2026-23061}
  - regmap: Fix race condition in hwspinlock irqsave routine (Cheng-Yu Lee) [task:593595] {CVE-2026-23071}
  - leds: led-class: Only Add LED to leds_list when it is fully ready (Hans de Goede) [task:593803] {CVE-2026-23101}
  - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (Andrey Vatoropin) [task:593611] {CVE-2026-23084}
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593635] {CVE-2026-23058}
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (Robbie Ko) [task:593633] {CVE-2025-71194}
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Jason Gunthorpe) [task:590149] {CVE-2025-71096}
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Weiming Shi) [task:590147] {CVE-2026-22977}
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (fuqiang wang) [task:590143] {CVE-2025-71104}
  - ext4: xattr: fix null pointer deref in ext4_raw_inode() (Karina Yankevich) [task:590135] {CVE-2025-68820}
  - mlxsw: spectrum_router: Fix neighbour use-after-free (Ido Schimmel) [task:590137] {CVE-2025-68801}
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Gregory CLEMENT) [task:589963] {CVE-2025-71109}
  - caif: fix integer underflow in cffrml_receive() (Junrui Luo) [task:590063] {CVE-2025-68799}
  - arp: do not assume dev_hard_header() does not change skb->head (Eric Dumazet) [task:589975]
  - ip6_gre: make ip6gre_header() robust (Eric Dumazet) [task:589975] {CVE-2025-71098}
  - e1000: fix OOB in e1000_tbi_should_accept() (Guangshuo Li) [task:590055] {CVE-2025-71093}
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Kohei Enju) [task:589971] {CVE-2025-71087}
  - tracing: Do not register unsupported perf events (Steven Rostedt) [task:589945] {CVE-2025-71125}
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Herbert Xu) [task:589525] {CVE-2025-71131}
  - crypto: seqiv - Use kmemdup in seqiv_aead_encrypt() (YueHaibing) [task:589525]
  - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure (Deepakkumar Karn) [task:589521] {CVE-2025-71154}
  - ipv4: ip_gre: make ipgre_header() robust (Eric Dumazet) [task:589547] {CVE-2026-23011}
  - hwmon: (ibmpex) fix use-after-free in high/low store (Junrui Luo) [task:589061] {CVE-2025-68789}
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Mark Pearson) [task:589027] {CVE-2025-71108}
  - net: hns3: using the num_tqps in the vf driver to apply for resources (Jian Shen) [task:589009] {CVE-2025-71064}
  - via_wdt: fix critical boot hang due to unnamed resource allocation (Li Qiang) [task:588997] {CVE-2025-71114}
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() (Jeongjun Park) [task:589007] {CVE-2025-68819}
  - net/sched: sch_qfq: do not free existing class in qfq_change_class() (Eric Dumazet) [task:588975] {CVE-2026-22999}
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Raphael Pinsonneault-Thibeault) [task:567353] {CVE-2025-40283}
  - Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (Luiz Augusto von Dentz) [task:515351] {CVE-2022-50233}
  - PCI/AER: Fix NULL pointer access by aer_info (Vernon Yang) [task:573049] {CVE-2025-68309}
  - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (Zhu Yanjun) [task:576735] {CVE-2025-68379}
  - wifi: ath10k: Delay the unmapping of the buffer (Youghandhar Chintala) [task:576839] {CVE-2022-50700}
  - ALSA: usb-mixer: us16x08: validate meter packet indices (Shipei Qu) [task:590965] {CVE-2025-68783}
  - net: hns3: add VLAN id validation before using (Jian Shen) [task:589439] {CVE-2025-71112}
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Pavel Zhigulin) [task:566417] {CVE-2025-40252}
  - gue: Fix skb memleak with inner IP protocol 0. (Kuniyuki Iwashima) [task:593547] {CVE-2026-23095}
  - ipvlan: Make the addrs_lock be per port (Dmitry Skorodumov) [task:593735] {CVE-2026-23103}
  - sched: add stack record for rq lock (Wanwu Li) [task:569877]
  - bonding: add broadcast NS and NA packets to all slaves for 802.3ad mode (Yun Lu) [task:422173]
  - Dynamically adjust tcp_r/wmem for netperf/netserver via timer (luoxuanqiang) [bug:526781]
  - Revert "net: automatically double tcp_r/wmem for netperf/netserver" (Wang Yan) [bug:526781]
  - Optimize netperf/netserver identification string to reduce false matches (luoxuanqiang) [bug:526781]
  - bpf: Avoid storing modifier to info->btf_id (Martin KaFai Lau) [bug:580497]
  - drm/ast: PowerOn and SetOn DP when commit (Shixiong Ou) [bug:490675]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.43.v2401
changelog:
  - KVM: x86: Fix shadow paging UAF from stale child pages (Jackie Liu) [task:649409] {CVE-2026-53359}
  - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Sebastian Andrzej Siewior) [task:633141]
  - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Ji'an Zhou) [task:633141]
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [task:633141]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [task:633141] {CVE-2026-43499}


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p37
changelog:
  - Type: bugfix
  - ID:   [BUG#340468]
  - SUG:  NA
  - DESC: don't free memory that was not dynamically allocated


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p39
changelog:
  - Type: update
  - ID:   [TASK#500863]
  - SUG:  NA
  - DESC: fix nonremovable disks incorrectly placed under removable disks


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: tenglei <tenglei@kylinos.cn> - 1:12.2.8-8.p05
changelog:
  - Type:BUG#194959,BUG#215185
  - ID:NA
  - SUG:NA
  - DESC: 1) Remove subman because of not support kylinos.
          2) fix CVE-2021-20288 on loongarch


author: xuyujun <xuyujun@kylinos.com.cn> -1.0.0-3.skl3.ft.ns7_4.se.05
changelog:
  - Type: update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 设置策略接口由kysec-utils实现
  - 	  add patch: chpolicy-20220527.patch


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#142670]
  - SUG:NA
  - DESC: 使用chpolicy切换策略，强制重启后，策略切换失败
  -         add patch: chpolicy-fix-selinux-error-after-force-reboot.patch


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#177892]
  - SUG:NA
  - DESC: 修改帮助信息描述
  -	  add patch: chpolicy-modify-help-information.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.0-3.skl3.se.10
changelog:
  - Type:update
  - ID:[BUG#191506]
  - SUG:NA
  - DESC:处理bug191506，兼容policy.33
  - add patch: chpolicy-fix-bug191506-compatible-se33.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-3.skl3.se.11
changelog:
  - Type:update
  - ID:[BUG#541291] chpolicy增加命令行参数校验
  - SUG:NA
  - DESC: chpolicy 增加命令行参数校验
  - add patch: chpolicy-20260629-add-param-verify.patch


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-Add-missing-position-handling-to-mount-parameters-gi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-cifs-utils-fix-probabilistic-compiling-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-mount.cifs-fix-max-buffer-size-when-parsing-snapshot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-mount.cifs-fix-crash-when-mount-point-does-not-exist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-cifs.upcall-fix-regression-in-kerberos-mount.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-cifs.upcall-remove-getpwuid-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.4.lns8
changelog:
  - Fix structure parameter passing error
  - Update vector builtins to keep it consistent with GCC
  - Support -fsanitize=<check> options


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.9.lns8
changelog:
  - [LoongArch] Support la264 and la364
  - [LoongArch] Add new vector interface according to the latest tool chain
  - [LoongArch] Add missing preprocessor built-in macro definitions


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 19.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the error level logs displayed for the cloud-init-local service


author: yanjianqing <yanjianqing@kylinos.cn> -19.4-6.p03
changelog:
  - Type:CVE
  - ID:[Task#154159]
  - SUG:NA
  - DESC:fix CVE-2022-2084
  -      Fix test_net.py testcase fail
  -      Fix a unitest error


author: caiyinan <caiyinan@kylinos.cn> - 196.3-1.p06
changelog:
  - Type:bugfix
  - ID:[bug#186959]
  - SUG:NA
  - DESC:fix unlinked other OS branding file by excluding from packages


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-12.p08
changelog:
  - Type: bugfix
  - ID: [BUG#191919]
  - SUG: NA
  - DESC:skip p07,Remove wrong country_name in locatedata.


author: Xu Jin <jinxu@kylinos.cn> - 2.28-12.p10
changelog:
  - Type:CVE
  - ID:[TASK#184397]
  - SUG:NA
  - DESC:fix CVE-2022-23219 CVE-2021-3999 CVE-2022-23218 CVE-2023-0687


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-12.p12
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:Fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: panzhe <panzhe@kylinos.cn> - 2.28-12.p15
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC: fix pthread_once hangs when init routine throws an exception


author: panzhe <panzhe@kylinos.cn> - 2.28-12.p16
changelog:
  - Type: update
  - ID: [BUG#343449]
  - SUG:  NA
  - DESC: Fix missing lib after glibc update , and resolve the file conflict issue of /usr/lib64/libnss_nis.so


author: Yu Peng <yupeng@kylinos.cn> - 2.28-12.p20
changelog:
  - Type:bugfix
  - ID:[Task#571025]
  - SUG:NA
  - DESC: Fix /etc/resolv.conf reloading defects backport from glibc 2.32
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=6c80c6e8767b860a5e18e136d04a80be2a8dce15
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=9642b85fd0dfa5731020a3271c08e33e1dc05c85
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=a1a20f029299dc27170912bb9233070c8403444d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=dd0b4df329ff7ff2a656404db271c8ee8379ff9d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=fa00db0a6eb755837ae5d413515e0da582b304f3
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=631cf64bc1d8306e011ef39f60b8cb6de91bd271


author: panzhe <panzhe@kylinos.cn> - 2.28-12.p21
changelog:
  - Type:update
  - ID:[Task#588463]
  - SUG:NA
  - DESC: resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: litenglong <litenglong@kylinos.cn> - 2.28-12.p22
changelog:
  - Type:update
  - ID:[Task#595081]
  - SUG:NA
  - DESC: posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)


author: litenglong <litenglong@kylinos.cn> - 2.28-12.p23
changelog:
  - Type:cves
  - ID:[BUG#573915]
  - SUG:NA
  - DESC: Use pending character state in IBM1390, IBM1399 character
   sets (CVE-2026-4046)


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-213
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: lijian<lijian2@kylinos.cn> - 1.2.0-213.p03
changelog:
  - Type:bugfix
  - ID:[BUG#352209]
  - SUG:NA
  - DESC:Added package conflict with docker-engine to avoid co-installation issues


author: weiyucheng<weiyucheng@kylinos.cn> - 1.2.0-213.p05
changelog:
  - Type:cves
  - ID:CVE-2024-25621
       CVE-2025-64329
  - SUG:NA
  - DESC:upgrade to 1.2.0-213.p05
         fix CVE-2024-25621 CVE-2025-64329


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: lijian <lijian2@kylinos.cn> - 1:1.1.0-9.p02
changelog:
  - Type:cves
  - ID:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC:fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-6
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: jiangchuangang<jiangchuangang@huawei.com> - 8.32-9
changelog:
  - sync patches from community
  - add backport-pr-fix-infinite-loop-when-double-spacing.patch
    backport-wc-ensure-we-update-file-offset.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-10
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 8.32-10.p01
changelog:
  - Type:update
  - ID:TASK#186438;BUG#199873
  - SUG:NA
  - DESC:fix typo in zh_CN.po
         using the ns7.6 stat file


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: sunjialin <sunjialin@kylinos.cn> - 4.11.12-32.p01
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify Requires:libldb & Skip export LDFLAGS & Rebuild for libcrypt.so.1 on loongarch


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - SUG:NA
  - DESC:fix smbd, don't log success as error
         fix require satisfied libldb version for samba-client


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 4.11.12-32.p13
changelog:
  - Type:bugfix
  - ID:[BUG#550911]
  - SUG:NA
  - DESC:Fix duplicate SMB file_ids leading to client cache poisoning


author: wangjie1 <wangjie1@kylinos.cn> - 4.11.12-32.p19
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:Fix CVE-2026-3238 CVE-2026-4480 CVE-2026-4408


author: peijiankang <peijiankang@kylinos.cn> - 1:2.2.13-21.se.01
changelog:
  - Type: cves
  - ID:   [TASK#344691]
  - SUG:  NA
  - DESC:合入打印机设备管控 Patch6009: kysec-devctl-printer-control-separate.patch
         generic-hardened-ld
         sync from 2.2.13-19.p01.se.01


author: houhongxun <houhongxun@kylinos.cn> - 1:2.2.13-21.se.01.p03
changelog:
  - Type: cves
  - ID:   CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079
  - SUG:  NA
  - DESC: fix CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: gaoyukun <gaoyukun@kylinos.cn> - 7.71.1-43.p01
changelog:
  - Type:bugfix
  - ID:TASK#414527
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers', resolve test1592,507,534 failure.


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-47
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 8:2.03.09-15.p01
changelog:
  - Type: updates
  - ID: [Task#186442]
  - SUG: NA
  - DESC: Sync 2.03.09-12.p05 source rpm patches:
  	p01:0018-LD_LIBRARY_PATH-add-extra-dir.patch
  	p03:1000-use-4k-sector-size-when-any-dev-is-4k.patch
  	p04:lvmlockd: add suport for loongarch64


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-15.p03
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group
          because sp4-ha occupies p02,so p03 is used.


author: weishuaihao <weishuaihao@kylinos.cn> - 8:2.03.09-15.p06
changelog:
  - Type: bugfix
  - ID: [Task#559469]
  - SUG: NA
  - DESC:add internal error for missing vg
         because sp4-ha occupies p05,so p06 is used.


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: lijiaan <lijiaan@kylinos.cn> - 1.0.0.rc16-52.p01
changelog:
  - modify spec  after %build  add cp /usr/lib/rpm/kylin/confit.* ./autoconf
  - DESC: config.guess and config.sub ensure the software can be compiled and
    run correctly in a variety of different system env.


author: yanshuai <yanshuai01@kylinos.cn> - 1.0.0.rc16-52.p03
changelog:
  - Type: bugfix
  - ID: [BUG#302327]
  - SUG: NA
  - DESC: fix dmraid help info display incomplete problem'


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: wanfeng <wanfeng@kylinos.cn> - 4.2.23-11.p01
changelog:
  - Type:update
  - ID:Task#163840
  - SUG:NA
  - DESC:and modify bugtracker url, and add support loongarch64
  -      add patch:1000-Kylin-modify-bugtracker-url-and-support-loongarch64.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 4.2.23-11.p02
changelog:
  - Type:bugfix
  - ID:BUG#211784
  - SUG:NA
  - DESC: move bash-completion/completions/dnf to dnf package, fix dnf command completion issue


author: majianhan <majianhan@kylinos.cn> - 4.2.23-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#451989]
  - SUG:NA
  - DESC:Fix permature exit in download_packages due to untranslated


author: yueyuankun <yueyuankun@kylinos.cn> - 4.2.23-11.p04
changelog:
  - Type:bugfix
  - ID:BUG#415025
  - SUG:NA
  - DESC:fix yum.misc.decompress() is unable to handle .zst files
         fix typo


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.86-12
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.86-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.86-15
changelog:
  - Type:security
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Fix rdlen field validation in RRSIG packets
         Fix buffer overflow in helper with large CLIDs
         Fix broken client subnet validation


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: zhangbowei <zhangbowei@kylinos.cn> - 18.09.0-261.p01
changelog:
  - Type:update
  - CVE:NA
  - SUG:NA
  - DESC:support loong64 and merge kylin patch:
  	0005-kylin-fix-buildmode-pie-for-loong64.patch,
  	0006-kylin-fix-firewalld-warning-for-loong64.patch,
  	0007-kylin-fix-docker-swarm-run-failed-for-loongarch64.patch


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-261.p02
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: weiyuan <weiyuan@kylinos.cn> - 18.09.0-261.p04
changelog:
  - Type: CVE
  - ID: CVE-2024-29018
        CVE-2024-24557
  - SUG: NA
  - DESC: backport fix cve CVE-2024-29018 CVE-2024-24557


author: weiyucheng <weiyucheng@kylinos.cn> - 18.09.0-261.p05.04
changelog:
  - Type: cves
  - ID: CVE-2024-36621
        CVE-2024-36623
  - SUG: NA
  - DESC: backport fix cve CVE-2024-36621 CVE-2024-36623


author: zhangbowei<zhangbowei@kylinos.cn> - 18.09.0-261.p06.04
changelog:
  - Type:bugfix
  - ID:[Task#480351]
  - SUG:NA
  - DESC: fix file conflicts between docker-engine and docker-runc,containerd,docker-proxy


author: songnannan<songnannan2@huawei.com> 0.8.0.dev.2-2.h1
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:the debuginfo and debugsource packages are not generated by default


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
changelog:
  - Type: bugfix
  - CVE:  NA
  - SUG:  NA
  - DESC: fix the bug when runc failed to update fat container memory value


author: weiyuan <weiyuan@kylinos.cn> - 1.0.0.rc3-223
changelog:
  - Type: CVE
  - ID: CVE-2024-45310
  - SUG: NA
  - DESC: backport fix cve CVE-2024-45310 and sync loong64 arch support


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-223.p02.04
changelog:
  - Type:cves
  - ID:CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
  - SUG:NA
  - DESC:fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.0.0.rc3-103.p04
changelog:
  - Type: bugfix
  - ID:   [bug#210840]
  - SUG:  NA
  - DESC: update golang.org/x/sys/unix and fix bug#210840


author: wangshuo <wangshuo@kylinos.cn> - 1.0.0.rc3-103.p05
changelog:
  - Type:CVE-2024-21626
  - ID:[TASK#198073]
  - SUG:NA
  - DESC:add patch 0120-runc-fix-CVE-2024-21626-without-close_range.patch, fix RootDir fd leaks


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-223.p02.01
changelog:
  - Type:cves
  - ID:CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
  - SUG:NA
  - DESC:upgrade to 1.0.0.rc3-223.p02
         fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport from openEuler
         support loongarch64 and mips64el


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport missing rlimit mapping patch to fix runc error on mips


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p02
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: wangchen<wangchen137@huawei.com> - 1.8.17-7
changelog:
  - Fix Md5 hash does not match for two different runs.
    Fix Incorrect label name in case regeneration of HTML without regeneration of dot files.


author: lipengyu <lipengyu@kylinos.cn> - 1:1.8.17-8.p01
changelog:
  - Type:update
  - ID:[BUG#337307]
  - SUG:NA
  - DESC:add Obsoletes:doxygen-latex to fix update test failed


author: liwei <liwei@kylinos.cn> - 050-5.se.06.02
changelog:
  - Type: task
  - ID:162574
  - DESC: 合入通用支持程序黑名单功能
          add patch:dracut-add-support-program-blklist.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.06.03
changelog:
  - Type: bugfix
  - ID:[BUG#191637]
  - SUG:NA
  - DESC: 解决auditadm用户无法查看/var/log/目录下的文件的问题
  -	  add patch: dracut-050-fix-auditadm-read-var-log-file-failed-bug.patch


author: huangwenhua <huangwenhua@kylinos.cn> - 050-5.se.06.04
changelog:
  - Type: task
  - ID:[TASK#174208]
  - SUG:NA
  - DESC: nvme 安装盘系统在安装dracut-config-generic 软件包重新生成initramfs.img 系统重启失败
  -	  add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.06.05
changelog:
  - Type: bugfix
  - ID:[BUG#192027]
  - SUG:NA
  - DESC: 修复dracut-pre-pivot.service启动日志报错的问题
  -         add patch: dracut-050-fix-dracut-pre-pivot-boot-log-tips-error.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.08.01
changelog:
  - Type: bugfix
  - ID:[BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -	  add patch: dracut-050-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.08.02
changelog:
  - Type: update
  - ID:[任务#188302]
  - SUG:NA
  - DESC: 删除关闭三员时密码过期时间的设置
  -	  add patch: dracut-050-del-user-passwd-validity-period-set.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-6.se.08.02
changelog:
  - Type: update
  - ID:[任务#186438]
  - SUG:NA
  - DESC: [add] backport patches from upstream
          backport-dracut-install-ignore-bogus-preload-libs.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-6.se.08.02.p01
changelog:
  - Type: update
  - ID:[任务#187922]
  - SUG:NA
  - DESC: modify spec, support kylin
  -       add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -	  add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-6.se.08.02.p02
changelog:
  - Type: bugfix
  - ID:[BUG#209238]
  - SUG:NA
  - DESC: 自定义分区安装系统后,切换安全模式后重启打标过程home var 分区无法挂载
  -       add dracut-fix-mount-home-failed.patch
  -       add dracut-add-os-partition-judge-in-kyseclabel-script.patch


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: houzhiwei <houzhiwei@kylinos.cn> - 0.180-15.p04
changelog:
  - Type:[update]
  - ID:[TASK#414525]
  - SUG:NA
  - DESC:correctly fix libdebuginfod.so requirement，fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p05
changelog:
  - Type:[bugfix]
  - ID:[bug#407779]
  - SUG:NA
  - DESC:Add corenote parsing implementation of loongarch64 architecture


author: gaoyukun <gaoyukun@kylinos.com> - 1:27.1-15.p01
changelog:
  - type: bugfix 
  - ID: NA
  - DESC: add patch:kylin-change-translation-emacs.patch, add translate bug add modify spec and add config.guess and config.sub in build dir for compile.


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: hanguanqiang <hanguanqiang@kylinos.cn> - 22.2.1-1.p04
changelog:
  - Type: CVE
  - ID:   Task#524829
  - SUG:  NA
  - DESC: Fix CVE-2025-48038,CVE-2025-48039,CVE-2025-48041
  -       and adjust config files to be compatible with newer autoconf


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-6
changelog:
  - Type:CVE
  - CVE:CVE-2022-3064
  - SUG:NA
  - DESC: backport fix CVE-2022-3064 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723
  - SUG:NA
  - DESC: backport fix CVE-2022-41723 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-9
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2022-1962 CVE-2022-41725 CVE-2022-2880
       CVE-2024-24785 CVE-2023-45290 CVE-2022-32148 CVE-2023-29406 CVE-2023-39326
       CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: gaoyukun <gaoyukun@kylinos.cn> - 3.4.14-12.p01
changelog:
  - Type:update
  - ID:[TASK#414527]
  - SUG:NA
  - Add 0003-change-go.mod-to-support-loongarch-vender.patch, 0004-add-support-loongarch-check.patch, etcd-vendor-loong64.tar.gz, loong64.tar.gz to support loong64


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: lilu <lilu@kylinos.cn> - 1.0-1.p01
changelog:
  - Type: bugfix
  - ID: [Task#164565]
  - SUG: NA
  - DESC: Modified abnormal display and get info thread errors


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.0-2
changelog:
  - Type: bugfix
  - ID: [Task#129614]
  - SUG: NA
  - DESC: Code optimization and fix get top memory total and other errors


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.1.0-0
changelog:
  - Type: bugfix
  - ID: [Task#205345]
  - SUG: NA
  - DESC: Optimize code and resolve issues such as flame graph display errors


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-2
changelog:
  - Type: update 
  - ID: [Task#213115]
  - SUG: NA
  - DESC: Upgrade version to 1.2.2-2
  	Add depend-v10 to add module whl file


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: Yangdacheng <yangdacheng@kylinos.cn> - 4.0.2-9.p03
changelog:
  - Type: cves
  - ID: [TASK#333142]
  - SUG: NA
  - DESC: Fix CVE-2024-31578,CVE-2024-32230,CVE-2021-3566,CVE-2021-38291,CVE-2021-38114,CVE-2022-3109,CVE-2022-3341,CVE-2023-51794,CVE-2024-31578,CVE-2023-50010,CVE-2023-51793,CVE-2021-28429,CVE-2021-38171,CVE-2022-1475,CVE-2022-48434


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p05
changelog:
  - Type: cves
  - ID: [TASK#402117]
  - SUG: NA
  - DESC: Fix CVE-2024-35366,CVE-2024-35367,CVE-2024-35368,CVE-2024-36616,CVE-2024-36617,CVE-2024-36618


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p07
changelog:
  - Type: cves
  - ID: [TASK#480707]
  - SUG: NA
  - DESC: Fix CVE-2017-9994,CVE-2019-12730,CVE-2019-17542,CVE-2019-17539,CVE-2019-11339,CVE-2018-15822


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p08
changelog:
  - Type: cves
  - ID: [TASK#494103]
  - SUG: NA
  - DESC: Fix CVE-2020-22019,CVE-2020-22021,CVE-2020-22026,CVE-2020-22038,CVE-2020-22039,CVE-2020-22043,CVE-2020-22044


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p09
changelog:
  - Type: cves
  - ID: [TASK#500913]
  - SUG: NA
  - DESC: Fix CVE-2020-21697,CVE-2020-22020,CVE-2020-22037,CVE-2020-22051,CVE-2020-22054


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p10
changelog:
  - Type: cves
  - ID: [TASK#507127]
  - SUG: NA
  - DESC: Fix CVE-2020-21688,CVE-2020-22042,CVE-2025-22919,CVE-2025-22921


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p17
changelog:
  - Type: cves
  - ID: [BUG#597617] [BUG#597615] [BUG#597613] [BUG#599939] 
  - SUG: NA
  - DESC: Fix CVE-2020-20445, CVE-2020-21041, CVE-2020-23906, CVE-2025-10256


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p21
changelog:
  - Type: cves
  - ID: CVE-2020-22025, CVE-2020-22017, CVE-2025-1594, CVE-2026-30999
  - SUG: NA
  - DESC: Fix CVE-2020-22025, CVE-2020-22017, CVE-2025-1594, CVE-2026-30999


author: xu_ping <xuping33@huawei.com> - 3.0.3.32900-9
changelog:
  - Fix connect linking to web database by modifying the firebird.conf items to make client and server compatible


author: lvfei <lvfei@kylinos.cn> - 3.0.3.32900-9.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: cuiyudong <cuiyudong@kylinos.cn> - 3.0.3.32900-9.p02
changelog:
  - Type:NA
  - ID:bug#134298
  - SUG:NA
  - DESC: Add Patch0009 for support loongarch and Same source code as other arch for solve bug 134298


author: huayadong <huayadong@kylinos.cn> - 2.13.92-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#251085]
  - SUG : NA
  - DESC: add Patch9001:fontconfig-2.13.92-kylin-backport-Report-more-detailed-logs-instead-of-assertion.patch


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p02.a.ky10.loongarch64 to correct stage


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p03.a.ky10.loongarch64 to correct stage


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p01
changelog:
  - Type: bugfix
  - ID: [BUG#278033&278023]
  - SUG:NA
  - DESC: Add sed -i '/^95$/d' /etc/uid_list,resolve the issue of installation failure after uninstallation.


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p02
changelog:
  - Type: bugfix、compile
  - ID: [BUG#278033&278023]
  - SUG:NA
  - DESC: solve compilation problems,  remove "


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p03
changelog:
  - Type: bugfix、compile
  - ID: [BUG#278033&278023]
  - SUG:NA
  - DESC:Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: huayadong<huayadong@kylinos.cn> 1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#378883]
  - SUG : NA
  - DESC: add patch gb-cjk-fonts-1.0.0-kylin-add-GB_SS_CDK.TTF.patch
          新增国标宋体-超大字符集扩.TTF


author: gaoyukun <gaoyukun@kylinos.cn> - 9.52-20.p03
changelog:
  - Type:cves
  - ID:CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837 CVE-2023-52722
  - SUG:NA
  - DESC:fix CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837, CVE-2023-52722


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p04
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473
          rebuild for version problem


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p08
changelog:
  - Type: cves
  - ID  : [TASK#580833]
  - SUG : NA
  - DESC: fix CVE-2025-14422 CVE-2025-14425 CVE-2025-6035


author: Qin Fandong <qinfandong@kylinos.cn> - 2:2.10.6-12.p10
changelog:
  - Type: CVE
  - ID  : [TASK#596375]
  - CVE : CVE-2026-2271, CVE-2026-2272, CVE-2026-2239, CVE-2026-4152, CVE-2026-2045, CVE-2026-2044, CVE-2026-4887
  - SUG : NA
  - DESC: fix CVE-2026-2271, CVE-2026-2272, CVE-2026-2239, CVE-2026-4152, CVE-2026-2045, CVE-2026-2044, CVE-2026-4887


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.33.0-19
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.33.0-20
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: GuoCe <guoce@kylinos.cn> - 2.66.8-13.p01
changelog:
  - Type: task
  - ID: 186407
  - SUG: NA
  - DESC: Add patch7001 to support zh_HK
          Add BuildRequires: dbus-daemon


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.66.8-13.p02
changelog:
  - Type: cve fix
  - ID: NA
  - SUG: NA
  - DESC: add backport-CVE-2024-52533.patch backport-CVE-2024-34397.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.66.8-13.p04
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p05
changelog:
  - Type:cves
  - ID:CVE-2025-32988,CVE-2025-32990,CVE-2025-6395
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p08
changelog:
  - Type:cves
  - ID:[BUG#560111]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2026-33845,CVE-2026-33846,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260


author: hanchao <hanchao63@huawei.com> - 1.15.7-39.p01
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42.p01
changelog:
  - Type:bugfix
  - ID:[TASK#206034]
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-43.p02
changelog:
  - Type:update
  - ID:[TASK#213363]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: gaoxiang <gaoxiang@kylinos.cn> - 1.15.7-48.p02
changelog:
  - Type:CVE
  - CVE:CVE-2024-45341, CVE-CVE-2024-45336
  - SUG:NA
  - DESC:fix CVE-2024-45341, CVE-CVE-2024-45336


author: wujichao <wujichao1@huawei.com> - 1.15.7-50
changelog:
  - Type:CVE
  - CVE:CVE-2024-45336
  - SUG:NA
  - DESC:remove 0001-drop-hard-code-cert.patch and modify CVE-2024-45336


author: songliyang <songliyang@kylinos.cn> - 1.15.7-52.p01
changelog:
  - Type: CVE
  - ID:   [TASK#484037]
  - SUG:  NA
  - DESC: 1.Sync Patch6129 to fix CVE-2025-4673
          2.Add Patch9005 to fix CVE-2025-22871
          3.Sync patches and changelogs from openEuler-20.03-LTS-SP4


author: huzhangying <huzhangying@huawei.com> - 1.15.7-55
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183, CVE-2025-58185, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183, CVE-2025-58185, CVE-2025-61724


author: songliyang <songliyang@kylinos.cn> - 1.15.7-57.p01
changelog:
  - Type: CVE
  - ID:   [TASK#560335]
  - SUG:  NA
  - DESC: 1.Ugrade to fix CVE-2025-58183 CVE-2025-58185 CVE-2025-61724 CVE-2025-58187 CVE-2025-61723 CVE-2025-47912 CVE-2025-58186
          2.Backport kylin patches to support loongarch64 and mips64el, and support other optimazations


author: huzhangying <huzhangying@huawei.com> - 1.15.7-59
changelog:
  - Type:CVE
  - CVE:CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61726,CVE-2025-68121
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61726,CVE-2025-68121


author: songliyang <songliyang@kylinos.cn> - 1.15.7-60.p01
changelog:
  - Type: updates
  - ID:   [TASK#573427] [TASK#610533]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2025-47912 CVE-2025-58186 CVE-2025-61727 CVE-2025-61729
            CVE-2025-61732 CVE-2025-68119 CVE-2025-61731 CVE-2025-61726 CVE-2025-68121
          2.Backport kylin patches to support loongarch64 and mips64el and other optimazations


author: houhongxun <houhongxun@kylinos.cn> - 20200916-3.p02
changelog:
  - Type: update
  - ID:   [TASK#327639]
  - SUG:  NA
  - DESC: rebuild to remove sensitive information for sp1、sp2、sp3、sp4


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: tenglei <tenglei@kylinos.cn> - 1.31.0-9.p03
changelog:
  - Type:update
  - ID:[task#455995]
  - SUG:NA
  - DESC:rebuild due to changes in dependent version, skip version p02


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p08.se.07
changelog:
  - Type:update
  - ID:bug#195608
  - SUG:NA
  - DESC: add kylin-read-nv-with-policy-authorization.patch
  	    kylin-add-kylin_tpm.mod.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p08.se.08
changelog:
  - Type:update
  - ID:bug#195608
  - SUG:NA
  - DESC: add kylin-modify-an-exception-intercept-that-a-file-does-not-exist.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 1:2.04-37.p09.se.08
changelog:
  - Type:update
  - ID:Task#164035
  - SUG:NA
  - DESC: Replace BOOTLOONGARCH*.efi when installing grub2-efi-loongarch64, fix the issue of missing initrd parameter in /proc/cmdline


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p09.se.09
changelog:
  - Type:update
  - ID:Task#202455
  - SUG:NA
  - DESC: add kylin-measurefiles.mod-unblock-the-file-that-does-not-exist.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p10.se.11
changelog:
  - Type:bugfix
  - ID:BUG#218407
  - SUG:trusted boot
  - DESC: add  kylin-example-modify-the-path-of-the-configuration-file.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p10.se.12
changelog:
  - Type:bugfix
  - ID:BUG#220240
  - SUG:trusted boot
  - DESC: add kylin-complete-log-writing-when-bimabase-integrity-is-abnormal.patch


author: liuyang <liuyang01@kylinos.cn> - 1:2.04-37.p12.se.12
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p12.se.13
changelog:
  - Type:bugfix
  - ID:BUG#242437
  - SUG:trusted boot
  - DESC: add modification-in-kylin-trust-measure-mod-for-http-boot-failure-issue.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p13.se.14
changelog:
  - Type:update
  - ID:task#374821
  - SUG:NA
  - DESC:add bugfix-tpcm-Fixed-the-problem-of-inconsistent-parame.patch


author: andy <liuyang01@kylinos.cn> - 1:2.04-37.p14.se.15
changelog:
  - Type:CVE
  - ID:task#441494
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125
  - SUG:NA
  - DESC:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125


author: yujingbo <yujingbo@kylinos.cn> - 1:2.04-37.p16.se.15
changelog:
  - Type:TASK
  - ID:task#462916
  - SUG:NA
  - DESC:Modify grub-boot-success.service and grub-boot-success.timer file permission to 644


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.04-37.p17.se.15
changelog:
  - Type:TASK
  - ID:TASK#546471
  - SUG:NA
  - DESC:Support ZhaoXin KH-50000 CPU:
         	- i386: Check for cpuid family when flush cache only on VIA CPUs
         	- i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.04-37.p18.se.15
changelog:
  - Type:bugfix
  - ID:TASK#569921
  - SUG:NA
  - DESC:protect grub2 packages
         protected: grub2-efi-aa64, grub2-efi-ia32, grub2-efi-x64, grub2-pc, grub2-tools-minimal


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.04-37.p19.se.15
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-61663,CVE-2025-61664
  - ID:TASK#571799
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p01
changelog:
  - Type:bugfix
  - ID:[Task#199901]
  - SUG:NA
  - DESC:Sync SP2 patches,fix gstreamer1-plugins-good-gtk no provides(element-gtksink)


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p02
changelog:
  - Type:bugfix
  - ID:[BUG#216576]
  - SUG:NA
  - DESC:change gstreamer1-devel-docs to gstreamer1-help,fix update error.


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: houhongxun <houhongxun@kylinos.cn> 2.24.32-11.p02
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix media volume control applet tooltip position


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: lilu <lilu@kylinos.cn> - 1.12-6.p01
changelog:
  - Type: cves
  - ID: CVE-2026-41991,CVE-2026-41992
  - SUG: NA
  - DESC: fix CVE-2026-41991 and CVE-2026-41992


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p06
changelog:
  - Type:bugfix
  - ID:[Bug#171872]
  - SUG:NA
  - DESC:add patch6:hardinfo-0.6.1-kylin-add-the-name-YMTC-for-oui-id-a428b7.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p07
changelog:
  - Type:bugfix
  - ID:[Bug#177860]
  - SUG:NA
  - DESC:add patch7:hardinfo-0.6.1-kylin-fix-ft2000-cpu-no-speed.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.1-1.p08
changelog:
  - Type:bugfix
  - ID:[BUG#182817]
  - SUG:NA
  - DESC:add patch8, retrieve the motherboard info for arm and loongarch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p09
changelog:
  - Type:bugfix
  - ID:[TASK#178533]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p10
changelog:
  - Type:bugfix
  - ID:[BUG#197180]
  - SUG:NA
  - DESC:add patch10,0001-fix-pci-info-showing-wrong-link-width.patch
         fix that pci info showed wrong current link width


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch11,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p12
changelog:
  - Type:bugfix
  - ID:[BUG#199256]
  - SUG:NA
  - DESC:add patch12,hardinfo-0.6.1-kylin-hide-Firmware.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p13
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-hardinfo-add-traditional-chinese-translation.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#208197]
  - SUG : NA
  - DESC: add patch14:hardinfo-0.6.1-kylin-fix-sensors-driver-unknow.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#225214]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-fix-temperature-label-display-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch16:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#245937][BUG#245949]
  - SUG : NA
  - DESC: add patch17:hardinfo-0.6.1-kylin-change-int-to-long-int-in-memory_usage.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gongxingliang <gongxingliang@kylinos.cn> - 1.14.5-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove compile options (-fallow-argument-mismatch -fallow-invalid-boz) to fix compilation failure


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: yanglu <yanglu72@h-partners.com> - 2.4.43-28
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.43-28.p02
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: merge 2.4.43-26.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-31
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: wanggang <wanggang1@kylinos.cn> - 2.4.43-32.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         fix build error on loongarch64.
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.43-34
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: wanggang <wanggang1@kylinos.cn> - 2.4.43-35.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.43-36
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.43-37
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wangjie1 <wangjie1@kylinos.cn> - 2.4.43-37.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC: update index.html for kylin. 
          fix build error on loongarch64.
          Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: lifeifei <lifeifei@kylinos.cn> - 62.1-7.p01
changelog:
  - Type: bugfix
  - ID: [task#186415]
  - SUG: NA
  - DESC: Synchronizing upstream community changes:delete taboo words and redundant files


author: wangkai <wangkai385@huawei.com> - 8.2.4-9
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 8.2.4-10
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: openEuler Buildteam <buildteam@openeuler.org> - 10.01-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:execute udevadm settle when network starts and network fork to start dhcp process


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: lifeifei<lifeifei@kylinos.cn> - 10.04-4.p02
changelog:
  - Type:bugfix
  - ID:[task#170327]
  - SUG:NA
  - DESC: Synchronizing upstream community changes:Initscripts no looger care about rc.local


author: wangjia <wangjia55@huawei.com> - 0.6-18.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix prio field for ppc and aarch64
         fix data value unpack with latest kernels
  - Package init


author: chenyanpanHW <chenyanpan@huawei.com> - 0.6-23
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Switch-from-python-to-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-build-error-with-Python-3-caused-by-itervalues-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Only-split-proc-status-lines-on-the-character.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Ignore-invalid-lines-in-proc-status-files.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Actually-skip-invalid-lines-in-proc-status.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-replace-powerpc-with-ppc-in-ioprio.py.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-add-aarch64-prio-in-ioprio.py.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-Print-the-titles-at-specific-locations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-Improve-the-message-that-is-printed-when-Linux-tasks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-Fix-crash-due-to-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-Use-monotonic-time-to-calculate-durations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-add-loongarch64-syscall-number-for-ioprio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 0.6-23
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Switch-from-python-to-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-build-error-with-Python-3-caused-by-itervalues-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Only-split-proc-status-lines-on-the-character.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Ignore-invalid-lines-in-proc-status-files.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Actually-skip-invalid-lines-in-proc-status.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-replace-powerpc-with-ppc-in-ioprio.py.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-add-aarch64-prio-in-ioprio.py.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-Print-the-titles-at-specific-locations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-Improve-the-message-that-is-printed-when-Linux-tasks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-Fix-crash-due-to-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-Use-monotonic-time-to-calculate-durations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-add-loongarch64-syscall-number-for-ioprio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-Workaround-crashes-due-to-non-UTF-8-characters-in-process-command-lines.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-get-cmdline-use-errors-replace-for-unicode-errors.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
          2.Default parameter updates for x86
          3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
          4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.452.b09-1.p01
changelog:
  - Type: update
  - ID:   [TASK#466871]
  - SUG:  NA
  - DESC: openjdk-1.8.0.452 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support
          fix date errors in changelog


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: zhaosaisai <zhaosaisai@kylinos.cn> -1:1.8.0.482.b08-7.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-1.8.0.482 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC:	1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
  	3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
          2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
          4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.27.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#459119]
  - SUG:  NA
  - DESC: openjdk-11.0.27.6 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support
  	obsoletes java-11-openjdk-static-libs* which are nolonger used


author: songliyang <songiyang@kylinos.cn> - 1:11.0.29.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-11.0.29.7 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.30.7-4.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-11.0.30.7 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.31.11-4.p01
changelog:
  - Type: update
  - ID:   [TASK#635259]
  - SUG:  NA
  - DESC: sync openEuler openjdk-11.0.31.11 GA release with kylin patch


author: litenglong <litenglong@kylinos.cn>-5.3.0-1.p02
changelog:
  - Type:Requirement
  - ID:[REQ#34645]
  - SUG:NA
  - DMSC:jemalloc optimize for spec2017
         jemalloc-optimize-for-spec2017-base-v530.patch


author: yaoxin <yaoxin30@huawei.com> - 2.4-20
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: maqiting <maqiting@kylinos.cn> - 1.2.0-3
changelog:
  - Type:update
  - ID:[TASK#465522]
  - SUG:NA
  - DESC:
  - 更新切换安全模式时弹窗设置密码的检查，按钮置灰逻辑，更新密码不符合要求时文案显示，更新简中繁中翻译文件


author: sunjin <sunjin@kylinos.cn> - 1.2.0-5
changelog:
  - Type:update
  - ID:[BUG#395857][BUG#396469][BUG#395991][BUG#397119][BUG#395883][BUG#395949][BUG#397287][BUG#397727][BUG#397143][BUG#397057][BUG#396563]
  - SUG:NA
  - DESC:
  - 修复[BUG#395857] account protect recommend level value
  - 修复[BUG#396469]【银联poc】【sp4】【安全中心】【网络保护】联网高级配置添加程序界面存在英文按钮;显示界面增加图标和汉化名称；优化重复添加等提示语
  - 修复[BUG#395991]【银联poc】【sp4】【安全中心】【账号保护】密码强度－自定义密码最小长度设置异常
  - 修复[BUG#397119]【银联poc】【安全中心】【网络保护】状态实时未实时更新
  - 修复[BUG#395883]【银联poc】【SP4】安全中心-网络保护，测试机联网控制开启后，外部机器无法ssh连接测试机，测试机无法连接外部机器
  - 修复[BUG#395949]【银联poc】【SP4】安全中心-联网保护，服务器联网功能，不存在提示我，提示信息存在歧义
  - 修复[BUG#397287]【银联poc】【sp4】【安全加固】【自定义模板】使用麒麟安全模板进行安全加固还原后，安全中心主页显示未发现问题 还原操作之后主页显示“未使用过安全加固功能”
  - 修复[BUG#397727]【银联poc】【sp4】【安全加固】【首页显示】安全扫描，扫描结果无问题无完成按钮
  - 修复[BUG#397143]【银联poc】【sp4】【安全加固】【自定义模板】自定义模板-添加加固项时，描述不清晰
  - 修复[BUG#397057]【银联poc】【sp4】【安全加固】【安全扫描】停止安全扫描后，安全加固项动态显示扫描中 同步v11的修改
  - 修复[BUG#396563]【银联poc】【sp4】【安全加固】【自定义模板】使用安全三级模板进行安全加固，还原后首页显示的待加固项数与实际待加固项数不一致 将待加固项数修改为需要还原项数
  - add 0004-fix-security-reinforce.patch


author: sunjin <sunjin@kylinos.cn> - 1.2.0-6
changelog:
  - Type:update
  - ID:[BUG#607067]
  - SUG:NA
  - DESC:
  - 修复[BUG#607067]【内网源测试】【SP3-2403】安全中心安全加固模板功能无法正常使用
  - add ksc-defender-update-20260615.patch


author: maqiting <maqiting@kylinos.cn> - 1.2.0-7
changelog:
  - Type:update
  - ID:[BUG#629383]
  - SUG:NA
  - DESC:
  - 修复[BUG#629383]【银河麒麟高级服务器操作系统 V10 SP3 2403】【update内网源集成测试单-每周常规提测-20260630】账户保护配置和概览不一致
  - add 0006-fix-main-page-display.patch


author: Jan Chaloupka <jchaloup@redhat.com> - 1.12.5-2
changelog:
  - Allow to install cri-o as alternative to docker
    resolves: #1631053
  - Allow to install moby-engine as alternative to docker
    resolves: #1683154


author: Jan Chaloupka <jchaloup@redhat.com> - 1.13.5-1
changelog:
  - Update to v1.13.5 (CVE-2019-1002101 - Mishandling of symlinks allows for arbitrary file write via `kubectl cp`)
    resolves: #1693884


author: Jan Chaloupka <jchaloup@redhat.com> - 1.15.2-1
changelog:
  - Update to v1.15.2 (CVE-2019-11250 kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7))
    resolves: #1740435


author: Kairui Song <ryncsn@gmail.com> - 1.18.2-1
changelog:
  - Update to v1.18.2
  - Update service file and config file
  - "contrib" is EOL, move files into this repo
  - Update the build steps to fit latest upstream


author: lijian <lijian2@kylinos.cn> - 1.20.10.p02
changelog:
  - Type:CVE
  - CVE:CVE-2024-3177
  - SUG:NA
  - DESC: Fix CVE-2024-3177, add envFrom to serviceaccount admission plugin


author: lijian <lijian2@kylinos.cn> - 1.20.10.p03.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-10220
  - SUG:NA
  - DESC:Fix CVE-2024-10220, gitRepo volume directory must be max 1 level deep


author: zhangbowei <zhangbowei@kylinos.cn> - 1.20.2-21.p03.04
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: 删除Requires: docker移除安装依赖docker,同时解决md文件导致软件包兼容性检查失败问题,同步升级sp3(2403)


author: lijian <lijian2@kylinos.cn> - 1.20.2-21.p05
changelog:
  - Type:cves
  - ID:CVE-2025-13281
  - SUG:NA
  - DESC: backport fix CVE-2025-13281
          backport kubeadm preflight checks: fix host URL construction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p35.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.2-1.p35.07
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387985][BUG#387025]
  - SUG:NA
  - DESC: mv autostart to libkylin-activation
          fix kms ui miss deactivate button


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#117856]
  - SUG : NA
  - DESC: add Patch18 kylin-computer-viewer-3.9.1s1-kylin-delete-comment.patch


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p20
changelog:
  - Type: bugfix
  - ID  : [TASK#90519]
  - SUG : NA
  - DESC: add Patch19 kylin-computer-viewer-3.9.1s1-kylin-fix-fortify-3.patch


author: peijiankang <peijiankang@kylinos.cn> -3.0.1s1-1.p22
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: kylin-computer-viewer-add-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> -3.0.1s1-1.p24
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: add patch:kylin-computer-viewer-3.9.1s1-kylin-update-HK-pdf.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p26
changelog:
  - Type: update
  - ID: [TASK#187798]
  - SUG: NA
  - DESC:add patch:kylin-computer-viewer-3.9.1s1-kylin-change-copyright-for-sp4.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p27
changelog:
  - Type: update
  - ID: [BUG#217688]
  - SUG: NA
  - DESC:kylin-computer-viewer-kylin-Whenthe-activation-is-not-expired-add-the-Extend-Service-button.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p28
changelog:
  - Type: update
  - ID: [BUG#222530]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-kylin-activation-delete-the-Extend-Service-button.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p29
changelog:
  - Type: update
  - ID: [TASK#369205]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-kylin-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p30
changelog:
  - Type: update
  - ID: [TASK#187789]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-add-get-v10-sp-version.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p31
changelog:
  - Type: bugfix
  - ID: [BUG#281681]
  - SUG: NA
  - DESC:update kylin-computer-viewer-3.9.1s1-add-get-v10-sp-version.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p32
changelog:
  - Type: update
  - ID  : [TASK#510971]
  - SUG : NA
  - DESC: add kylin-computer-viewer-3.9.1s1-kylin-add-customer-name.patch


author: huayadong <huayadong@kylinos.cn> -p63
changelog:
  - Type: bugfix
  - ID  : [BUG#144468]
  - SUG : NA
  - DESC: add Patch65 kylin-control-center-3.9.5-kylin-fix-password-verification-problems.patch
          修复root用户密码更新不对原密码进行校验.


author: huayadong <huayadong@kylinos.cn> -p64
changelog:
  - Type: bugfix
  - ID  : [BUG#151189]
  - SUG : NA
  - DESC: add Patch66 kylin-control-center-3.9.5-fix-crash-when-switching-lock-screen-mode.patch 
  	修复切换屏保模式时的崩溃问题。


author: huayadong <huayadong@kylinos.cn> -p65
changelog:
  - Type: bugfix
  - ID  : [Bug#158569]
  - SUG : NA
  - DESC: add Patch67 kylin-control-center-3.9.5-kylin-Merge-display-in-control-panel-for-users-with-the-same-UID.patch
  	为具有相同UID的用户在控制面板合并显示.


author: huayadong <huayadong@kylinos.cn> -p66
changelog:
  - Type: bugfix
  - ID  : [Bug#159672]
  - SUG : NA
  - DESC: add Patch68 kylin-control-center-3.9.5-kylin-fix-the-problem-that-the-screensaver-image-appears-black.patch
  	修复每次打开控制面板屏保预览都是黑色问题.


author: huayadong <huayadong@kylinos.cn> -p67
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: add Patch69 kylin-control-center-3.9.5-kylin-fix-the-same-uid-user-deletion-problem.patch


author: huayadong <huayadong@kylinos.cn> -p69
changelog:
  - Type: bugfix
  - ID  : [Bug#173828]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-network-browser-error-in-default-application.patch


author: huayadong <huayadong@kylinos.cn> -p70
changelog:
  - Type: bugfix
  - ID  : [Bug#173825]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-change-gtk-theme-blue-icon-for-kylin-blue-theme.patch


author: peijiankang <peijiankang@kylinos.cn> - p72
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: kylin-control-center-update-translations-for-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - p73
changelog:
  - Type: bugfix
  - ID:   [BUG#211927]
  - SUG:  NA
  - DESC: add 0001-kylin-control-center-memory-leak-fixs.patch


author: peijiankang <peijiankang@kylinos.cn> - p74
changelog:
  - Type: bugfix
  - ID:   [BUG#231576]
  - SUG:  NA
  - DESC: add kylin-control-center-3.9.5-kylin-fix-coredump-about-memory-leak.patch


author: peijiankang <peijiankang@kylinos.cn> - p74.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#231576]
  - SUG:  NA
  - DESC: rebuild for v10-sp1 loongarch64 libxcrypt-4.1.1-4.p01


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0-1.se.10
changelog:
  - Type: bugfix
  - ID:   [BUG#205800]
  - SUG:  NA
  - DESC: add update-kylin-log-viewer-1.0.0-zh_HK-translations.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.13
changelog:
  - Type: bugfix
  - ID:   [BUG#461913]
  - SUG:  NA
  - DESC: 日志查看器前端不显示系统启动日志
  -       add patch: bug-461913-no-boot-log-displayed.patch


author: huayadong <huayadong@kylinos.cn> - 1.0-6.8.p02
changelog:
  - Type: bugfix
  - ID  : [Bug#226228]
  - SUG : NA
  - DESC: add Patch01:kylin-logos-1.0-change-KylinSoft-Corporation-COPYING.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p19
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch15: kylin-menu-5.5.9-delete-comment.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p20
changelog:
  - Type:bugfix
  - ID  :[bug#138701][bug#123656]
  - SUG :NA
  - DESC:add Patch16: kylin-menu-5.5.9-kylin-non-root-users-hide-shutdown-and-restart-functions.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p22
changelog:
  - Type:bugfix
  - ID  :[bug#139752]
  - SUG :NA
  - DESC:add patch17:kylin-menu-5.5.9-kylin-fix-the-default-mode-The-start-menu-has-no-gnome-logs.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p24
changelog:
  - Type:bugfix
  - ID  :[bug#169280]
  - SUG :NA
  - DESC:add patch18:kylin-menu-5.5.9-kylin-fix-clicking-on-MyComputer-twice-will-bring-up-three-folders.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p25
changelog:
  -Type:bugfix
  -ID:[BUG#195923]
  -SUG:NA
  -DESC:add patch 0001-fix-the-problem-that-windows-can-t-be-activated-when.patch
        fix the problem that windows can't be activated when start menu open


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p26
changelog:
  -Type:bugfix
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-traditional-chinese-translation-for-Logout.patch
        add missing traditional chinese translation for "Logout"


author: peijiankang <peijiankang@kylinos.cn> - 5.5.9-3.1.p27
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: update-timing-shutdown.desktop-and-kylinmenu.py-about-ranslations-of-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p29
changelog:
  - Type: bugfix
  - ID:   [TASK#572465]
  - SUG:  NA
  - DESC: add patch 0001-kylin-menu-fix-memory-leaks.patch
         fix potential memory leaks


author: Qin Fandong <qinfandong@kylinos.cn> - 10-24.6.p86
changelog:
  - Type:Update
  - ID:TASK#392859
  - SUG:NA
  - DESC:Update EULA of V10 SP4
         Fix wrong changelog versions


author: peijiankang <peijiankang@kylinos.cn> - 3.2.10-4.p31.01
changelog:
  - Type:update
  - ID:[TASK#195746]
  - SUG:NA
  - DESC:add zh_HK and zh_TW in desktop for sp4 
         sync from 3.2.10-4.p30(update version, use manuals for sp4)


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: update
  - ID:[BUG#190233]
  - SUG:NA
  - DESC: 修复hub禁用启用不即时生效的问题
  -       add patch: kysec-daemon-fix-hub-not-work-at-once.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.12
changelog:
  - Type: bufix
  - ID: [BUG#191987]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#195434]
  - SUG:NA
  - DESC: 修复strict模式下，kysec-wlinit失败的问题
  -	  add patch: kysec-daemon-fix-strict-mode-kysec-wlinit-failed.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: bufix
  - ID: [TASK#179971 BUG#193846]
  - SUG:NA
  - DESC: 同步桌面流量管控普通用户可以配置策略问题
  -         add patch: kysec-daemon-fix-netflow-ordinary-user-can-config-policy.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#205354]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -         add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [任务#165225][任务#165240][任务#165232][任务#178765][任务#178762][任务#165245]
  -     [BUG#204409][BUG#204640][BUG#204601]
  - SUG:NA
  - DESC: 添加软件包黑白名单kdk接口[任务#165225]
  -	  add patch: kysec-daemon-add-bwlist-kdk-interface.patch
  -	添加应用执行控制kdk接口[任务#165240]
  -	  add patch: kysec-daemon-add-pblk-kdk-interface.patch
  -	添加软件防卸载kdk接口,修改spec文件,pkglist.xml放在kysec-utils
  -	包中安装[任务#165232]
  -	  add patch: kysec-daemon-add-pkglist-kdk-interface.patch
  -	数据库修改支持kdk和兼容性升级,同时修改spec文件，数据库操作
  -	  add patch: kysec-daemon-modify-db-for-kdk.patch
  -	添加内核模块防卸载kdk接口[任务#178765]
  -	  add patch: kysec-daemon-add-kmod-kdk-interface.patch
  -	添加进程防杀死kdk接口[任务#178762]
  -	  add patch: kysec-daemon-add-ppro-kdk-interface.patch
  -	添加文件保护kdk接口[任务#165245]
  -	  add patch: kysec-daemon-add-filepro-kdk-interface.patch
  -	修改spec文件中升级时数据库的操作,修复安装过程中报错的问题[BUG#204409]
  -       修改函数返回值,0代表成功[BUG#204640][BUG#204601]
  -         add patch: kysec-daemon-modify-function-return-value-0-success.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: bugfix
  - ID: [BUG#209909][BUG#210138][#210326]
  - SUG:NA
  - DESC: 修复sm套件取消授权失败的问题[BUG#209909]
  -	修复sm查询文件保护错误的问题[BUG#210138]
  -	修复切换模式时,会删除/etc/default/grub中关于静态度量的配置[BUG#210326]
  -	去掉切换none模式时audit=0的配置
  -	  add patch: kysec-daemon-fix-sm-cancel-authorization-fail-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#218009]
  - SUG:NA
  - DESC: 修复kdk接口导致kysec命令可以修改sm策略的问题[BUG#218009]
  -	  add patch: kysec-daemon-fix-kysec-can-modify-sm-policy-bug.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.20
changelog:
  - Type: bugfix
  - ID: [TASK#477203]
  - SUG:NA
  - DESC: 修复wlinit获取打标状态时卡住的问题
  -	  add patch: kysec-daemon-wlinit-handle-getting-relabel-status-error.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.1.1-01.se.21
changelog:
  - Type: bugfix
  - ID: [TASK#566261]
  - SUG:NA
  - DESC: 修复CVE-2025-1202
  -         add patch: kysec-daemon-fix-cve-2025-1202.patch


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.08
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:1.增加NV授权保护功能
  	add add-nv-index-authorization-protection.patch
  	add modified-the-Haiguang-platform-adaptive-error-problem.patch


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.11
changelog:
  - Type:Bug
  - ID:220388
  - SUG:NA
  - DESC:1.增加对pcr8、9的度量审计
         2.修改可信启动开启软模式失败问题
         3.取消备份还原
         4.增加对压缩文件解压缩的sm3计算


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-13.p01
changelog:
  - Type:updates
  - ID:[TASK#186460]
  - SUG:NA
  - DESC:sync community patches
         backport-column-segmentation-fault-on-invalid-unicode-input-passed-to-s-option.patch
         backport-su-offer-usernames-rather-than-files.patch
         backport-Fix-memory-leaks-in-the-chcpu.patch
         backport-logger-fix-prio-prefix-doesnot-use-priority-default.patch
         backport-mcookie-fix-infinite-loop-when-use-f.patch
         backport-logger-realloc-buffer-when-header-size-changed.patch
         backport-logger-fix-size-use-for-stdin.patch
         backport-vipw-flush-stdout-before-getting-answer.patch
         backport-chfn-Make-readline-prompt-for-each-field-on-a-separate-line.patch
         backport-chfn-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-chsh-fflush-stdout-before-reading-from-stdin.patch
         backport-login-Restore-tty-size-after-calling-vhangup.patch
         backport-lsblk-fix-endless-loop-if-device-specified-more-than-once.patch
         backport-libblkid-avoid-buffer-overflow-in-ocfs-superblock-parsing.patch
         backport-libblkid-use-checksum-for-jmicron.patch
         backport-libblkid-cleanup-indentation.patch
         backport-libblkid-fix-jmicron-checksum-and-LE-to-CPU.patch
         backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch
         backport-prlimit-fix-optional-arguments-parsing.patch
         modify-rescuemode-chinese-error.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-14.p01
changelog:
  - Type:bugfix
  - ID:[BUG#213337]
  - SUG:NA
  - DESC: sync community, fix the problem of abnormal display of model name


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-14.p02
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-14.p04
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-14.p05
changelog:
  - Type:bugfix
  - ID:[TASK#497341]
  - SUG:NA
  - DESC:add patch:backport-libfdisk-dos-fix-default-partition-start.patch
         backport-tests-sfdisk-fill-correctly-gaps-if-default-start-re.patch
         backport-libfdisk-fix-last-free-sector-detection-if-partition.patch
         fix default partition offset creates overlapping partitions


author: kouwenqi <kouwenqi@kylinos.cn> - 2.35.2-14.p06
changelog:
  - Type:bugfix
  - ID:[TASK#542963]
  - SUG:NA
  - DESC:libblkid: (xfs) external log: check for ceph_bluestore


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-exec-Fix-setting-locale-for-util-calls.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-dm-Fix-memory-leak-in-the-DM-plugin-and-DM-logging-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-fs-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-kbd-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-lvm-dbus-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-mdraid-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-swap-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-vdo-Do-not-use-g_memdup-in-bd_vdo_stats_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-Don-t-allow-suid-and-dev-set-on-fs-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.22-3.p02
changelog:
  - Type: bugfix
  - ID: [BUG#269451]
  - SUG: NA
  - DESC: add libhugetlbfs_privutils.so for libhugetlbfs test


author: lijian <lijian01@kylinos.cn> - 2.22-3.p03
changelog:
  - Type: bugfix
  - ID: [BUG#409265]
  - SUG: NA
  - DESC: backport: allocating large page memory using libhugetlbfs


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-13
changelog:
  - 修复切换总开关时pcr策略下发会清理其他策略问题
  - 增强tcm1 兼容性
  - 动态修改pcr时，不再重新加载模块，保证策略连贯性
  - 添加pcie tcm1卡支持
  - 配置pcr策略时，增加pcr设备异常提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[TASK#366361] 【安全函数】libkydima整改
  - SUG:NA
  - DESC:安全编码合规性整改
  -      [TASK#361219] 【安全编译】gcc编译添加安全编译参数-libkydima
  -      修正不可靠代码，增加安全增强编译选项


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-19
changelog:
  - Type:update
  - ID:[BUG#351739]
  - SUG:NA
  - DESC: 针对set命令增加配置异常提示，针对get命令增加模块未加载时off状态显示
  	针对开源标准tcm2设备节点名称做自适应
  	修改kydima_get安装路径确保默认状态下普通用户可以访问该命令


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-20
changelog:
  - Type:update
  - ID:[BUG#353894] 【v11 2503】【B11】【需求44504】【x86\arm】【动态度量】不指定设备时，开启PCR策略命令执行失败
  - SUG:NA
  - DESC: 优化命令提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-21
changelog:
  - Type:update
  - ID:[TASK#471063] 【安全红线】整改自研组件第一轮Fortify问题-libkydima
  - SUG:NA
  - DESC: 修复server.cpp中 文件打开后存在句柄不释放的问题


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-22
changelog:
  - Type:update
  - ID: [BUG#369787] 【v11-2503】【B15】【需求44504】【动态度量】动态度量总开关关闭，无法获取子开关状态
  - SUG:NA
  - DESC: 修改kydima_get关闭状态显示信息
    	调整kydima_set用户执行权限


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-23
changelog:
  - Type:update
  - ID: [BUG#385507]【出厂测试】【v11-2503】【B20】【需求44504】【动态度量】帮助信息描述不对
  - SUG:NA
  - DESC: 优化命令帮助信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-24
changelog:
  - Type:update
  - ID: [BUG#408605]【自动化update内网源测试】【SP3-2403】libkydim包kydima_set命令设置周期可为负数
  - SUG:NA
  - DESC: 增加参数容错告警，修复后台服务无意义告警信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC: 
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC:
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-26~RC0
changelog:
  - Type:update
  - ID: [TASK#595487]完成libkydima模糊测试和ci对接
  - SUG:NA
  - DESC:
  	添加ci平台模糊测试支持
  	添加ci平台单元覆盖率测试支持


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-27
changelog:
  - Type:update
  - ID: [BUG#499553] 【2603-B09】kydima_get命令fuzzing过程中出现crash，非100%复现，请分析确认
  - SUG:NA
  - DESC:
  	优化对系统文件读取时的格式限位校验


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-28
changelog:
  - Type:update
  - ID: [BUG#502811]【V11 2503】【B12】【威胁消减】【动态度量】default模式下，kydima-daemon.service关闭后无法启
  - SUG:NA
  - DESC:
  	增加后台服务禁止重复启动限制


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p53
changelog:
  - Type: upadate
  - ID:[TASK#163840]
  - SUG:NA
  - DESC: add longmai and haitaifangyuan ukey driver support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p64
changelog:
  - Type: Task
  - ID:[TASK#188185]
  - SUG: NA
  - DESC: add debuginfo and delete useless code file
  - DESC: merge main branch to this


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p65
changelog:
  - Type: bugfix
  - ID:[BUG#211902][BUG#212682]
  - SUG: NA
  - DESC: gather together kms cmd
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p69
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p74
changelog:
  - Type:update
  - ID:[TASK#464361]
  - SUG:NA
  - DESC:add check product type
         fix dmidecode return NULL


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p75
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387899][BUG#387025]
  - SUG:NA
  - DESC: hwid not use bios uuid
          vm client not use disk


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p78
changelog:
  - Type:bugfix
  - ID:[BUG#457417]
  - SUG:NA
  - DESC: fix the issue of inaccurate retrieval of service expiration time


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p82
changelog:
  - Type:bugfix
  - ID:[BUG#510541]
  - SUG:NA
  - DESC: optimize the mechanism for obtaining unique hardware identifiers
          fix mem leak and get virtio net pci addr


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p84
changelog:
  - Type:update
  - ID:[TASK#642797]
  - SUG:NA
  - DESC:fix cpu=100% when can not connect to kms server 
         fix delete_post and KVE-2026-05155


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: xinghe <xinghe2@h-partners.com> - 2:1.6.37-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p02
changelog:
  - Type:cves
  - Id:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p03
changelog:
  - Type:cves
  - Id:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p06
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: houhongxun <houhongxun@kylinos.cn> - 2.71.0-4.p09
changelog:
  - Type:cves
  - ID:[TASK#593047][TASK#595441]
  - SUG:NA
  - DESC:fix CVE-2026-0719 CVE-2025-14523 CVE-2026-1761 CVE-2026-1539 CVE-2026-1467
         CVE-2026-0716 CVE-2026-2369 CVE-2026-1801 CVE-2026-1760


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaihuiying <eaglegai@163.com> - 0.9.4-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.4-15
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.9.0-10
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: gaoyukun <gaoyukun@kylinos.cn> - 4.16.0-3.p01
changelog:
  - Type:compile
  - ID:TASK#414527
  - SUG:NA
  - DESC:Add 'BuildRequires gtk-doc',repair compilation failure.


author: Yu Peng <yupeng@kylinos.cn> - 1.30-3.p01
changelog:
  - Type:bugfix
  - ID:[Task#456739]
  - SUG:NA
  - DESC:sync community patches:
         backport-libteamdctl-validate-the-bus-name-before-using-it.patch


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.9.0-5.p01
changelog:
  - Type: updates
  - ID: TASK#186442
  - SUG: NA
  - DESC: Sync 2.9.0-3.p02 patch: fix unsinicized issues of zh_HK and zh_CN


author: hy-euler <eulerstoragemt@huawei.com> - 1.0.22-3
changelog:
  - delete -Sgit in 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-descriptor-Fix-two-memory-safety-bugs-in-malformed-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: lifei <lifei@kylinos.cn> - 6.2.0-16.p07
changelog:
  - Type: update
  - ID: [TASK#159711]
  - SUG: NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add LoongArch CPU host-model support, depends on X86 and ARM CPU.
  - 	Add Kylin add libvirt-6.2.0 loongarch64 support
  - 	Modify spec, add loongarch64 support
      	   loongarch64 define: qemu_kvm_arches, with_storage_zfs 0
      	   add loongarch LOADERS define
      	   add loongson libvirt-6.0.0 configure command as comment, for backup


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-16.p11
changelog:
  - Type: update
  - ID:   [TASK:184101]
  - SUG:  NA
  - DESC: Resolve compatibility issues caused by the libtasn1 package upgrade.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-16.p12
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - nwfilter: fix crash when counting number of network filters (CVE-2022-0897)
  - qemu: Add missing lock in qemuProcessHandleMonitorEOF (CVE-2021-3975)


author: lijunwei <lijunwei@kylinos.cn> - 6.2.0-16.p13
changelog:
  - Type: update
  - ID:   [Task:185640]
  - SUG:  NA
  - DESC: Add support Phytium cpu TengYun-S5000c in SP4


author: lijunwei <lijunwei@kylinos.cn> - 6.2.0-21.p14
changelog:
  - Type: update
  - ID:   [Task:192206]
  - SUG:  NA
  - DESC: Rebase libvirt for  keep up with OE 20.03 SP4
          Revert build without dtrace
          Patch0055: fix nwfilter translation error; 
  	Patch0056: add domblklist info for vhost disk of SPDK
  	Patch0057: fix loongarch build error


author: weishaokun <weishaokun@kylinos.cn> - 6.2.0-21.p16
changelog:
  - Type: update
  - ID:   [TASK#215600]
  - SUG:  NA
  - DESC: fix hygon bug that can not support model AMD-Rome and AMD-Rome


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-21.p17
changelog:
  - Type: bugfix
  - ID:   [BUG#249689]
  - SUG:  NA
  - DESC: Fix the translation problem of libvirtd.policy's prompts.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> 6.2.0-21.p18
changelog:
  - Type: update
  - ID:   [TASK#422833]
  - SUG:  NA
  - DESC: fix CVE-2024-1441 CVE-2024-2494 CVE-2024-2496
  	vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  	remote: check for negative array lengths before allocation (CVE-2024-2494)
  	interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-21.p19
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193
  	revert 0001-Resolve-compatibility-issues-caused-by-the-libtasn1-.patch because libtasn1 downgrade.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-21.p21
changelog:
  - Type: Update
  - ID:   [TASK#652209]
  - SUG:  NA
  - DESC: Add support for Kunpeng 920-V1/V2 950-V1 cpu model


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1.7.0-11.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.10-43.p04
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.9.10-43.p08
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794、CVE-2025-49796、CVE-2025-6170
  - SUG:NA
  - DESC: fix CVE-2025-49794、CVE-2025-49796、CVE-2025-6170


author: zuo <zuohongsheng@kylinos.cn> - 2.9.10-43.p14
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: yueyuankun <yueyuankun@kylinos.cn> - 20211027-1.p04
changelog:
  - Type: update
  - ID: [Bug#206673][Bug#206301]
  - SUG: NA
  - DESC: update agilio-sriov-firmware to 23.10-2


author: GuoCe <guoce@kylinos.cn> - 20211027-1.p05
changelog:
  - Type:cves
  - ID:CVE-2023-31315、CVE-2023-20584、CVE-2023-31356
  - SUG:NA
  - DESC:Fix CVE-2023-31315、CVE-2023-20584、CVE-2023-31356


author: yueyuankun <yueyuankun@kylinos.cn> - 20211027-1.p07
changelog:
  - Type:cves
  - ID:[Task#536541]
  - CVE:CVE-2024-36350 CVE-2024-36357
  - SUG:NA
  - DESC:Fix CVE-2024-36350 CVE-2024-36357


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.4.lns8
changelog:
  - [loongarch][assembler] Remove useless .mdebug.abilp64 section
  - [loongarch][assembler] Use '.section .bss' instead of '.bss' and fix 'harf' typo
  - [loongarch][assembler] Support inline asm 'z' extra code
  - [loongarch][assembler] Remove .module and fp related .set directives to align with GAS
  - [loongarch][codegen] Fix optimization error of signext
  - [loongarch][codegen] Support the read_register intrinsic
  - [loongarch][codegen] Sign extend the imm operand of lu12i.w according to the ISA
  - [loongarch][codegen] Refine vector registers and instructions definition
  - [loongarch][codegen] Update vector builtins to keep it consistent with GCC
  - [loongarch][codegen] Do not set cttz to legal for vector since lacking of instructions
  - [loongarch][disassembler] Fix offset decoding error of the B and BL instructions
  - [loongarch][NFC] Use llvm8 style inline license header


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.5.lns8
changelog:
  - [test][NFC] Add missing file llvm/test/MC/LoongArch/lit.local.cfg
  - Fix vector xor node merging error in debug mode
  - Add test cases for the vext2xv.* instruction and format LoongArchTargetTransformInfo.cpp files
  - [llvm] Code cleanup for lowerFCOPYSIGN and add test case
  - Optimizing scalar logic operations
  - [NFC] Fix typo XLP32 to LPX32
  - Optimize tail call
  - Fix the memory address in the atomic operation contains dirty data
  - Optimize redundant sign extension instructions
  - Fix atomic operation address calculation error
  - Add a missing imm0 to i8/i16 atomic instructions
  - [sancov][sanitizer-common] Correct sanitizer coverage point
  - [test] Simplify the regression test for the recent signext optimization bug fix


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.6.lns8
changelog:
  - [loongarch] Optimize add and abs to [x]vadda.* on vector values
  - [loongarch] Optimize immediate loading and mul-to-add-sub transformation
  - [loongarch] Optimize scalar and vector logic operations
  - [loongarch] Optimize vector data shuffling and 8x8 matrix operations
  - [loongarch] Check immediate range for branch instructions in assembler
    and fix the bug of decoding branch target in disassembler
  - [ObjectYAML] Add LoongArch support
  - [Backport][SCEV][LSR] Prevent using undefined value in binops


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.7.lns8
changelog:
  - [loongarch] Support la.tls.* macro assembly
  - [loongarch] CodeGen optimization
  - [mips] Add loongson3a CPU ISA support
  - [mips] Fix several backend bugs


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.8.lns8
changelog:
  - Adjust FP to equal to SP on function entry on loongarch
  - LoongArch codegen optimization
  - Remove the workaround for loongson3 llsc erratum on loongarch


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.10.lns8
changelog:
  - [LoongArch] Support la264 and la364
  - [LoongArch] Add LoongArch support for xray
  - [Mips] Implement sge/sgeu/sgt/sgtu pseudo instructions and .cplocal directive
  - [LoongArch] Delete emitEndOfAsmFile implementation
  - [LoongArch] Add new vector interface according to the latest tool chain
  - [LoongArch] Support parsing non-native value type reigster for inlineasm constraint and float/double for GPR
  - [LoongArch] Cleanup free copy nodes which cause fatal error in LiveRangeCalc::findReachingDefs
  - [LoongArch] Fix the bug that LoongArchISD::SHF Cannot select in some cases
  - [LoongArch] Fix the issue in Lowering pipeline about XVILVH and XVILVL
  - [LoongArch] Set minimum function alignment to 4-bytes
  - [LoongArch] Implement mayBeEmittedAsTailCall for tail call optimization
  - [LoongArch] Use 64 bits absolute address when loading local symbol
  - [LoongArch] Use a new operand type 'amem' instead of 'mem' for am* instructio
  - [LoongArch] Do load/store+ADDI peephole opt in PostprocessISelDAG
  - [LoongArch] Fix the wrong destination register definition of the jirl instruction


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.12.lns8
changelog:
  - [LoongArch] Improve codegen for atomic ops
  - [LoongArch] Support finer-grained DBAR hints for LA664+
  - [LoongArch] Support .reloc and .half directives


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.8.0-5.p02
changelog:
  - Type:NA
  - ID:Task#168994
  - SUG:NA
  - DESC:Modify sensitive words.
  - Because p01 is occupied by s5000c, set the patch to p02.


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylin.cn> - 1.16.1-4.p01
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.16.1-4.p04.01
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix window minimize animation to wrong direction


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p04
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: xiejing <xiejing@kylinos.cn> - 3:10.3.39-1.p05
changelog:
  - Type: bugfix
  - ID: BUG#216652
  - SUG: NA
  - DESC: Disable gssapi plugin by default to fix init function error


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p21
changelog:
  - Type: bugfix
  - ID:   [TASK#220038]
  - SUG:  NA
  - DESC: don't repeatedly reset desktop background which was used by caja


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p12
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-tranditional-chinese-translation.patch


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#205717]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-some-missing-translations-for-ca.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p14
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0001-fix-mate-indicators-memory-leaks.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p15
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0002-fix-mate-indicators-memory-leaks.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p16
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add Requires: mate-panel-libs >= 1.12.2-1kord37.p10.a.ky10


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#449341]
  - SUG : NA
  - DESC: add patch 0003-fix-mate-indicators-memory-leaks.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p05
changelog:
  -Type:bugfix
  -ID:[BUG#194507]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-system-monitor-menu-if-current-user-is-no.patch
        don't show system monitor when not logged in as root


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: gaohaobo <gaohaobo@kylinos.cn> - 1.12.2-1kord13.p01
changelog:
  - add patch0 to  remove Hibernate&Suspend feature form  logout dialog ,cause we don't need it on server version


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: peijiankang <peijiankang@kylinos.cn>- 1.12.2-1kord13.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#194919]
  - SUG : NA
  - DESC: add Patch4 mate-session-manager-1.12.2-kylin-add-min-and-max-for-idle-delay.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.12.2-1kord13.p07
changelog:
  -Type:bugfix
  -ID:[BUG#203419]
  -SUG:NA
  -DESC:add patch 0001-mate-session-manager-add-missing-translations-for-zh.patch


author: douyan <douyan@kylinos.cn>- 1.12.2-1kord13.p08
changelog:
  -Type:bugfix
  -ID:[BUG#205945]
  -SUG:NA
  -DESC:add patch mate-session-manager-1.12.2-kylin-fix-autostart-process-no-quit-when-loggingout.patch


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p09
changelog:
  - Type: bugfix
  - ID  : [Task#573493]
  - SUG : NA
  - DESC: add patch7: mate-session-manager-1.12.2-kylin-fix-core-problem-caused-by-long-uid.patch
          修复当用户uid过长导致会话管理器崩溃.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: peijiankang <peijiankang@kylinos.cn> - 20.1.4-3.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: sync from 20.1.4-1.p08
          Add Patch1001: 0001-meson-provide-a-default-configuration-to-build-vario.patch
          Add Patch1002: 0002-gallium-llvmpipe-pass-MCPU-mips64r2-to-LLVM-on-mips.patch
          Add Patch1003: 0003-gallivm-Return-true-from-arch_rounding_available-if-.patch
          Add Patch1004: 0004-gallivm-fix-coroutines-on-mips64-with-llvm-8.patch
          Add Patch1005: 0005-gallivm-add-more-optlevel-for-debug-purpose-on-mips6.patch
          Add Patch1006: 0006-disable-madd4-on-mips64.patch
          Add Patch1007: 0007-meson-add-mips-asm-flags.patch
          Add Patch1008: 0008-kmsro-Extend-to-include-loongson-drm-support.patch
          Add Patch1009: 0009-meson-add-loongarch64-build-support.patch
          Add Patch1010: 0010-gallivm-temporary-disable-coroutines-on-loongarch64-.patch
          Add Patch1011: 0011-gallivm-detect-loongarch-lsx-and-lasx-instruction-se.patch
          Add Patch1012: 0012-symbols-check-add-mips-platform-specific-symbols.patch
          Add Patch1013: 0013-gallivm-arit-use-LLVMBuildFPToUI-when-the-float-is-n.patch
          Add Patch1014: 0014-gallivm-disable-use-lp_build_round_arch-on-default.patch
          Add Patch1015: 0015-gallivm-add-more-optlevel-for-debuging-perpose-on-mi.patch
          Add Patch1016: 0016-gallivm-enable-lsx-and-lasx-on-loongarch-when-LLVM-e.patch
          Add Patch1017: 0017-llvmpipe-Fix-leak-of-CS-local-memory-with-0-threads.patch
          Add Patch1018: 0018-frontends-va-context-don-t-set-max_references-with-n.patch
          mv  to 2


author: pengfuyuan <pengfuyuan@kylinos.cn> - 20.1.4-3.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#208462]
  - SUG:  NA
  - DESC: Add -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: lipengyu<lipengyu@kylinos.cn> - 0.54.3-2.p01
changelog:
  - Type:updates
  - ID:[TASK#459802]
  - SUG:NA
  - DESC:fix upgrade error on the sp2
         sync fedora patch--use verbose mode for meson compile


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: huayadong <huayadong@kylinos.cn> - 1.1.6-0.4.gitfb4118d.13
changelog:
  - Type: bugfix
  - ID  : [BUG#264497]
  - SUG : NA
  - DESC: add patch8:linuxmint-mintlocale-fb4118d-fix-sensitive-flags.patch


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: gongxingliang <gongxingliang@kylinos.cn> - 2.15.05-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:tranplat Patch6004: 0001-change-log-level.patch from nasm-2.15.03-7.p01


author: gongxingliang <gongxingliang@kylinos.cn> - 2.15.05-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:tranplat Patch10000: 0001-change-log-level.patch from nasm-2.15.03-7.p01


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: zhangchaorui <zhangchaorui@kylinos.cn> - 6.2-6.p01
changelog:
  - Add patch: ncurses-support-loongarch.patch
  - Modify config.sub/config.guess for supporting loongarch


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9-6
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: shaojiansong <shaojiansong@kylinos.cn> - 1:5.9-8.p01
changelog:
  - Type:bugfix
  - ID:[BUG#153537]
  - SUG:NA
  - DESC:add aes192 & aes256 support, port from sp3,task#153888


author: shaojiansong <shaojiansong@kylinos.cn> - 1:5.9-8.p02
changelog:
  -Type:bugfix
  -ID:[Task#171801]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is null, port from task#164834


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: yaoxin <yao_xin001@hoperun.com> - 4.1.114-1
changelog:
  - Update to 4.1.114
    * Validate HTTP Method (#14280)
    * Release AdaptiveByteBuf when ownership could not be transfered. (#14285)
    * Make arenas reuse their last chunk more aggressively (#14291)
    * Only add Magazine to Set if we can ensure its removed again (#14292)
    * Ensure Chunk will not leak if init of AdaptiveByteBuf fails for whatever reason (#14295)
    * Correctly release one-off allocated chunks (#14302)
    * Ensure pooled memory is released when AdaptivePoolingAllocator is GC'ed (#14304)
    * Slices / duplicates of AdaptiveByteBuf must not escape the rootParent (#14310)
    * Fix sizeBucket bug in AdaptivePoolingAllocator (#14311)
    * AdaptiveByteBufAllocator: More strict reference counting for chunks (#14322)
    * Ensure we not store the DnsQueryContext for later removal when we couldnt obtain a query id (#14326)
    * Reduce memory fragmentation (#14333)
    * Properly free magazine chunks and avoid orphaned magazines (#14334)
    * Magazines must be freed under the expand lock (#14336)
    * Release message before failing promise when multiple requests are written while upgrade is in progress. (#14342)
    * Allow to reuse more then one session per host / port mapping (#14356)
    * Ensure writes will not fail when triggered after receiving UpgradeEvent.UPGRADE_SUCCESSFUL (#14362)
    * Refactor DnsNameResolver to be able to use different strategies when it comes to creating Channels for queries. (#14374)
    * DnsNameResolver: allow users to skip bind() during bootstrap (#14375)
    * DnsResolverBuilder methods should make it clear that these are for DatagramChannel (#14379)


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p01
changelog:
  - Type: update CVE
  - ID:   [TASK#553251]
  - SUG:  NA
  - DESC: 1.Fix CVE-2025-59419
          2.Fix a build error


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p02
changelog:
  - Type: update
  - ID:   [BUG#468839]
  - SUG:  NA
  - DESC: Update information that CVE-2022-24823 has been fixed while upgrading to 4.1.114


author: yaoxin <yao_xin001@hoperun.com> - 2.0.67-1
changelog:
  - Update to 2.0.67
    * Upgrade the netty-jni-util sources jar to version 0.0.9.Final
    * Use MACOSX_DEPLOYMENT_TARGET=10.13 when compiling BoringSSL
    * Fix jar name when cross compiling for macOs x86
    * Use -DCMAKE_MSVC_RUNTIME_LIBRARY=MultiThreaded
    * Remove weird non-breaking space unicode character
    * Upload hidden files for staging


author: yaoxin <1024769339@qq.com> - 2.0.73-1
changelog:
  - Update to 2.0.73:
    * Support boringssl SSLCredential API
    * Correctly map GENERIC to UNKNOWN when using BoringSSL
    * Fix build of libressl-static on newer CMAKE versions
    * Fix SSL.getSigAlgs() on BoringSSL for TLS 1.3
    * Invoke install_local_staging.sh script with correct arguments
    * Fix path for staged artifacts


author: liwenchong <liwenchong@kylinos.cn> - 1:2.5.1-6
changelog:
  - set use-gss-proxy to true in nfs.conf to be consistent with the
    description of 0003-nfs-utils-set-use-gss-proxy-1-to-enable-gss-proxy-by.patch


author: xiejing <xiejing@kylinos.cn> - 1:1.21.5-5.p01
changelog:
  - Type:update
  - ID:[Task#168411],[Bug#192329]
  - SUG:NA
  - DESC:Modify Kylin in index.html,404.html,50x.html


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-5.p08
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-5.p09
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:12.22.11-5.p04
changelog:
  - Type: cves
  - ID: NA
  - SUG: NA
  - DESC: Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix an error in CVE-2025-23085.2.fix conflicts between help and docs packages


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p07
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix conflicts between npm in 12.22.xx and nodejs in 12.19.0-1.0.1


author: lvfei <lvfei@kylinos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: houzhiwei<houzhiwei@kylinos.cn>- 3.54.0-10.p07
changelog:
  - Type:update
  - ID:TASK#其它
  - SUG:NA
  - DESC: Add PK11_Pub{Wrap, Unwrap}SymkeyWithMechanism r=mt,rrelyea Summary


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-13.p02
changelog:
  - Type:bugfix
  - ID:[TASK#446218]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: changtao <changtao@kylinos.cn> - 2.3.1-15.p01
changelog:
  - Type: complie
  - CVE: NA
  - SUG: NA
  - DESC:fix openjpeg2-help noarch package built differently on different architectures


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p16
changelog:
  - Type: bugfix
  - ID:[BUG#294265]
  - SUG:NA
  - DESC:fix login error after use the qingyun special config


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p21
changelog:
  - Type: update
  - ID: TASK#554963
  - SUG: NA
  - DESC: backport feature of ChannelTimeout/UnusedConnectionTimeout


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p22
changelog:
  - Type: update
  - ID: TASK#567487;BUG#247641;BUG#345532
  - SUG: NA
  - DESC: remove abandoned configs: RSAAuthentication/RhostsRSAAuthentication;
          rm sha1 in MACs and KexAlgorithms, and mv etm to MACs head


author: jiaocong <jiaocong@kylinos.cn> - 8.2P1-16.p25
changelog:
  - Type: update
  - ID: TASK#608701
  - SUG: NA
  - DESC: add comment for strict scp check option in sshd_config


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p27
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: mengchaoming<mengchaoming@kylinos.cn> -1:1.1.1f-31.p20
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream patch121->patch140
   null pointer dereference occurs when memory alloca
   Make DH check set some error bits in recently added 
   Fix integer overflow in evp EncryptDecryptUpdate
   Fix Coverity 1201763 uninitialised pointer read
   Fix Coverity 1498611 1498608 uninitialised read
   Fix coverity 1498607 uninitialised value
   Fix OBJ nid2obj doesn t always raise an  issue
   Set protocol in init client
   Fix a crash in ssl security cert chain
   Fix undefined behaviour in EC GROUP new from ecparam
   Fix a memory leak in ec key simple oct2priv
   Fix a crash in asn1 item embed new
   Fix leakage when the cacheline is 32 bytes in CBC MA
   Add test for empty supported groups extension
   Do not send an empty supported groups extension
   x509 use actual issuer name if a CA is used
   Fix a memory leak in crl set issuers
   ASN1 Reset the content dump flag after dumping
   Don t reset the packet pointer in ssl3 setup read bu
   bn produce correct sign for result of BN mod


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-31.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p23
changelog:
  - Type: update
  - ID: TASK#199873
  - SUG: NA
  - DESC: revert hygoncpp engine because of hygon gm not support openssl platform


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p32
changelog:
  - Type:update
  - ID:TASK#560665
  - SUG:NA
  - DESC:solve some issues regarding the tlcp protocol, tls, and the use 
         of national encryption suites under kylin server V10 and V11 systems


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p33
changelog:
  - Type:update
  - ID:TASK#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160、CVE-2026-22796、CVE-2026-22795、
             CVE-2025-69418、CVE-2025-69421、CVE-2025-69419、
             CVE-2025-69420


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p34
changelog:
  - Type:update
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-28390,CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p35
changelog:
  - Type:update
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-42766,
  	   CVE-2026-45447


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-28
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix the build by moving desktop files from kde4/services/ServiceMenus/ to kservices5


author: songliyang <songliyang@kylinos.cn> - 16.02-31.p01
changelog:
  - Type:update
  - ID:[TASK#463988]
  - SUG:NA
  - DESC:Delete plugins, gui and doc subPackages for compatibility


author: anyunhao <anyunhao@kylinos.cn> - 1.5.2-6.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:sync from sp2 patch: 0001-pam-13.1-8-loacal-chinese.patch;
  - DESC:resolve "Account temporarily locked due to %d failed logins" chinese local

  - Type:bugfix
  - ID:26337
  - SUG:sync from sp2 patch:Linux-PAM-1.4.0-kylin-fix-bug26337.patch
  - DESC:NA

  - Type:bugfix
  - ID:19898
  - SUG:modify spec
  - DESC:Modify system-auth.pamd to add 'use_first_pass'


author: anyunhao <anyunhao@kylinos.cn> - 1.5.2-6.p02
changelog:
  - Type:bugfix
  - ID:bug#189847
  - SUG:modify patch;
  - DESC:modify Linux-PAM-1.4.0-kylin-fix-bug26337.patch to fix bug26337


author: wanghao <wanghao2@kylinos.cn> - 1.5.2-6.p02.se.02
changelog:
  - Type: update
  - ID:[BUG#199224]
  - SUG:NA
  - DESC: 修复相同UID用户登录时提示信息闪现的问题, 终端登录
  -	提示信息不准确, 在spec文件加入修改system-auth和
  -	password-auth文件的命令, 修改system-auth.pamd和
  -	password-auth.pamd源码文件
  -	  add patch: pam-fix-same-uid-tips-time-short.patch


author: gongxingliang <gongxingliang@kylinos.cn> - 1.5.2-6.p04.se.02
changelog:
  - Type:cves
  - ID:CVE-2024-22365 CVE-2024-10963
  - SUG:NA
  - DESC:add patch 2 to fix CVE-2024-22365,add 3 4 5 to fix CVE-2024-10963


author: lixiaoyong <lixiaoyong@kylinos.cn> -4.1.3-15.p01
changelog:
  -Type:update
  -ID:NA
  -SUG:NA
  -DESC:移植v10-sp3的补丁，修复以下问题：
       - 修复系统日志中pmcd.service报错
       - 解决dstat输出格式问题和bond模式流量统计问题
       - 解决字段解析异常问题


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: liudy <liudingyao@kylinos.cn> - 1:3.04-7.p01
changelog:
  - Add 'export PERL_CANARY_STABILITY_NOPROMPT=1' before perl Makefile.PL
  - Skip the Canary::Stability COMPATIBILITY AND SUPPORT CHECK prompt


author: xieyanlong <xieyanlong@kylinos.cn> - 115-3.p02
changelog:
  - Type: update
  - ID: TASK#175382
  - SUG: NA
  - DESC: Adapter to kylin without mandoc and fix CVE-2022-3560


author: songjuntao <songjuntao@kylinos.cn> - 115-3.p04
changelog:
  - Type: update
  - ID: TASK#186623
  - SUG: NA
  - DESC: fix use file tool identify file happen bad note description


author: jiangxingsong <jiangxingsong@kylinos.cn> - 115-3.p05
changelog:
  - Type: update
  - ID: TASK# 199710
  - SUG: NA
  - DESC: Fixed an error message when importing two subject system certificate signatures


author: ganjianqing <ganjianqing@kylinos.cn> - 115-3.p06
changelog:
  - Type: update
  - ID: BUG# 335047
  - SUG: NA
  - DESC: Fixed an error when export cert from NSS db
          Remove unused i option in authvar
  	fix Segamentation fault in cms_common


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p03
changelog:
  - Type:cves
  - ID:CVE-2024-8925、CVE-2024-8926、CVE-2024-8927、CVE-2024-9026
  - SUG:NA
  - DESC:fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-2756,CVE-2024-3096,CVE-2024-5458
  - SUG:NA
  - DESC:fix CVE-2024-2756,CVE-2024-3096,CVE-2024-5458


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p06
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p07
changelog:
  - Type:cves
  - ID:CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233
  - SUG:NA
  - DESC:fix CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: gaoyukun <gaoyukun@kylinos.cn> - 8.0.30-10.p02
changelog:
  - Type:rebuild
  - ID:[BUG#338391]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Funda Wang <fundawang@yeah.net> - 8.0.30-12
changelog:
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Funda Wang <fundawang@yeah.net> - 8.0.30-13
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: lipengyu <lipengyu@kylinos.cn> - 8.0.30-13.p01
changelog:
  - Type:update
  - ID:[BUG#613853]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: lijian <lijian01@kylinos.cn> - 1.2.3-18.p03
changelog:
  - Type:bugfix
  - ID:[BUG#408625]
  - SUG:NA
  - DESC: add fixes for php >= 8.0 (patches from Patrick Monnerat <patrick@monnerat.net>)


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: zhangbowei<zhangbowei@kylinos.cn> - 1:0.10.1-10.p03
changelog:
  - Type:bugfix
  - ID:[Bug#374071]
  - SUG:NA
  - DESC:change exec path from /usr/bin to /usr/local/bin about podman-docker,change man file from docker to podman


author: weiyucheng<weiyucheng@kylinos.cn> - 1:0.10.1-10.p05
changelog:
  - Type:CVE
  - CVE: CVE-2025-58058
  - SUG:NA
  - DESC:fix CVE-2025-58058 and add containers-common version limit


author: songliyang <songlyang@kylinos.cn> - 0.116-12.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100: polkit-0.116-backport-Fix-two-minor-memory-leaks.patch. Author: mengchaoming
          3.Revert port polkit to mozjs78, use mozjs60 on v10 sp1


author: songliyang <songlyang@kylinos.cn> - 0.116-12.p02
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100: polkit-0.116-backport-Fix-two-minor-memory-leaks.patch. Author: mengchaoming
          3.Use p02 on v10 sp3, because p01 is used by v10 sp1


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: huayadong <huayadong@kylinos.cn> - 0.90.0-11.p01
changelog:
  - Type: bugfix
  - ID:   [Task#356271]
  - SUG:  NA
  - DESC: add Obsoletes: poppler-qt-devel, Obsoletes:poppler-qt


author: houhongxun <houhongxun@kylinos.cn> - 0.90.0-11.p04
changelog:
  - Type: cves
  - ID: [Task#549531]
  - SUG: NA
  - DESC: fix CVE-2025-52885 CVE-2025-43903 CVE-2020-36024 CVE-2025-43718


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: lichenguang <lichenguang@kylinos.cn> - 0.90.0-6.p01
changelog:
  - Type:cves
  - ID:CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365
  - SUG:NA
  - DESC:fix CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p03
changelog:
  - Type: BUG fix 
  - ID: NA
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel 
          postgresql-test-rpm-macros resolved conflicts


author: tenglei <tenglei@kylinos.cn> - 10.5-23.p05
changelog:
  - Type: bug#214211
  - ID: NA
  - SUG: NA
  - DESC: Remove libpq.so* to avoid file conflict with libpq package on loongarch64


author: lilu <lilu@kylinos.cn> - 10.5-23.p10
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 and CVE-2026-2006


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1.3.8b-3.p01
changelog:
  - Type:cves
  - ID:CVE-2024-57392
  - SUG:NA
  - DESC:fix CVE-2024-57392,and solve the loongarch compilation issue


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: songliyang <songliyang@kylinos.cn> - 3.14.0-9.p01
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Obsoletes protobuf2-emacs to fix install conflict error


author: songliyang <songliyang@kylinos.cn> - 3.14.0-9.p02
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Completely obsoletes protobuf2* to fix install conflict error


author: shenyangyang <shenyangyang4@huawei.com> - 12.2-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add provides of pulseaudio-libs-devel(aarch-64) needed by libmikmod-devel


author: chenjianhu <chenjianhu@kylinos.cn> - 3.7.4-6.p01
changelog:
  - Type:update
  - ID:[BUG#626355]
  - SUG:NA
  - DESC:Change python3-cchardet from BuildRequires to Recommends


author: wanggang <wanggang1@kylinos.cn> - 20.2.2-9.p08
changelog:
  - Type: CVEs
  - ID: CVE-2026-44431 CVE-2026-25645 CVE-2026-8643 CVE-2026-3219
  - SUG: NA
  - DESC: fix CVE-2026-44431 CVE-2026-25645 CVE-2026-8643 CVE-2026-3219


author: chenjianhu <chenjianhu@kylinos.cn> 44.1.1-3.p02
changelog:
  - Type:bugfux
  - ID: [BUG#460643]
  - SUG:NA
  - DESC: Fix the TypeError issue in the patch for CVE-2024-6345


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05
changelog:
  - Type: bugfix
  - ID:[Task#84294][BUG#124545][BUG#124543][BUG#122720]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python3-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.06.p02
changelog:
  - Type: bugfix
  - ID: [BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 5.0.6-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Address-CVE-2023-26112-ReDoS.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.39.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#231575]
  - SUG: NA
  - DESC: Fix typo in server-linearstore summary
          backport Patch01 to fix loongarch file not found error


author: liwei <liwei@kylinos.cn> - 4.15.1-53.p01.se.01
changelog:
  - Type:update
  - ID:[TASK#176491]
  - SUG:NA
  - DESC:add sm software package anti uninstallation
    add patch: rpm-add-sm-software-package-anti-uninstallation.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-53.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#176493]
  - SUG:NA
  - DESC:保持rpm安装文件原安全标记
  -       add patch rpm-remainoldtag-kysec.patch
  -       add patch rpm-fix-install-pkg-bw.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-53.p01.se.03
changelog:
  - Type:update
  - ID:[TASK#192265]
  - SUG:NA
  - DESC:修复rpm包关于bwlist的状态判断不对的问题
  -       add patch rpm-add-check-pkg-bw-sdk-status.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-54.p01.se.04
changelog:
  - Type:bugfix
  - ID:[Bug#210692]
  - SUG:NA
  - DESC:【应用安装控制】同时开启安装黑白名单，安装仅配置黑名单的软件包时提示语错误
  -       add patch: rpm-update-bw-notification.patch


author: litianhao <litianhao@kylinos.cn> - 4.15.1-54.p01.se.05
changelog:
  - Type:bugfix
  - ID:[Task#197801]
  - SUG:NA
  - DESC: 软件防卸载补充中文翻译
  -       add patch: rpm-add-spro-i18n.patch


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.2-4
changelog:
  - Python 2 binary package renamed to python2-sqlparse
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.2.2-6
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.4-4
changelog:
  - Subpackage python2-sqlparse has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: mengchaoming<mengchaoming@kylinos.cn> -2.2.2-15.p04
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream patch06->patch09
  -delete duplicate file sssd-example.conf
  -fix the sssd_be process coredump
  -sssctl/sssctl_domains.c: null dereference fixed
  -fix coredump in sssd.service


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: yaoxin <1024769339@qq.com> - 1.4.4-1
changelog:
  - Update to 1.4.4 for fix CVE-2019-16785,CVE-2019-16786,CVE-2019-16789 and CVE-2019-16792
  - Add patches for CVE-2024-49769: DoS due to resource exhaustion


author: lipengyu<lipengyu@kylinos.cn> - 1.0.1-2.p01
changelog:
  - Type:CVE and updates
  - ID:CVE-2024-34069
  - SUG:NA
  - DESC:fix CVE-2024-34069
         add Obsoletes:python2-werkzeug-doc for fix upgrade error on the sp2


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39.se.01
changelog:
  - Type: bugfix
  - ID: [BUG#193772]
  - SUG: NA
  - DESC: From: @wanghao
          移植kysec执行控制检查补丁
          add patch: python3-7.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add Patch9007-9008, fix CVE-2007-4559
  -      Add Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41.se.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
       CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
         CVE-2025-4330 CVE-2025-4435


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: gongxingliang <gongxingliang@kylinos.cn> - 3.6.0-2.p02
changelog:
  - Type: compile
  - ID: NA 
  - SUG: NA
  - DESC: fix build error due to hdf5 upgrade(patch1 patch2 patch3)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.5-13
changelog:
  - Subpackage python2-moksha-common has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: yanglu<yanglu72@h-partners.com> - 1.11.0-6
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.11.0-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.11.0-22
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Miro Hrončok <mhroncok@redhat.com> - 18.1.0-2
changelog:
  - Subpackages python2-zmq, python2-zmq-test have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Jochen Breuer <jbreuer@suse.de> - 18.1.0-3
changelog:
  - Providing python-pyzmq, since some packages are still relying on that.
    See: https://bugzilla.redhat.com/show_bug.cgi?id=1789889


author: Feng Jiang <jiangfeng@kylinos.cn> -2:4.1.0-64.p02
changelog:
  - Type: update
  - ID:   [TASK#158763]
  - SUG:  NA
  - DESC: Add support for virtio-gpu hardware video acceleration.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p03
changelog:
  - Type: Update
  - ID: [TASK#174977][TASK#170640][TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791 CVE-2023-3180 CVE-2023-0664 and CVE-2023-2861
  - 	accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - 	pci: assert configuration access is within bounds(CVE-2020-13791)
  - 	io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p04
changelog:
  - Type:update
  - ID: [TASK#181011]
  - SUG: NA
  - DESC: Add Hygon patches about encryption
  -       The latest kernel already supports the implementation of the VCPU topology of the Hygon platform, so remove  KYLIN-change-the-apicid-bitmap-for-kernel-to-get-the-socketid.patch.
  -       Fix the compilation issue that the function(kvm_arch_cpu_check_are_resettable) was no defined on the LoongArch architecture.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p05
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  -       change "sbss" to "ssbs" to fix this error.


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.0-64.p06
changelog:
  - Type: update
  - ID:   [TASK#193495]
  - SUG:  NA
  - DESC: Merge Phytium' Patch to support S5000c host-model


author: weishaokun <weishaokun@kylinos.cn> - 2:4.1.0-64.p07
changelog:
  - Type: update
  - ID:   [BUG#210849]
  - SUG:  NA
  - DESC: fix hygon bug that can not save virtual machines


author: wangguochun <wangguochun@kylinos.cn> - 2:4.1.0-64.p08
changelog:
  - Type: Bug
  - ID: [BUG#186999]
  - SUG: NA
  - DESC: fix unkown virtio-net-nic speed，set speed 10000Mb/s


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p10
changelog:
  - Type: update
  - ID: [TASK#224909]
  - SUG: NA
  - DESC: Fixed some issues supported by CSV/CSV2/CSV3
  -       fix the problem of the number of encrypted virtual machines supported by Haiguang No. 2 and No. 3
  -       fix migration-related issues


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p12
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: lizhanchun <lizhanchun@kylinos.cn> - 2:4.1.10-64.p16
changelog:
  - Type: Update
  - ID:   [TASK#352451]
  - SUG:  NA
  - DESC: Supporting inter-series thermal migration in Pythium.


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.10-64.p19
changelog:
  - Type: Update
  - ID:   [TASK#422831]
  - SUG:  NA
  - DESC: fix CVE-2023-3019/disbale pvrdma(deprecated upstream) to fix CVE-2023-1544


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.10-64.p20
changelog:
  - Type: Bugfix
  - ID:   [BUG#385783]
  - SUG:  NA
  - DESC: Forbid repeated device_del to fix hot-unplug issue


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.10-64.p22
changelog:
  - Type: Bugfix
  - ID:   [BUG#415279]
  - SUG:  NA
  - DESC: Enable blockdev support for copying across storage block devices


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.10-64.p23
changelog:
  - Type: Bugfix
  - ID:   [BUG#418249]
  - SUG:  NA
  - DESC: Fix integer left shift error in qcow2_alloc_cluster_link_l2()


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p27
changelog:
  - Type: cves
  - ID:   CVE-2025-11234
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 2:4.1.0-64.p28
changelog:
  - Type: Update
  - ID:   [TASK#642435]
  - SUG:  NA
  - DESC: drop dirty rect update to fix memory allocation error


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-64.p29
changelog:
  - Type: cves
  - ID:   CVE-2024-3447/CVE-2024-3446/CVE-2026-2243
  - SUG:  NA
  - DESC: Fix CVE-2024-3447 CVE-2024-3446 CVE-2026-2243


author: malike <malike@kylinos.cn> - 2:4.1.0-64.p32
changelog:
  - Type: cves
  - ID:   CVE-2026-48914
  - SUG:  NA
  - DESC: Fix CVE-2026-48914 heap buffer overflow in virtio-blk scsi request handling


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p33
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p01
changelog:
  - add diff from 1:4.8.7-46, diff:
  - add qt-everywhere-opensource-src-4.8.7-neokylin-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-atomic-mips64el.patch
  - add qt-everywhere-opensource-src-4.8.7-qmake-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-mips64r2.patch
  - modified:  assistant.desktop designer.desktop linguist.desktop qdbusviewer.desktop
  - (1:4.8.7-46)ori uri: http://10.1.110.123/download/iso/Euler/openeuler_ARM64/openeuler-2020-03-13-01-32-06/Software/aarch64/SRPMS/Packages/qt-4.8.7-46.oe1.src.rpm
  - (1:4.8.7-46)modified: http://10.1.123.237/kojifiles/packages/qt/4.8.7/46.ky10/src/qt-4.8.7-46.ky10.src.rpm


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: huayadong <huayadong@kylinos.cn> - 1:4.8.7-47.p11
changelog:
  - Type: bugfix
  - ID:   [TASK#220326]
  - SUG:  NA
  - DESC: add patch45: fix-that-filediolog-cannot-use-input-methods.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 5.11.1-22.p01
changelog:
  - Type: compile
  - ID:   NA
  - SUG:  NA
  - DESC: sync from 5.11.1-16.p02
          add Patch1001: 0001-Support-loongarch64.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 5.11.1-22.p02
changelog:
  - Type: compile
  - ID:   NA
  - SUG:  NA
  - DESC: Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: gaoyukun <gaoyukun@kylinos.cn> - 5.11.1-23.p01
changelog:
  - Type: compile
  - ID:   NA
  - SUG:  NA
  - DESC: sync from 5.11.1-16.p02
          add Patch9000: 0001-Support-loongarch64.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.8-1.p04
changelog:
  - Type:update
  - ID:[TASK#158206]
  - SUG:NA
  - DESC:Add Patch004, fix poll() on per_cpu trace_pipe_raw blocks indefinitely
  -      See also https://github.com/mchehab/rasdaemon/commit/6986d818e6d2c846c001fc7211b5a4153e5ecd11
  -      Enable-memory-ce-pfa, enable-memory-failure for aarch64 configure


author: jiangjixiang <jiangjixiang@kylinos.cn> - 0.6.8-1.p06
changelog:
  - Type:update
  - ID:[TASK#186413]
  - SUG:NA
  - DESC: backport patch from OE2003-SP4
      1.wait for file access.
      2.Modify recording Hisilicon common error data in the rasdaemon.
      3.fix incomplete diskerror log.
      4.fix possible but unlikely file descriptor leak.
      5.fix ras-mc-ctl.service startup failed when selinux is on.
      6.Fix return value type issue of read/write function from unistd.h.
      7.adapt to kernel ftrace ring buffer change.
      8.ras-events:quit loop in read_ras_event when kbuf data is broken.


author: lifeifei <lifeifei@kylinos.cn>
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.
         2.Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.11-1.p01
changelog:
  - Type:update
  - ID:[Task#540289]
  - SUG:NA
  - DESC:Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: guojunding <guojunding@kylinos.cn> - 8.10-9
changelog:
  - Type:update
  - ID:task#163840
  - SUG:NA
  - DESC:BZ 1851499 port to str return values 
         fix return value error for rpminfo


author: Qin Fandong <qinfandong@kylinos.cn> - 8.10-9.p01
changelog:
  - Type: bugfix
  - ID: [BUG#289003]
  - SUG: NA
  - DESC: Fix rpminfo exit unnormally every time when bash fork subprocess


author: yueyuankun<yueyuankun@kylinos.cn> - 8.2006.0-7.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - DESC:solve the problem of duplicate logs in /var/log/messages after restarting the system


author: wangshuo <wangshuo@kylinos.cn> - 8.2006.0-7.p04
changelog:
  - Type:bugfix
  - ID:[BUG#345111]
  - SUG:NA
  - DESC:Backport upstream patch, core bugfix potential segfault on busy systems
  -      Adjust rsyslog-pgsql BuildRequires to reslove compliation issues on loongarch


author: chenjianhu <chenjianhu@kylinos.cn> - 2.5.8-136.p01
changelog:
  - Type:compile
  - ID:[Task#564099]
  - SUG:NA
  - DESC:add requires elfutils-extra and add CVE-2025-58767 test case


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: LiYue <liyue01@kylinos.cn> - 0.1.39-4.p01
changelog:
  - Type: Compile
  - ID: Task#176495
  - SUG: NA
  - DESC: Add Kylin Linux Advanced Server V10 SP3 Security Guide Codes, Complete New ~2000 Kylin Linux Security Profiles & Rulesets, Add Kylin Distro Compatibility From  <jiangzhaoyu@kylinos.cn>. Complete New ~5300 Lines BugFixes.


author: zhaoyun <zhaoyun@kylinos.cn> - 0.1.39-4.p02
changelog:
  - Type: update
  - ID: Bug#288755
  - SUG: NA
  - DESC: 【V10SPX】【mugen】secure_conf测试集oe_test_secureconfline_checktools用例测试失败


author: sunjin <sunjin@kylinos.cn> 1.1.0-03
changelog:
  - Type:update
  - ID:[TASK#171432][Bug#188190][Bug#185175][Bug#188318][Bug#189677][Bug#190040][Bug#190217]
  - SUG:NA
  - DESC: 安全加固包走流程入库集成build03
  -       【安全加固】“禁止SSH自动登录”的功能和加固名称都需要做修改
  -       【安全加固】建议对同个加固项仅提供仅扫描和扫描并加固中的一种模式
  -       【安全加固】加固项“禁用printer服务”应修改为“禁用cups服务”
  -       【安全加固】【交互命令】导入、删除模板成功时建议给出提示
  -       【安全加固】【非交互命令】自定义参数导入测试-关闭系统不必要的端口为1个端口时。安全加固失败，再次加固程序崩溃
  -       【安全加固】设计文档中，“删除与设备运行、维护等工作无关的账号”加固项未归属在麒麟安全模板中


author: sunjin <sunjin@kylinos.cn> 1.1.0-04
changelog:
  - Type:update
  - ID:[TASK#173466][Bug#191449][Bug#190916][Bug#190845][Bug#190224][Bug#186483][Bug#186482][Bug#159670][Bug#191438][Bug#191590][Bug#192066][Bug#192552]
  -    [Bug#192583][Bug#192520][Bug#192492][Bug#192486][Bug#191774][Bug#191748][Bug#191732][Bug#191453][Bug#191364][Bug#191216][Bug#190537][Bug#190220]
  - SUG:NA
  - DESC: 【安全加固】build04入库
  -       【安全加固】模板中“禁用cups服务”加固项的英文描述需要修改，将“printer”修改为“cups”
  -       【安全加固】【潜在威胁】不存在vnStatsvg软件包，无法正确判断加固项状态 [用例#722537]
  -       【安全加固】加固重要文件，加固报告中存在“etc/shadow”，应为绝对路径
  -       【安全加固】安全加固界面创建的模板通过命令行导出后，无法再使用命令行导
  -       【安全加固】eu-objdump组件包含在elfutils包中，检查可调试组件未对该包进行检查
  -       【安全加固】eu-readelf组件包含在elfutils包中，检查可调试组件未对该包进行检查
  -       【系统安全】建议删除sync/shutdown/halt账户
  -       【安全加固】开启三元后，secadm用户导出加固模板至root目录，提示“该路径不存在”
  -       【安全中心】【安全加固】【交互命令】执行security-reinforce命令-模板功能-导入/导出模板后按ctrl+D进入死循环“请输入导入文件路径 >该模板文件不存在”
  -       【安全加固】strict模式下，root用户/审计用户执行扫描加固时，提示“普通用户没有加固权限”
  -       【安全加固】【非交互命令】安全用户导出模板至/root目录，提示“导出目录路径不存在”
  -       【安全加固】【安全服务】motd文件信息不符合要求时，ssh成功登录后Banner项仍为无需加固 [用例#722597]
  -       【安全加固】【安全服务】设置ssh登录前警告信息不符合要求时，扫描结果依然为无需加固 [用例#722596]
  -       【安全加固】【安全服务】加固后，telnet登录后警告信息语法错误 [用例#722599]
  -       【安全加固】【安全服务】设置telnet登录前警告信息满足条件仍被加固，且信息添加方式为追加 [用例#722598]
  -       【安全加固】"设置telnet登录前警告Banner"加固成功后没有生成issue.net文件
  -       【安全加固】【系统审计】auditd服务disable后，开启审计机制加固项扫描结果为无需加固 [用例#722486]
  -       【安全加固】/etc/motd内容为空，默认模板中“设置telnet登录后警告Banner”后执行扫描，没有扫描出风险
  -       【安全加固】模板中“禁止SSH免密登录”加固项标识需要修改
  -       【安全加固】“禁止SSH免密登录”加固项分类错误
  -       【安全加固】【非交互命令】导入模板 导入的文件为Log文件，服务崩溃
  -       【安全加固】【系统设置】禁止系统自动登录为待加固状态，扫描结果依然为无需加固 [用例#722545]  
  -       【安全加固】“删除除root之外UID为0的用户”加固项名称与加固项功能不一致


author: sunjin <sunjin@kylinos.cn> 1.1.0-05
changelog:
  - Type:update
  - ID:[TASK#175465][Bug#193345][Bug#193311][Bug#193200][Bug#192522][Bug#190709][Bug#194823][Bug#192801][Bug#192782][Bug#193372]
  - SUG:NA
  - DESC: 【安全加固】build05入库
  -       【安全加固】【安全服务】禁用ident服务和禁用bootps服务，实际实现与加固项名称不一致 [用例#722580]
  -       【安全加固】禁用不必要的系统服务和xinetd服务加固小项前，需加上大项分类名称
  -       【安全加固】加固项“限制FTP用户上传的文件所具有的权限”在未安装vsftpd包的情况下提示“需手动加固”
  -       【系统功能】三权模式下/etc/mail/aliases和/etc/aliases禁用不必要的别名，两次加固还原，第二次还原失败
  -       【安全加固】【潜在威胁】还原后删除潜在危险文件，再次扫描还原失败 [用例#722566]
  -       【安全加固】【潜在威胁】安全报告中检查可调试组件扫描结果缺少组件名称 [用例#722528]
  -       【安全加固】【密码强度】仅删除/etc/pam.d/system-auth文件中的参数，“加强口令的密码算法”加固项的扫描结果为“待加固” [用例#722544]
  -       【安全加固】【交互命令】输入导入路径时无法退出该界面
  -       【安全加固】【非交互命令】未使用过安全加固时，-o参数导出安全报告没有提示信息


author: sunjin <sunjin@kylinos.cn> 1.1.0-06
changelog:
  - Type:update
  - ID:[TASK#177664][Bug#196937][Bug#196587][Bug#196503][Bug#195908][Bug#195903][Bug#195885][Bug#194823][Bug#190709][Bug#185466]
  - SUG:NA
  - DESC: 【安全加固】build06入库
  -       【安全加固】密码复杂度设置更严格时，扫描结果依然为待加固 [用例#722800]    
  -       【安全加固】system-auth和login.defs文件中sha512配置均被注释后，“加强口令密码算法”扫描结果为无需加固 [用例#722544]    
  -       【安全加固】限制/boot/efi/EFI/kylin/grub.cfg文件权限加固项名称与详情描述不符合规范 [用例#722786] 
  -       【安全加固】设置守护进程的umask值为0777，依然会被加固 [用例#722547]  
  -       【安全加固】“禁止/var/log日志文件全局可写”加固后文件权限为640，建议调整为644 [用例#722823]    
  -       【安全加固】【系统设置】“禁用ctrl+alt+del组合键”加固后状态为加固成功，实际tty界面重启生效 [用例#722610]      
  -       【安全加固】【潜在威胁】安全报告中检查可调试组件扫描结果缺少组件名称 [用例#722528]     
  -       【安全加固】【潜在威胁】还原后删除潜在危险文件，再次扫描还原失败 [用例#722566]       
  -       【安全加固】导出的安全报告格式没有对齐，显示不美观


author: sunjin <sunjin@kylinos.cn> 1.1.0-07
changelog:
  - Type:update
  - ID:[TASK#185079][Bug#198528][Bug#198451][Bug#197969][Bug#197361][Bug#197220][Bug#197195][Bug#196531][Bug#190226][Bug#184956][Bug#202688][Bug#201401]
  - SUG:NA
  - DESC: 【安全加固】build07入库
  -       【安全加固】设置账户锁定项进行加固后，还原失败，ssh密码验证失败
  -       【安全加固】安全报告中，禁止/var/log日志文件全局可读写描述信息未同步为可读写 [用例#732916]  
  -       【安全加固】设置守护进程的umask值该项进行加固后，再次扫描依然提示需要加固  
  -       【安全加固】系统环境满足无需加固，开启审计机制加固项仍显示待手动加固 [用例#722488]       
  -       【安全加固】限制日志文件权限设置更严格时，依然会被加固 [用例#722788]   
  -       【安全加固】限制FTP用户上传的文件所具有的权限更严格时，依然会被加固 [用例#722790]      
  -       【安全加固】限制重要目录或文件权限加固时，权限更严格依然会被加固 [用例#722786]     
  -       【安全加固】加固箱限制SSH服务可访问源，SP4服务器不支持此功能                
  -       【安全加固】无法导出安全报告明细
  -       【安全加固】检查不安全组件加固项详情描述中未添加组件名
  -       【安全加固】【系统设置】设置系统引导管理器密码扫描结果为等待加固，重启系统进入grub依然需要输入密码
  -       添加补丁security-reinforce-update-20231122.patch


author: sunjin <sunjin@kylinos.cn> 1.1.0-08
changelog:
  - Type:update
  - ID:[Bug#197220][Bug#203602][Bug#203676]
  - SUG:NA
  - DESC: 【安全加固】build08入库
  -       【安全加固】限制日志文件权限设置更严格时，依然会被加固 [用例#722788]
  -       【安全加固】【非交互命令】未使用过安全加固可导出安全报告 [用例#722452]  
  -       【安全加固】【系统审计】开启审计机制加固项还原失败，同时导致加固服务停止 [用例#722486]


author: sunjin <sunjin@kylinos.cn> 1.1.0-09
changelog:
  - Type:update
  - ID:[Bug#206108][Bug#203740][Bug#204318]
  - SUG:NA
  - DESC: 【安全加固】build09入库
  -       【安全加固】设置账户登录失败锁定功能加固逻辑错误 [用例#722810]                          
  -       【安全加固】当扫描过程存在对参数的判断时，参数值为空时扫描卡死
  -       【安全加固】禁用ctrl+alt+del组合键后在tty界面重启，系统会卡住


author: sunjin <sunjin@kylinos.cn> 1.1.0-10
changelog:
  - Type:update
  - ID:[Task#192717]
  - SUG:NA
  - DESC: 【安全加固】build10入库
  -       【安全加固】因tripwire软件包不再维护，去掉检查文件系统和磁盘完整性校验加固项


author: sunjin <sunjin@kylinos.cn> 1.1.0-12
changelog:
  - Type:update
  - ID:[Task#533611][Task#465523][BUG#396583]
  - SUG:NA
  - DESC: 【安全加固】银联poc测试，build12入库
  -	银联poc测试，修改checkpasswd逻辑
  -   合并其他分支的提交，修复了一些bug
  -   修复[BUG#396583]【银联poc】【sp4】【安全加固】【安全扫描】安全扫描过程中，点击右上角X号，关闭安全中心不操作弹框，扫描完成后再次扫描安全加固功能异常
  -   添加补丁security-reinforce-update-20250919.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.1.0-13
changelog:
  - Type:update
  - ID:[Task#546973][ask#543765][BUG#481093]
  - SUG:NA
  - DESC:  扩展现有数据库中security_template表，添加模板状态以及操作时间字段
  -	     实现扫描、加固、还原操作时更新表的逻辑
  -	     删除模板时添加约束限制，禁止删除已加固的模板
  -	     扩展命令行工具参数，增加导出加固模板列表
  -	     增加数据平滑升级逻辑，因为新增了字段，解决旧版本升级的问题
  -	     ssh强密码算法修改为自定义参数
  -       添加补丁security-reinforce-update-20260115.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 1.1.0-15
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260522.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 1.1.0-16
changelog:
  - Type: bugfix
  - ID: [BUG#532307][BUG#532285][BUG#532267][BUG#541387][BUG#541317][BUG#541287]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532307][BUG#532285][BUG#532267]
  -       修复安全漏洞[KVE-2026-0420][BUG#541387][BUG#541317][BUG#541287]
  -       security-reinforce-update-20260531.patch


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.29.01
changelog:
  - Type:update
  - ID:[BUG#197027]【selinux】仅策略开启时，开启kysec后无法进入系统
  - SUG:NA
  - add Patch7017: selinux-policy-kydima-tcsd-docker.patch
  - [BUg#195595]【可信软件栈】strict模式下，无法开启TCM可信软件栈服务进程 
  - [BUg#192771]【安全加固】【安全服务】nfs-lock服务启动时，禁用nfs-lock服务扫描结果为无需加固 
  - [BUg#192759]【安全加固】【安全服务】加固“禁用nfs服务”后，nfs服务仍处于运行状态
  - [BUg#196191]【selinux】策略开启时，无法启动容器 
  - [BUG#197879]【selinux】策略开启时，无法打开动态度量 
  - [BUG#197027]【selinux】仅策略开启时，开启kysec后无法进入系统


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.29.02
changelog:
  - Type:update
  - ID:[BUG#198464]【selinux】策略开启时，禁止/var/log日志文件全局可读写加固失败
  - SUG:NA
  - add Patch7018:selinux-policy-vnc-alise-uid-log.patch
  - DESC ：适配vnc alise uid=0，以及日志读写，quota测试
  -[BUG#199376]【selinux】策略开启时，相同uid用户登录系统后无法加载桌面环境 
  -[BUG#199078]【selinux】策略开启时，vncserver无法启动 
  -[BUG#199065]【selinux】策略开启时，/usr/bin/newaliases命令执行失败
  -[BUG#198464]【selinux】策略开启时，禁止/var/log日志文件全局可读写加固失败
  -[BUG#199218]【selinux】策略开启时，ypbind服务启动被拦截


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.29.03
changelog:
  - Type:update
  - ID:[任务#186042]修复bug203500关联的策略问题
  - SUG:NA
  - add Patch7019:selinux-policy-kydima-del-unlabel.patch
  - DESC :删除unlabel_t的策略,以及kydima模块相关策略.
  - [BUG#198018]【动态度量】通过不存在的pid查询或添加进程度量策略时，没有提示信息		    
  - [BUG#184426]【动态度量】无法显示当前进程策略列表			    
  - [BUG#182714]【动态度量】三元开启时，应只有secadm用户可以使用动态度量相关命令


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.29.04
changelog:
  - Type:update
  - ID:[BUG#206469]&[BUG#206424]&[BUG#205844]&[BUG#184426]
  - SUG:NA
  - add Patch7020: selinux-policy-home-kydima-smb.patch
  - DESC :修复bug以及pcp_pmcd_t相关拦截
  - [BUG#206469]【安全模式切换】删除/home/auditadm和/home/secadm文件夹后切换strict模式，重启无法登录auditadm用户和secadm用户	    
  - [BUG#206424]【selinux】smb服务端策略开启时，共享目录下的内容无法被获取      	    
  - [BUG#205844]【动态度量】strict模式无法通过文件路径添加/删除度量策略      
  - [BUG#184426]【动态度量】无法显示当前进程策略列表


author: anyunhao<anyunhao@kylinos.cn> - 3.14.2-81.se.29.04
changelog:
  - Type:update
  - ID:[任务#186398]
  - SUG:NA
  - DESC :同步上游版本改动.
  - 1.add allow-httpd-to-put-files-in-httpd-config-dir.patch
  - 2.change spec file:add weak dep of selinux-policy-targeted
  - 3.change spec file:add the dependency between packages
  - 4.add add-rule-for-hostnamed-to-rpmscript-dbus-chat.patch


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-81.se.29.05
changelog:
  - Type:update
  - ID:[BUG#209928] [BUG#184426]
  - SUG:NA
  - add Patch7023: selinux-policy-virt-kydima.patch
  - DESC :修复sp4bug
  - [BUG#209928]【sp4】【虚拟机】开启selinux，安装虚拟机，报权限不足 
  - [BUG#184426]【动态度量】无法显示当前进程策略列表


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-81.se.29.06
changelog:
  - Type:update
  - ID:[BUG#211753]&[BUG#210853]&[BUG#209238]
  - SUG:NA
  - add Patch7024: selinux-policy-reboot-tmp-make.patch
  - DESC :修复sp4bug
  - [BUG#211753]【动态度量】strict模式无法通过文件路径添加/删除度量策略
  - [BUG#210853]【动态度量】策略开启安装动态度量软件包后，每次重启都卡死 
  - [BUG#209238]【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常


author: tiandongdong<tiandongdong@kylinos.cn> - 3.14.2-81.se.29.07
changelog:
  - Type:bugfix
  - ID:[BUG#217458][BUG#210849][BUG#217466][BUG#218122][BUG#218198]
  - SUG:NA
  - add Patch7025: selinux-policy-target-mode-root-not-insmod-ko.patch
  - add Patch7026: selinux-policy-virt-create-failed.patch
  - add Patch7027: selinux-policy-add-usbguard-file-label.patch
  - add Patch7028: selinux-policy-fix-tpm-cmd-execute-failed.patch
  - add Patch7029: selinux-policy-fix-start-httpd-failed.patch
  - add Patch7030: selinux-policy-fix-auditadm-exec-auditctl-failed.patch
  - DESC :修复sp4bug
  - [BUG#217458] 【内核模块签名支持国密算法】selinux模式下签名和未签名模块都无法加载
  - [BUG#210849]  解决虚拟化-创建虚拟机失败问题.
  - [BUG#217466] 【安全SDK】selinux模式下，添加授权、添加删除策略设备报错
  - [BUG#218122] 【需求26271】【TPM软件栈功能】strict模式下执行tpm命令失败 
  - [BUG#218198] 【sp4-b15】【联网管控】strict模式下，httpd服务无法开启
  - [BUG#218651] 【SP4-B15】【strict】【安全审计】审计管理员无法执行auditctl命令


author: tiandongdong<tiandongdong@kylinos.cn> - 3.14.2-81.se.29.08
changelog:
  - Type:bugfix
  - ID: [BUG#220191][BUG#220341][BUG#220446][BUG#215180][BUG#220212]
  - SUG:NA
  - add Patch7031: selinux-policy-add-kytrust-module.patch
  - add Patch7032: selinux-policy-fix-kydima-not-rw-tpm-device.patch
  - add Patch7033: selinux-policy-fix-kydima-set-pcr-error.patch
  - add Patch7034: selinux-policy-fix-kytrust_config-add-file-failed.patch
  - DESC :修复sp4bug
  - [BUG#220191] 【SP4-B16-TPM/SOFT】【可信启动】strict模式下添加可信启动基准库文件报错
  - [BUG#220341] 【x86可用】【需求22987】【可信启动】可信启动开启，篡改配置文件后重启，选择继续启动（lpc外插tpm）
  - [BUG#220446] 【SP4-B16-TPM-strict】【动态度量】三权模式下，开启PCR失败
  - [BUG#215180] 【需求22928】【动态度量-PCR】【arm架构】 开启动态度量PCR开关提示段错误 
  - [BUG#220212] 【SP4-B16-TPM-Strict】【可信启动】可信启动度量失败未产生失败日志


author: tiandongdong<tiandongdong@kylinos.cn> - 3.14.2-81.se.29.09
changelog:
  - Type:bugfix
  - ID: [BUG#418875]
  - SUG:NA
  - add Patch7035: selinux-policy-fix-targeted-update-kernel-exists-dracut-error-msg.patch
  - DESC: 修复targeted策略下更新内核时 存在报错信息


author: tiandongdong<tiandongdong@kylinos.cn> - 3.14.2-81.se.29.10
changelog:
  - Type:bugfix
  - ID: [BUG#580513]
  - SUG:NA
  - add Patch7036: selinux-policy-20260108-fix-update-systemd-pkg-failed.patch
  - DESC: 修复targeted策略下更新systemd包失败问题


author: tiandongdong<tiandongdong@kylinos.cn> - 3.14.2-81.se.29.11
changelog:
  - Type:bugfix
  - ID: [BUG#504761]
  - SUG:NA
  - add Patch7037:selinux-policy-20260323-fix-kscdefender-add-ppro-failed.patch
  - DESC: 修复targeted策略下 安全中心无法添加ppro功能失败


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-10.se.01
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch
  -       添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch
  -       useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch
  -       off状态,-u参数默认getpwuid; on状态,-u使用uid_used
  -          add patch: shadow-chkuid-off-oflg-pwuid.patch
  -         add patch: shadow-get-chkuid-state.patch


author: mengchaogming<mengchaoming@kylinos.cn>-- 2:4.8.1-10.se.01.p01
changelog:
  - Type:update
  - ID:[Task#198754]
  - SUG:NA
  - DESC:支持香港繁体中文
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu<zhoukangyu@kylinos.cn>-- 2:4.8.1-10.se.02.p01
changelog:
  - Type:update
  - ID:[Task#562021]
  - SUG:NA
  - DESC: useradd: fix UID uniqueness check error
  - add patch: shadow-useradd-fix-UID-uniqueness-check-error.patch


author: songjuntao <songjuntao@kylinos.cn> - 15.6-9.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:open enable_sm status and add smx algorithm into db check allowlist function


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-9.p09
changelog:
  - Type:bugfix
  - ID:BUG#216408
  - SUG:secure boot
  - DESC:add BOOTLOONGARCH.EFI/BOOTLOONGARCH64.EFI for loongarch64


author: majianhan <majianhan@kylinos.cn> - 15.6-9.p12
changelog:
  - Type:CVE
  - ID:TASK#423385
  - SUG:NA
  - DESC: 1. Patch52 - Fix issue where second_stage was set to an empty
                       string in parse_load_option.
          2. Patch53 - Always clear SbatLevel when Secure Boot is diabled.
          3. Fix CVEs:
             CVE-2023-2650     CVE-2023-0465
             CVE-2024-0727     CVE-2023-3446
             CVE-2023-5678     CVE-2023-3817
             CVE-2023-0464     CVE-2018-0737
             CVE-2021-23840    CVE-2023-40546
             CVE-2023-40547    CVE-2023-40548
             CVE-2023-40549    CVE-2023-40550
             CVE-2023-40551


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-9.p14
changelog:
  - Types:bugfix
  - ID:BUG#500913
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: xinghe <xinghe2@h-partners.com> - 7:4.9-25
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: duanhongtao <duanhongtao@kylinos.cn> - 5.7.2-10.p03
changelog:
  - Type:CVE
  - CVE:CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: huyubiao <huyubiao@huawei.com> - 243-64
changelog:
  - add backport-pstore-fix-use-after-free.patch
        backport-udev-also-logs-file-permission.patch
        backport-core-Fix-setting-StatusUnitFormat-from-config-files.patch
        backport-udevadm-missing-initialization-of-descriptor.patch
        backport-udevadm-use-usec_add.patch
        backport-shared-install-fix-error-codes-returned-by-install_c.patch
        backport-udevadm-trigger-do-not-propagate-EACCES-and-ENODEV.patch
        backport-pstore-rework-memory-handling-for-dmesg.patch
        backport-udev-fix-memleak-caused-by-wrong-cleanup-function.patch
        backport-network-ndisc-do-not-drop-all-prefixes-when-a-prefix.patch
        backport-nspawn-fix-handling-of-console-help.patch
        backport-core-job-fix-breakage-of-ordering-dependencies-by-sy.patch
        backport-sd-device-enumerator-do-not-return-error-when-a-devi.patch
        backport-udev-ignore-ENOENT-when-chmod_and_chown-device-node.patch
        backport-udev-fix-error-code-in-the-log-message.patch
        backport-udev-do-not-append-newline-when-write-attributes.patch
        backport-udevd-wait-for-workers-to-finish-when-exiting.patch
        backport-verify-fix-segmentation-fault.patch
        backport-core-path-serialize-the-previous_exists-state.patch
        backport-core-path-fix-spurious-triggering-of-PathExists-on-r.patch
        backport-udevadm-ignore-EROFS-and-return-earlier.patch
        backport-udevd-don-t-use-monitor-after-manager_exit.patch
        backport-hibernate-resume-generator-wait-infinitely-for-the-r.patch
        backport-sd-event-refuse-running-default-event-loops-in-any-o.patch
        backport-time-util-deal-with-systems-where-userspace-has-64bi.patch
        backport-time-util-also-use-32bit-hack-on-EOVERFLOW.patch
        backport-test-condition-fix-group-check-condition.patch
        backport-udev-do-not-use-exact-match-of-file-permission.patch
        backport-network-udev-use-uint64_t-for-bit-rate.patch
        backport-unit-add-AF_ALG-to-systemd-networkd.service.patch
        backport-Fix-generator-name-in-hibernate-resume-generator-s-d.patch
        backport-udevadm-show-more-error-message-during-exporting-dat.patch


author: huyubiao <huyubiao@huawei.com> - 243-66
changelog:
  - add backport-journalctl-allow-running-vacuum-on-remote-journals-t.patch
        backport-systemctl-skip-non-existent-units-in-the-cat-verb.patch
        backport-journalctl-implement-facility-foo.patch
        backport-journalctl-show-duplicate-entries-if-they-are-from-t.patch
        backport-fix-journal-regression.patch
        backport-fs-util-when-calling-chase_symlinks-with-root-path-l.patch
        backport-test-add-test-for-the-non-resolving-of-chase_symlink.patch
        backport-fs-util-make-sure-we-output-normalized-paths-in-chas.patch
        backport-test-make-sure-chase_symlink-returns-normalized-path.patch
        backport-test-fix-rename_noreplace-test.patch
        backport-logind-check-PolicyKit-before-allowing-VT-switch.patch
        backport-errno-ETIMEDOUT-is-also-a-connection-error.patch
        backport-sd-bus-break-the-loop-in-bus_ensure_running-if-the-b.patch


author: huyubiao <huyubiao@huawei.com> - 243-67
changelog:
  - add backport-core-make-sure-we-don-t-get-confused-when-setting-TE.patch
        backport-mount-setup-change-the-system-mount-propagation-to-s.patch
        backport-core-transition-to-FINAL_SIGTERM-state-after-ExecSto.patch


author: hanjinpeng <hanjinpeng@kylinos.cn> - 243-67.p01
changelog:
  - Type: update
  - ID:   [TASK#186410]
  - SUG:  NA
  - DESC:  1. add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
              Change NTP server.
           2. add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
              Modify ctrl+alt+F2 switch to init5 stuck problem
           3. add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
              fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black,
              the cursor in the upper left corner flickers, and the graphical interface cannot be switched
           4. add patch10004: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch
              fix selinux denied error for systemctl when lsm stacking is enable
           5. add patch10010: 0001-Prevent-excessive-proc-1-mountinfo-reparsing.patch
              fix create pod container fail and systemd timeout (rhbz #1819868)
           6. add patch10020: vconsole-setup-downgrade-log-message-when-setting-font-fails.patch
              Fix log message error when setting font fails
           7. add patch20001: 0001-Kylin-add-systemd-243-loongarch64-support.patch
              add patch20002: 0002-Kylin-fix-ctrl-alt-F2-switch-to-init5-stuck-problem-.patch
              support loongarch64, Remove gnu-efi check in loongarch64


author: yinyongkang <yinyongkang@kylinos.cn> - 243-67.p02
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch10030: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 243-67.p04
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SUG:NA
  - DESC:add backport-donot-open-CD-rom-use-exclusive-mode.patch，for ejecjt button


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p05
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p06
changelog:
  - Type:bugfix
  - ID:[Bug#223633]
  - SUG:NA
  - DESC: Revert backport-udev-make-algorithm-that-selects-highest-priority-de.patch
          Revert patch to fix update device symlinks issue (similar #1942299)


author: wangshuo <wangshuo@kylinos.cn> - 243-67.p07
changelog:
  - Type:bugfix
  - ID:[TASK#329354]
  - SUG:NA
  - DESC:add patch rc-local-order-after-network-online.target.patch
         fix rc-local service start failed


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p09
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p10
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: lijian<lijian01@kylinos.cn> - 243-67.p11
changelog:
  - Type:update
  - ID:[TASK#455059]
  - SUG:NA
  - DESC: fix wrong suffix assignment on putting dead process.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p12
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: andy <liuyang01@kylinos.cn> - 243-67.p13
changelog:
  - Type:bugfix
  - ID:[TASK#541163]
  - SUG:NA
  - DESC: backport upstream patch: Avoid spurious realization of unit cgroups


author: lijian <lijian01@kylinos.cn> - 243-67.p14
changelog:
  - Type:update
  - ID:[TASK#454416]
  - SUG:NA
  - DESC: sd-event introduce callback invoked when event source ratelimit expires


author: fandeyuan <fandeyuan@kylinos.cn> - 243-67.p15
changelog:
  - Type:bugfix
  - ID:[TASK#559935]
  - SUG:NA
  - DESC: systemctl: do not print items twice in list-dependencies


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p16
changelog:
  - Type: update
  - ID:   [BUG#568275]
  - SUG:  NA
  - DESC: fix CVE-2022-4415, CVE-2025-4598, CVE-2026-4105, CVE-2026-29111, CVE-2026-40226, CVE-2026-40225


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 233-6.p03
changelog:
  - Type:bugfix
  - ID:[BUG#385837]
  - SUG:NA
  - DESC: Fix crash issue. and Increase max PID and CPU constants


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-78.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: songliyang <songliyang@kylinos.cn> - 7:20180414-40.p01
changelog:
  - Type: updates
  - ID:   [TASK#561625]
  - SUG:  NA
  - DESC: 1. Update to fix CVE-2023-62668 CVE-2024-25262
          2. Add mips64el support and fix a build error on mips64el


author: hanjinpeng <hanjinpeng@kylinos.cn> - 1.10.1-8.p01
changelog:
  - Type: update
  - ID:   [TASK#186410]
  - SUG:  NA
  - DESC: add patch 101：remote link vncserver cannot show desktop, log message error
          add patch 102: fix the autokill parameter cannot creat port
          fix fcitx cannot be switched
          add patch2001: Improve vnc password complexity and dictionary checking  [TASK#14271]
          submission error , v10-sp2-updates rebuild
          add patch2002: add tigervnc-add-translation-for-hk.patch [TASK#185071]


author: houhongxun <houhongxun@kylinos.cn> - 1.10.1-8.p04
changelog:
  - Type: bugfix
  - ID  : [Task#615099]
  - SUG : NA
  - DESC: don't fake cursor motion event if cursor not moved


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: bianxiuning <bianxiuning@kylinos.cn> - 5.0-5.p01
changelog:
  - Type:update
  - ID:[176526]
  - SUG:NA
  - DESC:
  -       1.add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch
  -	2.add 0001-bugfix-tpm-fix-policy-test-case-error.patch provided by HYGON


author: mengchaoming<mengchaoming@kylinos.cn> -5.0-5.p02
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream:remove rpath and runpath of exec files


author: zhangfan <zhangfan4@kylinos.cn> - 5.0-5.p04
changelog:
  - Type:update
  - ID:[TASK#374825]
  - SUG:NA
  - DESC: 1.添加TCM测试case
          2.修复test_tcm2_capability.sh测试case的错误


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-2.p01
changelog:
  - Type:update
  - ID:TASK#175727
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: xiejing <xiejing@kylinos.cn> - 2.24.1-1.p01
changelog:
  - Type: update
  - ID: [Task#418871]
  - SUG: NA
  - DESC: Migrate patches corresponding to task#153403,task#186385,bug#217426,bug#217442 in v10:
        - split package tuned-utils-systemtap, reduce main package installation dependencies
        - add the tuned profile sbm-performance, optimize filesystem and network performance
        - add disk IO optimization to sbm-performance profile, optimize disk IO performance
        - add jvm flag UseNUMA, optimize jvm performance
        - split sbm-performance mode to sbm and sbm-performance mode
        - improve disk IO and exec performance


author: huayadong<huayadong@kylinos.cn> -p27
changelog:
  - Type:bugfix
  - ID  :[Bug#158569]
  - SUG :NA
  - DESC:add patch25:ukui-greeter-1.2.1-kylin-Add-login-status-detection-function-for-users-with-the-same-UID.patch
         为具有相同UID的用户添加登录状态检测功能，在用户列表合并显示相同UID用户


author: huayadong<huayadong@kylinos.cn> -p28
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch26:ukui-greeter-1.2.1-kylin-fix-crash-with-the-same-uid-user.patch


author: huayadong<huayadong@kylinos.cn> -p29
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch27:ukui-greeter-1.2.1-kylin-fix-the-problem-that-the-users-avatar-of-the-same-uid-is-not-centered.patch


author: huayadong<huayadong@kylinos.cn> -p30
changelog:
  - Type:bugfix
  - ID  :[Bug#164455]
  - SUG :NA
  - DESC:add patch28:ukui-greeter-1.2.1-kylin-increase-name-label-height.patch


author: huayadong<huayadong@kylinos.cn> -p31
changelog:
  - Type:bugfix
  - ID  :[Bug#167602]
  - SUG :NA
  - DESC:add patch29:ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch


author: huayadong<huayadong@kylinos.cn> -p32
changelog:
  - Type: bugfix
  - ID  : [Bug#161924]
  - SUG : NA
  - DESC: add patch14 ukui-greeter-1.2.1-kylin-fix-kyreplace3.0-4-lightdm-unable-to-start.patch


author: houhongxun<houhongxun@kylinos.cn> -p33
changelog:
  -Type:bugfix
  -ID:[BUG#194488]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-locked-user-on-login-window.patch
        don't show locked user on login window


author: huayadong <huayadong@kylinos.cn> -p34
changelog:
  - Type:bugfix
  - ID:[BUG#196489]
  - SUG:NA
  - DESC:add patch:0001-ukui-greeter-1.2.1-kylin-remove-xhost.patch


author: houhongxun<houhongxun@kylinos.cn> -p35
changelog:
  -Type:bugfix
  -ID:[BUG#205127]
  -SUG:NA
  -DESC:add patch 0001-ukui-greeter-adjust-according-to-pam-changes.patch


author: huayadong<huayadong@kylinos.cn> -p36
changelog:
  - Type: bugfix
  - ID  : [TASK#364295]
  - SUG : NA
  - DESC: add patch:ukui-greeter-1.2.1-kylin-update-UKEY-marked-words.patch


author: huayadong<huayadong@kylinos.cn> -p37
changelog:
  - Type: bugfix
  - ID  : [BUG#396449]
  - SUG : NA
  - DESC: add patch:ukui-greeter-1.2.1-kylin-fix-password-expired-not-prompted.patch


author: huayadong<huayadong@kylinos.cn> -p38
changelog:
  - Type: bugfix
  - ID  : [BUG#520853]
  - SUG : NA
  - DESC: add Patch36:ukui-greeter-1.2.1-fix-VirtualKeyboard-no-underline.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: peijiankang <peijiankang@kylinos.cn> - 0.3.62-1s2.p26
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add ukui-screensaver-add-translations-for-hk-and-tw.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p28
changelog:
  - Type: bugfix
  - ID  : [BUG#520853]
  - SUG : NA
  - DESC: add Patch36:ukui-screensaver-0.3.62-fix-VirtualKeyboard-no-underline.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p28
changelog:
  - Type: bugfix
  - ID  : [BUG#520853]
  - SUG : NA
  - DESC: add Patch25:ukui-screensaver-0.3.62-fix-VirtualKeyboard-no-underline.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p29
changelog:
  - Type: bugfix
  - ID  : [TASK#600911]
  - SUG : NA
  - DESC: add Patch26:ukui-screensaver-0.3.62-kylin-add-PAM_SERVICE_ERR-detection.patch
          增加PAM服务配置错误检测


author: liudingyao <liudingyao@kylinos.com> - 2.3.7-3.p01
changelog:
  - Type:update
  - ID:[TASK#408427]
  - SUG:NA
  - DESC:Change h1 to p01 to resolve the repository version issue


author: yueyaoqiang <yueyaoqiang@kylinos.cn> -0.99.8-5.p01
changelog:
  - Type:update
  - ID:[Task#464013]
  - SUG:NA
  - DESC:sync patch from sp1:0001-Modify-IgnoreLid-to-true.patch


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.08
changelog:
  - Type:update
  - ID:[BUG#198326/199312]
  - SUG:NA
  - add Patch0016: usbguard-log.patch
  - DESC: 198326 【USBGuard】首次开启USB设备管控后，状态依然显示为关闭
  - DESC: 199312 【USBGuard】USB设备管控事件通知功能可以同时打开多个


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.09
changelog:
  - Type:update
  - ID:[BUG#184790/199308]
  - SUG:NA
  - add Patch0017: usbguard-dmsw.patch
  - DESC: 184790 【usbguard】终端执行usbguard-control命令不会出现usbguard守护进程，需要在开始菜单中手动启用
  - DESC: 198326 【USBGuard】首次开启USB设备管控后，状态依然显示为关闭
  - DESC: 199308 【USBGuard】事件通知功能，审计和普通用户无法打开


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.10
changelog:
  - Type:update
  - ID:[BUG#204530/204681/205580]
  - SUG:NA
  - add Patch0018: usbguard-interface.patch
  - DESC: 204530 【安全SDK】首次执行授权失败
  - DESC: 204681 【安全SDK】某一条设备管控策略查询返回值错误
  - DESC: 205580 【usbguard】使用yum install命令安装完usbguard-applet-qt包后，开始菜单没有usbguard的启动项


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.11
changelog:
  - Type:update
  - ID:[BUG#204261/205225/205580/206385]
  - SUG:NA
  - add Patch0019: usbguard-pol.patch
  - DESC: 204261 【USBGuard】放行被拦截的usb设备，弹出再拔出设备后选择查看策略列表，程序崩溃
  - DESC: 205225 【USBGuard】存在同vid/pid设备时，修改策略时判断错误
  - DESC: 205580 【usbguard】使用yum install命令安装完usbguard-applet-qt包后，开始菜单没有usbguard的启动项
  - DESC: 206385 【安全SDK】通过设备信息删除不存在的设备管控策略，返回值为成功


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.12
changelog:
  - Type:update
  - ID:[BUG#184824/196529/210888]
  - SUG:NA
  - add Patch0020: usbguard-lines.patch
  - DESC: 184824 【usbguard】修改策略界面变化终端窗口大小后，提示语会变成多行显示
  - DESC: 196529 【usbguard】usbguard-control交互命令的终端窗口拉伸再缩小，交互命令的字符会出现错乱或者多行重复。
  - DESC: 210888 【USBGuard】事件通知弹框可以透过锁屏界面
  - 更改命令kylin_usbguard


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.13
changelog:
  - Type:update
  - ID:[BUG#211651/211652/211663/211667/211668/211698/211926/211928]
  - SUG:NA
  - add Patch0021: usbguard-modify-add-rule-func.patch
  - DESC: 211651 【安全SDK】查询不存在的设备管控策略，提示段错误
  - DESC: 211652 【安全SDK】某一条设备管控策略查询，提示段错误
  - DESC: 211663 【SP4-B11】【loongarch】【安全SDK】整条设备管控策略添加同一个设备的放行、拦截、禁止，策略同时存在
  - DESC: 211667 【SP4-B11】【loongarch】【安全SDK】整条设备管控策略添加-放行不生
  - DESC: 211668 【SP4-B11】【loongarch】【安全SDK】整条设备管控策略添加-禁止策略不生效
  - DESC: 211698 【SP4-B11】【安全SDK】整条设备管控策略添加-拦截不生效
  - add Patch0022: usbguard-crash.patch
  - DESC: 211926 【SP4-B12】【USBGuard】导入格式正确的设备策略报错
  - DESC: 211928 【SP4-B12】【USBGuard】添加放行设备策略时，输入部分内容后点击左箭头回车报错


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.14
changelog:
  - Type:update
  - ID:[BUG#210875]
  - SUG:NA
  - add Patch0023:usbguard-addrule.patch
  - DESC: 210875 【USBGuard】已接入系统的设备策略不显示名称/序列号/接口信息


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.15
changelog:
  - Type:update
  - ID:[BUG#210875]
  - SUG:NA
  - add Patch0024:     usbguard-intf-err.patch
  - DESC: 210875 【USBGuard】已接入系统的设备策略不显示名称/序列号/接口信息


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.16
changelog:
  - Type:update
  - ID:[任务#533115]
  - SUG:NA
  - add Patch0025:     usbguard-hid.patch
  - DESC: 533115 [GF-法文-版本集成]服务器版usbguard的适配:首次安装管控默认关闭;默认放行键鼠和hub设备


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.17
changelog:
  - Type:update
  - ID:[BUG#421057]
  - SUG:NA
  - add Patch0026:     usbguard-restore.patch
  - DESC:421057[722-法文服务器安全]关闭usbguad管控总开关,被拦截的u盘依然无法使用,需要重启系统才能使用u盘


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-15
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-21
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: xiejing <xiejing@kylinos.cn> - 2:9.0-22.p01
changelog:
  - Type: NA
  - ID: [Task#186447]
  - SUG: NA
  - DESC: 1)移植敏感词修改和zh_HK繁体字支持的补丁
  -	2)移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-22.p02
changelog:
  - Type:cves
  - ID:CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p01
changelog:
  - Type:update
  - ID:[task#512917]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p02
changelog:
  - Type:update
  - ID:[bug#610811]
  - SUG:NA
  - DESC: fix CVE: CVE-2026-41411,CVE-2026-42307,CVE-2026-43961,CVE-2026-44656,CVE-2026-45130,CVE-2026-46483,CVE-2026-47162,CVE-2026-47167,CVE-2026-52858,CVE-2026-52859,CVE-2026-52860, consistent with 9.0-50


author: lizhanchun <lizhanchun@kylinos.cn> 2.2.1-2.p15
changelog:
  - Type:	update
  - ID:	BUG#114583
  - SUG:	NA
  - DESC:	KYLIN-add-default-device-on-aarch64-when-inst-vm.patch 
  -		add default device on aarch64 when inst vm.


author: wangdi <wangdi@kylinos.cn> - 2.2.1-2.p16
changelog:
  - Type: update
  - ID:   BUG#129269
  - SUG:  NA
  - DESC: KYLIN-fix-virt-install-error-message-zh_CN-translation.patch 
  -               fix redundant characters in virt-install error message zh_CN translation.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p17
changelog:
  - Type: update
  - ID:   [TASK#159711]
  - SUG:  NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add kylin-virt-manager-2.2.1-4-fix-bug-68049-translation-of-tchinese.patch
  -       Add 0001-Set-minimum-memory-2048M-for-virt-install.patch
  -	Add 0001-Bug-119136-set-default-memory-2048.patch
  -	Add 0001-BUG-102438-Modify-is_loongarch64-to-is_loongarch.patch
  -	Add 0001-add-translations-for-zh_CN.patch
  -	Add 0001-temporarily-modify-version-V10-to-version-10.0.patch
  -	Delete duplicate machine types.
  -	Add mips64 loongarch support


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p18
changelog:
  - Type: update
  - ID:   [BUG#199984] [BUG#200170]
  - SUG:  NA
  - DESC: KYLIN-fix-virt-manager-error-message-zh_CN-translation.patch
  -               Fixed the issue that the virt-manager interface preference menu was displayed in English


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p19
changelog:
  - Type: update
  - ID:   TASK#187051
  - SUG:  NA
  - DESC: Add 0001-add-Chinese-traditional-translation-HK.po.patch
  -               add traditional Chinese translations for the HK versions.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p21
changelog:
  - Type: update
  - ID:   TASK#187713
  - SUG:  NA
  - DESC: add 0001-fix-cockpit-reboot-error-issue.patch
  -               fix-cockpit-reboot-error-issue.


author: wangguochun <wangguochun@kylinos.cn> - 2.2.1-2.p23
changelog:
  - Type: update
  - ID:   TASK#194653
  - SUG:  NA
  - DESC: Changed the traditional Chinese translation "服务器" to "伺服器"
  	Correction of Traditional Chinese Translation zh_HK.po file


author: lizhanchun <lizhanchun@kylinos.cn> - 2.2.1-2.p24
changelog:
  - Type: update
  - ID:   TASK#223698
  - SUG:  NA
  - DESC: Revert 0001-fix-cockpit-reboot-error-issue.patch, because,
  -       if the VM is installed in http mode, restart the VM will enter 
  -       the installation page again.


author: lijunwei <lijunwei@kylinos.cn> - 2.2.1-2.p25
changelog:
  - Type: Update
  - ID:   TASK#441445
  - SUG:  NA
  - DESC: Revert 0001-virt-manager-2.2.1-fix-bug-13326-arm64-hide-snapshot.patch


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2.2.1-5.p01
changelog:
  - Type: Update
  - ID:   TASK#464014
  - SUG:  NA
  - DESC: Sync patches from upstream version:
  - 	virt-install: Use minutes instead of seconds on get_time_string() (rhbz#1777664)
  - 	details: Fix showing the firmware type in case of firmware auto selection (rhbz#1857069)
  - 	details: fix detection of firmware auto-selection (rhbz#1857069)
  - 	domain: Fix VM deletion with firmare='efi' (rhbz#1869135)
  - 	virt-xml: fix defined_xml_is_unchanged (rhbz#1857504)
  -	Add OL release support to virt-install for OL KVM guest creation [Orabug: 26135782]


author: houhongxun <houhongxun@kylinos.cn> - 0.28.2-14.p01
changelog:
  - Type:bugfix
  - ID  :[Bug#203586]
  - SUG :NA
  - DESC:add Patch6:0001-vte-swallow-hyperlink-control-sequence-and-make-it-n.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.28.2-14.p02
changelog:
  - Type:bugfix
  - ID  :[TASK#532381]
  - SUG :NA
  - DESC:add Patch7: 0002-vte-fix-max-bytes-mate-terminal.patch


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:3.6.14-12
changelog:
  - Delete /usr/share/man/man1/wireshark.* in wireshark package because wireshark-help package also contains this files


author: Like<like@kylinos.cn> - 1.51.06-2.p01
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: Reference  1.51.06-1.p01 modify, splits sub packages client,c++,client++,apps


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.51.06-2.p04
changelog:
  - Type:cves
  - Id:TASK#480193
  - SUG:NA
  - DESC:backport CVE-2024-8176 patch and sync v11 modify to remove duplicate man file in xml-rpc-c-apps packages


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Zhenneng Li <lizhenneng@kylinos.cn> - 19.1.0-2.p02
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: peijiankang <peijiankang@kylinos.cn> - 1.20.8-23.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: sync from 1.20.8-19.p02
          Add ljmcore driver support
  	modify generic-hardened-ld to kylin/kylin-hardened-ld
  	fix alignment error
  	add multi gl support
  	add sietium driver support
  	add inno and x100 support


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-23.p03
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-23.p05
changelog:
  - Type: CVE
  - ID:   [TASK#453291]
  - SUG:  NA
  - DESC: fix CVE-2024-31080, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8.23.p07
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8.23.p08
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2025-62229,CVE-2025-62231,CVE-2025-62230,CVE-2025-49180,CVE-2025-49179,CVE-2025-49176,CVE-2025-49178,CVE-2025-49175,CVE-2022-49737


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8.23.p09
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-23.p11
changelog:
  - Type: CVE
  - ID:   [BUG#552387]
  - SUG:  NA
  - DESC: fix tigervnc-server test failed (revert CVE-2023-5574 patch)


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-23.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50253, CVE-2026-50254
  - SUG:  NA
  - DESC: fix CVE.


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-23.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  - SUG:  NA
  - DESC: fix CVE.


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


author: liufeng <liufeng@kylinos.cn> - 3.6.1-2.2.p01
changelog:
  - Type:compile
  - ID:[TASK#168407]
  - SUG:NA
  - DESC:Change maven local to resolve compilation issues
  -      Change Name apache-zookeeper to zookeeper
  -      Optimize Version abnormal in SPEC changelog


author: lixiaoyong <lixiaoyong@kylinos.cn> - 3.6.1-2.2.p02
changelog:
  - Type: cves
  - ID: [TASK#581815]
  - SUG: NA
  - DESC: Fix CVE-2023-44981
          Change Maven packaging from offline to online mode


author: lichenguang <lichenguang@kylinos.cn> - 0.2.35-9.p02
changelog:
  - Type:cves
  - ID: CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177
  - SUG:NA
  - DESC: fix CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177


