# changelog

author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.7-8.se.7
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch(from cve):backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch
  -     add patch(for compatibility sp1-updates):shadow-selinux-compile-err-for-sp1updates.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.8
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.9
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: fix CVE-2013-4235
  -     add patch(from cve):shadow-backport-CVE-2013-4235.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.10
changelog:
  - Type:bugfix
  - ID:[Bug#212224]
  - SUG:NA
  - DESC: 【20240130update内网源更新测试】SP1arm升级 shadow-4.7-8.se.9.ky10包失败


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: wangdi <wangdi@kylinos.cn> - 0.20.0-2.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: openEuler Buildteam <buildteam@openeuler.org> - 3.24.0-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix CVE-2019-19923 CVE-2019-19924 CVE-2019-19925 CVE-2019-19926 CVE-2019-20218


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-5.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch1 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-5.p03
changelog:
  - Type:compile
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add support for loongarch64 in spec file to be homologous with loongarch.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: Guo Jianxing <guojianxing@kylinoscn> - 243.31.se.p02
changelog:
  - import changes from 17.se.4
  -- add patch9014:systemd-243-kylin-init5-hang.patch
  -- Modify ctrl+alt+F2 switch to init5 stuck problem
  -- Patch9013: 0002-Change-the-NTP-server.patch
  -- Change NTP server.
  -- urnal: fix selinux denied error for systemctl when lsm stacking is enable
  -- change to kylin


author: mengchaoming<mengchaoming@kylinos.cn>243-31.se.p03
changelog:
  -add patch9015:systemd-243-kylin-init1-add-check-console-tty1.patch
  -fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p07
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p10
changelog:
  - Type:bugfix
  - ID:rhbz#1970945
  - SUG:NA
  - DESC: Fix Systemd memory corruption (rhbz#1970945)
          Fix bunch of memory management bugs uncovered by dfuzzer and UBSAN (rhbz#2047373)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p12
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          fix mips64el build
          Remove gnu-efi check when in loongarch64 and mips64
          support systemd-detect-virt for Loongarch64


author: huangwenhua <huangwenhuag@kylinos.cn> - 243-31.se.p14
changelog:
  - Type:bugfix
  - ID:[TASK#172942]
  - SUG:NA
  - DESC: add patch 0001-fix-soft-link-missing.patch
          fix soft link missing


author: Shen Zhongwei <shenzhongwei@kylinos.cn> - 243-31.se.p15
changelog:
  - Type:bugfix
  - ID:[TASK#171982]
  - SUG:NA
  - DESC: add patch 0002-rc-local-order-after-network-online.target.patch
          fix rc-local service start failed


author: yinyongkang <yinyongkang@kylinos.cn> - 243-31.se.p17
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch100719: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p18
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SBUG:NA
  - DESC: add patch10720: 0001-backport-donot-open-cdrom-use-exclusive-mode.patch
          fix eject cdrom issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p19
changelog:
  - Type:bugfix
  - ID:[TASK#205426]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p21
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p22
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: zhangdashuang <zhangdashuang@kylinos.cn> 1.10.1-4
changelog:
  - from 1.10.1-2.p01 transplant
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: guoce <guoce@kylinos.cn> - 0.3.62-1s2.p02
changelog:
  - add patch: ukui-screensaver-0.3.62-fix-chandao-12928.patch
  - modify system time display coordinates


author: gaohaobo <gaohaobo@kylinos.cn> - 0.3.62-1s2.p04
changelog:
  - add patch: 0002-change-default-picture-folder-to-adjust-control-center-p12.patch  change the default srceensaver lookup directory to adjust kylin-control-center after p12.


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch10 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488
  -- add unbound pid dir to fix unbound.service faild


author: Like <like@kylinos.cn> - 1.11.0-2.p06
changelog:
  - Type:cves
  - CVE:CVE-2024-8508 CVE-2024-33655
  - SUG:NA
  - DESC:add patch 15,16 fix CVE-2024-8508 CVE-2024-33655


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memleak in fdisk_script_read_file
         Fix heap-buffer-overflow in fdisk_partname
         Fix integer overflow in partno_from_devname


author: wangxiaomeng<wangxiaomeng@kylinos.cn> - 2.35.2-9.p02
changelog:
  - Type:bugfix
  - ID:[TASK#143321]
  - SUG:NA
  - DESC:backport patch to fix rounding in size_to_human_string()


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-9.p03
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-9.p07
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-17
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: xiehongyu <xiehongyu@kylinos.cn> - 2:8.2-20.p01
changelog:
  - add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-21.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-22.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no,
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> -2:8.2-26.p01
changelog:
  - add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: wanglixing <wanglixing@kylinos.cn> - 2:8.2-28.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: sunjialin <sunjialin@kylinos.cn> - 2:8.2-34.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: likai01 <likai01@kylinos.cn> - 2:8.2-50.po1
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p03.01.se.01
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: zhanzhimin<zhanzhimin@huawei.com> - 1.20.8-2
changelog:
  - Type:CVE
  - Id:CVE-2020-14346,CVE-2020-14361,CVE-2020-14362
  - SUG:NA
  - DESC:fix CVE-2020-14346,CVE-2020-14361,CVE-2020-14362


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-3.p02
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p06
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p07
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


