# changelog

author: gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert support for Aliyun in nm-cloud-setup for hard-coded ip


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: xihaochen <xihaochen@huawei.com> - 2.0.31-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update OpenIPMI to 2.0.31


author: gaihuiying <eaglegai@163.com> - 2.0.31-2
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Add the judgment on the validity of length in emu_cmd.c and session in lanserv_ipmi.c


author: tiandongdong <tiandongdong@kylinos.com> - 2.3.1-7
changelog:
  - Type:CVEs
  - ID: [BUG#629331]
  - SUG: NA
  - DESC:  Backport upstream patch Fix CVE-2026-54369 CVE-2026-54370
  - New API acl_get_file_at, acl_set_file_at, acl_extended_file_at, acl_delete_def_file_at
  - New provided symbol LIBACL_1_3 for new API in libacl
  - The change that commands like 'getfacl -P symlink' or 'setfacl -P symlink' will fail now
  -
  - Preserve the failed status when processing multiple files 2.3.1-6
  - Fix src_repo in yaml file 2.3.1-5
  - Backport upstream patch to declare s_str directly in string_obj_tag 2.3.1-4
  - Backport upstream patch to avoid NULL dereferences 2.3.1-3


author: yixiangzhike <yixiangzhike007@163.com> - 0.17.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patch to use signal safe write function in signal handler


author: majianhan <majianhan@kylinos.cn> - 5.2.4-13
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2754 CVE-2025-2755 CVE-2025-2756 CVE-2025-5200 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2754 CVE-2025-2755 CVE-2025-2756 CVE-2025-5200 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.48-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /builddir/build/SOURCES/0001-bypass-wrong-output-when-enabled-selinux.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0002-dont-skip-security.evm-when-copy-xattr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0003-attr-eliminate-a-dead-store-in-attr_copy_action.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0004-use-run-as-the-filename-extension-for-run-test-sc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0005-fix-test-suite-for-selinux.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0006-add-visibility-attribute-header.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0007-add-xattrat-syscall-wrappers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0008-add-xattrat-syscall-backwards-compatibility-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0009-rename-walk_tree-to-old_walk_tree.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0010-add-the-new-walk_tree-helper.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0011-harden-getfattr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0012-setfattr-multiple-restore-accesses-freed-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0013-setfattr-do-not-ignore-no-dereference-after-resto.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0014-add-openat2-syscall-wrapper.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0015-harden-setfattr-restore.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: wangkerong <wangkerong@huawei.com> - 1.13.0-3
changelog:
  - Fix OOM during fuzz test
  - We don't run some testcase,because the patch of fuzz test will lead to the failure of testcase


author: huayadong <huayadong@kylinos.cn> - 0.8-17.p01
changelog:
  - Type: CVE
  - ID  : [Task#482351]
  - SUG : NA
  - DESC: fix CVE-2024-52616, add Patch6010: 0001-Properly-randomize-query-id-of-DNS-packets.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.8-17.p03
changelog:
  - Type: cves
  - ID  : [Task#587809]
  - SUG : NA
  - DESC: fix CVE-2025-68471 CVE-2025-68468 CVE-2025-68276 CVE-2026-24401


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-1737
  - SUG:NA
  - DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
         The default value both of max-records-per-type and max-types-per-name is 5000


author: tenglei <tenglei@kylinos.cn> - 2.37-15.p01
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Rebuild with CFLAGS -fPIC parameters for static library libiberty.a


author: jiangjixiang <jiangjixiang@kylinos.cn> - 2.37-15.p02
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: add Patch51 and "bpf-unknown-none" option to enable bpf support.


author: yangyan <yangyan@kylinos.cn> - 2.37-15.p03
changelog:
  - Type:CVEs
  - ID:TASK#172088
  - SUG:NA
  - DESC:Fix CVE-2022-47008 CVE-2022-47011 CVE-2022-47696 CVE-2021-46174 CVE-2023-1972 CVE-2022-48064


author: gaoyukun <gaoyukun@kylinos.cn> - 2.37-15.p04
changelog:
  - Type:cves
  - ID:TASK#414527
  - SUG:NA
  - DESC:Fix CVE-2022-4285 CVE-2022-38533 CVE-2024-57630 CVE-2025-0840


author: pengxu <pengxu@kylinos.cn> - 2.37-15.p05
changelog:
  - Type:cves
  - ID:CVE-2025-7545
  - SUG:NA
  - DESC: Fix CVE-2025-7545: heap-based buffer overflow in objcopy.


author: pengxu <pengxu@kylinos.cn> - 2.37-15.p06
changelog:
  - Type:cves
  - ID:BUG#515195
  - SUG:NA
  - DESC: 1.Fix CVE-2025-5244: bfd nullpointer protection.
          2.Fix CVE-2025-5245: debug nullpointer protection.


author: pengxu <pengxu@kylinos.cn> - 2.37-15.p07
changelog:
  - Type:cves
  - ID:CVE-2022-47007 CVE-2022-47010 CVE-2022-47695 CVE-2022-48063 CVE-2022-48065 CVE-2025-11412 CVE-2025-11494 CVE-2025-11840 CVE-2025-8225 CVE-2026-6846
  - SUG:NA
  - DESC: Fix CVE-2022-47007:Fixed a memory leak in stab_demangle_v3_arg in stabs.c
          CVE-2022-47010:Fixed a memory leak in pr_function_type in prdbg.c
          CVE-2022-47695:Fixed a segmentation fault in compare_symbols in objdump.c
          CVE-2022-48063:Fixed excessive memory allocation when parsing corrupted ELF files in objdump.c
          CVE-2022-48065:Fixed a memory leak in find_abstract_instance in dwarf2.c
          CVE-2025-11412:Fixed a segmentation fault in bfd_elf_gc_record_vtentry in elflink.c
          CVE-2025-11494:Fixed incorrect discarding of the _GLOBAL_OFFSET_TABLE_ symbol in x86 linkers
          CVE-2025-11840:Fixed a segmentation fault in coffcode.h
          CVE-2025-8225:Fixed a memory leak in debug_information in dwarf.c
          CVE-2026-6846:Fixed a buffer overflow in xcoff_link_add_symbols in xcofflink.c


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.1.v2307
changelog:
  - KYLIN: align release-stable-kernel with 4.19 (Haoran Jiang) [task:165441]
  - KYLIN: rpmbuild: align rpmbuild SOURCES with 4.19 (lifangxu) [task:165441]
  - KYLIN: rpmbuild: resolve arm64 rpmbuild process errors (lifangxu) [task:165441]
  - KYLIN: rpmbuild: align rpmbuild script and spec with 4.19 (lifangxu) [task:165441]
  - PHYTIUM: PMU: phytium: Add Phytium PS2364 DDR C2C PCIE PMU support (Wang Xu) [task:164639]
  - KYLIN: i40e: misalignment of irq's cpumask for S5000C (xiaolinkui) [task:164639]
  - fs: Optimized fget to improve performance (zhaodongyang) [bug:58048]
  - Revert "KYLIN: sched/fair: Optimize the context1 and spawn test cases of unixbench" (tianyu) [task:162236]
  - Revert "KYLIN: sched: Add constraints to pipeline wakeup optimization" (tianyu) [task:162236]
  - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value (Yang Guo) [task:162236]
  - clocksource/drivers/arm_arch_timer: Fix handling of ARM erratum 858921 (Kunkun Jiang) [task:162236]
  - clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error (Joe Korty) [task:162236]
  - clocksource/drivers/arm_arch_timer: Force inlining of erratum_set_next_event_generic() (Marc Zyngier) [task:162236]
  - arm64,phytium: bugfix FT-2000plus SMMU global fault (Wang Yinfeng) [task:162236]
  - arm64: phytium: Add SMMU workaround for FT-2000plus (Chen Baozi) [task:162236]
  - lpc:phytium:Add snoop function (lanhengyu1395) [task:162236]
  - tee: optee: Bugfixed smc method function name (Wang Yinfeng) [task:162236]
  - tee: optee: Add default conduit method options (Chen Baozi) [task:162236]
  - tee: optee: add ACPI support for Phytium (Chen Baozi) [task:162236]
  - watchdog: dw: Add ACPI support to dw-wdt (Chen Baozi) [task:162236]
  - irqchip/gic-phytium-2500: Add support for GIC of Phytium S2500 (Wang Yinfeng) [task:162236]
  - dma:phytium: replace string x100 to px210 (liutao) [task:162236]
  - x100-dma: add dma driver for x100 (liutao) [task:162236]
  - arm64: Add handling of CNTVCTSS traps (Marc Zyngier) [task:162236]
  - arm64: Add CNT{P,V}CTSS_EL0 alternatives to cnt{p,v}ct_el0 (Marc Zyngier) [task:162236]
  - arm64: Add a capability for FEAT_ECV (Marc Zyngier) [task:162236]
  - clocksource/drivers/arch_arm_timer: Move workaround synchronisation around (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Fix masking for high freq counters (Oliver Upton) [task:162236]
  - clocksource/drivers/arm_arch_timer: Drop unnecessary ISB on CVAL programming (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Remove any trace of the TVAL programming interface (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Work around broken CVAL implementations (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Advertise 56bit timer to the core code (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Move MMIO timer programming over to CVAL (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Fix MMIO base address vs callback ordering issue (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Move drop _tval from erratum function names (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Move system register timer programming over to CVAL (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Extend write side of timer register accessors to u64 (Marc Zyngier) [task:162236]
  - clocksource/drivers/arm_arch_timer: Drop CNT*_TVAL read accessors (Marc Zyngier) [task:162236]
  - clocksource/arm_arch_timer: Add build-time guards for unhandled register accesses (Marc Zyngier) [task:162236]
  - arm64: defconfig: Enable configs for Phytium SoCs (Chen Baozi) [task:162236]
  - arm64: Kconfig: Introduce CONFIG_ARCH_PHYTIUM (Chen Baozi) [task:162236]
  - KYLIN: arm64: Introduce is_ft5000c() (huhai) [task:161070]
  - KYLIN: arm64: cputype: Add MIDR values for Phytium S5000C (huhai) [task:158187]
  - KYLIN: i40e: enable legacy-rx mode for kunpeng920 (xiaolinkui) [task:162236]
  - KYLIN: arm64: add a helper to detect cpu type of HISI (Zhengyuan Liu) [task:162236]
  - KYLIN: net/mlx5: fix assign a negative value to c->cpu (huhai) [task:13221]
  - KYLIN: net/mlx5: get cpu id from numa node for ft (xiaolinkui) [task:162236]
  - KYLIN: net/mlx5: this logic has a negative impact on the ft2500 slave cpu (xiaolinkui) [task:162236]
  - KYLIN: mlx5: memory application optimization for ft (xiaolinkui) [task:162236]
  - KYLIN: cpuinfo: fixed cpuinfo displays the correct model for phytium (xiongxin) [task:11514]
  - KYLIN: arm64-phytium: Replace the is_ft2000a4 macro as is_ft2000_pc (xiongxin) [task:11514]
  - KYLIN: arm64: Fix undefined is_ft2000a when compiling kernel on Non ARM64 platform (huhai) [task:162236]
  - KYLIN: arm64/cpuinfo: add 'model name' field to show cpu model (Zhengyuan Liu) [task:162236]
  - KYLIN: mlx5: move affinity hints assignments to generic code (xiaolinkui) [task:162236]
  - KYLIN: arm64: optimization FT-2000A-4 PPTT table adaptation (liyouhong) [task:162236]
  - KYLIN: arm64: FT-2000A-4 PPTT table adaptation (liyouhong) [task:162236]
  - KYLIN: ARM64: add ft2000a4 cpu support in phytium soc familly (wangqi) [task:162236]
  - KYLIN: arm64: try to initialize cpu type from acpi (Zhengyuan Liu) [task:162236]
  - KYLIN: machine_t: mark cpu part 0x663 as FT2500 (Jackie Liu) [task:162236]
  - KYLIN: acpi/pptt: put table before return (Zhengyuan Liu) [task:162236]
  - KYLIN: ISCSI: Separating trx/ttx threads for better performance (huhai) [task:162236]
  - KYLIN: acpi: support determining cpu type from PPTT table (Zhengyuan Liu) [task:162236]
  - KYLIN: PHYTIUM: add a interface to get cpu type for phytium (Zhengyuan Liu) [task:162236]
  - KYLIN: add pci_irq_get_node function (tianyu) [task:162236]
  - KYLIN: arch: arm64: Optimized the performance of the arm64 cpu (pengcan) [task:121778]
  - KYLIN: fs: Optimize unixbench's file copy test (pengcan) [bug:121719]
  - KYLIN: include: Added an arm64 macro to limit the cacheline (pengcan) [task:85182]
  - KYLIN: lib/raid: check recv algo performance for test (Zhengyuan Liu) [task:90865]
  - KYLIN: Optimized unixbench tests of Kunpeng 920 (pengcan) [task:85182]
  - KYLIN: mm/kfence: print disabling or re-enabling message (Jackie Liu) [task:162236]
  - kfence: allow re-enabling KFENCE after system startup (Tianchen Ding) [task:68770]
  - KYLIN: sched: Add constraints to pipeline wakeup optimization (zhaodongyang) [bug:64928]
  - KYLIN:fs/pipe:dont need wake up self in a single process of ub (zhaodongyang) [bug:58048]
  - KYLIN: sched/fair: Optimize the context1 and spawn test cases of unixbench (zhaodongyang) [bug:58048]
  - KYLIN: cpupower: Add Chinese translation files (Jackie Liu) [task:162236]
  - KYLIN: fs: colour f_count in struct file (Zhengyuan Liu) [task:162236]
  - KYLIN: arm64: add PHYTIUM into spectre_v2 safe list (Jackie Liu) [task:162236]
  - KYLIN: readahead: incrase scsi disk readahead (Jackie Liu) [task:162236]
  - lib: optimize cpumask_local_spread() (yuqi jin) [task:162236]
  - KYLIN: blk-mq: using the idea of load balancing to balance the interrupt (huhai) [task:162236]
  - KYLIN: pipe: shrink lock area to reduce lock contention (Zhengyuan Liu) [task:162236]
  - KYLIN: NVMe: Balanced NVMe interrupts the CPU of the hctx node. (huhai) [task:162236]
  - KYLIN: net: igb i350 bonding less delay (weirongguang) [task:162236]
  - KYLIN: igb: under 60ms delay for bonding switch (xiaolinkui) [task:162236]
  - KYLIN: arm64/xor: optimize XOR calculation(V2) (Zhengyuan Liu) [task:162236]
  - KYLIN: iscsi: Improve IP-SAN performance (huhai) [task:162236]
  - KYLIN: kylin: drop kylin_check (Jackie Liu) [task:162236]
  - KYLIN: package/buildtar: strip module and mark Image for arm64 (Jackie Liu) [task:162236]
  - KYLIN: Maintainer: update KYLIN-MAINTAINERS (Jackie Liu) [task:162236]
  - KYLIN: Makefile: Ignore debian and rpmbuild directory (Jackie Liu) [task:162236]
  - KYLIN: config: enable AMD pcnet support (Jackie Liu) [task:162236]
  - KYLIN: backport-tools: add release-stable-kernel tool (Jackie Liu) [task:162236]
  - KYLIN: osinfo: Converting memory size to GB from KB (Jackie Liu) [task:162236]
  - KYLIN: sync-stable: Use grep to replace manual search (Jackie Liu) [task:162236]
  - KYLIN: backport-tools: don't return -2 when tag cannot be obtained (Jackie Liu) [task:162236]
  - KYLIN: Makefile: fix warning if .sourceversion is missing (Jackie Liu) [task:162236]
  - KYLIN: search-git-fixes.sh: Fix searching prompt also exist after exited (Jackie Liu) [task:130378]
  - KYLIN: backport-tools: add search-git-fixes tool (Xinxin Shi) [task:130378]
  - KYLIN: backport-tools/sync-stable: fix author date when insert header only (Jackie Liu) [task:162236]
  - KYLIN: test-commit-in-tree: rename --ignore to --quiet (Jackie Liu) [task:162236]
  - KYLIN: config: add Realtek wifi drivers (Jackie Liu) [task:162236]
  - KYLIN: config: enable BTRFS (Jackie Liu) [task:162236]
  - KYLIN: osinfo: provide upstream kernel version into (Jackie Liu) [task:133897]
  - KYLIN: sync-stable: use git describe tag instead of empty line (Jackie Liu) [task:162236]
  - KYLIN: backport-tools: drop stable-tools (Jackie Liu) [task:129759]
  - KYLIN: test-commit-in-tree: Support specified branch checking (Jackie Liu) [task:129759]
  - KYLIN: compile-and-chkabi.sh: fix the calculation of ncpus (Shida Zhang) [task:129759]
  - KYLIN: KYLIN-MAINTAINER: add kylinos maintainer map (Jackie Liu) [task:134072]
  - KYLIN: osinfo: Add /proc/osinfo interface (Jackie Liu) [task:133897]
  - KYLIN: dump_stack: print source version when dump stack (Jackie Liu) [task:133897]
  - KYLIN: platform: add KYLINOS_DESKTOP & KYLINOS_SERVER option (Jackie Liu) [task:133897]
  - KYLIN: rpmbuild: add missing key file x509.genkey (Jackie Liu) [task:131878]
  - KYLIN: arm64/configs: sync default options with KYLIN v10 OS (Jackie Liu) [task:131876]
  - KYLIN: build-generic-config.sh: support cross compile (Jackie Liu) [task:131832]
  - KYLIN: scripts/checkpatch.pl: suppress warning for kylinos kernel (Jackie Liu) [task:131832]
  - KYLIN: rpm-build: Provide basic rpm package built support (Jackie Liu) [task:131878]
  - KYLIN: gerrit: init .gitreview (Jackie Liu) [task:131832]
  - KYLIN: build-generic-config.sh: Provides basic configuration file generation tools (Jackie Liu) [task:131832]
  - KYLIN: kylin_check: add KYLINOS authorization verification driver (Jackie Liu) [task:131831]
  - KYLIN: backport-tools: init kylin kernel maintenance tools (Jackie Liu) [task:131832]
  - KYLIN: arm64/configs: init generic default config (Jackie Liu) [task:131876]
  - KYLIN: .gitmessage: add a template for git commit message (Zhengyuan Liu) [task:131832, >bug:12345] {>, CVE-2019-3900}


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.2.v2307
changelog:
  - KYLIN: Change 4k page_size to 64k page_size (Haoran Jiang) [task:168906]
  - OPENEULER: RAS: Report ARM processor information to userspace (Shengwei Luo) [task:168222]
  - KYLIN: Revert TPCM patchset (huanfuxi) [task:164610]
  - KYLIN: config: open TPCM for ARM64 (huanfuxi) [task:164610]
  - KYLIN: tee: add tee async server support (huanfuxi) [task:164610]
  - KYLIN: drivers/tpcm: add tpcm driver and trusted execution (huanfuxi) [task:164610]
  - KYLIN: optee: add ACPI and DT support for Phytium (huanfuxi) [task:164610]
  - KYLIN: security/kysec: migrate kysec into kernel 5-15 (chengang) [task:164319]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.3.v2307
changelog:
  - KYLIN: add CHANGELOG.md (jianghaoran) [task:170414]
  - KYLIN: security: Add kysec message types to the audit system (chengang) [task:164232]
  - KYLIN: security/kysec:Added the kysec device control hook function to the LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add 3ADM hooks functions for capability (chengang) [task:164232]
  - KYLIN: security: add kfile_close lsm hook (chengang) [task:164232]
  - KYLIN: security/kysec: realizing delete_module hook (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec monitor critical process status in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec memory file control hook function in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec temporary file execution permission in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec directory label setting in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add the kysec attr of the current process (chengang) [task:164232]
  - KYLIN: security: Export the functions required for Kysec modularity (chengang) [task:164232]
  - KYLIN: security/kyextend: make sure kyextend module loaded at last (yangzhao) [task:15820]
  - KYLIN: security: add kylin extend module for lsm userspace function (chengang) [task:164232]
  - Revert "KYLIN: security/kysec: migrate kysec into kernel 5-15" (chengang) [task:164232]
  - KYLIN: sched: io affine scheduler (Bing Huang) [task:168653]
  - KYLIN: arm64/configs: Replace generic_defconfig (liyouhong) [task:168805]
  - KYLIN: The perf package does not contain traceevent dynamic library files (Haoran Jiang) [task:169198]
  - drm/qxl: fix qxl can't use in arm64 (Cong Liu) [task:168447]
  - KYLIN: vcpu_stall_detector: add vcpu stall detector (zhanghao1) [task:168457]
  - KYLIN: ice: make the device queue match up with the cpu number in one node (weirongguang) [task:162874, task:161899]
  - Revert "KYLIN: kylin: drop kylin_check" (Haoran Jiang) [task:164610]
  - KYLIN: config: open TPCM for ARM64 (huanfuxi) [task:164610]
  - KYLIN: tee: add tee async server support (huanfuxi) [task:164610]
  - KYLIN: drivers/tpcm: add tpcm driver and trusted execution (huanfuxi) [task:164610]
  - Update kernel version to 5.15.0-1.2.v2307 (Haoran Jiang)
  - KYLIN: Change 4k page_size to 64k page_size (Haoran Jiang) [task:168906]
  - OPENEULER: RAS: Report ARM processor information to userspace (Shengwei Luo) [task:168222]
  - KYLIN: Revert TPCM patchset (huanfuxi) [task:164610]
  - KYLIN: config: open TPCM for ARM64 (huanfuxi) [task:164610]
  - KYLIN: tee: add tee async server support (huanfuxi) [task:164610]
  - KYLIN: drivers/tpcm: add tpcm driver and trusted execution (huanfuxi) [task:164610]
  - KYLIN: optee: add ACPI and DT support for Phytium (huanfuxi) [task:164610]
  - KYLIN: security/kysec: migrate kysec into kernel 5-15 (chengang) [task:164319]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.4.v2307
changelog:
  - KYLIN: ngbevf: add WangXun ngbevf net driver (zhulei) [task:169231]
  - KYLIN: ngbe: add WangXun ngbe net driver (zhulei) [task:169231]
  - KYLIN: txgbe: add WangXun txgbe net driver (zhulei) [task:169232]
  - KYLIN: Change sched_io_affine_anabled to sched_io_affine_enabled (Bing Huang) [task:168653]
  - arm64/kexec: Fix missing extra range for crashkres_low. (Levi Yun) [task:170507]
  - kdump: return -ENOENT if required cmdline option does not exist (Zhen Lei) [task:170507]
  - arm64: kdump: Reimplement crashkernel=X (Chen Zhou) [task:170507]
  - arm64: mm: use IS_ENABLED(CONFIG_KEXEC_CORE) instead of #ifdef (Jisheng Zhang) [task:170507]
  - Update kernel version to 5.15.0-1.3.v2307 (jianghaoran)
  - KYLIN: add CHANGELOG.md (jianghaoran) [task:170414]
  - KYLIN: security: Add kysec message types to the audit system (chengang) [task:164232]
  - KYLIN: security/kysec:Added the kysec device control hook function to the LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add 3ADM hooks functions for capability (chengang) [task:164232]
  - KYLIN: security: add kfile_close lsm hook (chengang) [task:164232]
  - KYLIN: security/kysec: realizing delete_module hook (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec monitor critical process status in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec memory file control hook function in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec temporary file execution permission in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add hook function for kysec directory label setting in LSM hooks (chengang) [task:164232]
  - KYLIN: security: Add the kysec attr of the current process (chengang) [task:164232]
  - KYLIN: security: Export the functions required for Kysec modularity (chengang) [task:164232]
  - KYLIN: security/kyextend: make sure kyextend module loaded at last (yangzhao) [task:15820]
  - KYLIN: security: add kylin extend module for lsm userspace function (chengang) [task:164232]
  - Revert "KYLIN: security/kysec: migrate kysec into kernel 5-15" (chengang) [task:164232]
  - KYLIN: sched: io affine scheduler (Bing Huang) [task:168653]
  - KYLIN: arm64/configs: Replace generic_defconfig (liyouhong) [task:168805]
  - KYLIN: The perf package does not contain traceevent dynamic library files (Haoran Jiang) [task:169198]
  - drm/qxl: fix qxl can't use in arm64 (Cong Liu) [task:168447]
  - KYLIN: vcpu_stall_detector: add vcpu stall detector (zhanghao1) [task:168457]
  - KYLIN: ice: make the device queue match up with the cpu number in one node (weirongguang) [task:162874, task:161899]
  - Revert "KYLIN: kylin: drop kylin_check" (Haoran Jiang) [task:164610]
  - KYLIN: config: open TPCM for ARM64 (huanfuxi) [task:164610]
  - KYLIN: tee: add tee async server support (huanfuxi) [task:164610]
  - KYLIN: drivers/tpcm: add tpcm driver and trusted execution (huanfuxi) [task:164610]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.5.v2307
changelog:
  - KYLIN: security/kyextend: Remove the default assignment of zero (chengang) [bug:189708]
  - KYLIN: kvm/arm64: fixed passthrough gpu into vm on arm64 (Cong Liu) [task:168448]
  - KYLIN: arm64/config: enable CONFIG_SCHED_CLUSTER=y (liubaolin) [task:170582]
  - sched: Add cluster scheduler level in core and related Kconfig for ARM64 (Barry Song) [task:170582]
  - topology: Represent clusters of CPUs within a die (Jonathan Cameron) [task:170582]
  - drm/amdgpu: Set vmbo destroy after pt bo is created (Philip Yang) [task:170638]
  - Revert "remove the raw driver" (husong) [task:170904]
  - KYLIN: sched: Improve spawn test of UnixBench (liyouhong) [task:168805]
  - KYLIN: sched: Add constraints to pipeline wakeup optimization (liyouhong) [task:168805]
  - KYLIN: sched/fair: Optimize the context1 and spawn test cases (liyouhong) [task:168805]
  - disable FT series kpti (liyouhong) [task:168805]
  - locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Yanfei Xu) [task:168805]
  - KYLIN: security/kysec: Remove KYSEC-related macro definitions (chengang) [bug:190145]
  - KYLIN: security/kyextend: Complete sb_mount registration (chengang) [bug:189670]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.6.v2307
changelog:
  - KYLIN: security: Fix xattr missing of new file (chengang) [bug:191512]
  - KYLIN: mm/khugepaged: add switch for reserved memory feature (wolfgang huang) [task:167156]
  - KYLIN: mm/khugepaged: reserved memory higher (wolfgang huang) [task:167156]
  - KYLIN: mm/khugepaged: reseved memory adaptively (wolfgang huang) [task:167156]
  - mm: khugepaged: recalculate min_free_kbytes after stopping khugepaged (Liangcai Fan) [task:163804]
  - KYLIN: security/kylin: secureboot add signature to kernel (penghuaihe) [task:172120]
  - KYLIN: gmjstcm: add module to support tcm on spi&lpc (lijun) [task:171798, task:171799]
  - KYLIN: drivers/char/tpm: add tpm_ax99100 driver (hezhenang) [task:171797]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.7.v2307
changelog:
  - PCI: Enable PASID only when ACS RR & UF enabled on upstream path (Lu Baolu) [task:172600]
  - KYLIN: sched: fix SPECjvm2008 score fluctuation (liwanwu) [task:167198]
  - Revert "KYLIN: i40e: misalignment of irq's cpumask for S5000C" (zhulei) [task:170477]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.8.v2307
changelog:
  - OPENEULER: kvm: debugfs: aarch64 export cpu time related items to debugfs (chenjiajun) [task:174079]
  - OPENEULER: kvm: debugfs: export remaining aarch64 kvm exit reasons to debugfs (chenjiajun) [task:174079]
  - OPENEULER: kvm: debugfs: Export vcpu stat via debugfs (chenjiajun) [task:174079]
  - PHYTIUM: drm/phytium: cursor hot support negative numbers (Yang Xun) [task:174985]
  - PHYTIUM: drm/phytium: enable gamma function (Yang Xun) [task:174985]
  - PHYTIUM: drm/phytium: add capability of tile mode (Yang Xun) [task:174985]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:174985]
  - PHYTIUM: drm-phytium: Fixed dp codec id (liutao) [task:174985]
  - PHYTIUM: drm:phytium: remove unnecessary kernel version related code for 5.15 (liutao) [task:174985]
  - KYLIN: drm/phytium: add phytium e2000 dc driver (Shixiong Ou) [task:174985]
  - PHYTIUM: drm:phytium: add driver for phytium display engine (liutao) [task:174985]
  - PHYTIUM: PCI: Add Phytium vendor ID (Chen Baozi) [task:174985]
  - KYLIN: net: usb: asix88179_178a: fix driver error print log (xuping) [bug:187135]
  - KYLIN: mm/khugepaged: Fix compiler typecheck unhappy (wolfgang huang) [task:167156]
  - KYLIN: security/secureboot: change pesign BuildRequire (penghuaihe) [task:172120]
  - KYLIN: security/kysec: secureboot add x86 arch support. (penghuaihe) [task:172120]
  - KYLIN: sched: fix booting waring caused by wake_flags (jiangxiujie) [bug:193659]
  - GRT: net: Add grtnic network card driver support (lingfuyi) [task:172331]
  - RDMA/hns: Remove support for HIP06 (Chengchang Tang) [task:173142]
  - Update kernel version to 5.15.0-1.7.v2307 (Haoran Jiang)
  - PCI: Enable PASID only when ACS RR & UF enabled on upstream path (Lu Baolu) [task:172600]
  - KYLIN: sched: fix SPECjvm2008 score fluctuation (liwanwu) [task:167198]
  - Revert "KYLIN: i40e: misalignment of irq's cpumask for S5000C" (zhulei) [task:170477]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.9.v2307
changelog:
  - KYLIN: fs/ecryptfs/: add SM4 (yushanshan) [task:66172]
  - KYLIN: security: add inode_copy_security for LSM (yangzhao) [task:174371]
  - KYLIN: security/box: fix acl permission check bug. (liuqi) [bug:142699]
  - KYLIN: security/box: Add box initialization information (chengang) [task:174371]
  - KYLIN: security: Add hook function for filter box ino (chengang) [task:146103]
  - KYLIN: security/box: Insert hook functions into the kernel. (chengang) [task:101619]
  - KYLIN: security/box: Add the config files required for the kbox module (chengang) [task:174371]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.11.v2307
changelog:
  - PHYTIUM: spi: phytium: Program CTLR0 in the SPI setup function (Zhang Yiqun) [task:172478]
  - PHYTIUM: spi: phytium-qspi: return error value, when the flash size is different (zhouyulin1283) [task:172478]
  - PHYTIUM: spi: phytium-qspi: update the format of driver file (zhouyulin1283) [task:172478]
  - PHYTIUM: spi: phytium-qspi: failed to mount the file system and modify the calculation of the max frequency (zhouyulin1283) [task:172478]
  - PHYTIUM: qspi:add linux 5.15 qspi controller driver (zhouyulin1283) [task:172478]
  - PHYTIUM: spi:phytium solvtion sleep NULL point problem (zhouyulin1283) [task:172478]
  - PHYTIUM: spi: phytium: Get global chipselect setting from devicetree/ACPI (Zhang Yiqun) [task:172478]
  - PHYTIUM: spi: phytium: Document device tree binding (Chen Baozi) [task:172478]
  - PHYTIUM: spi: add Phytium SPI controller support (Chen Baozi) [task:172478]
  - KYLIN: tpm: add TCM2.0 support in tpm_tis_spi (lijun) [task:172478]
  - PHYTIUM: gpio:phytium: Fix an error about enable MSI in gpio-pci driver (lanhengyu1395) [bug:192545]
  - PHYTIUM: gpio: phytium: Add gpio irq affinity setting (lanhengyu1395) [bug:192545]
  - PHYTIUM: gpio: phytium: select CONFIG_GPIOLIB_IRQCHIP by default (Zhang Yiqun) [bug:192545]
  - PHYTIUM: gpio: gpio-phytium-sgpio: Add Phytium SGPIO driver (Chen Baozi) [bug:192545]
  - PHYTIUM: gpio: Add support for the Phytium GPIO controller (Chen Baozi) [bug:192545]
  - NETSWIFT: txgbevf: add WangXun virtual function net driver (zhongxiangji) [task:173400]
  - PHYTIUM: MAINTAINERS: Add entry for Phytium SoC family (Chen Baozi) [bug:192545]
  - KYLIN: security/selinux: add ngac hook function (wangshengye) [bug:195675]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.12.v2307
changelog:
  - KYLIN: rpmbuild: modify the script to support full compilation (Yongzhen Zhang) [task:178383]
  - KYLIN: nvme/pci: fix __free_irq WARN_ON (huhai) [task:177639]
  - KYLIN: blk-mq: Fix forgotten memory allocation with CONFIG_CPUMASK_OFFSTACK=y (huhai) [task:177639]
  - KYLIN: rpmbuild: All architectures are kept with_kernel_abi_whitelists off (Yongzhen Zhang) [task:176447]
  - KYLIN: configs: add debug configs (Yongzhen Zhang) [task:174191]
  - serial: 8250_port: Check IRQ data before use (Andy Shevchenko) [task:176472]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.13.v2307
changelog:
  - KYLIN: net: support net affinity settings for 5000C (xiaolinkui) [task:179979]
  - KYLIN: net: fix a compilation warning (xiaolinkui) [task:139815]
  - KYLIN: net: fix a bug of set net auto-affinity (xiaolinkui) [task:139815]
  - KYLIN: net: replace cpumask_equal with cpumask_subset (xiaolinkui) [task:97876]
  - KYLIN: net: set net affinity for ft2500 (xiaolinkui) [task:179979]
  - KYLIN: mm: Adjust memory allocation and reclaim for cached pages (liyouhong) [task:179361]
  - KYLIN: block: block device cache I/O read affinity device node (liyouhong) [task:179361]
  - KYLIN: xfs: Xfs file system caches I/O read affinity device nodes (liyouhong) [task:179361]
  - KYLIN: mm: Allocate memory at the affinity node (liyouhong) [task:179361]
  - KYLIN: fs: Add an affinity node member in file_ra_state (liyouhong) [task:179361]
  - KYLIN: crypto/ceu: add phytium ceu crypto module (zhubing) [task:176202]
  - PHYTIUM: lpc: Add support for the Phytium LPC-slave device (Cheng Quan) [task:180701]
  - PHYTIUM: dt-bingings: lpc-kcs-bt: Add bindings for Phytium lpc-kcs-bt (Cheng Quan) [task:180701]
  - OPENEULER: ACPI/APEI: Add SEI notification type support for ARMv8 (Dongjiu Geng) [task:180700]
  - PHYTIUM: PMU: phytium: Add support for PCIe PMU of Phytium ps2364. (Hu Xianghua) [task:180699]
  - PHYTIUM: PMU: phytium: Add support for ddr PMU of Phytium ps2364. (Hu Xianghua) [task:180699]
  - Revert "PHYTIUM: PMU: phytium: Add Phytium PS2364 DDR C2C PCIE PMU support" (Zheng Tan) [task:180699]
  - KYLIN: rpmbuild: support biv compilation (Yongzhen Zhang) [task:182899]
  - KYLIN: sched/fair: migrate task memory actively for 1MB-read IO-bound task (Bing Huang) [task:167198]
  - KYLIN: sched/fair: clean up io affine scheduler (Bing Huang) [task:167198]
  - OPENEULER: arm64: fix the compile error when CONFIG_NUMA is disabled (Xiongfeng Wang) [bug:197785]
  - OPENEULER: acpi/arm64: check the returned logical CPU number of 'acpi_map_cpuid()' (Xiongfeng Wang) [bug:197785]
  - OPENEULER: arm64: Add CPU hotplug support (Xiongfeng Wang) [bug:197785]
  - OPENEULER: arm64: mark all the GICC nodes in MADT as possible cpu (Xiongfeng Wang) [bug:197785]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.15.v2307
changelog:
  - KYLIN: rpmbuild: enable 4k compilation in full (Yongzhen Zhang) [task:187127]
  - etmem: Add a scan flag to support specified page swap-out (liubo) [task:186204]
  - etmem: add original kernel swap enabled options (liubo) [task:186204]
  - etmem: add CONFIG_ETMEM macro definition for etmem feature (liubo) [task:186204]
  - config: enable CONFIG_ETMEM by default (liubo) [task:186204]
  - add ETMEM feature CONFIG to mm/Kconfig (liubo) [task:186204]
  - move ETMEM feature CONFIG to mm/Kconfig and add architecture dependency (liubo) [task:186204]
  - etmem: etmem scan module Replace WARN_ONCE() with debug_printk for "nothing read" (liubo) [task:186204]
  - etmem_scan: add pte_hole callback (Kemeng Shi) [task:186204]
  - etmem_scan: release CPU after scan walk_step size (Kemeng Shi) [task:186204]
  - etmem: fix potential UAF when walk ept page table (Kemeng Shi) [task:186204]
  - etmem: fix concurrent access to export file operations (Kemeng Shi) [task:186204]
  - etmem scan: fix memleak in vm_idle_read (Kemeng Shi) [task:186204]
  - etmem_scan: x86: support scan 4 level ept under 5 level host page table (Kemeng Shi) [task:186204]
  - etmem: x86: support scan hugetlb of vm (Kemeng Shi) [task:186204]
  - etmem: add ioctl for mm idle scan (Kemeng Shi) [task:186204]
  - etmem: Modify the memig feature name to etmem (liubo) [task:186204]
  - memig: fix compile error when CONFIG_NUMA is turned off (liubo) [task:186204]
  - memig: add memig-swap feature to openEuler (liubo) [task:186204]
  - memig: add memig-scan feature to openEuler (liubo) [task:186204]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.16.v2307
changelog:
  - arch_topology: Fix missing clear cluster_cpumask in remove_cpu_topology() (Wang ShaoBo) [bug:197240]
  - KYLIN: mm: fix NULL pointer dereference in get_page_from_freelist (liyouhong) [bug:206600]
  - KYLIN: mlx5e: make the device queue match up with the cpu number in one node by default (weirongguang) [task:178250]
  - KYLIN: sched/fair: fix SPECCPU-2017 performance degradation issue (liwanwu) [task:187640]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.17.v2307
changelog:
  - PHTIUM: pcie: fixed pcie io address not used (Xiao Cong) [task:188616]
  - KYLIN: arm64/config: enable CONFIG_MEMORY_HOTREMOVE=y (zhanggenjian) [bug:207304]
  - KYLIN: 3snic/sssraid: Provide driver support for 3S580 raid card (tanze) [task:190077]
  - KYLIN: gmjstcm: support NATIONZ Z32H330TC TCM module. (jiangxiujie) [task:188987]
  - configs: livepatch/core: introduce consistency model macro (xiejingfeng) [bug:207256]
  - livepatch: Revert module_enable_ro and module_disable_ro (yinbinbin) [bug:207256]
  - livepatch: fix stack check when disabling patch (Xu Yu) [bug:207256]
  - livepatch: Add atomic replace with stop machine model (xiejingfeng) [bug:207256]
  - livepatch: support forced patching with stop machine model (xiejingfeng) [bug:207256]
  - livepatch: adjust some printing level (xiejingfeng) [bug:207256]
  - livepatch: remove the pre_patch_callback/post_unpatch_callback from the stop_machine context (xiejingfeng) [bug:207256]
  - livepatch: introduce stop machine consistency model (xiejingfeng) [bug:207256]
  - livepatch/core: introduce consistency model macro (xiejingfeng) [bug:207256]
  - arm64: add livepatch support (Zou Cao) [bug:207256]
  - Update kernel version to 5.15.0-1.16.v2307 (jianghaoran)
  - arch_topology: Fix missing clear cluster_cpumask in remove_cpu_topology() (Wang ShaoBo) [bug:197240]
  - KYLIN: mm: fix NULL pointer dereference in get_page_from_freelist (liyouhong) [bug:206600]
  - KYLIN: mlx5e: make the device queue match up with the cpu number in one node by default (weirongguang) [task:178250]
  - KYLIN: sched/fair: fix SPECCPU-2017 performance degradation issue (liwanwu) [task:187640]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.18.v2307
changelog:
  - KYLIN: block: make bio_iov_iter_get_pages affinity to io node (Ke Sun) [task:182883]
  - PHYTIUM: net: Fix bug for phytium gmac (Li Wencheng) [task:188616]
  - PHYTIUM: drivers/perf: Bugfix for Phytium ddr/pcie PMU dirvers. (Hu Xianghua) [task:188616]
  - PHYTIUM: net: Add support for phytium gmac (Li Wencheng) [task:188616]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.19.v2307
changelog:
  - Update kernel version to 5.15.0-1.19.v2307 (Haoran Jiang)
  - PHYTIUM: PMU: phytium: Fixed cpuhotplug test failure (liyouhong) [bug:212814]
  - KYLIN: ARM64/cpuinfo: get phytium cpu type through smccc (Riwen Lu) [task:210941, task:17455]
  - KYLIN: cpuinfo: fixed cpuinfo displays the correct model for VM (huhai) [bug:210941]
  - KYLIN: block: keep the gup_migrate_io_pages interface format (liujinlong) [task:199423]
  - KYLIN: Add cache I/O optimization switch in sysctl (liyouhong) [task:179361]
  - KYLIN: Add a switch for cache IO optimization (liyouhong) [task:179361]
  - KYLIN: Fix cache I/O optimization function (liyouhong) [task:179361]
  - KYLIN: net: add a judgment to decide whether to enable network auto affinity (xiaolinkui) [task:195287]
  - KYLIN: net: add a sysctl interface for network affinity setting (xiaolinkui) [task:195287]
  - KYLIN: net: Add conditions for auto affinity (xiaolinkui) [task:187683]
  - KYLIN: sched: fix failed get node id (liwanwu) [bug:213545]
  - KYLIN: scripts/kabi: port and modify kabi check (Yongzhen Zhang) [task:196066]
  - KYLIN: sched/fair: disable io sched by default (liwanwu) [task:197006]
  - Update kernel version to 5.15.0-1.18.v2307 (Haoran Jiang)
  - KYLIN: block: make bio_iov_iter_get_pages affinity to io node (Ke Sun) [task:182883]
  - PHYTIUM: net: Fix bug for phytium gmac (Li Wencheng) [task:188616]
  - PHYTIUM: drivers/perf: Bugfix for Phytium ddr/pcie PMU dirvers. (Hu Xianghua) [task:188616]
  - PHYTIUM: net: Add support for phytium gmac (Li Wencheng) [task:188616]


author: Jackie Liu <liuyun01@kylinos.cn> - 5.15.0-1.20.v2307
changelog:
  - KYLIN: arm64/config: enable dmabuf binderfs androd ashmem and sw_sync (Shixiong Ou) [task:202291]
  - spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (Tobias Schramm) [task:205234] {CVE-2023-52517}
  - KYLIN: arm64: mm: Increase MODULES_VSIZE to 2GB (zhangxi) [task:199638]
  - KYLIN: net: do not set affinity when doing CPU hotplug (xiaolinkui) [bug:213058]
  - KYLIN: ARM64/cpuinfo: update cpu descriptor for c_show (Riwen Lu) [task:177455, bug:210941]
  - Revert "KYLIN: ARM64/cpuinfo: get phytium cpu type through smccc" (zhanggenjian) [task:177455, bug:210941]


author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: yanglu <yanglu72@h-partners.com> - 1.18.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete a static library file
         add BuildRequires make to fix build problem


author: hehuazhen <hehuazhen@huawei.com> - 1.18.1-6
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: chenyanpanHW <chenyanpan@huawei.com> - 6.12-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0003-setcifsacl-fix-comparison-of-actions-reported-by-cov.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0004-cifs-utils-work-around-missing-krb5_free_string-in-H.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0005-cifs.upcall-remove-getpwuid-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: fuanan <fuanan3@h-partners.com> - 9.0-11
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch
        backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 9.0-12
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: huyubiao <huyubiao@huawei.com> - 9.0-16
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-coreutils-df-direct.patch
        backport-df-fix-memory-leak.patch
        backport-ls-avoid-triggering-automounts.patch
        backport-pr-don-t-use-uninitialized-var.patch
        backport-stat-only-automount-with-cached-never.patch
        backport-touch-fix-aliasing-bug.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: huyubiao <huyubiao@huawei.com> - 9.0-18
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: Funda Wang <fundawang@yeah.net> - 1:2.4.0-15
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.0-19
changelog:
  - fix CVE-2026-27447,CVE-2026-34978,CVE-2026-34979,CVE-2026-34980,CVE-2026-34990,CVE-2026-39314,CVE-2026-39316


author: gaihuiying <eaglegai@163.com> - 1:2.4.0-21
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.79.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         krb5_gssapi: fix memory leak on error path
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-46
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.79.1-49
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.86-12
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.86-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.86-15
changelog:
  - Type:security
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Fix rdlen field validation in RRSIG packets
         Fix buffer overflow in helper with large CLIDs
         Fix broken client subnet validation


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-323
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - SUG:NA
  - DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-325.p03
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: weiyuan <weiyuan@kylinos.cn> - 18.09.0-325.p05
changelog:
  - Type: CVE
  - ID: CVE-2024-29018
        CVE-2024-24557
  - SUG: NA
  - DESC: backport fix cve CVE-2024-29018 CVE-2024-24557


author: weiyucheng <weiyucheng@kylinos.cn> - 18.09.0-325.p06
changelog:
  - Type: cves
  - ID: CVE-2024-36621
        CVE-2024-36623
  - SUG: NA
  - DESC: backport fix cve CVE-2024-36621 CVE-2024-36623


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: chenjiji <chenjiji09@163.com> - 21.11-45
changelog:
  Sync some patchs from upstreaming about FEC feature. Patchs
   are as follow:
   - net/hns3: fix FEC mode for 200G ports
   - net/hns3: fix FEC mode check error
   - net/hns3: fix missing FEC capability
   - ethdev: introduce low latency RS FEC
   - app/testpmd: add setting and querying of LLRS FEC mode
   - net/hns3: add LLRS FEC mode support for 200G ports
   - net/hns3: get current FEC capability from firmware


author: chenjiji <chenjiji09@163.com> - 21.11-46
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   1. fix RTC time after reset
   2. fix Rx ring mbuf leakage at reset process
   3. fix an uninitialized variable
   4. modify the code that violates the coding standards


author: chenjiji <chenjiji09@163.com> - 21.11-47
changelog:
  Sync some patchs from upstreaming about a segment fault for
   testpmd app and a IMP reset trigger for hns3 pmd. Patchs are
   as follow:
   - ethdev: add API to check if queue is valid
   - app/testpmd: fix segment fault with invalid queue ID
   - net/hns3: fix IMP reset trigger


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 21.11-50.p02
changelog:
  - Type:task
  - ID:[TASK#156111]
  - SUG:NA
  - DESC:Decoupling igb_uio.ko/rte_kni.ko and kernel versions by weak-modules.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 21.11-50.p03
changelog:
  - Type:task
  - ID:[TASK#156111]
  - SUG:NA
  - DESC: Modify the historical changelog to arrange them in descending order based on the date.


author: zhangzhou <zhangzhou@kylinos.cn> - 055-7.se.01
changelog:
  - Type:update
  - ID:[Task#163122]
  - SUG:NA
  - DESC:移植sm sxf sp3安全补丁到hostos
  - add patch: dracut-add-spx-security-patches.patch
  - add patch: dracut-add-sxf-patch-use-ko.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 055-7.se.01.p01
changelog:
  - Type:bugfix
  - ID:bug#188870
  - SUG:NA
  - DESC:fix(dracut-initramfs-restore.sh): check if SELINUXTYPE is set


author: zhangzhou <zhangzhou@kylinos.cn> - 055-7.se.02.p02
changelog:
  - Type:update
  - ID:[BUG#191506]
  - SUG:NA
  - DESC:处理bug191506，兼容policy.33
  - add patch: dracut-fix-bug191506-compatible-se33.patch


author: wanghao <wanghao2@kylinos.cn> - 055-7.se.03.p02
changelog:
  - Type: bugfix
  - ID: [BUG#194668]
  - SUG:NA
  - DESC: 解决auditadm用户无法查看/var/log/目录下的文件的问题
  -	  add patch: dracut-055-fix-auditadm-read-var-log-file-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 055-7.se.04.p02
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效,已合并密码过期的补丁
  -	  add patch: dracut-055-modify-security-switch-effective-after-reboot.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 055-7.se.04.p03
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-055-support-kylin-kernel.patch


author: yanjianqing <yanjianqing@kylinos.cn> - 202011-11.p03
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304
          from src-openeuler/edk2 openEuler-22.03-LTS-SP2 branch


author: weishaokun <weishaokun@kylinos.cn> - 202011-11.p05
changelog:
  - Type: Update
  - ID:   [TASK#204645]
  - SUG:  NA
  - Desc: fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、
          CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、
          CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、
          CVE-2023-45235


author: yanjianqing <yanjianqing@kylinos.cn> -202011-11.p05.s5ka02
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: lijunwei <lijunwei@kylinos.cn> - 202011-11.p05.s5ka03
changelog:
  - Type: Update
  - ID:   [TASK#388581]
  - SUG:  NA
  - DESC: Fix CVE-2024-38796/CVE-2023-45236/CVE-2023-45237


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p05.s5ka04
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p05.s5ka09
changelog:
  - Type: cves
  - ID:   CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419
  - SUG:  NA
  - DESC: Fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,
  	CVE-2025-68160,CVE-2025-69418,CVE-2025-69419


author: lijunwei <lijunwei@kylinos.cn> - 202011-11.p05.s5ka11
changelog:
  - Types: cves
  - ID:    [BUG#619895][BUG#620027]
  - SUG:   NA
  - DECS:  Fix CVE-2026-9076 CVE-2026-42766


author: yueyuankun <yueyuankun@kylinos.cn> - 1.25.1-1.p01
changelog:
  - Type:compile
  - ID:TASK#153406
  - SUG:NA
  - DESC:add buildrequires valgrind-devel, fix missing requires pkgconfig(valgrind)


author: fuanan <fuanan3@h-partners.com> - 0.185-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: hubin <hubin73@huawei.com> - 0.185-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change permission to 750 and move debug tools into extra package


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.4.1-4
changelog:
  - Type:CVE
  - ID:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.7-1.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add modify patch ; delete 9 coding for gb18030   
          add support gb18030-patch ; add gd18030 conf and so


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: Tangsha <tangsha@kylinos.cn> - 4.2.4-4.p01
changelog:
  - Type: cves
  - ID: [TASK#402117] [TASK#454373] [TASK#453302] [TASK#453252]
  - SUG: NA
  - DESC: Fix CVE-2024-35366,CVE-2024-35367,CVE-2024-35368,CVE-2024-36616,CVE-2024-36617,CVE-2024-36618
          Fix CVE-2024-31578,CVE-2023-51794
          Fix CVE-2023-50010,CVE-2024-32230
          Fix CVE-2022-48434


author: Tangsha <tangsha@kylinos.cn> - 4.2.4-4.p04
changelog:
  - Type: cves
  - ID: [TASK#494103]
  - SUG: NA
  - DESC: Fix CVE-2020-22019,CVE-2020-22021,CVE-2020-22026,CVE-2020-22038,CVE-2020-22039,CVE-2020-22043,CVE-2020-22044


author: Tangsha <tangsha@kylinos.cn> - 4.2.4-4.p05
changelog:
  - Type: cves
  - ID: [TASK#500913]
  - SUG: NA
  - DESC: Fix CVE-2020-21697,CVE-2020-22020,CVE-2020-22037,CVE-2020-22051


author: Tangsha <tangsha@kylinos.cn> - 4.2.4-4.p06
changelog:
  - Type: cves
  - ID: [TASK#507127]
  - SUG: NA
  - DESC: Fix CVE-2020-21688,CVE-2020-22042,CVE-2021-38091,CVE-2025-22919,CVE-2025-22921


author: wanglianguo <wanglianguo@huawei.com> - 3.0.10.33601-2.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: lvfei <lvfei@kylios.cn> - 102.11.0-2.p01
changelog:
  - type: bug fix
  - ID:TASK#153910
  - SUG: NA
  - DESC: modify firefox desktop firefox-openeuler-default-prefs.js
               add patch: 0001-kylin-modify-the-first-url.patch
                          0001-kylin-firefox-modify-firstrunURL.patch
                          0001-kylin-modify-the-first-url.patch


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0  
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylios.cn> - 102.11.0-2.p01
changelog:
  - type: bug fix
  - ID:TASK#153910
  - SUG: NA
  - DESC: modify firefox desktop firefox-kylin-default-prefs.js
               add patch: 0001-kylin-modify-the-first-url.patch
                          0001-kylin-firefox-modify-firstrunURL.patch
                          0001-kylin-modify-the-first-url.patch


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0 
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.10.2-1
changelog:
  - Upgrade to 1.10.2
  - Delete patches that existed in this version 1.10.2, delete sed option
    cause no file flatpak-docs.html
  - Reserve three patches that still effictive
  - Add patch 0001-OCI-Switch-to-pax-format-for-tar-archives.patch


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p02.ky10h.aarch64 to correct stage


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p03.ky10h.aarch64 to correct stage


author: weidong <weidong@uniontech.com>
changelog:
  - Unbundle bundled libraries
  - Fix incorrect path in doxyfile
  - Fix incorrect variable names in BIGENDIAN blocks


author: wangkai <13474090681@163.com> - 3.18.0-11
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: baizhonggui <baizhonggui@huawei.com> - 1.6.2-5
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: liyancheng <412998149@qq.com> - 10.3.1-29
changelog:
  - Type:Revert
  - ID:NA
  - SUG:NA
  - DESC:Revert patch89
         The glibc version of oe-22.03 is 2.34, so revert it


author: Wang Ding <wangding16@huawei.com> - 10.3.1-35
changelog:
  - Type:Spec
  - ID:NA
  - SUG:NA
  - DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.


author: zhangxianting <zhangxianting@uniontech.com> - 9.55.0-10
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: Funda Wang <fundawang@yeah.net> - 9.55.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.55.0-19
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.33.0-19
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.33.0-20
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: GuoCe <guoce@kylinos.cn> - 2.72.2-10.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESE:Modify spec for kylin
         1. Add Buildrequires pkgconfig(sysprof-capture-4)
         2. Add requires sysprof-capture-static
         3. Enabled Dsysprof


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.72.2-10.p04
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: laokz <zhangkai@iscas.ac.cn> - 2.34-119
changelog:
  - Backport RISC-V patches:
    - Align stack in clone (from v2.35)
    - Add copysign to stdlib strfrom to fix NAN issue (from v2.37)
    - Assume only FLAG_ELF_LIBC6 suport (from v2.37)
    - Restore libc6 implicit soname logic (from v2.38)


author: Peng Fan <fanpeng@loongson.cn> - 2.34-120
changelog:
  - Backport LoongArch patches:
  - Fix ptr mangling/demangling features.
  - Keep SHMLBA the same value with kernel.


author: majian <majian@kylinos.cn> - 2.34-124.p01.ky10h
changelog:
  - Type: update
  - ID: [TASK#159375]
  - SUG: NA
  - DESC: Init package from upstream.
  - Move %ifarch from 'Patch' section to '%setup' section.


author: majian <majian@kylinos.cn> - 2.34-124.p03.ky10h
changelog:
  - Type: bugfix
  - ID: [TASK#189498]
  - SUG: NA
  - DESC: Add install-info to "%post help" and "%preun help" sections.


author: <majian@kylinos.cn> - 2.34-124.p07.ky10h
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813 .


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.34-124.p09.ky10h
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:Fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: panzhe <panzhe@kylinos.cn> - 2.34-124.p13.ky10h
changelog:
  - Type:update
  - ID:[Task#588463]
  - SUG:NA
  - DESC:
    - memalign: reinstate alignment overflow check (CVE-2026-0861)
    - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: litenglong <litenglong@kylinos.cn> - 2.34-124.p14.ky10h
changelog:
  - Type:update
  - ID:[Task#595081]
  - SUG:NA
  - DESC: posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)


author: litenglong <litenglong@kylinos.cn> - 2.34-124.p15.ky10h
changelog:
  - Type:update
  - ID:[BUG#573361]
  - SUG:NA
  - DESC: Use pending character state in IBM1390, IBM1399 character
   sets (CVE-2026-4046)


author: chenyanpanHW <chenyanpan@huawei.com> - 7.6-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /builddir/build/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0003-fix-hostname-validation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lihaoxiang <lihaoxiang9@huawei.com> - 10.0-7
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: jiaocong <jiaocong@kylinos.cn> - 3.7.2-15.p03
changelog:
  - Type:cves
  - ID:CVE-2025-32988,CVE-2025-32990,CVE-2025-6395
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395


author: jiaocong <jiaocong@kylinos.cn> - 3.7.2-15.p06
changelog:
  - Type:cves
  - ID:[BUG#560111]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2026-33845,CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260


author: jiaocong <jiaocong@kylinos.cn> - 3.7.2-15.p08
changelog:
  - Type:cves
  - ID:[BUG#657069]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2026-42011, CVE-2026-42012;post-patches of CVE-2026-33845 and CVE-2026-42010


author: wangshuo <wangshuo@kylinos.cn> - 1.22.4-13.p01
changelog:
  - Type:bugfix
  - ID:[BUG#350095]
  - SUG:NA
  - DESC:fix file conflicts between groff and groff-x11 packages


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangzhou <zhangzhou@kylinos.cn> - 1:2.06-30.se.01
changelog:
  - Type:update
  - ID:[Task#163122]
  - SUG:NA
  - DESC:合入安全补丁: 0001-Add-security-s-patch-from-sp3-into-hostos.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.06-30.se.02.p01
changelog:
  - Type:update
  - ID:TASK#185203
  - SUG:NA
  - DESC:add kylin-add-trust_measurefiles.mod.patch
             optimize-trust_measurefiles.mod.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.06-30.se.03.p01
changelog:
  - Type:update
  - ID:TASK#185203
  - SUG:NA
  - DESC:add change-environment-variable-root-to-prefix.patch
         add pesign command to grub.macors


author: andy <liuyang01@kylinos.cn> - 1:2.06-30.se.03.p02
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: andy <liuyang01@kylinos.cn> - 1:2.06-30.se.03.p03
changelog:
  - Type:CVE
  - ID:TASK#427520
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:Fix ETYPE_OK off by one array size check: Fix for CVE-2021-46848


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.06-30.se.03.p04
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-61663,CVE-2025-61664
  - ID:TASK#571799
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.06-30.se.03.p05
changelog:
  - Type:CVE
  - CVE:CVE-2024-45774,CVE-2024-45775,CVE-2025-0690
  - ID:BUG#497105,BUG#497107,BUG#497065
  - SUG:NA
  - DESC:video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG (CVE-2024-45774)
         commands/extcmd: Missing check for failed allocation (CVE-2024-45775)
         commands/read: Fix an integer overflow when supplying more than 2^31 characters (CVE-2025-0690)


author: wujie <wujie@nj.iscas.ac.cn> - 2.4-10
changelog:
  - Disable FMA on riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=189607
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: baizhonggui <baizhonggui@huawei.com> - 1.16.2-3
changelog:
  - Fix building error: File not found: /home/abuild/rpmbuild/BUILDROOT/gstreamer1-plugins-bad-free-1.16.2-2.oe1.aarch64/usr/lib64/gstreamer-1.0/libgstwebrtcdsp.so
  - Add gcc-g++ in BuildRequires


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Use meson rebuild


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: Enable cups for kylin.
          sync from 2.34.32-6.p01


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: peijiankang <peijiankang@kylinos.cn> - 3.24.30-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: Enable cups for kylin.
          sync from 3.24.30-7.p01


author: lilu <lilu@kylinos.cn> - 1.12-6.p01
changelog:
  - Type: cves
  - ID: CVE-2026-41991,CVE-2026-41992
  - SUG: NA
  - DESC: fix CVE-2026-41991 and CVE-2026-41992


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: xinghe <xinghe2@h-partners.com> - 2.6.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.6.6-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui<zhangchaorui@kylin.cn> - 2.4.51-22.p01
changelog:
  - Type:update
  - Id:NA
  - SUG:NA
  - DESC:add layout_add_kylin.patch
         update source1 index.html
         add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: xingwei <xingwei14@h-partners.com> - 2.4.51-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.51-25
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.51-25.p01
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC:add layout_add_kylin.patch
         update source1 index.html
         add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-26
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:mod_proxy: SetEnv proxy-nohalfclose to disable half-close tunneling


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-27
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-55753,CVE-2025-66200
  - SUG:NA
  - DESC:SSI request judgment
         Request header similarity detection
         fix mod_mod error retry delay calculation to not already doubling the wait on the first error.
         stop accepting "note" in RequestHeader.


author: wanggang <wanggang1@kylinos.cn> - 2.4.51-27.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.51-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.51-30
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: tangce <tangce1@h-partners.com> - 2.4.51-32
changelog:
  - Type:CVE        
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA          
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.51-33
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA          
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wangjie1 <wangjie1@kylinos.cn> - 2.4.51-33.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC: update index.html for kylin. 
          Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: zengweifeng <zwfeng@huawei.com> - 20210722-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix ping2 bingding to VRF and address
          Avoid binding to non-VRF
          Fix ARP protocol field for AX.25 and NETROM


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.8.0.392-b08.2.p01
changelog:
  - Type: cves
  - ID: [TASK#183363]
  - SUG: NA
  - fix install fail caused by %pretrans reporting error
          add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
  	1.Support Hygon, Zhaoxin, Atomic operation
  	2.Default parameter updates for x86


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
          2.Default parameter updates for x86
          3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
          4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.452.b09-1.p01
changelog:
  - Type: update
  - ID:   [TASK#468871]
  - SUG:  NA
  - DESC: openjdk-1.8.0.452 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support
          fix date errors in changelog


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: zhaosaisai <zhaosaisai@kylinos.cn> -1:1.8.0.482.b08-7.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-1.8.0.482 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC:	1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
  	3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
          2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
          4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.27.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#459119]
  - SUG:  NA
  - DESC: openjdk-11.0.27.6 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.29.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-11.0.29.7 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.30.7-4.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-11.0.30.7 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.31.11-4.p01
changelog:
  - Type: update
  - ID:   [TASK#635259]
  - SUG:  NA
  - DESC: sync openEuler openjdk-11.0.31.11 GA release with kylin patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: songliyang <songliyang@kylinos.cn> - 1:17.0.13.11-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337671]
  - SUG:  NA
  - DESC: 1.openjdk-17.0.13.11 GA release
  	2.add TreeMap support for hygon
          3.add Zhaoxin processor support


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.14.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-17.0.14.7 GA release with kylin support:
          1.Upgrade Hygon TreeMap patch port to 17.0.14
          2.Fix LoongArch64 support patch applying error
          3.Support Zhaoxin CPU


author: songliyang <songliyang@kylinos.cn> - 1:17.0.15.6-2.p01
changelog:
  - Type: update
  - ID:   [TASK#460975]
  - SUG:  NA
  - DESC: openjdk-17.0.15.6 GA release with kylin support:
          1.Sync architecture patches


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.16.8-0
changelog:
  - update to 17.0.16
  - modified Apply-TBI-to-ZGC-of-JDK17.patch
  - delete 8314236-Overflow-in-Collections.rotate.patch
  - modified puyuan-jdk17.0.9-patch.patch
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified Backport-Important-Fixed-Issues.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.16.8-2.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-17.0.16.8 GA release with kylin support


author: songliyang <songliyang@kylinos.cn> - 1:17.0.17.10-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-17.0.17.10 GA release with kylin support


author: BenShuai5D <benshuai5d@163.com> 1:17.0.18.8-0
changelog:
  - upgrade to 17.0.18
  - modify Backport-Important-Fixed-Issues.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch
  - modify puyuan-jdk17.0.9-patch.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch
  - add huawei-Fix-KAEProvider-SM2-Code.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:17.0.18.8-8.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-17.0.18.8 GA release with kylin support


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.19.10-0
changelog:
  - update to jdk17.0.19-ga
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified 8264806-Backport-Graal-Compiler.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - modified add-version-txt.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-2
changelog:
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add fix-memory-leak-in-jBolt.patch
  - add HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-Heap-Size.patch
  - add Add-Aggresive-CDS-and-bugfix.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-3
changelog:
  - add Add-lost-ResourceMark-and-fix-delete-in-jBolt.patch
  - add support-for-Hisilicon-cpu.patch
  - add fix-test-failures-caused-by-the-Rename-createJavaPro.patch
  - add JProfilecache-remove-redundant-assert.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-5
changelog:
  - add JDK-8342238-Test-javax-crypto-CryptoPermissions-Inco.patch
  - add Keep-deflation-test-valid-with-compact-headers.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:17.0.19.10-6.p01
changelog:
  - Type: update
  - ID:   [TASK#635259]
  - SUG:  NA
  - DESC: openjdk-17.0.19.10 GA release with kylin support


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: chenyanpanHW <chenyanpan@huawei.com> - 4.6.2-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-4132.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.01
changelog:
  - Type: update
  - ID:[TASK#147330]
  - SUG:NA
  - DESC: 1、移植桌面补丁: unify-time-str-output-format.patch [BUG#105996]
  -          获取当前时间并转化为字符串，调用后需释放内存
  -            add patch: kysec-common-unify-time-str-output-format.patch [BUG#109081]
  -	2、移植桌面补丁: set-timeout-for-log-send-socket.patch
  -          日志接口设置超时时间
  -            add patch: kysec-common-set-timeout-for-log-send-socket.patch
  -	3、移植桌面补丁: use-uds-to-transport-log-message.patch [BUG#123788][BUG#122867]
  -          更新日志信息通讯传输方式
  -            add patch: kysec-common-use-uds-to-transport-log-message.patch
  -	4、移植桌面补丁: add-sqlite-stmt-interface.patch [BUG#128943]
  -	   增加sqlite stmt类接口封装
  -	     add patch: kysec-common-add-sqlite-stmt-interface.patch
  -	5、移植桌面补丁: 移植桌面补丁: return-abs-path-when-get-file-list-from-dir.patch- [BUG#134392]
  -	   从目录获取文件列表时返回绝对路径
  -	     add patch: kysec-common-return-abs-path-when-get-file-list-from-dir.patch
  -	6、移植桌面修改: 修改spec文件,安装时重启服务 [BUG#163132]
  -	7、移植服务器sm补丁: kysec-common-fix-bug-230215.patch
  -	   解决读取管道文件会阻塞的问题
  -	     add patch: kysec-common-fix-read-pipe-file-block-bug.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.1.1-01.se.02
changelog:
  - Type: update
  - ID:[TASK#155338]
  - SUG:NA
  - DESC: sp4 kysec 应用层日志改造
  -       add patch: kysec-common-log-enhanced-sp4.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.1.1-01.se.03
changelog:
  - Type:update
  - ID:[Task#163122]
  - SUG:NA
  - DESC: 1.兼容hostos与sp4中procps调用: kysec-common-compatible-hostos-and-spx.patch
  -       2.处理sp4[BUG#186382]: kysec-common-fix-socket-in-use.patch
  -       3.处理kysec_log.h中宏gettid冲突: kysec-common-fix-gettid-conflict.patch


author: wanghao <wanghao@kylinos.cn> - 1.1.1-01.se.04
changelog:
  - Type:update
  - ID:[Task#171233]
  - SUG:NA
  - DESC: 同步hostos补丁，增加hostos调用procps容错[BUG#189005]
  -	  add patch: kysec-common-fix-hostos-getpid-by-proc2.patch


author: wanghao <wanghao@kylinos.cn> - 1.1.1-01.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#194820]
  - SUG:NA
  - DESC: 修改解压xz文件的方式,提高解析文件类型的速度,修改spec文件，添加xz依赖
  -	  add patch: kysec-common-modify-modify-decompress-xz-file.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.07
changelog:
  - Type: update
  - ID: [Task#202215]
  - SUG:NA
  - DESC: 修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截
  -   了pid的查询,获取的pid会是kysec_get进程的pid的问题
  -	  add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.08
changelog:
  - Type: update
  - ID: [Task#214106]
  - SUG:NA
  - DESC: 同步SP4补丁,修复解析文件类型时,对没加!/bin/bash头且文件后缀为.sh的脚本文件判断
  -	不准确的问题, 导致source执行文件时会把脚本文件当成普通文件放行
  -	  add patch: kysec-common-fix-shell-script-judge-inaccuracy-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: update
  - ID: [Task#214106]
  - SUG:NA
  - DESC: 同步sp4补丁 修复undefined get_basename symbol 错误.
  -     add patch: kysec-common-fix-undefined-get_basename-symbol-error.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: CVE
  - ID: KVE-2026-0206
  - SUG: NA
  - DESC: 修复函数在处理文件操作时，存在条件竞争缺陷的问题，合入补丁
  -     add patch: KVE-2026-0206.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: update
  - ID: [BUG#585705] [BUG#585703] [BUG#585717] [BUG#585707]
  - SUG: NA
  - DESC: 修复KVE-2026-0503、KVE-2026-0504
  -     add patch: kysec-common-fix-kve-2026-0503-and-2026-0504.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.02
changelog:
  - Type: update 
  - ID: [TASK#151386]
  - SUG:NA
  - DESC: 网络控制改为黑名单模式
  -    	  add patch: kysec-daemon-netctl-mode-modify-to-blist.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.03
changelog:
  - Type: update
  - ID: [TASK#163915]
  - SUG:NA
  - DESC: 修复koji编包的问题
  - 	  add patch: kysec-daemon-fix-build-problem-in-koji.patch


author: wujunhua <wujunhua01@kylinos.cn> - 1.1.1-01.se.04
changelog:
  - Type: update
  - ID: [TASK#162336]
  - SUG:NA
  - DESC: 设备管控需求合入通用
  -         add patch: kysec-daemon-integration-of-equipment-control-requirements-into-common-use.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.1.1-01.se.05
changelog:
  - Type: update
  - ID:[TASK#155338]
  - SUG:NA
  - DESC: sp4 kysec 应用层日志优化
  -       add patch: kysec-daemon-log-enhanced-sp4.patch


author: wujunhua <wujunhua01@kylinos.cn> - 1.1.1-01.se.06
changelog:
  - Type: update
  - ID: [BUG#187185]
  - SUG:NA
  - DESC: 嵌入式E2000设置StorageDrive(当为启动盘时)开启状态，显示屏黑屏
  -         add patch: kysec-daemon-embedded-E2000-sets-the-StorageDrive-to-off-state-resulting-in-a-black-screen-on-the-display-screen.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: update
  - ID: [任务#171233][BUG#189974]
  - SUG:NA
  - DESC: 同步hostos补丁，内核模块化，sp4未实现exectl.ko模块化，但是修改同样适用[Task#163122]
  -	  add patch: kysec-daemon-use-ko-kernel.patch
  -	同步hostos补丁，适配主线及hostos[Task#163122]
  -	  add patch: kysec-daemon-compatible-hostos-and-spx.patch
  -	同步hostos补丁，适配hostos内核lsm参数[Task#163122]
  -	  add patch: kysec-daemon-suport-lsm-kernel-param.patch
  -	同步hostos补，kysec配置-进程保护标签设置-kysec_get无法查看当前标记[BUG#189005]
  -	  add patch: kysec-daemon-fix-hostos-getpid-by-proc2.patch
  -	同步hostos补丁，[BUG#189311]修复kysec为enforing模式下外设不识别，devctl默认设置为关[BUG#189974]
  -	  add aptch: kysec-daemon-devctl-set-default-off.patch
  -	同步hostos补丁，切换模式时忽略devctl的状态值设置[BUG#189658]
  -	  add patch: kysec-daemon-switch-mode-ignore-devctl-status.patch
  -	为hostos可以拉齐sp4版本，升级到se.09


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: update
  - ID: [任务#170022]
  - SUG:NA
  - DESC: 卸载套件时清除策略
  -       add patch: kysec-daemon-clear-policy-when-uninstall.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: update
  - ID:[BUG#190233]
  - SUG:NA
  - DESC: 修复hub禁用启用不即时生效的问题
  -       add patch: kysec-daemon-fix-hub-not-work-at-once.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.12
changelog:
  - Type: bufix
  - ID: [BUG#191987]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: bufix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复strict模式下，kysec-wlinit失败的问题
  -	  add patch: kysec-daemon-fix-strict-mode-kysec-wlinit-failed.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: bufix
  - ID: [TASK#179971 BUG#193846]
  - SUG:NA
  - DESC: 同步桌面流量管控普通用户可以配置策略问题
  -	  add patch: kysec-daemon-fix-netflow-ordinary-user-can-config-policy.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -	  add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#205354]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: bugfix
  - ID: [任务#566261]
  - SUG:NA
  - DESC: 修复CVE-2025-1202
  -         add patch: kysec-daemon-fix-cve-2025-1202.patch


author: maoyifeng <maoyifeng@kylinos.cn> - 3.4.1-01.se.06
changelog:
  - Type: update
  - ID: [任务#162335]
  - SUG:NA
  - DESC: 设备管控需求合入 
  -         add patch: kysec-utils-add-program-blacklist-to-prevent-program-execution.patch
                       kysec-utils-add-and-modify-some-device-and-interface-control.patch
                       kysec-utils-add-sm-data-separation.patch
                       kysec-utils-set-path-which-not-existed-to-program-blacklist.patch
                       kysec-utils-fix-coredump-while-set-hdmi-or-dp-control.patch
                       kysec-utils-clear-the-program-blacklist-when-cancling-the-authorize.patch
                       kysec-utils-use-xrandr-to-control-displayport-when-using-device-control.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 3.4.1-01.se.07
changelog:
  - Type: update
  - ID:[TASK#155338]
  - SUG:NA
  - DESC: 修复utils与common gettid重名问题：add patch:kysec-utils-fix-gettid-multiple.patch
  - 		sp4 kysec应用层日志优化 add patch:kysec-utils-log-enhanced-sp4.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.08
changelog:
  - Type: bugfix
  - ID:[BUG#186970][BUG#186960]
  - SUG:NA
  - DESC: 修复kysec_set设置netctl提示信息有无误的问题[BUG#186970]
  -	  add patch: kysec-utils-fix-set-netctl-prompt-message-error-bug.patch
  -	清空netctl默认黑名单配置文件[BUG#186960]
  -	  add patch: kysec-utils-clear-netctl-blacklist.patch


author: maoyifeng <maoyifeng@kylinos.cn> - 3.4.1-01.se.09
changelog:
  - Type: update
  - ID:[TASK#168789]
  - SUG:NA
  - DESC: 修复更新内核模块防卸载时没有return返回值
  -       add patch:kysec-utils-fix-compilation-warning.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.10
changelog:
  - Type: update
  - ID:[TASK#171233]
  - SUG:NA
  - DESC: 同步hostos补丁，修改spec文件，取消对libkysecwhlist-devel编译依赖[TASK#155338]
  -	同步hostos补丁，解决setstatus设置kysec enforcing时卡住的问题[BUG#188787]
  -	  add patch: kysec-utils-fix-setstatus-kysec-enforcing-stuck.patch
  -	同步hostos补丁，setstatus设置kysec为enforcing时，忽略devctl，sm和pblk的状态值设置[BUG#189658]
  -	  add patch: kysec-utils-set-kysec-enforcing-ignore-devctl-sm-pblk-status.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.11
changelog:
  - Type: bugfix
  - ID:[BUG#190568]
  - SUG:NA
  - DESC: 修复kysec关闭的情况下，设置netctl黑名单报错的问题
  -	  add patch: kysec-utils-fix-disable-set-netctl-error.patch


author: litianhao <litianhao@kylinos.cn> 3.4.1-01.se.12
changelog:
  - Type: update
  - ID:[BUG#190233]
  - SUG:NA
  - DESC: 修复hub禁用启用不即时生效的问题
  -     add patch: kysec-utils-fix-hub-not-work-at-once.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.13
changelog:
  - Type: bugfix
  - ID:[BUG#188130]
  - SUG:NA
  - DESC: 解决通过sh或者python执行unknown标记的文件，会产生两条重复的错误提示
  -	  add patch: kysec-utils-repeat-error-prompt-when-fix-sh-execute-script.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.14
changelog:
  - Type: update
  - ID:[任务#173364][BUG#192980]
  - SUG:NA
  - DESC: 解决在安装tuned包后，提示/etc/profile.d/env.sh没有权限的问题[任务#173364]
  -	  add patch: kysec-utils-tuned-script-file-add-kysoft-label.patch
  -	为docker容器运行的程序加上kysoft标记[BUG#192980]
  -	  add patch: kysec-utils-add-kysoft-label-for-docker.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.15
changelog:
  - Type: bugfix
  - ID:[BUG#193772]
  - SUG:NA
  - DESC: kysec为permissive模式，且exectl为enable模式时，kysec_exectl_check()加入日志
  -	  add patch: kysec-utils-permissive-mode-kysec-exectl-check-add-log.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 3.4.1-01.se.16
changelog:
  - Type: bugfix
  - ID:[TASK#179971 BUG#193846]
  - SUG:NA
  - DESC: 同步桌面流量管控普通用户可以配置策略问题
  -	  add patch: kysec-utils-fix-netflow-ordinary-user-can-config-policy.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#200401][BUG#202354][BUG#202370]
  - SUG:NA
  - DESC: 修复切换selinux策略失败时，提示语句不完整的问题[BUG#200401]
  -         add patch: kysec-utils-fix-chpolicy-tips-error.patch
  -	将load_policy和checkpolicy加入secadm_list文件中[BUG#202354][BUG#202370]
  -	  add patch: kysec-utils-add-checkpolicy-and-load_policy-to-secadm_list.patch


author: litianhao <litianhao@kylinos.cn> - 3.4.1-01.se.18
changelog:
  - Type: bugfix
  - ID:[BUG#201833]
  - SUG:NA
  - DESC: 修复getstatus在sm开启时未显示部分功能状态的问题
  -     add patch: kysec-utils-add-sm-missing-status-info.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -	  add patch: kysec-utils-modify-security-switch-effective-after-reboot.patch


author: liwei <liwei@kylinos.cn> - 3.4.1-01.se.20
changelog:
  - Type: task
  - ID: [Task#173713]
  - SUG:NA
  - DESC: 【外设管控】去除虚拟机默认策略中有test相关内容
  - add patch: kysec-utils-remove-pblk-test.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.21
changelog:
  - Type: bugfix
  - ID: [BUG#205354]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.22
changelog:
  - Type: bugfix
  - ID: [BUG#207002]
  - SUG:NA
  - DESC: 修复查询或设置非模块文件的防卸载策略时，提示段错误
  -	  add patch: kysec-utils-fix-not-ko-file-set-and-get-kmod-error.patch


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /builddir/build/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0003-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0004-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0005-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0006-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0007-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0008-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/0009-Don-t-allow-suid-and-dev-set-on-fs-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - capsh better error handling for integer parsing
  - setcap clean up error handling of the ns rootid argument


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: zhengxiaoxiao <zhengxiaoxiao@huawei.com> - 1.9.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport-Fix-the-behavior-for-child-process.patch
             backport-Clear-AESWRAP-scratch-area-immediately-after-use.patch


author: hanhuijie <hanhuijie@kylinos.cn> 1.0.0-se.05
changelog:
  - Type:update
  - ID:[Bug#180677][Bug#180521][Bug#182639]
  - SUG:NA
  - DESC:[Bug#180677]【动态度量】kydima_set cycle命令提示信息有误
  - DESC:[Bug#180521]【动态度量】应用层显示存在歧义
  - DESC:[Bug#182639]【动态度量】应用层使用-p命令查看的结果与实际不符


author: hanhuijie <hanhuijie@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[Bug#184805][Bug#184684][Bug#184640][Bug#184625][Bug#184610][Bug#184574][Bug#184569]
  - [Bug#184551][Bug#184517][Bug#184512][Bug#184512][Bug#184444]
  - SUG:NA
  - DESC:[Bug#184805]【动态度量】关闭再打开动态度量后，度量周期设置被重置	
  - DESC:[Bug#184684]【动态度量】建议统一不同查询方式下进程策略名称的标题	
  - DESC:[Bug#184640]【动态度量】周期度量后，程序偶发段错误	
  - DESC:[Bug#184625]【动态度量】kydima_get命令的用法说明中应去除[-s]参数	
  - DESC:[Bug#184610]【动态度量】参数使用不规范时，没有报错信息或提示信息不准确	   
  - DESC:[Bug#184574]【动态度量】添加进程度量策略时，不加-p或-f参数没有报错	
  - DESC:[Bug#184569]【动态度量】--status参数无法使用	
  - DESC:[Bug#184551]【动态度量】无法开启内核模块策略	
  - DESC:[Bug#184517]【动态度量】建议优化帮助信息中关于动态度量功能的描述和信息排版布局    
  - DESC:[Bug#184512]【动态度量】-p参数的描述应修改为进程号，而非进程名	
  - DESC:[Bug#184512]【动态度量】通过pid查询未设置进程策略的进程时，提示未篡改	    
  - DESC:[Bug#184444]【动态度量】可以成功设置不存在的进程策略类型


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-01
changelog:
  - Type:update
  - ID:[Task#165935]
  - SUG:NA
  - DESC:【sp4】动态度量功能--初始化工程，动态度量sp4一版提交
  -    [Task#165935]Halberd-CRS-fnc-1】动态度量 / 动态度量核外包入库


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-02
changelog:
  - Type:update
  - ID:[Task#176305] 多人并行 【动态度量】功能优化联调入库
  - SUG:NA
  - DESC:任务描述
  - DESC:1、针对信大捷安动态度量功能研发过程中发现的问题，对sp4动态度量内核和核外部分实现进行优化
  - DESC:2、内核核外进行联调测试，输出测试报告
  - DESC:3、10.17前提交入库集成b06
  -   ID:[Task#176305] 多人并行 【动态度量】功能优化联调入库
  -   [BUG#190824]【动态度量】使用c参数设置周期失败但没有提示信息	    
  -   [BUG#190167]【动态度量】运行并篡改进程后再为其添加进程策略，度量结果不正确		    
  -   [BUG#190150]【动态度量】关闭度量开关后运行并篡改进程，再次打开度量开关后度量结果不正确	    
  -   [BUG#189506]【动态度量】周期度量后，进程列表信息累加显示 	    
  -   [BUG#189299]【动态度量】添加不存在的进程路径时，建议给出合理提示 	    
  -   [BUG#189292]【动态度量】通过文件路径查询不存在的进程度量信息时，建议给出合理提示信息    
  -   [BUG#189286]【动态度量】通过pid查询不存在的进程度量信息，提示信息重复三遍    
  -   [BUG#189131]【动态度量】添加多个同路径度量对象后其中一个进程已篡改，度量列表不显示未篡改进程信息	    
  -   [BUG#184944]【动态度量】关闭再打开动态度量后，子模块的开关均被重置为off


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-03
changelog:
  - Type:update
  - ID:[BUG#198018]【动态度量】通过不存在的pid查询或添加进程度量策略时，没有提示信息
  - SUG:NA
  - DESC:
  - Patch08: fix-bug-for-kydima7.patch
  - Patch09: fix-kydima-repeat.patch  适配loogarch环境
  - [BUG#198018]【动态度量】通过不存在的pid查询或添加进程度量策略时，没有提示信息 
  - [BUG#189506]【动态度量】周期度量后，进程列表信息累加显示	
  - [BUG#189292]【动态度量】通过文件路径查询不存在的进程度量信息时，建议给出合理提示信息
  - [BUG#184426]【动态度量】无法显示当前进程策略列表	
  - [BUG#182714]【动态度量】三元开启时，应只有secadm用户可以使用动态度量相关命令


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-04
changelog:
  - Type:update
  - ID:[BUG#203467][BUG#203466]
  - SUG:NA
  - DESC:修改spec文件，删除dbus服务重启
  - Patch10: fix-bug-for-kydima8.patch
  - [BUG#203467]【动态度量】非x86架构无法开启动态度量
  - [BUG#203466]【动态度量】安装libkydima包后，系统自动注销


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-05
changelog:
  - Type:update
  - ID:[BUG#206163]【动态度量】策略开启时无法通过路径查询度量信息，策略关闭时输出存在多余信息
  - SUG:NA
  - DESC:删除调试注释
  - Patch11: fix-bug-for-kydima9.patch
  - [BUG#206163]【动态度量】策略开启时无法通过路径查询度量信息，策略关闭时输出存在多余信息


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-06
changelog:
  - Type:update
  - ID:[任务#192803]【动态度量】动态度量PCR扩展功能核外实现
  - SUG:NA
  - DESC: 动态度量PCR扩展功能核外实现
  - Patch12: fix-bug-for-kydima10.patch
  - Patch13: fix-bug-for-kydima11.patch
  - [任务#192803]【动态度量】动态度量PCR扩展功能核外实现


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-07
changelog:
  - Type:update
  - ID:[BUG#215180] 【需求22928】【动态度量-PCR】【arm架构】 开启动态度量PCR开关提示段错误
  - SUG:NA
  - DESC: 动态度量开启PCR扩展段错误
  - Patch14: fix-bug-for-kydima12.patch
  - [BUG#215180] 【需求22928】【动态度量-PCR】【arm架构】 开启动态度量PCR开关提示段错误


author: xinghe <xinghe2@h-partners.com> - 2:1.6.38-3
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1.0.3-7
changelog:
  - Fix CVE-2019-12779 libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack.
    CVE Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12779
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/commit/e322e98dc264bc5911d6fe1d371e55ac9f95a71e
    https://github.com/ClusterLabs/libqb/commit/7cd7b06d52ac80c343f362c7e39ef75495439dfc
    https://github.com/ClusterLabs/libqb/commit/6a4067c1d1764d93d255eccecfd8bf9f43cb0b4d


author: baizhonggui <baizhonggui@huawei.com> - 1.0.5-2
changelog:
  - new add #include <stddef.h> in qblist.h to fix:
    issue# https://gitee.com/src-openeuler/corosync/issues/I39X3F?from=project-issue
    upstream link:https://github.com/ClusterLabs/libqb/pull/384


author: litenglong <litenglong@kylinos.cn> - 2.0.0-3
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houzhiwei <houzhiwei@kylinos.cn> - 2.74.2-5.p02
changelog:
  - Type:cves
  - Id:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: houzhiwei <houzhiwei@kylinos.cn> - 2.74.2-5.p03
changelog:
  - Type:cves
  - Id:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: houzhiwei <houzhiwei@kylinos.cn> - 2.74.2-5.p06
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: houhongxun <houhongxun@kylinos.cn> - 2.74.2-5.p09
changelog:
  - Type:cves
  - ID:[TASK#593047][TASK#595441]
  - SUG:NA
  - DESC:fix CVE-2026-0719 CVE-2025-14523 CVE-2026-1761 CVE-2026-1539 CVE-2026-1467
         CVE-2026-0716 CVE-2026-2369 CVE-2026-1801 CVE-2026-1760


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: seuzw <930zhaowei@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build
         packet: do not enqueue outgoing packets


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: gaihuiying <eaglegai@163.com> - 0.9.6-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.6-15
changelog:
  - Type:CVE
  - Id:CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.10.0-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: yubo<yubo1@kylinos.cn> - 0.7.3-8.p02
changelog:
  -TYPE:UPD
  -ID:[Task#327775]
  -SUG:NA
  -DESC: add patch 0002-Resolve-the-issue-of-SWTPM-compilation-errors.patch


author: hy-euler <eulerstoragemt@huawei.com> - 1.0.22-3
changelog:
  - delete -Sgit in 
  %setup       -q



  /usr/bin/cat /builddir/build/SOURCES/0001-descriptor-Fix-two-memory-safety-bugs-in-malformed-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0
  - Fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: mayunlong <mayunlong6@huawei.com> - 6.2.0-52
changelog:
  - bugfix: move qemuDomainDiskBlockIoTunelsSupported to currect place
  - libvirt: add loongarch support


author: XuFei <xufei30@huawei.com> - 6.2.0-56
changelog:
  - nodedev: ignore EINVAL from libudev in udevEventHandleThread
  - qemu: tpm: Pass --logfile to swtpm_setup for incoming migration


author: zhangxinhao <zhangxinhao1@huawei.com> - 6.2.0-57
changelog:
  - cpu_topo: support for cpu_topo "clusters” in conf
  - cpu_topo: support for specifying "clusters" in qemu comand
  - cpu_topo: support for reporting cluster_id in NUMA topology
  - cpu_topo: fix detection of vCPU pids when multiple clusters are present


author: lijunwei <lijunwei@kylinos.cn> - 6.2.0-57.p01
changelog:
  - Type: Update
  - ID:   [TASK#153903]
  - SUG:  NA
  - DESC: fix translate errors;add arm computing baseline hypervisor;add phytium support host model


author: lizhanchun <lizhanchun@kylinos.cn> - 6.2.0-57.p02
changelog:
  - Type: Update
  - ID:   [BUG#177315]
  - SUG:  NA
  - DESC: Implement qemuDomainGetStatsCpu fallback for qemu:///session


author: lilong <lilong@kylinos.cn> - 6.2.0-57.p05.s5ka01
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-57.p05.s5ka03
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1.7.0-12.p01
changelog:
  - Type:bugfix
  - ID:[bug#176758]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: Funda Wang <fundawang@yeah.net> - 2.9.14-15
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.14-15.p01
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.9.10-43.p03
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794、CVE-2025-49796、CVE-2025-6170
  - SUG:NA
  - DESC: fix CVE-2025-49794、CVE-2025-49796、CVE-2025-6170


author: zuo <zuohongsheng@kylinos.cn> - 2.9.10-15.p05
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: fuanan <fuanan3@h-partners.com> - 1.1.37-4
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: Hugel <gengqihu1@huawei.com> - 7.0.0-10
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: Ensure that variant part discriminator is read by MetadataLoader
          Fix Assembler/debug-info.ll


author: baiguo <baiguo@kylinos.cn> - 8:2.03.14-9.p01
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group


author: wangshuo <wangshuo@kylinos.cn> - 1.14.6-5.p01
changelog:
  - Type:bugfix
  - ID:[BUG#350095]
  - SUG:NA
  - DESC:use more alternatives so that it won't conflicts with other packages
  -      author:Funda Wang <fundawang@yeah.net>
  -      https://gitee.com/src-openeuler/mandoc/commit/ad0b6516ff67a0cd446084ab001c10a465e743c8


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: sunjialin <sunjialin@kylinos.cn> - 4:10.5.22-1.p01
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1.p01
changelog:
  - Type: update
  - ID: [TASK#452691]
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: wuzhaomin <wuzhaomin@kylinos.cn> - 4:10.5.29-1
changelog:
  - Type: cves
  - ID: [TASK#466162]
  - SUG: NA
  - DESC: Bump to 10.5.29 for resolving CVE-2023-52969 CVE-2023-52970 CVE-2025-30693 CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.29.11-1.p01
changelog:
  - Type: update
  - ID: [TASK#351689]
  - SUG: NA
  - DESC: Fix noarch package built differently on different architectures.


author: wuxiaolei <wuxiaolei@kylinos.cn> - 6.3-15.p01
changelog:
  - Type:compile
  - ID: [task#458315]
  - SUG:NA
  - DESC: Add Obsoletes: ncurses-relocation < 6.3.16 to handle legacy package conflicts


author: liuming <liuming03@kylinos.cn> - 6.3-16.p02
changelog:
  - Type: rebuild
  - ID: [task#536531]
  - SUG:NA
  - DESC: fix the issue that the changelog not in descending chronological order


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: shaojiansong <shaojiansong@kylinos.cn> - 1:5.9.1-6.p01
changelog:
  - Type:bugfix
  - ID:[BUG#153537]
  - SUG:NA
  - DESC:add aes192 & aes256 support, port from sp3,task#153888


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 2.5.4-5
changelog:
  - set use-gss-proxy to true in nfs.conf to be consistent with the
    description of 0002-nfs-utils-set-use-gss-proxy-1-to-enable-gss-proxy-by.patch


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-5.p08
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-5.p09
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: wanglixing <wanglixing@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:12.22.11-5.p03
changelog:
  - Type: cves
  - ID: NA
  - SUG: NA
  - DESC: Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983


author: jiayuzhe <jiayuzhe@kylinos.cn> - 1.1.3-2.p02
changelog:
  - Type:bugfix
  - ID:BUG#621723
  - SUG:NA
  - DESC: fix CVE-2025-15536 out-of-bounds read on truncated UTF-8 in MaxMatchSegmentation and Conversion


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: zhangyulong <zhangyulong@huawei.com> - 8.8p1-20.p01
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add BuildRequires:iproute ,fix misspeling and enable dt tests


author: liuming <liuming@kylinos.cn> - 8.8p1-20.p12
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1m-22.p02
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:1.1.1m-22.p06
changelog:
  - Type: cves
  - ID: CVE-2024-5535
  - SUG: NA
  - DESC: add backport-CVE-2024-5535-Add-a-test-for-ALPN-and-NPN.patch


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-22.p10
changelog:
  - Type:update
  - ID:TASK#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160、CVE-2026-22796、CVE-2026-22795、
             CVE-2025-69418、CVE-2025-69421、CVE-2025-69419、
             CVE-2025-69420


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-22.p11
changelog:
  - Type:update
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-28390,CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-22.p12
changelog:
  - Type:update
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-42766,
             CVE-2026-45447


author: xuhe <xuhe@kylinos.cn> - 5.3.7-3.p02
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Disable pmcd and pmlogger service in devel package during %post section


author: lilu <lilu@kylinos.cn> - 5.3.7-3.p04
changelog:
  - Type:cves/bugfix
  - ID:CVE-2024-45769,CVE-2024-45770
  - SUG:NA
  - DESC:Fix CVE-2024-45769,CVE-2024-45770
         Fix invalid memory access in pmfind utility (BZ 2135314)


author: houhongxun <houhongxun@kylinos.cn> - 3.10.0-3.p01
changelog:
  - Type:Bugfix
  - ID  :[BUG#216673]
  - SUG :NA 
  - DESC:add patch02:0001-Add-back-file-executable-permission-set-func.patch


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: wanghao <wanghao2@kylinos.cn> - 4:5.34.0-13.se.01
changelog:
  - Type: update
  - ID: [Task#197255]
  - SUG: NA
  - DESC: 移植kysec执行控制检查补丁
  -	  add patch: perl-5.34.0-add-kysec-exectl-check.patch


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Funda Wang <fundawang@yeah.net> - 8.0.30-12
changelog:
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Funda Wang <fundawang@yeah.net> - 8.0.30-13
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: weiyucheng<weiyucheng@kylinos.cn> - 1:3.4.4-8.p01
changelog:
  - Type:CVE
  - CVE: CVE-2025-22870
         CVE-2025-27144
         CVE-2025-22869
  - SUG:NA
  - DESC:fix CVE-2025-22870 CVE-2025-27144 CVE-2025-22869 and change exec path from /usr/bin to /usr/local/bin about podman-docker, and exclude podman-remote.1.gz from podman-remote rpm


author: weiyucheng<weiyucheng@kylinos.cn> - 1:3.4.4-8.p02
changelog:
  - Type:CVE
  - CVE: CVE-2025-22872
         CVE-2024-45338
         CVE-2024-45337
  - SUG:NA
  - DESC:fix CVE-2025-22872 CVE-2024-45338 CVE-2024-45337


author: songliyang <songlyang@kylinos.cn> - 0.120-12.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Source2:10-shutdown.rules to fix BUG#191407. Author: peijiankang


author: tianyunnuan<tianyunnuan@kylinos.cn> - 0.120-9.p02
changelog:
  - Type:cves
  - ID:CVE-2025-7519
  - SUG:NA
  - DESC: add patch backport-CVE-2025-7519-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch
          add patch backport-Leaking-zombie-child-processes.patch


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /builddir/build/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/poppler-gcc11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2022-38784.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2022-27337.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2020-23804.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2022-37050.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2022-37051.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2022-37052.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2022-38349.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2024-4141.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2024-56378.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2025-32364.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /builddir/build/SOURCES/backport-CVE-2025-32365.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lichenguang <lichenguang@kylinos.cn> - 0.90.0-6.p01
changelog:
  - Type: cves
  - ID: CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365
  - SUG: NA
  - DESC: fix CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: zhangchaorui <zhangchaorui@kylinos.cn> - 13.18-1.p01
changelog:
  - Type: update
  - ID: task#156291
  - SUG: NA
  - DESC: Modify sensitive information(patch from wanglianguo) add 0001-.patch


author: wuzhaomin <wuzhaomin@kylinos.cn> - 13.22-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 13.23-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 13.23 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 13.23-1.p02
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 and CVE-2026-2006


author: gaoyukun<gaoyukun@kylinos.cn> - 1.3.8b-5.p02
changelog:
  - Type: compile
  - ID: NA
  - SUG:NA
  - DESC:Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h,
         close the error case


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: songliyang <songliyang@kylinos.cn> - 3.14.0-9.p01
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Obsoletes protobuf2-emacs to fix install conflict error


author: songliyang <songliyang@kylinos.cn> - 3.14.0-9.p02
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Completely obsoletes protobuf2* to fix install conflict error


author: gongxingliang <gongxingliang@kylinos.cn> - 3.6.0-2.p01
changelog:
  - Type: compile
  - ID: NA 
  - SUG: NA
  - DESC: fix build error due to hdf5 upgrade(patch1 patch2 patch3)


author: lipengyu <lipengyu@kylinos.cn> - 3.6.2-1.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: yangcheng <yangcheng1203@163.com> - 8.1.2-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: wanghao <wanghao2@kylinos.com>- 3.9.9-24.se.01
changelog:
  - Type: update
  - ID: [Task#169289]
  - SUG: NA
  - DESC: 移植kysec执行控制检查补丁
  -	  add patch: python3-3.9.9-add-kysec-exectl-check.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 3.9.9-24.se.01.p04
changelog:
  - Type:cves
  - ID:CVE-2024-6923 CVE-2024-7592 CVE-2024-8088
  - SUG:NA
  - DESC:Fix CVE-2024-6923 CVE-2024-7592 CVE-2024-8088


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-35
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-36
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: GuoCe <guoce@kylinos.cn> - 3.9.9-36.se01
changelog:
  - Type: update
  - ID: [Task#365205]
  - SUG: NA
  - DESC: 移植kysec执行控制检查补丁
  -	  add patch: python3-3.9.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-37.se.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: Funda Wang <fundawang@yeah.net> - 3.9.9-38.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.9.9-39.se.01.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-1795 CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
       CVE-2025-4330 CVE-2025-4435 CVE-2025-8194
  - SUG:NA
  - DESC:fix CVE-2025-1795 CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
         CVE-2025-4330 CVE-2025-4435 CVE-2025-8194


author: lipengyu <lipengyu@kylinos.cn> - 3.9.9-39.se.01.p05
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: <xufei30@huawei.com> - 10:6.2.0-71
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-72
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: lizhanchun <lizhanchun@kylinos.cn> - 10:6.2.0-74.p01
changelog:
  - Type: NA
  - ID:   [TASK#153908]
  - SUG:  NA
  - DESC: enable spice, and qxl for aarch64.
  -       Optimized spice display.
  -       update Phytium's CPU models for qemu-6.2
  -       delete repetitive man8/qemu-ga.8* from qemu-guest-agent package


author: lijunwei <lijunwei@kylinos.cn> - 10:6.2.0-74.p02
changelog:
  - Type: NA
  - ID:   [BUG#179005]
  - SUG:  NA
  - DESC: fix ifarch is x86 cannot install vm with UEFI, add Requires edk2-ovmf


author: lifei <lifei@kylinos.cn> - 10:6.2.0-74.p07
changelog:
  - Type: update
  - ID:   [TASK#181155][TASK#181151]
  - SUG:  NA
  - DESC: fix CVE-2023-3255 CVE-2023-0664  CVE-2023-2861
  -       add ui-vnc-clipboard-fix-infinite-loop-in-inflate_buffer.patch
  -	add qga-win32-Remove-change-action-from-MSI-installer.patch
  - 	add qga-win32-Use-rundll-for-VSS-installation.patch
  - 	add 9pfs-prevent-opening-special-files-CVE-2023-2861.patch


author: lijunwei <lijunwei@kylinos.cn> - 10:6.2.0-74.p07.s5ka01
changelog:
  - Type: update
  - ID:   [BUG#207264]
  - SUG:  NA
  - DESC: Merge Phytium' Patch to support S5000c host-model


author: lijunwei <lijunwei@kylinos.cn> - 10:6.2.0-74.p07.s5ka06
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: wangguochun <wangguochun@kylinos.cn> - 10:6.2.0-74.p07.s5ka07
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-5088 CVE-2024-4467 CVE-2024-7409


author: yanjianqing <yanjianqing@kylinos.cn> - 10:6.2.0-74.p07.s5ka11
changelog:
  - Type: cves
  - ID:   CVE-2025-11234
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: yanjianqing <yanjianqing@kylinos.cn> - 10:6.2.0-74.p07.s5ka13
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: malike <malike@kylinos.cn> - 10:6.2.0-74.p07.s5ka14
changelog:
  - Type: cves
  - ID:   CVE-2026-48914
  - SUG:  NA
  - DESC: Fix CVE-2026-48914 heap buffer overflow in virtio-blk scsi request handling


author: lifeifei <lifeifei@kylinos.cn> - 7.2.10-1
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-8
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: sunjialin <sunjialin@kylinos.cn> - 4.17.5-8.p01
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: change macro openEuler to kylin in spec file & changed by xiaozai@kylinos.cn


author: litenglong <litenglong@kylinos.cn> - 1.0.28-12.p01
changelog:
  - Type:bugfix
  - ID:[task#340131]
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#145103]
  - SUG:NA
  - DESC: 关闭kysec后,不重启机器的情况下，在root用户下使用security-switch切换strict模式，保证kysec-daemon的启动用户是secadm
  -         add patch: security-switch-fix-not-reboot-set-strict-when-kysec-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: security-switch-fix-security-switch-disable-after-force-reboot-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#147592]
  - SUG:NA
  - DESC: 解决切换模式失败后，无法再次切换的问题
  -       add patch: security-switch-fix-can-not-excute-after-switch-failed.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#157825]
  - SUG:NA
  - DESC: 【安全模式】切换default模式后，概率性报核心已转储提示
  -       add patch: security-switch-add-client-thread-wait.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.18
changelog:
  - Type: bugfix
  - ID: [BUG#191987]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题
  -	  add patch: security-switch-fix-set-passwd-dbus-timeout-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.3.1-1.se.02
changelog:
  - Type: bugfix
  - ID: [BUG#201315]
  - SUG:NA
  - DESC: 修复secadm输错三次密码后仍可以切换状态的问题
  -	  add patch: security-switch-fix-secadm-set-passwd-error-still-switch-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 1.3.1-1.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -	  add patch: security-switch-modify-security-switch-effective-after-reboot.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-18.p01
changelog:
  - Type:update
  - ID:TASK#207009
  - SUG:NA
  - DESC:remove the "BuildArch: noarch" for subpackage debuginfo and debugsource
         modify the product name in the BOOTAA64.CSV and BOOTX86.CSV
         support secure boot
         remove tpcm support


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-18.p03
changelog:
  - Types:bugfix
  - ID:BUG#500965
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wjiang <app@cameyan.com> - 15.6-28
changelog:
  - backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-30.p01
changelog:
  - Types:bugfix
  - ID:BUG#500965;BUG#276525
  - SUG:NA
  - DESC:Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package
         Support secure boot


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-9.p01
changelog:
  - Type:compile,update
  - ID:TASK#153406
  - SUG:NA
  - DESC:remove the "BuildArch: noarch" for subpackage debuginfo and debugsource 
         replace BOOTAA64.CSV and BOOTX86.CSV in order to fix bug that bios using label named "openEuler"


author: Jianmin <jianmin@iscas.ac.cn> - 1:1.8.0-7
changelog:
  - Type:cve
  - CVE:CVE-2023-39325 and CVE-2023-44487
  - SUG:NA
  - DESC:backport CVE-2023-39325 and CVE-2023-44487


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: lixiaoyong <lixiaoyong@kylinos.cn> - 21.01.1-6.p01
changelog:
  - Type:compile
  - ID:TASK#153398
  - SUG:NA
  - DESC:Fix noarch package spdk-tools build differently on different architectures error


author: yinyongkang <yinyongkang@kylinos.cn> - 21.01.1-6.p02
changelog:
  - Type:bugfix
  - ID:[Task#338533]
  - SUG:NA
  - DESC: scripts: Do msr existence check only on x86_64 machines


author: cenhuilin <cenhuilin@kylinos.cn> - 21.01.1-6.p03
changelog:
  - Type: cves
  - ID: [BUG#546969]
  - SUG: NA
  - DESC:1.fix CVE-2025-57275: lib/nvmf: limit number of NVMe-oF registrants when updating PTPL info
         2.add -mno-avx512vl to x86_64 builds


author: xinghe <xinghe2@h-partners.com> - 7:4.9-29
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: mengchaoming <mengchaoming@kylinos.com> - 2.6.1-9.p01
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Synchronize the patch from SP3:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 249-52.p05
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 249-52.p06
changelog:
  - Type:update
  - ID:[TASK#329354]
  - SUG:NA
  - DESC: Add 0001-rc-local-change-order-after-network-online.target.patch
          Change rc-local order after network-online.target, fix service or process start failed issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 249-52.p09
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 249-52.p10
changelog:
  - Type: update
  - ID:   [BUG#554731]
  - SUG:  NA
  - DESC: fix CVE-2026-4105, CVE-2026-29111, CVE-2026-40226, CVE-2026-40225


author: bianxiuning <bianxiuning@kylinos.cn> - 5.0-3.p01
changelog:
  - Type:update
  - ID:[169901]
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON,            0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch


author: panxiaohe <panxiaohe@huawe.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: bianxiuning<bianxiuning@kylinos.cn> - 3.0.3-3.p02
changelog:
  - Type:update
  - ID:209674
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: huayadong <huayadong@kylinos.cn> - 3.1.2-25
changelog:
  - Type:bugfix
  - ID:[Bug#178504]
  - SUG:NA
  - DESC:add Patch23:ukui-control-center-3.1.2-kylin-fix-regional-language-display-errors.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-26
changelog:
  - Type:bugfix
  - ID:[Bug#178512]
  - SUG:NA
  - DESC: add add-ukcc-setlang.patch
          rm ukui-control-center-3.1.2-kylin-fix-regional-language-display-errors.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-27
changelog:
  - Type:bugfix
  - ID:[Bug#179091]
  - SUG:NA
  - DESC: add fix-changeusertype-error.patch
          update 0014-fix-memorysize-of-aboutinfo.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-27.p01
changelog:
  - Type:bugfix
  - ID:[Bug#191510]
  - SUG:NA
  - DESC:add Patch25:ukui-control-center-3.1.2-kylin-start-the-separation-of-powers-of-KYSEC.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-27.p02
changelog:
  - Type:bugfix
  - ID:[Bug#204888]
  - SUG:NA
  - DESC:add Patch26:ukui-control-center-3.1.2-repair-freelogin-autologin-not-available.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-27.p03
changelog:
  - Type:bugfix
  - ID:[Bug#208559][Bug#208556]
  - SUG:NA
  - DESC:add Patch27:ukui-control-center-3.1.2-kylin-fix-failed-to-modify-user-avatar-and-power-button-configuration.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-27.p04
changelog:
  - Type:bugfix
  - ID:[Bug#209556]
  - SUG:NA
  - DESC:add Patch28:ukui-control-center-3.1.2-kylin-fix-the-display-resolution-does-not-match-the-actual-resolution.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-27.p05
changelog:
  - Type:bugfix
  - ID:[Bug#225984]
  - SUG:NA
  - DESC:add Patch29:ukui-control-center-3.1.2-kylin-fix-authoriy-abnormal.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-27.p06
changelog:
  - Type:bugfix
  - ID:[Bug#225978]
  - SUG:NA
  - DESC:add Patch30:ukui-control-center-3.1.2-kylin-fix-noopen-except-for-the-first-click.patch


author: houhongxun <houhongxun@kylinos.cn> - 3.1.2-27.p07
changelog:
  - Type: cves
  - ID  : [TASK#589295]
  - SUG : NA
  - DESC: fix KVE-2026-0104, encode password when used as command argument


author: huayadong <huayadong@kylinos.cn> - 3.1.2-11.p02
changelog:
  - Type:Bugfix
  - ID  :[BUG#208565]
  - SUG :NA 
  - DESC:add patch9:ukui-greeter-3.1.2-kylin-login-failure-display-translation.patch


author: houhongxun <houhongxun@kylinos.cn> - 3.1.2-11.p03
changelog:
  - Type:Bugfix
  - ID  :[BUG#216518]
  - SUG :NA 
  - DESC:add patch10:0001-don-t-add-redundant-comma.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-11.p04
changelog:
  - Type:Bugfix
  - ID  :[BUG#237987]
  - SUG :NA
  - DESC:add patch11:ukui-greeter-3.1.2-kylin-prevent-losing-focus.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.3.1-5
changelog:
  - Type:bugfix
  - ID:[Bug#177066]
  - SUG:NA
  - DESC:add Patch2: 0002-fix-ukui-notification-daemon-SIGSEGV.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.1-6
changelog:
  - Type:bugfix
  - ID:[BUG#190498]
  - SUG:NA
  - DESC:add patch3:add-switchuser-no-limits-in-ukui-screensaver.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.1-6.p02
changelog:
  - Type:Bugfix
  - ID  :[BUG#225988]
  - SUG :NA
  - DESC:add Patch06:ukui-screensaver-3.1.1-kylin-fix-the-issue-of-being-unable-to-enter-a-password-when-switching-users.patch
         修复在锁屏界面切换用户时左下角重复选择当前用户则无法输入密码.


author: peijiankang <peijiankang@kylinos.cn> - 3.1.1-6.p03
changelog:
  - Type:Bugfix
  - ID  :[BUG#263767]
  - SUG :NA
  - DESC:add ukui-screensaver-3.1.1-fix-ukui-screensaver-unlock-no-focus-on-dispay.patch
         修复窗管为ukwm时锁屏登录后键盘焦点消失


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch100 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488


author: Like <like@kylinos.cn> - 1.13.2-8.p04
changelog:
  - Type:cves
  - CVE:CVE-2024-33655 CVE-2024-8508
  - SUG:NA
  - DESC:add patch 16,17 fix CVE-2024-33655 CVE-2024-8508


author: lifeifei <lifeifei@kylinos.cn> - 1.13.2-8.p06
changelog:
  - Type:cves
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:fix CVE-2025-11411
         backport upstream to add CVE-2025-5994's after patches


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-libblkid-fix-misaligned-address-in-probe_exfat.patch
         backport-ldattach-fix-intro-command-and-pause.patch
         backport-iso9660.h-use-more-correct-function-types.patch
         backport-iso9660.h-avoid-undefined-signed-integer-shift.patch
         backport-ipc_msg_get_limits-always-initialize-memory.patch
         backport-wdctl-mark-flags-field-as-unsigned-long.patch
         backport-login-never-send-signals-to-init.patch
         backport-mkswap-do-not-use-uninitialized-stack-value.patch
         backport-lib-pager-fix-signal-safety-issues.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:nvidia_raid: validate checksum
         [add] backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Sync community patches
         [add]backport-CVE-2022-0563.patch
         backport-Fix-integer-overflow-for-alpha-like-linux.patch
         backport-column-don-t-require-column-name-for-JSON.patch
         backport-dmesg-fix-since-and-until.patch
         backport-fflush-stdout-before-reading-from-stdin.patch
         backport-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-last-don-t-assume-zero-terminate-strings.patch
         backport-lib-allow-safe_getenv-to-work-for-non-root-users.patch
         backport-lib-path-make-path-use-more-robust-coverity-scan.patch
         backport-lib-strutils-improve-strtoul_or_err-for-negative-numbers.patch
         backport-libblkid-don-t-mark-cache-as-probed-if-sys-not-available.patch
         backport-libblkid-hfs-fix-make-sure-buffer-is-large-enough.patch
         backport-libblkid-make-blkid_free_probe-more-robust.patch
         backport-libmount-all-continue-although-proc-is-not-mounted.patch
         backport-loopdev-set-block_size-when-using-LOOP_CONFIGURE.patch
         backport-lslocks-fix-maj-min-scanf.patch
         backport-lslogins-fix-free-invalid-pointer.patch
         backport-script-fix-passing-args-to-execlp.patch
         backport-scriptlive-fix-argv-0-for-execlp.patch
         backport-sysfs-fallback-for-partitions-not-including-parent-name.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
         backport-write-correctly-handle-wide-characters.patch
         backport-wall-convert-homebrew-buffering-to-open_memstream.patch
         backport-wall-use-fputs_careful.patch
         backport-hexdump-parse-handle-truncated-format-pattern.patch
         backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
         backport-lscpu-fix-p-output-all-caches-delimiter.patch
         backport-add-return-in-supam_conv-function.patch
         backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
         backport-sulogin-ignore-none-existing-console-devices.patch
         backport-sulogin-fix-KDGKBMODE-ifdef.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
         backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 2.37.2-20.p01
changelog:
  - Type:update
  - ID:TASK#159458
  - SUG:NA
  - DESC:support enable-raw
         sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
                    9400-set-locale-for-supporting-utf-8.patch


author: GuoCe <guoce@kylinos.cn> - 2.37.2-20.p02
changelog:
  - Type:updates
  - ID:[TASK#168917]
  - SUG:NA
  - DESC:1. add patch:9005 for add lscpu ft_part S5000C
         2. disable-raw for 5.15.0-1.2.v2307
            The raw driver used to provide direct unbuffered access to block
            devices before O_DIRECT was invented.  It has been obsolete for
            more than a decade.


author: zhangzikang <zhangzikang@kylinos.cn> - 2.37.2-20.p04
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: wanghao <wanghao2@kylinos.cn> - 2:9.0-15.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#169289]
  - SUG: NA
  - DESC: 修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:
  -	vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-15.p02.se.01
changelog:
  - Type:cves
  - ID: CVE-2023-46246 CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-46246 CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-15.p02
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p01
changelog:
  - Type:update
  - ID:[task#512917]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p02
changelog:
  - Type:update
  - ID:[bug#610811]
  - SUG:NA
  - DESC: fix CVE: CVE-2026-41411,CVE-2026-42307,CVE-2026-43961,CVE-2026-44656,CVE-2026-45130,CVE-2026-46483,CVE-2026-47162,CVE-2026-47167,CVE-2026-52858,CVE-2026-52859,CVE-2026-52860, consistent with 9.0-50


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: Like <like@kylinos.cn> - 1:3.6.14-11.p01
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Add BuildRequires: libxml2-devel to make Requires info contains libxml2.so.2


author: houzhiwei <houzhiwei@kylinos.cn> - 1:4.4.10-3.p01
changelog:
  - Type: compile
  - DESC: Add BuildRequires: libxml2-devel to make Requires info contains libxml2.so.2


author: zuo <zuohongsheng@kylinos.cn> - 1:4.4.14-1.p01
changelog:
  - Type:CVE
  - CVE:[task#597029]
  - SUG:NA
  - DESC: add BuildRequires libxml2-devel (4.4.10-3.p01) for 4.4.14


author: wanfeng <wanfeng@kylinos.cn> - 1.51.08-2.p01
changelog:
  - Type:compile
  - Id:TASK#153912
  - SUG:NA
  - DESC: merge from sp3,splits sub packages client,c++,client++,apps


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.51.08-2.p03
changelog:
  - Type:cves
  - Id:TASK#480193
  - SUG:NA
  - DESC:backport CVE-2024-8176 patch and sync v11 modify to remove duplicate man file in xml-rpc-c-apps packages


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.11-20.p02
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.11-20.p03
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p07
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2025-62229,CVE-2025-62231,CVE-2025-62230,CVE-2025-49180,CVE-2025-49179,CVE-2025-49176,CVE-2025-49178,CVE-2025-49175,CVE-2022-49737


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p08
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p09
changelog:
  - Type: CVE
  - ID:   [BUG#575487]
  - SUG:  NA
  - DESC: fix CVE-2024-31081, CVE-2024-31082, CVE-2024-31083


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p11
changelog:
  - Type: CVE
  - ID:   [BUG#552463]
  - SUG:  NA
  - DESC: fix tigervnc-server test failed, and fix CVE-2026-33999


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50253, CVE-2026-50254
  - SUG:  NA
  - DESC: fix CVE.


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  - SUG:  NA
  - DESC: fix CVE.


author: kouwenqi <kouwenqi@kylinos.cn> - 5.2.5-4
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add overflow check for Unpadded size in lzma_index_append


