# changelog

author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.56.v2101
changelog:
  - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (Andrew Scull) [task:157172, task:468147, bug:363435]
  - iio: mma8452: Fix trigger reference couting (Lars-Peter Clausen)
  - third update changelog for incoming 4.19.90-23.56.v2101 (Zhengyuan Liu)
  - net/mlx5: Flag state up only after cmdif is ready (zhaochenguang) [task:464738]
  - second update changelog for incoming 4.19.90-23.56.v2101 (Zhengyuan Liu)
  - net: core: use helper skb_ensure_writable in more places (Heiner Kallweit) [task:99622]
  - txgbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - ngbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - update changelog for incoming 4.19.90-23.56.v2101 (Zhengyuan Liu)
  - memcg: fix soft lockup in the OOM process (Chen Ridong) [task:440777] {CVE-2024-57977}
  - dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer) [task:162162, task:458745]
  - dm: fix mempool NULL pointer race when completing IO (Jiazi Li) [task:169357, task:458745]
  - clocksource: Skip watchdog check for large watchdog intervals (Jiri Wiesner) [task:431250]
  - clocksource: Print deviation in nanoseconds when a clocksource becomes unstable (Feng Tang) [task:431250]
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long) [task:457161]
  - clocksource: Avoid accidental unstable marking of clocksources (Waiman Long) [task:457161]
  - clocksource: Retry clock read if long delays detected (Paul E. McKenney) [task:158827]
  - x86/fpu: Allow multiple bits in clearcpuid= parameter (Arvind Sankar) [task:158034]
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart) [task:441321]
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart) [task:441321]
  - netfilter: conntrack: revisit gc autotuning (Florian Westphal) [task:441321] {CVE-2022-49110}
  - netfilter: conntrack: collect all entries in one cycle (Florian Westphal) [task:160493]
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) [task:440692] {CVE-2022-49585}
  - tcp: disable TFO blackhole logic by default (Wei Wang) [task:440692]
  - net/tcp_fastopen: fix data races around tfo_active_disable_stamp (Eric Dumazet) [task:442948]
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima) [task:444121]
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima) [task:444121] {CVE-2025-21858}
  - geneve: move debug check after netdev unregister (Florian Westphal) [task:155707]
  - ext4: introduce new metadata buffer read helpers (zhangyi (F)) [task:442948]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Baokun Li) [task:449973]
  - ext4: avoid potential data overflow in next_linear_group (Kemeng Shi) [task:449973]
  - ext4: use locality group preallocation for small closed files (Jan Kara) [task:449973]
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara) [task:449973]
  - ext4: discard preallocations before releasing group lock (Jan Kara) [task:449973]
  - ext4: fix dead loop in ext4_mb_new_blocks (Ye Bin) [task:449973]
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li) [task:449973]
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Baokun Li) [task:449973]
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Baokun Li) [task:449973]
  - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (Ojaswin Mujoo) [task:449973]
  - ext4: mballoc: Remove useless setting of ac_criteria (Ritesh Harjani) [task:449973]
  - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated (Kemeng Shi) [task:449973]
  - ext4: Stop searching if PA doesn't satisfy non-extent file (Ojaswin Mujoo) [task:449973]
  - ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code related to freeing PAs (Ojaswin Mujoo) [task:449973]
  - ext4: Convert pa->pa_inode_list and pa->pa_obj_lock into a union (Ojaswin Mujoo) [task:449973]
  - ext4: limit the length of per-inode prealloc list (brookxu) [task:449973]
  - OPENEULER: ext4: Stop trying writing pages if no free blocks generated (Zhihao Cheng) [task:184981]
  - ext4: reorganize if statement of ext4_mb_release_context() (brookxu) [task:449973]
  - ext4: add mb_debug logging when there are lost chunks (brookxu) [task:449973]
  - ext4: mballoc: add blocks to PA list under same spinlock after allocating blocks (Ritesh Harjani) [task:449973]
  - ext4: use built-in RCU list checking in mballoc (Madhuparna Bhowmik) [task:449973]
  - ext4: Abstract out overlap fix/check logic in ext4_mb_normalize_request() (Ojaswin Mujoo) [task:449973]
  - ext4: Move overlap assert logic into a separate function (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code in ext4_mb_normalize_request() and ext4_mb_use_preallocated() (Ojaswin Mujoo) [task:449973]
  - ext4: avoid unnecessary pointer dereference in ext4_mb_normalize_request (Kemeng Shi) [task:449973]
  - ext4: Add allocation criteria 1.5 (CR1_5) (Ojaswin Mujoo) [task:449973]
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) [task:166857]
  - ext4: Add per CR extent scanned counter (Ojaswin Mujoo) [task:449973]
  - ext4: Abstract out logic to search average fragment list (Ojaswin Mujoo) [task:449973]
  - ext4: fixup possible uninitialized variable access in ext4_mb_choose_next_group_cr1() (Jan Kara) [task:449973]
  - ext4: use is_power_of_2 helper in ext4_mb_regular_allocator (Kemeng Shi) [task:449973]
  - ext4: Avoid scanning smaller extents in BG during CR1 (Ojaswin Mujoo) [task:449973]
  - ext4: Add counter to track successful allocation of goal length (Ojaswin Mujoo) [task:449973]
  - ext4: Convert mballoc cr (criteria) to enum (Ojaswin Mujoo) [task:449973]
  - ext4: use buckets for cr 1 block scan instead of rbtree (Jan Kara) [task:449973]
  - ext4: fix sparse warnings (Theodore Ts'o) [task:449973]
  - ext4: add proc files to monitor new structures (Harshad Shirwadkar) [task:449973]
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara) [task:449973]
  - ext4: mballoc: add more mb_debug() msgs (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_show_ac() (Ritesh Harjani) [task:449973]
  - ext4: improve cr 0 / cr 1 group scanning (Harshad Shirwadkar) [task:449973]
  - ext4: add ability to return parsed options from parse_options (Harshad Shirwadkar) [task:449973]
  - ext4: add MB_NUM_ORDERS macro (Harshad Shirwadkar) [task:449973]
  - ext4: optimize the implementation of ext4_mb_good_group() (brookxu) [task:449973]
  - ext4: add prefetch_block_bitmaps mount option (Theodore Ts'o) [task:449973, addresses-google-bug:159488342]
  - ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu) [task:442948]
  - ext4: add prefetching for block allocation bitmaps (Alex Zhuravlev) [task:449973]
  - ext4: use common helpers in all places reading metadata buffers (zhangyi (F)) [task:442948]
  - ext4: add mballoc stats proc file (Harshad Shirwadkar) [task:449973]
  - ext4: drop s_mb_bal_lock and convert protected fields to atomic (Harshad Shirwadkar) [task:449973]
  - ext4: skip non-loaded groups at cr=0/1 when scanning for good groups (Alex Zhuravlev) [task:449973]
  - ext4: mballoc: use lock for checking free blocks while retrying (Ritesh Harjani) [task:449973]
  - ext4: mballoc: introduce pcpu seqcnt for freeing PA to improve ENOSPC handling (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_discard_preallocations() (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_good_group() (Ritesh Harjani) [task:449973]
  - regulator: check that dummy regulator has been probed before using it (Christian Eggers) [task:452500] {CVE-2025-22008}
  - regulator: workaround self-referent regulators (Michał Mirosław) [task:158034]
  - regulator: avoid resolve_supply() infinite recursion (Michał Mirosław) [task:158034]
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [task:387977] {CVE-2024-47747}
  - NFS: Further optimisations for 'ls -l' (Trond Myklebust) [task:438543, task:442990]
  - NFS: Support larger readdir buffers (Trond Myklebust) [task:438543, task:442990]
  - NFS: Remove unnecessary kmap in nfs_readdir_xdr_to_array() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up nfs_readdir_page_filler() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up directory array handling (Trond Myklebust) [task:438543, task:442990]
  - nfs: pass the correct prototype to read_cache_page (Christoph Hellwig) [task:438543, task:442990]
  - NFS: Clean up readdir struct nfs_cache_array (Trond Myklebust) [task:438543, task:442990]
  - nfs: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) [task:438543, task:442990]
  - NFS: Ensure contents of struct nfs_open_dir_context are consistent (Trond Myklebust) [task:438543, task:442990]
  - NFS: Use the 64-bit server readdir cookies when possible (Trond Myklebust) [task:438543, task:442990]
  - nfs: optimise readdir cache page invalidation (Dai Ngo) [task:438543, task:442990]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:461961] {CVE-2025-37823}
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426435] {CVE-2025-21639}
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426436] {CVE-2025-21638}
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao) [task:421039] {CVE-2024-50051}
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [task:459941] {CVE-2025-22021}
  - net/rose: prevent integer overflows in rose_setsockopt() (Nikita Zhandarovich) [task:441317] {CVE-2025-21711}
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski) [task:440770] {CVE-2025-21768}
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [task:429487] {CVE-2024-56759}
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov) [task:427427] {CVE-2024-57938}
  - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima) [task:440800] {CVE-2022-49599}
  - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet) [task:440800]
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping) [task:442582] {CVE-2025-21835}
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can) [task:421029] {CVE-2024-52332}
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo) [task:420523] {CVE-2024-56780}
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin) [task:440548] {CVE-2022-49241}
  - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() (Yang Yingliang) [task:440548]
  - ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima) [task:440687] {CVE-2022-49603}
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong) [task:450130]
  - xfs: allow inode inactivation during a ro mount log recovery (Darrick J. Wong) [task:450130]
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (Haoxiang Li) [task:444124] {CVE-2025-21844}
  - cifs: fix potential memory leaks in session setup (Paulo Alcantara) [task:448797] {CVE-2023-53008}
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [task:426323] {CVE-2024-57929}
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima) [task:440707] {CVE-2022-49579}
  - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima) [task:441283] {CVE-2022-49630}
  - netfilter: nf_tables: fix crash when nf_trace is enabled (Florian Westphal) [task:440633]
  - netfilter: nf_tables: avoid skb access on nf_stolen (Florian Westphal) [task:440633] {CVE-2022-49622}
  - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso) [task:440633]
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Saurabh Sengar) [task:450275] {CVE-2025-21976}
  - fbdev: Introduce devm_register_framebuffer() (Thomas Weißschuh) [task:450275]
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li) [task:444125] {CVE-2025-21848}
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin) [task:440416] {CVE-2022-49188}
  - remoteproc: qcom_q6v5_mss: Extract mba/mpss from memory-region (Sibi Sankar) [task:440416]
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data (Baokun Li) [task:439963] {CVE-2022-49414}
  - xfs: fix chown leaking delalloc quota blocks when fssetxattr fails (Darrick J. Wong) [task:450133]
  - xfs: always return -ENOSPC on project quota reservation failure (Eric Sandeen) [task:450133]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458685] {CVE-2025-37838}
  - blkcg: Add during the process to ensure data synchronization between CPUs. (cuitao) [task:404161, task:455283]
  - blkcg: handle dying request_queue when associating a blkg (Dennis Zhou) [task:404161, task:455283]
  - mmc: core: use sysfs_emit() instead of sprintf() (Sergey Shtylyov) [task:440609] {CVE-2022-49267}
  - net: asix: add proper error handling of usb read errors (Pavel Skripkin) [task:440657] {CVE-2022-49226}
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [task:450278] {CVE-2025-21956}
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (Ma Ke) [task:450263] {CVE-2025-21941}
  - drm/amd/display: Check for invalid input params when building scaling params (Michael Strauss) [task:450263]
  - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (Hans de Goede) [task:440567]
  - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() (Duoming Zhou) [task:440567] {CVE-2022-49309}
  - staging: rtl8723bs: replace _cancel_timer with del_timer_sync (Ross Schmidt) [task:440567]
  - staging: rtl8723bs: replace __inline by inline (Rasmus Villemoes) [task:440567]
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Lareine Khawaly) [task:448836] {CVE-2022-49749}
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro (Andy Shevchenko) [task:448836]
  - math64: New DIV_S64_ROUND_CLOSEST helper (Chunyan Zhang) [task:448836]
  - units: Add SI metric prefix definitions (Andy Shevchenko) [task:448836]
  - include/linux/units.h: add helpers for kelvin to/from Celsius conversion (Akinobu Mita) [task:448836]
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Ma Wupeng) [task:450240] {CVE-2025-21931}
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio) [task:440504] {CVE-2024-57981}
  - clk: qcom: clk-rcg2: Fix compile error for implicit declaration of macro ‘RCG_D_OFFSET’ (lihao01) [task:454819]
  - hrtimers: fix kabi broken (Xueqin Luo) [task:462420]
  - hrtimers: fix LTP/xfstes failures by correcting (Xueqin Luo) [task:462420]
  - scsi: qla2xxx: Fix scheduling while atomic (Quinn Tran) [task:149541]
  - netlink: prevent potential spectre v1 gadgets (Eric Dumazet) [task:447831] {CVE-2023-53000}
  - net: hns3: don't auto enable misc vector (Jian Shen) [task:426325] {CVE-2025-21651}
  - usb-storage: apply IGNORE_UAS for Realtek RTL9210 (dengjie03) [bug:332982]
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park) [task:164562]
  - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall (Alexandru Elisei) [task:440489] {CVE-2022-49520}
  - Mucse: rnp: never use err_handler avoid os crash when aer error recover (Dong Yibo) [task:447054, task:451478]
  - nvme-fc: fix racing controller reset and create association (James Smart) [task:395841]
  - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt context (James Smart) [task:395841]
  - nvme-fc: do not wait in vain when unloading module (Daniel Wagner) [task:395841] {CVE-2024-26846}
  - nvme-fc: fix module unloads while lports still pending (James Smart) [task:442948]
  - nvme-fc: remove nvme_fc_terminate_io() (James Smart) [task:395841]
  - nvme-fc: eliminate terminate_io use by nvme_fc_error_recovery (James Smart) [task:395841]
  - nvme-fc: track error_recovery while connecting (James Smart) [task:395841]
  - nvme-fc: fix io timeout to abort I/O (James Smart) [task:395841]
  - nvme: wait until all completed request's complete fn is called (Ming Lei) [task:85444]
  - nvme-fc: convert assoc_active flag to bit op (James Smart) [task:395841]
  - nvme-fc: remove err_work work item (James Smart) [task:395841]
  - nvme_fc: add 'nvme_discovery' sysfs attribute to fc transport device (James Smart) [task:395841]
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [task:410453] {CVE-2024-56581}
  - btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod (Dinghao Liu) [task:158034]
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (Lee Duncan) [task:427978]
  - atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu) [task:427978]
  - net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu) [task:427978]
  - fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu) [task:427978]
  - btrfs: don't warn if discard range is not aligned to sector (David Sterba) [task:427978]
  - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan) [task:427978]
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han) [task:427978]
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis) [task:427978]
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg) [task:427978]
  - crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin) [task:427978]
  - crypto: stm32/crc32 - fix multi-instance (Nicolas Toromanoff) [task:157172]
  - crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (Nicolas Toromanoff) [task:157172]
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu) [task:427978]
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu) [task:427978]
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu) [task:427978]
  - drm/crtc: fix uninitialized variable use (Jani Nikula) [task:427978]
  - libsubcmd: Fix memory leak in uniq() (Ian Rogers) [task:427978]
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu) [task:427978]
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu) [task:427978]
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu) [task:427978]
  - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran) [task:427978]
  - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen) [task:164562]
  - PNP: ACPI: fix fortify warning (Dmitry Antipov) [task:427978]
  - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu) [task:427978]
  - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET) [task:427978]
  - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter) [task:427978]
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye) [task:427978]
  - ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi) [task:427978]
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao) [task:427978]
  - ext4: avoid trim error on fs with small groups (Jan Kara)
  - ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner) [task:427978]
  - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao) [task:427978]
  - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao) [task:427978]
  - kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson) [task:427978]
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) [task:448792] {CVE-2023-52996}
  - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Kuniyuki Iwashima) [task:447169] {CVE-2025-21865}
  - netfilter: allow exp not to be removed in nf_ct_find_expectation (Xin Long) [task:444898] {CVE-2023-52927}
  - mlxsw: spectrum: Guard against invalid local ports (Amit Cohen) [task:440543] {CVE-2022-49134}
  - mlxsw: spectrum: Protect driver from buggy firmware (Amit Cohen) [task:440543]
  - mlxsw: Verify the accessed index doesn't exceed the array length (Danielle Ratson) [task:440543]
  - sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima) [task:440762] {CVE-2022-49641}
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [task:429543] {CVE-2024-53180}
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [task:450256] {CVE-2025-21926}
  - udp: rehash on disconnect (Willem de Bruijn) [task:450256]
  - net: ipv4: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:450256]
  - udp: add missing rehash callback to udplite (Alexey Kodanev) [task:450256]
  - net: udp: prefer listeners bound to an address (Peter Oskolkov) [task:450256]
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das) [task:440546] {CVE-2022-49189}
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov) [task:450271] {CVE-2025-21898}
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov) [task:450247] {CVE-2025-21904}
  - gpio: rcar: Use raw_spinlock to protect register access (Niklas Söderlund) [task:450255] {CVE-2025-21912}
  - gpio: rcar: Optimize GPIO pin state read on R-Car Gen3 (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Implement gpio_chip.get_multiple() (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Rework hardware features handling (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Cache gpiochip_get_data() return value (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: select General Output Register to set output states (Vladimir Zapolskiy) [task:450255]
  - gpio: rcar: reference device instead of platform device (Vladimir Zapolskiy) [task:450255]
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku) [task:450260] {CVE-2025-21914}
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [task:450261] {CVE-2025-21971}
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich) [task:450244] {CVE-2025-21910}
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov) [task:450218] {CVE-2025-21948}
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea) [task:450259] {CVE-2025-21917}
  - vlan: enforce underlying device type (Oscar Maes) [task:450262] {CVE-2025-21920}
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm) [task:450276] {CVE-2025-21957}
  - scsi: qla1280: use lower_32_bits and upper_32_bits instead of reinventing them (Christoph Hellwig) [task:450276]
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov) [task:450266] {CVE-2025-21909}
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li) [task:450268] {CVE-2025-21934}
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet) [task:450248] {CVE-2025-21925}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu) [task:450254] {CVE-2025-21928}
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li) [task:450246] {CVE-2025-21935}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [task:450787] {CVE-2025-21993}
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [task:451120] {CVE-2025-21996}
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [task:451118] {CVE-2025-22007}
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen) [task:450270] {CVE-2025-21922}
  - net: atm: fix use after free in lec_send() (Dan Carpenter) [task:451119] {CVE-2025-22004}
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [task:450269] {CVE-2025-21959}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang) [task:450269]
  - hwrng: nomadik - keep clock enabled while hwrng is registered (Martin Kaiser) [task:440480]
  - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) [task:440408]
  - hwrng: nomadik - Change clk_disable to clk_disable_unprepare (Miaoqian Lin) [task:440408]
  - hwrng: cavium - fix NULL but dereferenced coccicheck error (Wan Jiabing) [task:440408] {CVE-2022-49177}
  - hwrng: cavium - Check health status while reading random data (Sunil Goutham) [task:440408]
  - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) [task:440408]
  - hwrng: n2-drv - fix typo (Stephen Rothwell) [task:440408]
  - hwrng: drivers - Use device-managed registration API (Chuhong Yuan) [task:440408]
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. (Kuniyuki Iwashima) [task:440570] {CVE-2022-49632}
  - kernel/resource: fix kfree() of bootmem memory again (Miaohe Lin) [task:440655] {CVE-2022-49190}
  - tee: optee: Fix supplicant wait loop (Sumit Garg) [task:448794] {CVE-2025-21871}
  - xfs: don't walk off the end of a directory data block (lei lu) [task:347099] {CVE-2024-41013}
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [task:346389] {CVE-2024-41042}
  - netfilter: nf_tables: allow loop termination for pending fatal signal (Florian Westphal) [task:346389]
  - netfilter: nftables: add loop check helper function (Pablo Neira Ayuso) [task:346389]
  - block: fix integer overflow in BLKSECDISCARD (Alexey Dobriyan) [task:376277] {CVE-2024-49994}
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [task:410407] {CVE-2024-56630}
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [task:410373] {CVE-2024-56650}
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [task:410369] {CVE-2024-56576}
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [task:410391] {CVE-2024-53227}
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [task:410423] {CVE-2024-56574}
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [task:410387] {CVE-2024-53172}
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [task:410471] {CVE-2024-56643}
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [task:412149] {CVE-2024-56748}
  - scsi: qedf: Print message during bailout conditions (Saurav Kashyap) [task:412149]
  - scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (Shyam Sundar) [task:412149]
  - scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (Saurav Kashyap) [task:412149]
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [task:412191] {CVE-2024-56700}
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov) [task:410389] {CVE-2024-56645}
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [task:410441] {CVE-2024-56634}
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski) [task:410441]
  - HID: wacom: fix when get product name maybe null pointer (WangYuli) [task:410433] {CVE-2024-56629}
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [task:410125] {CVE-2024-56670}
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [task:416337] {CVE-2024-56601}
  - arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [task:416531] {CVE-2024-50194}
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang) [task:416531]
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang) [task:416531]
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [task:417437] {CVE-2024-56767}
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [task:417435] {CVE-2024-56769}
  - mmc: jz4740: Apply DMA engine limits to maximum segment size (Aidan MacDonald) [task:441291] {CVE-2022-49522}
  - media: i2c: dw9714: add optional regulator support (Angus Ainslie) [task:440678] {CVE-2022-49528}
  - sysctl: Fix data races in proc_douintvec_minmax(). (Kuniyuki Iwashima) [task:440639] {CVE-2022-49640}
  - kernel/sysctl.c: define minmax conv functions in terms of non-minmax versions (Zev Weiss) [task:440639]
  - USB: core: Add routines for endpoint checks in old drivers (Alan Stern) [task:166857]
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich) [task:446878]
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel) [task:446878]
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun) [task:446878]
  - drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher) [task:446878]
  - mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng) [task:446878]
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum) [task:446878]
  - perf/core: Fix missing wakeup when waiting for context reference (Haifeng Xu) [task:446878]
  - fs/proc: fix softlockup in __read_vmcore (Rik van Riel) [task:446878]
  - media: dw2102: fix a potential buffer overflow (Mauro Carvalho Chehab) [task:446878]
  - media: mc: mark the media devnode as registered from the, start (Hans Verkuil) [task:446878]
  - media: dw2102: Don't translate i2c read into write (Michael Bunk) [task:446878]
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Ilya Maximets) [task:428511] {CVE-2025-21681}
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [task:429497] {CVE-2024-57946}
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun) [task:429497]
  - hrtimers: Handle CPU state correctly on hotplug (Koichiro Den) [task:431132] {CVE-2024-57951}
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia) [task:444123] {CVE-2025-21862}
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet) [task:425031] {CVE-2024-57903}
  - thermal/core: Fix memory leak in __thermal_cooling_device_register() (Yang Yingliang) [task:440493] {CVE-2022-49468}
  - Bluetooth: hci_event: Ignore multiple conn complete events (Soenke Huster) [task:440516] {CVE-2022-49138}
  - net/mlx5: Update the list of the PCI supported devices (Shani Shapp) [task:442032]
  - net/mlx5: Update the list of the PCI supported devices (Eran Ben Elisha) [task:442032]
  - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima) [task:440400] {CVE-2022-49580}
  - net: hns3: set port base vlan tbl_sta to false before removing old vlan (Guangbin Huang) [task:440448]
  - net: hns3: add vlan list lock to protect vlan list (Jian Shen) [task:440448] {CVE-2022-49182}
  - net: hns3: fix port base vlan add fail when concurrent with reset (Jian Shen) [task:440448]
  - net: hns3: split function hclge_update_port_base_vlan_cfg() (Jian Shen) [task:440448]
  - net: hns3: add 'QoS' support for port based VLAN configuration (Jian Shen) [task:440448]
  - net: hns3: remove unused parameter from hclge_set_vf_vlan_common() (Peng Li) [task:440448]
  - net: hns3: fix duplicate node in VLAN list (Guojia Liao) [task:440448]
  - mm: swapoff: shmem_unuse() stop eviction without igrab() (Hugh Dickins) [task:448022]
  - mm: swapoff: take notice of completion sooner (Hugh Dickins) [task:448022]
  - mm: swapoff: remove too limiting SWAP_UNUSE_MAX_TRIES (Hugh Dickins) [task:448022]
  - mm: swapoff: shmem_find_swap_entries() filter out other types (Hugh Dickins) [task:448022]
  - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) [task:448022]
  - mm: rid swapoff of quadratic complexity (Vineeth Remanan Pillai) [task:448022]
  - mm: refactor swap-in logic out of shmem_getpage_gfp (Vineeth Remanan Pillai) [task:448022]
  - clk: Add (devm_)clk_get_optional() functions (Phil Edworthy) [task:449849]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.57.v2101
changelog:
  - update changelog for incoming 4.19.90-23.57.v2101 (Zhengyuan Liu)
  - net: hso: fix NULL-deref on disconnect regression (Johan Hovold) [task:158827]
  - perf python: Convert tracepoint.py example to python3 (Tanu M) [task:488387, task:481449]
  - perf tools: Support Python 3.8+ in Makefile (Sam Lunt) [task:481449]
  - perf script python: Add Python3 support to tests/attr.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to export-to-sqlite.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to export-to-postgresql.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to intel-pt-events.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to event_analyzing_sample.py (Tony Jones) [task:481449]
  - perf script python: add Python3 support to check-perf-trace.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to futex-contention.py (Tony Jones) [task:481449]
  - perf script python: Remove mixed indentation (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to syscall-counts-by-pid.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to syscall-counts.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to stat-cpi.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to stackcollapse.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to sctop.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to powerpc-hcalls.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to net_dropmonitor.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to mem-phys-addr.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to failed-syscalls-by-pid.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to netdev-times.py (Tony Jones) [task:481449]
  - ext4: avoid resizing to a partial cluster size (Kiselev, Oleg) [task:482027] {CVE-2022-50020}
  - tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima) [task:440603] {CVE-2022-49597}
  - regulator: Fix lockdep warning resolving supplies (Mark Brown) [task:467671, task:467705]
  - regulator: core: avoid regulator_resolve_supply() race condition (David Collins) [task:467671, task:467705]
  - qede: confirm skb is allocated before using (Jamie Bainbridge) [task:162162, task:482311]
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet) [task:122626, task:460255]
  - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen) [task:122626, task:460255] {CVE-2022-49871}
  - md/raid5: fix oops during stripe resizing (Song Liu) [task:158034, task:477039]
  - xfs: fix an ABBA deadlock in xfs_rename (Darrick J. Wong) [task:57649]
  - xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename() (kaixuxia) [task:57649]
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) [task:164562, task:470711]
  - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) [task:164562]
  - PHYTIUM: PCI: Add ACS quirk for phytium root and switch ports (leixiang) [task:477923]
  - SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu) [task:441633]
  - SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu) [task:441633]
  - NFSv4: Fix second deadlock in nfs4_evict_inode() (Trond Myklebust) [task:441633]
  - NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() (Trond Myklebust) [task:441633]
  - net: stmmac: fix notifier registration (Aaro Koskinen) [bug:370375]
  - stmmac: debugfs entry name is not be changed when udev rename device name. (Jiping Ma) [task:166857]
  - scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)
  - scsi: iscsi: Add helper functions to manage iscsi_cls_conn (Wenchao Hao) [task:122038]
  - scsi: iscsi: Fix HW conn removal use after free (Mike Christie) [task:482545] {CVE-2022-50031}
  - scsi: libiscsi: Teardown iscsi_cls_conn gracefully (Wenchao Hao) [task:122038]
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() (Lixiaokeng)
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin) [task:482165] {CVE-2022-50093}
  - virtio-gpu: fix a missing check to avoid NULL dereference (Xiaomeng Tong) [task:481883] {CVE-2022-50181}
  - perf: Fix pmu_filter_match() (Peter Zijlstra) [task:464493]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:459566]
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng) [task:459566] {CVE-2025-22025}
  - nfsd: make nfsd4_run_cb a bool return function (Jeff Layton) [task:459566]
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [task:459623] {CVE-2025-22079}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [task:482067] {CVE-2025-38058}
  - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [task:482265] {CVE-2025-38075}
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [task:482035] {CVE-2025-38078}
  - Revert "virtio_net: enable napi_tx by default" (Tang Longjun) [task:476739]
  - media: dvb-core: Fix use-after-free on race condition at dvb_frontend (Hyunwoo Kim) [task:478283] {CVE-2022-45885}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [task:466609] {CVE-2025-37970}
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi) [task:441315] {CVE-2025-21811}
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) [task:426431] {CVE-2024-57912}
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) [task:426437] {CVE-2024-57911}
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) [task:426324] {CVE-2024-57908}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [task:419633] {CVE-2024-56598}
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [task:387577] {CVE-2024-50143}
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces (Chao Yu) [task:375569] {CVE-2024-49859}
  - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet) [task:460118] {CVE-2022-49765}
  - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (Wang Hai) [task:157172]
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) [task:164562]
  - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing) [task:460238] {CVE-2022-49924}
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:460254] {CVE-2025-23161}
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [task:466236] {CVE-2025-37968}
  - mm/gup: Remove enfornced COW mechanism (Peter Xu) [task:446992]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:460146] {CVE-2025-37756}
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) [task:466581] {CVE-2025-37942}
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc (Zhang Lixu) [task:461023]
  - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (Reka Norman) [task:461023] {CVE-2023-53039}
  - devm-helpers: Add resource managed version of work init (Matti Vaittinen) [task:461023]
  - devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc (Matti Vaittinen) [task:461023]
  - workqueue: Add resource managed version of delayed work init (Matti Vaittinen) [task:461023]
  - net: usb: lan78xx: Limit packet length to skb->len (Szymon Heidrich) [task:461084] {CVE-2023-53068}
  - neigh: fix ARP retransmit timer guard (Hangbin Liu) [task:470107]
  - neigh: support smaller retrans_time settting (Hangbin Liu) [task:470107]
  - net: link_watch: prevent starvation when processing linkwatch wq (Yunsheng Lin) [task:470107]
  - net: ena: Fix error handling in ena_init() (Yuan Can) [task:460204] {CVE-2022-49813}
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing) [task:460177] {CVE-2022-49923}
  - NFC: nxp-nci: remove unnecessary labels (wengjianfeng) [task:460177]
  - xfs: fix leaked dealloc blocks accounting (Shida Zhang) [task:467725]
  - btrfs: do not clean up repair bio if submit fails (Josef Bacik) [task:440526] {CVE-2022-49168}
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi) [task:440497] {CVE-2025-21721}
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi) [task:440497]
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi) [task:440497]
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [task:387559] {CVE-2024-50229}
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao (AceLan)) [task:450748] {CVE-2025-21992}
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (Nikolay Aleksandrov) [task:461063] {CVE-2023-53103}
  - bonding: Fix memory leak when changing bond type to Ethernet (Ido Schimmel) [task:461063]
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change (Nikolay Aleksandrov) [task:461063]
  - net: fix a compilation (xiaolinkui) [task:468687]
  - uprobes: Reject the shared zeropage in uprobe_write_opcode() (Tong Tiangen) [task:448833] {CVE-2025-21881}
  - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [task:471773] {CVE-2025-37995}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [task:429513] {CVE-2024-56589}
  - ibmvnic: Don't reference skb after sending to VIOS (Nick Child) [task:444126] {CVE-2025-21855}
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:462564] {CVE-2025-37879}
  - 9pnet: allow making incomplete read requests (Sergey Alirzaev) [task:462564]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:462406] {CVE-2025-37836}
  - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing) [task:460168] {CVE-2022-49799}
  - btrfs: use latest_dev in btrfs_show_devname (Anand Jain) [task:330554] {CVE-2021-47599}
  - btrfs: don't traverse into the seed devices in show_devname (Anand Jain) [task:157172]
  - btrfs: convert latest_bdev type to btrfs_device and rename (Anand Jain) [task:330554] {CVE-2021-47599}
  - fs: relax assertions on failure to encode file handles (Amir Goldstein) [task:429490] {CVE-2024-57924}
  - ovl: don't use a temp buf for encoding real fh (Amir Goldstein) [task:149468]
  - ovl: make sure that real fid is 32bit aligned in memory (Amir Goldstein) [task:149468]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:462440] {CVE-2025-37857}
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [task:459937] {CVE-2025-22086}
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich) [task:448793] {CVE-2025-21877}
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [task:410153] {CVE-2024-56637}
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:469817] {CVE-2024-57974}
  - udp: Remove unused parameter (exact_dif) (Tim Beale) [task:441338]
  - net: ipv6: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:441338]
  - net: udp6: prefer listeners bound to an address (Peter Oskolkov) [task:441338]
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [task:466598] {CVE-2025-37927}
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips) [task:164562]
  - xenbus: Use kref to track req lifetime (Jason Andryuk) [task:466603] {CVE-2025-37949}
  - xenbus: req->err should be updated before req->state (Dongli Zhang) [task:155707]
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (Murad Masimov) [task:440505] {CVE-2025-21792}
  - ax25: rcu protect dev->ax25_ptr (Eric Dumazet) [task:440765] {CVE-2025-21812}
  - ax25: Use kernel universal linked list to implement ax25_dev_list (Duoming Zhou) [task:440765]
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo) [task:442589] {CVE-2024-58072}
  - rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) [task:166857]
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel) [task:442589]
  - rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) [task:166857]
  - rtlwifi: rtl_pci: Fix memory leak when hardware init fails (Larry Finger) [task:166857]
  - rtlwifi: Fix errors in spacing in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Fix problems with block comments in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Remove CamelCase variables from base code (Larry Finger) [task:442589]
  - list: fix a data-race around ep->rdllist (Kuniyuki Iwashima) [task:440750] {CVE-2022-49443}
  - list: introduce list_is_head() helper and re-use it in list.h (Andy Shevchenko) [task:440750]
  - list: introduce list_for_each_continue() (Pavel Begunkov)
  - xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong) [task:464914]
  - xfs: set aside allocation btree blocks from block reservation (Brian Foster) [task:464914]
  - xfs: introduce in-core global counter of allocbt blocks (Brian Foster) [task:464914]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) [task:442641] {CVE-2024-58083}
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang) [task:459932] {CVE-2025-23136}
  - fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu) [task:448819] {CVE-2022-49741}
  - video: fbdev: don't print error message on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: intelfb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: s3c-fb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - qibfs: fix _another_ leak (Al Viro) [task:466584] {CVE-2025-37983}
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Wentao Liang) [task:466615] {CVE-2025-37990}
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:466597] {CVE-2025-37982}
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:460149] {CVE-2025-37765}
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:462069] {CVE-2025-37800}
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:462069]
  - driver core: bus: implement bus_get/put() without the private pointer (Greg Kroah-Hartman) [task:462069]
  - driver core: add local subsys_get and subsys_put functions (Greg Kroah-Hartman) [task:462069]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman) [task:462069]
  - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback (Wesley Cheng) [task:440766] {CVE-2022-49398}
  - tty: serial: fsl_lpuart: fix race on RX DMA shutdown (Alexander Sverdlin) [task:461247] {CVE-2023-53094}
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:460201] {CVE-2025-23140}
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:460209] {CVE-2025-37781}
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:462560] {CVE-2025-37878}
  - scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu) [task:440479] {CVE-2022-49118}
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang) [task:419353]
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens) [task:419353] {CVE-2024-56770}
  - net: netem: use a list in addition to rbtree (Peter Oskolkov) [task:419353]
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann) [task:439944] {CVE-2025-21823}
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann) [task:439944]
  - batman-adv: ELP - use wifi tx bitrate as fallback (René Treffer) [task:439944]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:466413] {CVE-2025-37989}
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner) [task:448841] {CVE-2023-52935}
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:462569] {CVE-2025-37883}
  - f2fs: fix to do sanity check on node blkaddr in truncate_node() (Chao Yu) [task:416339] {CVE-2024-56692}
  - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() (Chao Yu) [task:440555] {CVE-2022-49380}
  - f2fs: do not count ENOENT for error case (Jaegeuk Kim) [task:439941]
  - f2fs: avoid infinite loop to flush node pages (Jaegeuk Kim) [task:439941] {CVE-2022-49317}
  - f2fs: fix wrong condition check when failing metapage read (Jaegeuk Kim) [task:439941]
  - f2fs: avoid an infinite loop in f2fs_sync_dirty_inodes (Jaegeuk Kim) [task:439941]
  - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found (Weichao Guo) [task:439941]
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal) [task:440632] {CVE-2022-49120}
  - scsi: pm80xx: Fix command issue sizing (peter chang) [task:440632]
  - scsi: pm80xx: Squashed logging cleanup changes (peter chang) [task:440632]
  - btrfs: always report error in run_one_delayed_ref() (Qu Wenruo) [task:448850] {CVE-2022-49761}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:461022] {CVE-2025-37798}
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:461213] {CVE-2025-37757}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:461360] {CVE-2025-37797}
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:461966] {CVE-2025-37824}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia) [task:421045] {CVE-2024-53680}
  - f2fs: fix race in concurrent f2fs_stop_gc_thread (Long Li) [task:410149] {CVE-2024-53218}
  - f2fs: use spin_lock to avoid hang (Jaegeuk Kim) [task:440817] {CVE-2022-49169}
  - btrfs: do not double complete bio on errors during compressed reads (Josef Bacik) [task:440568] {CVE-2022-49167}
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana) [task:440409] {CVE-2025-21753}
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton) [task:441340]
  - net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton) [task:441340] {CVE-2022-49194}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [task:387641] {CVE-2024-50171}
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le) [task:434029] {CVE-2025-21702}
  - net_sched: sch_fifo: implement lockless __fifo_dump() (Eric Dumazet) [task:434029]
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer) [task:440550] {CVE-2025-21744}
  - netrom: check buffer length before accessing it (Ilya Shchipletsov) [task:425034] {CVE-2024-57802}
  - SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever) [task:439956] {CVE-2022-49065}
  - SUNRPC: Clean up request deferral tracepoints (Chuck Lever) [task:439956]
  - SUNRPC: Simplify defining common RPC trace events (Chuck Lever) [task:439956]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:460175] {CVE-2025-37749}
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) [task:460174] {CVE-2022-49845}
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:460161] {CVE-2025-37796}
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:460234] {CVE-2025-23163}
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:460144] {CVE-2025-23142}
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:460141] {CVE-2025-37789}
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [task:459581] {CVE-2025-22063}
  - atm: Fix NULL pointer dereference (Minjoong Kim) [task:459567] {CVE-2025-22018}
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [task:458462] {CVE-2025-38637}
  - f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim) [task:440776] {CVE-2022-49255}
  - ubifs: Fix to add refcount once page is set private (Zhihao Cheng) [task:439948] {CVE-2021-47635}
  - include/linux/pagemap.h: introduce attach/detach_page_private (Guoqing Jiang) [task:439948]
  - ext4: fix access to uninitialised lock in fc replay path (Luis Henriques (SUSE)) [task:376395] {CVE-2024-50014}
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov) [task:459565] {CVE-2025-22027}
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song) [task:461956] {CVE-2025-37807}
  - net: annotate races around sk->sk_bound_dev_if (Eric Dumazet) [task:439947] {CVE-2022-49420}
  - drm/scheduler: fix fence ref counting (Christian König) [task:460223] {CVE-2022-49829}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426896] {CVE-2025-21640}
  - xfs: fix freeing speculative preallocations for preallocated files (Christoph Hellwig) [task:449979]
  - xfs: update fork seq counter on data fork changes (Brian Foster) [task:449979]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.58.v2101
changelog:
  - net: hsr: Add VLAN support (WingMan Kwok) [task:534197]
  - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) [task:534199]
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [task:534195]
  - net: missing check virtio (Denis Arefev) [task:534195]
  - KABI: fix kabi (luoqing) [task:534195]
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn) [task:534195]
  - linux/virtio_net.h: Support USO offload in vnet header. (Andrew Melnychenko) [task:534195]
  - virtio_net: Do not pull payload in skb->head (Eric Dumazet) [task:534195]
  - net: accept UFOv6 packages in virtio_net_hdr_to_skb (Willem de Bruijn) [task:534195]
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies) [task:84718]
  - net: check if protocol extracted by virtio_net_hdr_set_protoi is correct (Balazs Nemeth) [task:534195]
  - net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet) [task:534195]
  - net: be more gentle about silly gso requests coming from user (Eric Dumazet) [task:84718]
  - net: check untrusted gso_size at kernel entry (Willem de Bruijn) [task:534195]
  - net: Introduce parse_protocol header_ops callback (Maxim Mikityanskiy) [task:158893]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.59.v2101
changelog:
  - virtio_net: Do not pull payload in skb->head (Eric Dumazet)
  - virtio_net: Add XDP meta data support (Yuya Kusakabe)
  - Revert "virtio_net: Do not pull payload in skb->head" (luoqing) [task:534195]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.60.v2101
changelog:
  - secondly update changelog for incoming 4.19.90-23.60.v2101 (Zhengyuan Liu)
  - Revert "scsi: drivers: base: Support atomic version of attribute_container_device_trigger" (lihao01) [task:542811]
  - Revert "ata: libata-transport: fix error handling in ata_tdev_add()" (lihao01) [task:542811]
  - Revert "scsi: drivers: base: Propagate errors through the transport component" (lihao01) [task:542811]
  - iopoll: Introduce read_poll_timeout_atomic macro (Kai-Heng Feng) [task:537643, task:532053]
  - tasks: Fix kabi broken for struct task_struct (Li Hua) [task:531161]
  - tasks, sched/core: RCUify the assignment of rq->curr (Eric W. Biederman) [task:531161]
  - tasks, sched/core: With a grace period after finish_task_switch(), remove unnecessary code (Eric W. Biederman) [task:531161]
  - tasks, sched/core: Ensure tasks are available for a grace period after leaving the runqueue (Eric W. Biederman) [task:531161]
  - tasks: Add a count of task RCU users (Eric W. Biederman) [task:531161]
  - fix kabi error of tpm_getcap and tpm2_calc_ordinal_duration (wangsong) [task:530851]
  - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li) [task:164562]
  - blkcg: Fix the compilation error. (cuitao) [task:530285, task:542209]
  - net: hsr: Fix potential use-after-free (YueHaibing) [task:164562]
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong) [task:164562]
  - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang) [task:164562]
  - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin) [task:164562]
  - sctp: fix a potential overflow in sctp_ifwdtsn_skip (Xin Long) [task:166857]
  - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa) [task:164562]
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie) [task:458998] {CVE-2025-22083}
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian) [task:164562]
  - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) [task:373027]
  - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan) [task:153627]
  - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp) [task:166857]
  - md/raid10: prevent soft lockup while flush writes (Yu Kuai) [task:371789]
  - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang) [task:164562]
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel) [task:164562]
  - watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun) [task:153627]
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) [task:371789]
  - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng) [task:164562]
  - pnode: terminate at peers of source (Christian Brauner) [task:164562]
  - chardev: fix error handling in cdev_device_add() (Yang Yingliang) [task:164562]
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) [task:371789]
  - cifs: Fix warning and UAF when destroy the MR list (Zhang Xiaoxu) [task:166857]
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin) [task:164562]
  - md: fix a crash in mempool_free (Mikulas Patocka) [task:164562]
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu) [task:164562]
  - md: fix resync softlockup when bitmap size is less than array size (Yu Kuai) [task:371789]
  - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) [task:371789]
  - md/bitmap: md_bitmap_get_counter returns wrong blocks (Zhao Heming) [task:158034]
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai) [task:166857]
  - sctp: check send stream number after wait_for_sndbuf (Xin Long) [task:166857]
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov) [task:166857]
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) [task:166857]
  - ext4: Fix function prototype mismatch for ext4_feat_ktype (Kees Cook) [task:164562]
  - ext4: fix WARNING in mb_find_extent (Ye Bin) [task:166857]
  - udp: Fix memory accounting leak. (Kuniyuki Iwashima) [task:459933] {CVE-2025-22058}
  - net: macb: call pm_runtime_put_sync on failure path (Claudiu Beznea) [task:532055, task:532053]
  - net: macb: Fix runtime PM refcounting (Andy Shevchenko) [task:532055, task:532053]
  - net: macb: Disable clocks once (Neil Mandir) [task:532055, task:532053]
  - net: macb: add function to disable all macb clocks (Claudiu Beznea) [task:532055, task:532053]
  - net: macb: fix wakeup test in runtime suspend/resume routines (Nicolas Ferre) [task:532055, task:532053]
  - net: macb: ensure interface is not suspended on at91rm9200 (Alexandre Belloni) [task:532055, task:532053]
  - net: macb: Add support for suspend/resume with full power down (Harini Katakam) [task:532055, task:532053]
  - net: macb: Add pm runtime support (Harini Katakam) [task:532055, task:532053]
  - net: macb: Support clock management for tsu_clk (Harini Katakam) [task:532055, task:532053]
  - net: macb: Check MDIO state before read/write and use timeouts (Harini Katakam) [task:537643, task:532053]
  - ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei) [task:461085] {CVE-2022-49892}
  - virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike) [task:536915]
  - tcp: Add sysctl to configure ephemeral port shuffle period for connect() (luoxuanqiang) [task:522905]
  - tcp: Add sysctl to control port randomization in __inet_hash_connect() (Xuanqiang Luo) [task:522905]
  - tcp: add small random increments to the source port (Willy Tarreau) [task:99634]
  - tcp: add some entropy in __inet_hash_connect() (Eric Dumazet) [task:99634]
  - tpm: Actually fail on TPM errors during "get random" (Kees Cook) [task:530851]
  - tpm: tpm1: rewrite tpm1_get_random() using tpm_buf structure (Tomas Winkler) [task:530851]
  - tpm: factor out tpm1_get_random into tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: move tpm_getcap to tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: move tpm1_pcr_extend to tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: factor out tpm_get_timeouts() (Tomas Winkler) [task:530851]
  - tpm: add tpm_calc_ordinal_duration() wrapper (Tomas Winkler) [task:530851]
  - tpm: factor out tpm 1.x duration calculation to tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: sort objects in the Makefile (Tomas Winkler) [task:530851]
  - tpm2: add new tpm2 commands according to TCG 1.36 (Tomas Winkler) [task:530851]
  - KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers) [task:532349] {CVE-2025-39823}
  - KVM: APIC: add helper func to remove duplicate code in kvm_pv_send_ipi (Miaohe Lin) [task:532349]
  - KVM: X86: Yield to IPI target if necessary (Wanpeng Li) [task:532349]
  - KVM: X86: Implement PV sched yield hypercall (Wanpeng Li) [task:532349]
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [task:532365] {CVE-2025-39828}
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [task:532365]
  - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin) [task:530285]
  - blkcg: Fix multiple bugs in blkcg_activate_policy() (Tejun Heo) [task:530285]
  - blkcg: pass @q and @blkcg into blkcg_pol_alloc_pd_fn() (Tejun Heo) [task:530285]
  - Revert "Revert "block, bfq: honor already-setup queue merges"" (Paolo Valente) [task:162162, task:440717] {CVE-2021-47646}
  - Revert "block, bfq: honor already-setup queue merges" (Jens Axboe) [task:162162, task:440717]
  - block, bfq: honor already-setup queue merges (Paolo Valente) [task:440717]
  - audit: bugfix for infinite loop when flush the hold queue (Cui GaoSheng) [task:507633]
  - audit: ensure userspace is penalized the same as the kernel when under pressure (Paul Moore) [task:507633]
  - audit: improve robustness of the audit queue handling (Paul Moore) [task:507633]
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [task:461960] {CVE-2025-37808}
  - crypto: null - Remove VLA usage of skcipher (Kees Cook) [task:461960]
  - crypto: skcipher - Set tfm in SYNC_SKCIPHER_REQUEST_ON_STACK (Herbert Xu) [task:461960]
  - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Herbert Xu) [task:158034]
  - crypto: skcipher - Introduce crypto_sync_skcipher (Kees Cook) [task:461960]
  - ext4: don't block for O_DIRECT if IOCB_NOWAIT is set (Jens Axboe) [task:539423]
  - seg6: Fix validation of nexthop addresses (Ido Schimmel) [task:497745] {CVE-2025-38310}
  - ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang) [task:460202] {CVE-2022-49823}
  - scsi: drivers: base: Propagate errors through the transport component (Gabriel Krisman Bertazi) [task:460310]
  - scsi: drivers: base: Support atomic version of attribute_container_device_trigger (Gabriel Krisman Bertazi) [task:460310]
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (Luiz Augusto von Dentz) [task:450217] {CVE-2025-21969}
  - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (James Smart) [task:482031] {CVE-2022-50030}
  - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [task:519717] {CVE-2025-38512}
  - netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [task:351433] {CVE-2022-48911}
  - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (Dan Carpenter) [task:520535]
  - iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [task:520535] {CVE-2025-38602}
  - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [task:466617] {CVE-2025-37909}
  - lan743x: fix endianness when accessing descriptors (Alexey Denisov) [task:466617]
  - lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck) [task:466617]
  - lan743x: remove redundant initialization of variable current_head_index (Colin Ian King) [task:466617]
  - lan743x: remove redundant assignment to variable rx_process_result (Colin Ian King) [task:466617]
  - scsi: qla2xxx: Fix premature hw access after PCI error (Quinn Tran) [task:149541]
  - scsi: qla2xxx: Complete command early within lock (Shreyas Deodhar) [task:352295] {CVE-2024-42287}
  - scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali) [task:149541]
  - md/bitmap: don't set sb values if can't pass sanity check (Heming Zhao) [task:162162]
  - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (Eric Dumazet) [task:162162]
  - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo) [task:164562]
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [task:534347, task:540417] {CVE-2025-39866}
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error (Jchao Sun) [task:534347, task:540417]
  - writeback: don't warn on an unregistered BDI in __mark_inode_dirty (Christoph Hellwig) [task:540417]
  - locking/qspinlock: use xchg with _mb in slowpath for arm64 (pengyu) [task:524633, task:526703, task:535495]
  - ext4: fix warning when submitting superblock in ext4_commit_super() (Zhang Yi) [task:539973]
  - Revert "ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list" (pengyu) [task:449973]
  - Revert "ext4: mballoc: Remove useless setting of ac_criteria" (pengyu) [task:449973]
  - Revert "ext4: fix rbtree traversal bug in ext4_mb_use_preallocated" (pengyu) [task:449973]
  - ext4: fix error code in ext4_commit_super (Fengnan Chang) [task:540417]
  - scsi: libsas: Abort all in-flight requests when device is gone (Jason Yan) [bug:408215]
  - ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [task:530217]
  - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) [task:491659] {CVE-2025-38112}
  - sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [task:532203] {CVE-2025-39812}
  - wifi: mac80211_hwsim: drop short frames (Johannes Berg) [task:532575] {CVE-2023-53321}
  - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua) [task:440742] {CVE-2022-49644}
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) [task:532803] {CVE-2023-53354}
  - modpost: fix off by one in is_executable_section() (Dan Carpenter) [task:534137] {CVE-2023-53397}
  - comedi: pcl812: Fix bit shift out of bounds (Ian Abbott) [task:519689] {CVE-2025-38530}
  - comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott) [task:519361] {CVE-2025-38529}
  - tee: fix NULL pointer dereference in tee_shm_put (Pei Xiao) [task:534351] {CVE-2025-39865}
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima) [task:532219] {CVE-2023-53204}
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao) [task:532833] {CVE-2022-50356}
  - KVM: SVM: Fix vgif feature not enabled (张浩) [task:532315]
  - driver: base: fix UAF when driver_attach failed (Schspa Shi) [task:440534] {CVE-2022-49385}
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko) [task:442357] {CVE-2024-58052}
  - drm/amdgpu: fix usage slab after free (Vitaly Prosyak) [task:429491] {CVE-2024-56551}
  - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again (shaoyunl) [task:225612] {CVE-2021-47551}
  - drm/amdkfd: don't use dqm lock during device reset/suspend/resume (Philip Yang) [task:225612]
  - drm/i915/selftests: fix subtraction overflow bug (Andrzej Hajda) [task:440726] {CVE-2022-49635}
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (Werner Sembach) [task:442591] {CVE-2025-21831}
  - x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 (Mario Limonciello) [task:442591]
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun) [task:530189] {CVE-2025-39751}
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Takashi Iwai) [task:429534] {CVE-2024-57893}
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) [task:532109] {CVE-2023-53220}
  - ipv6: sr: Fix MAC comparison to be constant-time (Eric Biggers) [task:527963] {CVE-2025-39702}
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (William Liu) [task:527995] {CVE-2025-39677}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Dan Carpenter) [task:530193]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [task:530193] {CVE-2025-39757}
  - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [task:520111] {CVE-2025-38539}
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [task:527509]
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [task:527383] {CVE-2025-38729}
  - wifi: mac80211: reject TDLS operations when station is not associated (Moon Hee Lee) [task:523365] {CVE-2025-38644}
  - srcu: Tighten cleanup_srcu_struct() GP checks (Paul E. McKenney) [task:440484] {CVE-2022-49651}
  - net: 9p: fix refcount leak in p9_read_work() error handling (Hangyu Hua) [task:482233] {CVE-2022-50114}
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [task:476201] {CVE-2025-37992}
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [task:471767] {CVE-2025-37998}
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (James Smart) [task:167824, task:441322] {CVE-2022-49535}
  - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug (K Prateek Nayak) [task:532209, task:534643]
  - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (Yong-Xuan Wang) [task:532209, task:534643] {CVE-2023-53254}
  - cacheinfo: Align checks in cache_shared_cpu_map_{setup,remove} for readability (Sudeep Holla) [task:532209, task:534643]
  - cacheinfo: Add helper to access any cache index for a given CPU (Sudeep Holla) [task:532209, task:534643]
  - drm/amdgpu: install stub fence into potential unused fence pointers (Lang Yu) [task:531789, task:534643] {CVE-2023-53248}
  - dma-buf: add dma_fence_get_stub (Christian König) [task:531789, task:534643]
  - udf: Fix uninitialized array access for some pathnames (Jan Kara) [task:373027]
  - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (Li Zhong) [task:532227, task:534643] {CVE-2022-50327}
  - netfilter: x_tables: fix percpu counter block leak on error path when creating new netns (Pavel Tikhomirov) [task:531791, task:534643] {CVE-2023-53200}
  - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau) [task:166857]
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang) [task:532165, task:534643] {CVE-2022-50246}
  - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida) [task:164562]
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev) [task:164562]
  - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) [task:366437] {CVE-2024-23196}
  - ALSA: hda: Manage concurrent reg access more properly (Takashi Iwai) [task:221568]
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [task:482019] {CVE-2025-38024}
  - IB/rxe: replace kvfree with vfree (Zhu Yanjun) [task:68842]
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis (Yu Kuai) [task:515911]
  - block, bfq: deschedule empty bfq_queues not referred by any process (Paolo Valente) [task:515911]
  - iavf: Fix reset error handling (Przemyslaw Patynowski) [task:482117] {CVE-2022-50053}
  - net/tls: Use RCU API to access tls_ctx->netdev (Maxim Mikityanskiy) [task:207215]
  - net/tls: Remove the context from the list in tls_device_down (Maxim Mikityanskiy) [task:207215]
  - tls: Fix context leak on tls_device_down (Maxim Mikityanskiy) [task:207215]
  - net/tls: Fix use-after-free after the TLS device goes down and up (Maxim Mikityanskiy) [task:207215] {CVE-2021-47131}
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU (Maxim Mikityanskiy) [task:207215]
  - ext4: fix use-after-free in ext4_rename_dir_prepare (Ye Bin) [task:162162, task:499367] {CVE-2022-49349}
  - Revert "ext4: allow directory holes" (Wang Yan) [task:499367]
  - Revert "ext4: fix use-after-free in ext4_rename_dir_prepare" (Wang Yan) [task:499367]
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [task:497317] {CVE-2025-38337}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [task:459580] {CVE-2025-22121}
  - ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin) [task:166857]
  - ext4: correct the misjudgment in ext4_iget_extra_inode (Baokun Li) [task:162162]
  - ext4: introduce ITAIL helper (Ye Bin) [task:459580]
  - ext4: improve xattr consistency checking and error reporting (Theodore Ts'o) [task:459580]
  - net: clear the dst when changing skb protocol (Jakub Kicinski) [task:492357] {CVE-2025-38192}
  - arp: use RCU protection in arp_xmit() (Eric Dumazet) [task:440668] {CVE-2025-21762}
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet) [task:441272] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Eric Dumazet) [task:441272, task:440668]
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko) [task:350517, task:440668]
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [task:476359] {CVE-2025-38004}
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [task:495865] {CVE-2025-38250}
  - Revert "scsi: lpfc: Fix link down processing to address NULL pointer dereference" (Wang Yan) [task:499367]
  - update changelog for incoming 4.19.90-23.60.v2101 (Zhengyuan Liu)
  - mm/slub: fix to return errno if kmalloc() fails (Chao Yu) [task:162162]
  - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (Rafael Mendonca) [task:149541]
  - net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida) [task:164562]
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) [task:164562]
  - nbd: fix race between timeout and normal completion (Ming Lei) [task:511239] {CVE-2024-49855}
  - netfilter: nf_tables: selective rule dump needs table to be specified (Pablo Neira Ayuso) [task:527275]
  - netfilter: nf_tables: Fix for endless loop when dumping ruleset (Phil Sutter) [task:527275]
  - netfilter: nf_tables: Speed up selective rule dumps (Phil Sutter) [task:527275]
  - config/x86: enable CONFIG_DRM_PHYTIUM (lihongtao) [task:522397]
  - ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu) [task:485647]
  - kprobes: Make local functions static (Masami Hiramatsu) [task:485647]
  - kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu) [task:485647]
  - kprobes: Remove NMI context check (Masami Hiramatsu) [task:485647]
  - sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - ia64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - tcp: also NULL skb->dev when copy was needed (Florian Westphal) [task:526817]
  - tcp: ensure skb->dev is NULL before leaving TCP stack (Eric Dumazet) [task:526817]
  - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [task:519707] {CVE-2025-38546}
  - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (Chao Yu) [task:520783] {CVE-2025-38578}
  - Remove sensitive words (Haofeng Li) [task:524133]
  - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [task:519365] {CVE-2025-38513}
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [task:503861] {CVE-2025-38352}
  - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [task:507017] {CVE-2025-38497}
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [task:523419] {CVE-2025-38618}
  - REDHAT: spec: Fix internal "File listed twice" errors (Prarit Bhargava) [task:506475]
  - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [task:520771] {CVE-2025-38553}
  - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [task:491981] {CVE-2025-38229}
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama) [task:491387] {CVE-2025-38099}
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama) [task:491387]
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz) [task:491397] {CVE-2025-38117}
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothoré) [task:491205] {CVE-2025-38126}
  - net: stmmac: Calculate CDC error only once (Kurt Kanzenbach) [task:491205]
  - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls (Holger Assmann) [task:491205]
  - net: stmmac: Fix signed/unsigned wreckage (Thomas Gleixner) [task:491205]
  - net: stmmac: add timestamp correction to rid CDC sync error (Voon Weifeng) [task:491205]
  - net: stmmac: Get correct timestamp values from XGMAC (Jose Abreu) [task:491205]
  - net: stmmac: fix ptp timestamping on Rx on gmac4 (Ilias Apalodimas) [task:491205]
  - net: stmmac: implement the SIOCGHWTSTAMP ioctl (Artem Panfilov) [task:491205]
  - panic: implement nmi_panic_self_stop function for KunPeng 920 (liqiang01) [task:515025]
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (Xiang Mei) [task:507039]
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [task:507039] {CVE-2025-38477}
  - btrfs: fix deadlock between quota enable and other quota operations (Filipe Manana) [task:510715, task:503849, task:463272]
  - KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov) [task:511433]
  - driver core: fix deadlock in __device_attach (Zhang Wensheng) [task:441300] {CVE-2022-49371}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [task:425040] {CVE-2024-57884}
  - xfs: push the AIL in xlog_grant_head_wake (Dave Chinner) [task:507733]
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng) [task:481813] {CVE-2022-50092}
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [task:491905] {CVE-2025-38204}
  - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit) [task:491311] {CVE-2025-38096}
  - sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [task:466415] {CVE-2025-37932}
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [task:466237] {CVE-2025-37911}
  - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao (AceLan)) [task:481741] {CVE-2022-50066}
  - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) [task:460278] {CVE-2022-49789}
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [task:481765] {CVE-2025-38066}
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [task:481989] {CVE-2025-38061}
  - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu) [task:490963] {CVE-2025-38163}
  - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [task:491933] {CVE-2025-38193}
  - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [task:505883] {CVE-2025-38458}
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [task:491917] {CVE-2025-38212}
  - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [task:507035] {CVE-2025-38495}
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [task:507031] {CVE-2025-38473}
  - usb: net: sierra: check for no status endpoint (Oliver Neukum) [task:507045] {CVE-2025-38474}
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [task:507019] {CVE-2025-38468}
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (Waiman Long) [task:482073] {CVE-2022-50103}
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [task:460185] {CVE-2025-37792}
  - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [task:505901] {CVE-2025-38386}
  - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [task:505937] {CVE-2025-38384}
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [task:507013] {CVE-2025-38494}
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (RD Babiera) [task:505909] {CVE-2025-38391}
  - perf: Fix sample vs do_exit() (Peter Zijlstra) [task:505889] {CVE-2025-38424}
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [task:497747] {CVE-2025-38320}
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [task:497283] {CVE-2025-38346}
  - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [task:505877] {CVE-2025-38460}
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [task:482127] {CVE-2025-38079}
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [task:482133] {CVE-2025-38034}
  - mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu) [task:461947] {CVE-2025-37834}
  - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [task:482039] {CVE-2025-38072}
  - nvdimm: Split label init out from the logic for getting config data (Alexander Duyck) [task:482039]
  - libnvdimm, dimm: Maximize label transfer size (Dan Williams) [task:482039]
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing) [task:466601] {CVE-2025-37980}
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin) [task:419629]
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [task:419629] {CVE-2024-56605}
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [task:488165] {CVE-2025-38090}
  - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) [task:491861] {CVE-2025-38174}
  - efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev) [task:448780] {CVE-2023-52976}
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin) [task:425037] {CVE-2024-57889}
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) [task:462582] {CVE-2025-37851}
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [task:462584] {CVE-2025-37881}
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [task:462586] {CVE-2025-37840}
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [task:462439] {CVE-2025-37858}
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [task:462443] {CVE-2025-37841}
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [task:462571] {CVE-2025-37862}
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [task:461958] {CVE-2025-37817}
  - fbcon: Make sure modelist not set on unregistered console (Kees Cook) [task:491975, task:495631] {CVE-2025-38198}
  - fbcon: Introduce wrapper for console->fb_info lookup (Daniel Vetter) [task:491975, task:495631]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [task:461959] {CVE-2025-37810}
  - staging: rtl8712: fix uninit-value in usb_read8() and friends (Wang Cheng) [task:441328] {CVE-2022-49301}
  - staging: rtl8712: usb_ops.c: Remove leading p from variable names (Nishka Dasgupta) [task:441328]
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) [task:463860] {CVE-2023-53146}
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) [task:466613] {CVE-2025-37892}
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [task:466608] {CVE-2025-37923}
  - net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen) [task:441324]
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen) [task:441324] {CVE-2022-49061}
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Ming-Hung Tsai) [task:390747] {CVE-2024-50280}
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [task:466477] {CVE-2025-37937}
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) [task:466616] {CVE-2025-37940}
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [task:461963] {CVE-2025-37829}
  - ext4: ignore xattrs past end (Bhupesh) [task:460186] {CVE-2025-37738}
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio) [task:458303] {CVE-2025-22022}
  - usb: xhci: move link chain bit quirk checks into one helper function. (Niklas Neronin) [task:458303]
  - xhci: Don't pass struct xhci_hcd pointer to xhci_link_seg() (Mathias Nyman) [task:458303]
  - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [task:505897] {CVE-2025-38459}
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (HarshaVardhana S A) [task:505907] {CVE-2025-38403}
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [task:460274] {CVE-2025-23158}
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [task:460239] {CVE-2025-23159}
  - reset: uniphier-glue: Fix possible null-ptr-deref (Hui Tang) [task:448822] {CVE-2022-49758}
  - reset: uniphier-glue: Use reset_control_bulk API (Philipp Zabel) [task:448822]
  - reset: uniphier-usb3: Rename to reset-uniphier-glue (Kunihiko Hayashi) [task:448822]
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() (Shin'ichiro Kawasaki) [task:439953] {CVE-2022-49711}
  - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [task:505893] {CVE-2025-38464}
  - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (Jianglei Nie) [task:482015] {CVE-2022-50138}
  - RDMA/qedr: Improve error logs for rdma_alloc_tid error return (Prabhakar Kushwaha) [task:482015]
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [task:491209] {CVE-2025-38115}
  - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet) [task:491257]
  - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [task:491257] {CVE-2025-38147}
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe) [task:491663] {CVE-2025-38094}
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang) [task:491937] {CVE-2025-38177}
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [task:460303] {CVE-2025-37794}
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [task:491963] {CVE-2025-38200}
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [task:491903] {CVE-2025-38190}
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [task:491983] {CVE-2025-38180}
  - net: atm: add lec_mutex (Eric Dumazet) [task:497319] {CVE-2025-38323}
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [task:497313] {CVE-2025-38285}
  - jfs: add check read-only before truncation in jfs_truncate_nolock() (Vasiliy Kovalev) [task:459936] {CVE-2024-58094}
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev) [task:460140] {CVE-2025-37782}
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [task:460236] {CVE-2025-37742}
  - jfs: remove unnecessary oom message (Zhen Lei) [task:460236]
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [task:460150] {CVE-2025-37741}
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [task:460300] {CVE-2025-37758}
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [task:460221] {CVE-2025-37780}
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [task:448967] {CVE-2025-21699}
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [task:425033] {CVE-2024-57892}
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi) [task:425033]
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [task:491953] {CVE-2025-38203}
  - xfs: fix xfs leaked delalloc blocks accounting p2 (Shida Zhang) [task:494391]
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori) [task:426329] {CVE-2024-57904}
  - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) [task:448817] {CVE-2023-52936}
  - irqdomain: Remove debugfs_file from struct irq_domain (Greg Kroah-Hartman) [task:448817]
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue) [task:444127] {CVE-2025-21859}
  - nilfs2: prevent use of deleted inode (Edward Adam Davis) [task:421043] {CVE-2024-53690}
  - fbdev: sisfb: Fix strbuf array overflow (Andrey Shumilin) [task:387561] {CVE-2024-50180}
  - iio: accel: mma8452: use the correct logic to get mma8452_data (Haibo Chen) [task:440788] {CVE-2022-49285}
  - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (Miaoqian Lin) [task:440488] {CVE-2022-49462}
  - drm/msm/a6xx: Rename a6xx_gmu_probe to a6xx_gmu_init (Sean Paul) [task:440488]
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [task:460184] {CVE-2025-23150}
  - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) [task:460298] {CVE-2022-49913}
  - Btrfs: preftree: use rb_first_cached (Liu Bo) [task:460298]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng) [task:459707] {CVE-2023-53034}
  - f2fs: fix to do sanity check on total_data_blocks (Chao Yu) [task:440482] {CVE-2022-49360}
  - bpf: Annotate bpf_long_memcpy with data_race (Daniel Borkmann) [task:494931] {CVE-2023-52521}
  - KVM: Don't null dereference ops->destroy (Alexey Kardashevskiy) [task:440631] {CVE-2022-49568}
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [task:495947] {CVE-2025-38249}
  - smb: client: Fix use-after-free in cifs_fill_dirent (Wang Zhaolong) [task:482229] {CVE-2025-38051}
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [task:495937] {CVE-2025-38245}
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [task:497753] {CVE-2025-38312}
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [task:497287] {CVE-2025-38324}
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen) [task:491657] {CVE-2025-38157}
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross) [task:482077] {CVE-2022-49989}
  - set linkdata NIC to y in x86, arm and loongarch (YANGANG) [task:449997]
  - LINKDATA: SXE: add support for linkdata sxe NIC (YANGANG) [task:449997]
  - ax25: Remove broken autobind (Murad Masimov) [task:459548] {CVE-2025-22109}
  - ibmvnic: Use kernel helpers for hex dumps (Nick Child) [task:459569] {CVE-2025-22104}
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [task:462579] {CVE-2025-37850}
  - ext4: fix OOB read when checking dotdot dir (Acs, Jakub) [task:458578] {CVE-2025-37785}
  - Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works (Tetsuo Handa) [task:481991]
  - Bluetooth: When HCI work queue is drained, only queue chained work (Schspa Shi) [task:481991] {CVE-2022-50166}
  - Bluetooth: Add ncmd=0 recovery handling (Manish Mandlik) [task:481991]
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [task:492663] {CVE-2025-38181}
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [task:492195] {CVE-2025-38184}
  - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [task:486337] {CVE-2025-38086}
  - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel) [task:461083] {CVE-2023-53081}
  - ext4: update s_journal_inum if it changes after journal replay (Baokun Li) [task:461218] {CVE-2023-53091}
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [task:462570] {CVE-2025-37839}
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie) [task:463324] {CVE-2022-21546}
  - sched/fair: Refill bandwidth before scaling (Huaixin Chang) [task:153627]
  - sfc: fix use after free when disabling sriov (Íñigo Huguet) [task:162162]
  - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet) [task:164562]
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn) [task:164562]
  - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [task:523421] {CVE-2025-38617}
  - net/packet: annotate accesses to po->bind (Eric Dumazet)
  - mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim) [task:169355]
  - usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua) [task:162162]
  - misc/uss720: fix memory leak in uss720_probe (Dongliang Mu) [task:158827]
  - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (Marek Vasut) [task:162162]
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal) [task:166857]
  - usb: dwc2: Fix memory leak in dwc2_hcd_init (Miaoqian Lin) [task:162162]
  - HID: elan: Fix potential double free in elan_input_configured (Miaoqian Lin) [task:162162]
  - HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati) [task:162162]
  - HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam) [task:160493]
  - PM: hibernate: defer device probing when resuming from hibernation (Tetsuo Handa) [task:162162]
  - cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao)
  - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (Mark Brown) [task:160493]
  - ASoC: max9759: fix underflow in speaker_gain_control_put() (Dan Carpenter) [task:160493]
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (Mark Brown) [task:160493]
  - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (Vincent Mailhol) [task:158034]
  - can: peak_usb: fix use after free bugs (Vincent Mailhol) [task:158034]
  - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) [task:371789]
  - wifi: mac80211: fix use-after-free in chanctx code (Johannes Berg) [task:162162]
  - can: peak_pci: peak_pci_remove(): fix UAF (Zheyu Ma) [task:160493]
  - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. (Dave Airlie) [task:162162]
  - drm/plane: Move range check for format_count earlier (Steven Price) [task:162162]
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (Xin Xiong) [task:162162]
  - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (Alexey Kodanev) [task:162162]
  - drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang) [task:162162]
  - drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang) [task:160493]
  - drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi) [task:158827]
  - drm/radeon: fix a possible null pointer dereference (Gong Yuanjun) [task:162162]
  - drm/radeon: add a force flush to delay work when radeon (Zhenneng Li) [task:162162]
  - drm/nouveau: fix off by one in BIOS boundary checking (Nick Lopez) [task:160493]
  - drm/amdgpu: Fix a use-after-free (xinhui pan) [task:158827]
  - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva) [task:158827]
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant) [task:162162]
  - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (Pavel Skripkin) [task:162162]
  - usb: f_fs: Fix use-after-free for epfile (Udipto Goswami) [task:160493]
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami) [task:164562]
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami) [task:164562]
  - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng) [task:158827]
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke) [task:162162]
  - usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang) [task:160493]
  - media: mxl111sf: change mutex_init() location (Pavel Skripkin) [task:160493]
  - media: pci: cx23885: Fix the error handling in cx23885_initdev() (Zheyu Ma) [task:162162]
  - media: xc2028: avoid use-after-free in load_firmware_cb() (Chi Zhiling) [task:219526]
  - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read (Sven Peter) [task:160493]
  - usb: fix various gadget panics on 10gbps cabling (Maciej Żenczykowski) [task:158827]
  - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS (Pavankumar Kondeti) [task:160493]
  - usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej Żenczykowski) [task:158827]
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern) [task:160493]
  - ASoC: ops: Fix bounds check for _sx controls (Mark Brown) [task:164562]
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (Mark Brown) [task:160493]
  - ASoC: rt5645: Fix errorenous cleanup order (Lin Ma) [task:162162]
  - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (Miaoqian Lin) [task:162162]
  - mtd: maps: Fix refcount leak in of_flash_probe_versatile (Miaoqian Lin) [task:162162]
  - mtd: maps: Fix refcount leak in ap_flash_init (Miaoqian Lin) [task:162162]
  - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu) [task:164562]
  - tracing/histograms: Fix memory leak problem (Zheng Yejian) [task:162162]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov) [bug:407309]
  - virtio_console: eliminate anonymous module_init & module_exit (Randy Dunlap) [task:162162]
  - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (Liu Zixian) [task:162162]
  - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (Zhou Qingyang) [task:162162]
  - ath9k_htc: fix uninit value bugs (Pavel Skripkin) [task:162162]
  - drm/amdkfd: Fix an illegal memory access (Qu Huang) [task:166857]
  - drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen) [task:162162]
  - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google)) [task:164562]
  - trace_events_hist: add check for return value of 'create_hist_field' (Natalia Petrova) [task:164562]
  - drm/virtio: Fix GEM handle creation UAF (Rob Clark) [task:164562]
  - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (David Collins) [task:162162]
  - vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel) [task:160493]
  - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld) [task:164562]
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng) [task:164562]
  - HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap) [task:158034]
  - extcon: Modify extcon device to be created after driver data is set (bumwoo lee) [task:162162]
  - extcon: Fix error handling in extcon_dev_register (Dinghao Liu) [task:158827]
  - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup (Miaoqian Lin) [task:162162]
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (Takashi Sakamoto) [task:162162]
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (Miaoqian Lin) [task:162162]
  - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (Zheyu Ma) [task:162162]
  - bpf, arm64: Clear prog->jited_len along prog->jited (Eric Dumazet) [task:162162]
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) [task:164562]
  - ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai) [task:162162]
  - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (Miaoqian Lin) [task:162162]
  - sfc: fix kernel panic when creating VF (Íñigo Huguet) [task:162162]
  - MIPS: smp: fill in sibling and core maps earlier (Alexander Lobakin) [task:162162]
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Alan Stern) [task:162162]
  - apparmor: Fix memleak in aa_simple_write_to_buffer() (Xiu Jianfeng) [task:162162]
  - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start (Liang He) [task:162162]
  - media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu) [task:162162]
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej Żenczykowski) [task:164562]
  - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above. (Lorenzo Colitti) [task:158034]
  - ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin) [task:166857]
  - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) [task:164562]
  - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) [task:164562]
  - tty: vt: initialize unicode screen buffer (Tetsuo Handa) [task:162162]
  - PM: core: keep irq flags in device_pm_check_callbacks() (Dmitry Baryshkov) [task:162162]
  - efi: fix NULL-deref in init error path (Johan Hovold) [task:164562]
  - thermal: int340x: fix memory leak in int3400_notify() (Chuansheng Liu) [task:162162]
  - usb: host: ohci-ppc-of: Fix refcount leak bug (Liang He) [task:162162]
  - HID: betop: check shape of output reports (Pietro Borrello) [task:164562]
  - HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman) [task:160493]
  - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (Miaoqian Lin) [task:162162]
  - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) [task:164562]
  - ALSA: pcm: oss: Limit the period size to 16MB (Takashi Iwai) [task:160493]
  - ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai) [task:158034]
  - ALSA: pcm: oss: Fix negative period/buffer sizes (Takashi Iwai) [task:160493]
  - ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai) [task:158034]
  - i2c: i801: Don't generate an interrupt on bus reset (Jean Delvare) [task:158827]
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) [task:164562]
  - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel) [task:164562]
  - xhci: Fix null pointer dereference when host dies (Mathias Nyman) [task:164562]
  - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) [task:164562]
  - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) [task:164562]
  - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Tasos Sahanidis) [task:330552]
  - USB: core: Make do_proc_control() and do_proc_bulk() killable (Alan Stern) [task:330552] {CVE-2021-47582}
  - USB: usbfs: Don't WARN about excessively large memory allocations (Alan Stern) [task:158827]
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) [task:328464] {CVE-2024-36959}
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) [task:164562]
  - ALSA: jack: Access input_dev under mutex (Amadeusz Sławiński) [task:162162]
  - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax) [task:164562]
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown) [task:164562]
  - drm/amd/pm: fix double free in si_parse_power_table() (Keita Suzuki) [task:162162]
  - sfc: error code if SRIOV cannot be disabled (Íñigo Huguet) [task:158827]
  - HID: elan: Fix memleak in elan_input_configured (Dinghao Liu) [task:157172]
  - can: dev: can_restart: fix use after free bug (Vincent Mailhol) [task:158034]
  - can: dev: can_restart(): post buffer from the right context (Alejandro Concepcion Rodriguez) [task:158034]
  - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (Jakub Sitnicki) [task:222089] {CVE-2023-52735}
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) [task:164562]
  - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) [task:164562]
  - nvmet: always initialize cqe.result (Daniel Wagner) [task:344611] {CVE-2024-41079}
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [task:376251] {CVE-2024-50033}
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet) [task:214140] {CVE-2024-26857}
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet) [task:214149] {CVE-2024-26882}
  - arm64: paravirt: Use RCU read locks to guard stolen_time (Prakruthi Deepak Heragu) [task:516941]
  - arm64: paravirt: Initialize steal time when cpu is online (Andrew Jones) [task:516941]
  - arm64: Retrieve stolen time as paravirtualized guest (Steven Price) [task:516941]
  - KVM: arm64: Provide VCPU attributes for stolen time (Steven Price) [task:516941]
  - KVM: Allow kvm_device_ops to be const (Steven Price) [task:516941]
  - KVM: arm64: Support stolen time reporting via shared structure (Steven Price) [task:516941]
  - KVM: Implement kvm_put_guest() (Steven Price) [task:516941]
  - KVM: arm64: Implement PV_TIME_FEATURES call (Steven Price) [task:516941]
  - KVM: arm/arm64: Factor out hypercall handling from PSCI code (Christoffer Dall) [task:516941]
  - KVM: arm64: Document PV-time interface (Steven Price) [task:516941]
  - gpio: prevent potential speculation leaks in gpio_device_get_desc() (Hagar Hemdan) [task:352677]
  - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) [task:491929] {CVE-2025-38230}
  - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp) [task:491929]
  - fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion) [task:491929]
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu) [task:491929, task:164562]
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [task:491929]
  - drm/qxl: fix UAF on handle creation (Wander Lairson Costa) [task:346813] {CVE-2023-39198}
  - mm/slub: add missing TID updates on slab deactivation (Jann Horn) [task:506635]
  - crypto: hisilicon/sec - don't sleep when in softirq (Zhengchao Shao) [task:481943] {CVE-2022-50171}
  - crypto: hisilicon - add CRYPTO_TFM_REQ_MAY_BACKLOG flag judge in sec_process() (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: modify driver to adapt dm-crypt (Yu'an Wang) [bug:122239]
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [task:419359] {CVE-2024-50199}
  - driver core: add device probe log helper (Andrzej Hajda) [task:497119, task:508725]
  - bpf: Fix a data-race around bpf_jit_limit. (Kuniyuki Iwashima) [task:482243] {CVE-2022-49967}
  - set linkdata ps3/ps3stor to m in x86 and arm (Cao Guanghui) [task:449995]
  - LINKDATA: ps3/ps3stor: update driver support for linkdata (liujie) [task:449995]
  - security/lsm: Fix missing selinux file type (mengdehui) [task:506521]
  - driver/tpm: fix NULL err when creat vtpm (mengdehui) [task:519155]
  - selinux: Add boundary check in put_entry() (Xiu Jianfeng) [task:482227] {CVE-2022-50200}
  - genirq/affinity: Improve __irq_build_affinity_masks() (Ming Lei) [bug:341996, bug:350695]
  - genirq/affinity: Pass first vector to __irq_build_affinity_masks() (Ming Lei) [task:157536]
  - genirq/affinity: Move two stage affinity spreading into a helper function (Ming Lei) [task:157536]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [task:491897] {CVE-2025-38103}
  - HID: hyperv: Correctly access fields declared as __le16 (Michael Kelley) [task:491897]
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong) [task:489411]
  - ext4: fix use-after-free in ext4_rename_dir_prepare (Ye Bin) [task:162162, task:499367] {CVE-2022-49349}
  - ext4: allow directory holes (Theodore Ts'o) [task:499367]
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) [task:460250] {CVE-2022-49925}
  - ip: Fix data-races around sysctl_ip_prot_sock. (Kuniyuki Iwashima) [task:440771] {CVE-2022-49578}
  - net: port < inet_prot_sock(net) --> inet_port_requires_bind_service(net, port) (Maciej Żenczykowski) [task:440771]
  - fs: add a new SB_I_NOUMASK flag (Jeff Layton) [task:438543, task:442990]
  - padata: Fix refcnt handling in padata_free_shell() (WangJinchao) [task:181879, task:499367] {CVE-2023-52854}
  - crypto: pcrypt - Avoid deadlock by using per-instance padata queues (Herbert Xu) [task:160493]
  - padata: unbind parallel jobs from specific CPUs (Daniel Jordan) [task:160493]
  - padata: use separate workqueues for parallel and serial work (Daniel Jordan) [task:160493]
  - padata, pcrypt: take CPU hotplug lock internally in padata_alloc_possible (Daniel Jordan) [task:160493]
  - crypto: pcrypt - remove padata cpumask notifier (Daniel Jordan) [task:160493]
  - crypto: pcrypt - Fix user-after-free on module unload (Herbert Xu) [task:153627]
  - padata: make padata_do_parallel find alternate callback CPU (Daniel Jordan) [task:160493]
  - padata: allocate workqueue internally (Daniel Jordan) [task:160493]
  - crypto/pcrypt: Replace synchronize_rcu_bh() with synchronize_rcu() (Paul E. McKenney) [task:160493]
  - scsi: lpfc: Fix link down processing to address NULL pointer dereference (James Smart) [task:167824, task:499367] {CVE-2021-47183}
  - net: fix geneve_opt length integer overflow (Lin Ma) [task:458450] {CVE-2025-22055}
  - ice: always check VF VSI pointer values (Jacob Keller) [task:440513] {CVE-2022-49516}
  - ice: Add helper function to get the VF's VSI (Brett Creeley) [task:162874, task:161899]
  - net: hns3: fix incorrect components info of ethtool --reset command (Jie Wang) [bug:367889]
  - net: hns3: add support for triggering reset by ethtool (Yufeng Mo) [bug:367889]
  - net: hns3: add device version to replace pci revision (Guangbin Huang) [task:68842]
  - net/mlx5: Fix steering rules cleanup (Lama Kayal) [task:461036] {CVE-2023-53079}
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:440591]
  - net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila) [task:440591] {CVE-2024-57996}
  - net_sched: sch_sfq: handle bigger packets (Eric Dumazet) [task:440591]
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (GONG Ruiqi) [task:491959] {CVE-2025-38213}
  - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() (Bart Van Assche) [task:440716] {CVE-2022-49720}
  - nvme-rdma: fix possible use-after-free in transport error_recovery work (Sagi Grimberg) [task:162162, task:525023]
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [task:219458] {CVE-2024-26585}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.61.v2101
changelog:
  - update changelog for incoming 4.19.90-23.61.v2101 (Zhengyuan Liu)
  - be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev) [task:162162]
  - drbd: use after free in drbd_create_device() (Dan Carpenter) [task:164562]
  - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang) [task:164562]
  - vt: Clear selection before changing the font (Helge Deller) [task:162162]
  - tracing: Fix the missing smp_store_release issue (chenyuan) [task:535437]
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Yuan Chen) [task:546811] {CVE-2025-40042}
  - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz) [task:164562]
  - netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)
  - crypto: seqiv - Handle EBUSY correctly (Herbert Xu) [task:166857]
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui) [task:164562]
  - NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)
  - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (Lu Wei) [task:162162]
  - regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang) [task:160493]
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) [task:182920]
  - ext4: fix possible UAF when remounting r/o a mmp-protected file system (Theodore Ts'o)
  - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [task:158827]
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Teng Qi) [task:160493]
  - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() (Zhou Qingyang) [task:160493]
  - watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei) [task:158827]
  - phylib: fix potential use-after-free (Marek Behún) [task:160493]
  - igb: Fix use-after-free error during reset (Vinicius Costa Gomes) [task:158827]
  - net/sched: act_skbmod: Skip non-Ethernet packets (Peilin Ye)
  - net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)
  - net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)
  - kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini) [task:158827]
  - net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo)
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng) [task:166857]
  - ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy) [task:166857]
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test (Sreekanth Reddy) [task:160493]
  - nvme-rdma: destroy cm id before destroy qp to avoid use after free (Ruozhu Li)
  - nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (Chao Leng)
  - proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand)
  - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) [task:164562]
  - bfq: fix use-after-free in bfq_dispatch_request (Zhang Wensheng)
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) [task:164562]
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li) [task:166857]
  - cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli) [task:162162]
  - block, bfq: don't move oom_bfqq (Yu Kuai)
  - block, bfq: move forward the getting of an extra ref in bfq_bfqq_move (Paolo Valente)
  - block, bfq: get extra ref to prevent a queue from being freed during a group move (Paolo Valente)
  - netfilter: fix use-after-free in __nf_register_net_hook() (Eric Dumazet) [task:162162]
  - net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov) [task:162162]
  - igb: Do not free q_vector unless new one was allocated (Kees Cook) [task:164562]
  - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko) [task:164562]
  - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [task:164562]
  - ceph: do not update snapshot context when there is no new snapshot (Xiubo Li) [task:164562]
  - nvme: fix a possible use-after-free in controller reset during load (Sagi Grimberg) [task:162162]
  - drivers:md:fix a potential use-after-free bug (Wentao_Liang) [task:162162]
  - dm raid: fix address sanitizer warning in raid_resume (Mikulas Patocka) [task:162162]
  - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (Rafael J. Wysocki) [task:162162]
  - dm raid: fix address sanitizer warning in raid_status (Mikulas Patocka) [task:162162]
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (Jisoo Jang) [task:166857]
  - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) [task:166857]
  - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin) [task:164562]
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant) [task:162162]
  - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich) [task:164562]
  - dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen) [task:162162]
  - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) [task:164562]
  - fs: prevent out-of-bounds array speculation when closing a file descriptor (Theodore Ts'o) [task:166857]
  - nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal) [task:166857]
  - net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang) [task:162162]
  - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit) [task:164562]
  - dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka) [task:162162]
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) [task:164562]
  - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao) [task:164562]
  - mm/memory.c: skip spurious TLB flush for retried page fault (Yang Shi) [task:572449]
  - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" (Hector Martin) [task:166857]
  - wifi: cfg80211: Fix use after free for wext (Alexander Wetzel) [task:166857]
  - tun: Fix memory leak for detached NAPI queue. (Kuniyuki Iwashima) [task:539057] {CVE-2023-53685}
  - net: tun: rebuild error handling in tun_get_user (Chuang Wang) [task:539057]
  - cifs: fix double free race when mount fails in cifs_get_root() (Ronnie Sahlberg) [task:162162]
  - media: rc: fix races with imon_disconnect() (Larshin Sergey) [task:542879] {CVE-2025-39993}
  - media: imon: reorganize serialization (Tetsuo Handa) [task:542879]
  - CONFIG_GPIO_PHYTIUM_PCI=m (Wang Yan) [bug:417541]
  - Revert "gpio: add support for gpio on ft-2000+ based on ACPI" (zhouyuhang) [bug:417541]
  - PHYTIUM: gpio: phytium: Add Phytium GPIO driver (zhouyuhang) [bug:417541]
  - gpio/phytium: solve can't detect the gpio rising edge interrupt (songxiebing) [task:159076]
  - PHYTIUM: gpio: Support for Phytium GPIO controller behind PCI (Riwen Lu) [task:159076]
  - xfs: dump log about filesystem when allocation failed (Chi Zhiling) [task:540343]
  - xfs: use XFS_ALLOCTYPE_START_BNO in xfs_bmap_extents_to_btree (Chi Zhiling) [task:540343]
  - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (Xuanqiang Luo) [task:524251]
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Xuanqiang Luo) [task:524251]
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Xuanqiang Luo) [task:524251]
  - net: tcp: un-pin the tw_timer (Florian Westphal) [task:524251]
  - net: tcp/dccp: prepare for tw_timer un-pinning (Valentin Schneider) [task:524251]
  - ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [task:520773] {CVE-2025-38572}
  - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) [task:532105] {CVE-2023-53322}
  - e1000e: fix heap overflow in e1000_set_eeprom (Vitaly Lifshits) [task:539845] {CVE-2025-39898}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran) [task:542893] {CVE-2025-39998}
  - i40e: add max boundary check for VF filters (Lukasz Czapnik) [task:542889] {CVE-2025-39968}
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [task:505935] {CVE-2025-38457}
  - net: sched: simplify the qdisc_leaf code (Tonghao Zhang) [task:505935]
  - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Haein Lee) [task:567267] {CVE-2025-40275}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) [task:508235] {CVE-2025-38498}
  - pstore/ram: Check start of empty przs during init (Enlin Mu) [task:532113] {CVE-2023-53331}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [task:532215] {CVE-2025-39817}
  - HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [task:532169] {CVE-2025-39824}
  - sched/fair: Don't balance task to its current running CPU (Yicong Yang) [task:531901] {CVE-2023-53215}
  - jfs: truncate good inode pages when hard link is 0 (Lizhi Xu) [task:530221] {CVE-2025-39743}
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [task:527961] {CVE-2025-39730}
  - sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [task:527687] {CVE-2025-38718}
  - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [task:505915] {CVE-2025-38445}
  - be2net: pass wrb_params in case of OS2BMC (Andrey Vatoropin) [task:566439] {CVE-2025-40264}
  - sctp: avoid NULL dereference when chunk data buffer is missing (Alexey Simakov) [task:566441] {CVE-2025-40240}
  - PHYTIUM: drm/phytium: Avoid NULL PTR issue when setting gamma (YuDa) [task:562451]
  - PHYTIUM: drm: Phytium: Add DC driver module_device_table (Liu Tianyu) [task:562451]
  - PHYTIUM: drm/phytium: Bugfix lane count parameter can't be set problem (WangHao) [task:562451]
  - PHYTIUM: drm/phytium: read EDID in bmc mode (WangHao) [task:562451]
  - PHITIUM: drm/phytium: Enable dither function (YuDa) [task:562451]
  - PHYTIUM: drm/phytium: Fix gpio resource release logic (YuDa) [task:562451]
  - PHYTIUM: drm/phytium: Change the maximum resolution supported by pe220x (YuDa) [task:550747]
  - OPENEULER: notifiers: Add oops check in blocking_notifier_call_chain() (Yi Yang) [task:551737]
  - OPENEULER: PCI/sysfs: Prohibit unaligned access to I/O port on non-x86 (Yongqiang Liu) [task:551727]
  - Revert "kernel version changelog generation and normalization script" (Qingshuang Fu) [task:556805]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (Takashi Iwai) [task:554289] {CVE-2025-40154}
  - kernel version changelog generation and normalization script (Qingshuang Fu) [task:543713]
  - xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster) [task:536187]
  - fs: quota: create dedicated workqueue for quota_release_work (Shashank A P) [task:547337]
  - qed: Don't collect too many protection override GRC elements (Jamie Bainbridge) [task:539015] {CVE-2025-39949}
  - wifi: mt7601u: fix an integer underflow (Jisoo Jang) [task:539337] {CVE-2023-53679}
  - mt7601u: do not use WARN_ON in the datapath (Lorenzo Bianconi) [task:539337]
  - txgbe: update release note to 1.3.6.5 (linglingzhang) [task:523317]
  - txgbe: fix: delay free buffer cause ptp timeout (duanqiangwen) [task:523317]
  - txgbe: FIX: fix compile error (linyuexie) [task:523317]
  - txgbe: fix: alloc rx skb failed may cause page refcount abnormal (duanqiangwen) [task:523317]
  - txgbe: FIX: fix may calltrace when XDP_TX (linyuexie) [task:523317]
  - txgbe: fix: solve problems about smmu event 0x10 and packet data being tampered with on kunpeng920 (linglingzhang) [task:523317]
  - txgbe: set version 1.3.6.4 (juxiahe) [task:523317]
  - txgbe: FIX: fix calltrace out of range after repeatly unbind and bind (Linyue Xie) [task:523317]
  - txgbe: feat: VF receive all VLAN tags in all-multicast mode (Jiawen Wu) [task:523317]
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) [task:460243] {CVE-2025-37739}
  - f2fs: lost matching-pair of trace in f2fs_truncate_inode_blocks (Yubo Feng) [task:460243]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Eric Dumazet) [task:440728] {CVE-2025-21759}
  - Revert "Mucse: rnp: never use err_handler avoid os crash when aer error recover" (YANGANG) [task:562563]
  - SUNRPC: prevent port reuse on transports which don't request it. (NeilBrown) [task:566683]
  - NFSv4.1: Don't rebind to the same source port when reconnecting to the server (zhangguodong) [task:566683]
  - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (Justin Tee) [task:532391] {CVE-2023-53282}
  - i40e: fix input validation logic for action_meta (Lukasz Czapnik) [task:542887] {CVE-2025-39970}
  - i40e: Fix filter input checks to prevent config with invalid values (Sudheer Mogilappagari) [task:542887]
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [task:476217] {CVE-2025-38000}
  - net: phy: Fix "link partner" information disappear issue (Yonglong Liu) [task:502961]
  - net: phy: fix race in genphy_update_link (Heiner Kallweit) [task:502961]
  - net: phy: fix setting autoneg_complete in genphy_update_link (Heiner Kallweit) [task:502961]
  - net: phy: don't double-read link status register if link is up (Heiner Kallweit) [task:502961]
  - net: phy: fix autoneg mismatch case in genphy_read_status (Heiner Kallweit) [task:502961]
  - net: phy: avoid unneeded MDIO reads in genphy_read_status (Heiner Kallweit) [task:502961]
  - net: tighten bad gso csum offset check in virtio_net_hdr (Willem de Bruijn) [task:541407]
  - scsi: qla2xxx: Fix crash during module load unload test (Arun Easi) [task:149541, task:441336]
  - ocfs2: fix a deadlock when commit trans (Joseph Qi) [task:353893]
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [task:353893] {CVE-2021-47493}
  - Revert "jbd2: Make state lock a spinlock" (liubaolin) [task:429083]
  - Revert "ocfs2: fix race between searching chunks and release journal_head from buffer_head" (liubaolin) [task:429083]
  - Revert "ocfs2: fix a deadlock when commit trans" (liubaolin) [task:429083]
  - net: bridge: use DEV_STATS_INC() (Eric Dumazet) [task:207281] {CVE-2023-52578}
  - block, bfq: don't break merge chain in bfq_split_bfqq() (Yu Kuai) [task:515911]
  - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (Yu Kuai) [task:515911]
  - blk-cgroup: dropping parent refcount after pd_free_fn() is done (Yu Kuai) [task:515911]
  - blkcg: blkcg_activate_policy() should initialize ancestors first (Tejun Heo) [task:515911]
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang) [task:539351] {CVE-2022-50551}
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang) [task:448783] {CVE-2022-49740}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.62.v2101
changelog:
  - update changelog for incoming 4.19.90-23.62.v2101 (Zhengyuan Liu)
  - iommu/amd: Fix potential @entry null deref (Joao Martins) [task:457728]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit) [task:457728]
  - um: Fix out-of-bounds read in LDT setup (Vincent Whitchurch) [task:162162]
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang) [task:164562]
  - tracing: Fix potential double free in create_var_ref() (Keita Suzuki) [task:162162]
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) [task:164562]
  - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix (Dan Carpenter) [task:162162]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.63.v2101
changelog:
  - net: ip: always refragment ip defragmented packets (Florian Westphal) [task:604407]
  - update changelog for incoming 4.19.90-23.63.v2101 (Zhengyuan Liu)
  - OPENEULER: net: Add Huawei Intelligent Network Card Driver (zhoubin) [task:544303]
  - scsi: iscsi: Fix conn use after free during resets (Mike Christie)
  - scsi: libiscsi: fix task hung when iscsid deamon exited (Wu Bo)
  - net: Fix data-races around sysctl_[rw]mem(_offset)?. (Kuniyuki Iwashima) [task:581109]
  - scsi/ps3: Fix compile error for high version gcc (Bing Huang) [task:588907]
  - net/mlx5: Prevent high-rate FW commands from populating all slots (Tariq Toukan) [task:583189]
  - block: Fix wrong offset in bio_truncate() (OGAWA Hirofumi) [task:183224]
  - fs: move guard_bio_eod() after bio_set_op_attrs (Ming Lei) [task:183224]
  - block: add bio_truncate to fix guard_bio_eod (Ming Lei) [task:183224]
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei) [task:578201] {CVE-2022-50865}
  - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet) [task:578201]
  - tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet) [task:578201]
  - perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [task:520585] {CVE-2025-38565}
  - comedi: das16m1: Fix bit shift out of bounds (Ian Abbott) [task:507041] {CVE-2025-38483}
  - fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [task:527973] {CVE-2025-39691}
  - spec:Add Obsoletes version restrictions to kernel-headers (lihaofeng) [task:591349]
  - i40e: remove read access to debugfs files (Jacob Keller) [task:552823] {CVE-2025-39901}
  - i40e: remove debugfs tx_timeout support (Lihong Yang) [task:62834]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima) [task:540117] {CVE-2025-39955}
  - block: blkcg: avoid extending blkcg_gq to preserve kABI (chengkaitao) [task:575765]
  - block: avoid calling blkg_free() in atomic context (Ming Lei) [task:575765]
  - team: Move team device type change at the end of team_port_add (Nikola Z. Ivanov) [task:575753] {CVE-2025-68340}
  - net: team: Unsync device addresses on ndo_stop (Benjamin Poirier) [task:162162]
  - MUCSE: rnpvf: fix __udivdi3 error in 32-bit os (Yibo Dong) [task:152734]
  - MUCSE: rnp/rnpm: Fixed iperf interrupt traffic and low netperf performance (Yibo Dong) [bug:164862]
  - MUCSE: rnpm: fix bug in self diagnostic test by "ethtool -t". (Yibo Dong) [bug:165538]
  - MUCSE: rnp: fix bug in self diagnostic test by "ethtool -t". (Yibo Dong) [bug:165538]
  - MUCSE: rnpm: Add Mucse rnpm PCIe driver support (Yibo Dong) [task:121494]
  - MUCSE: rnpvf: Add Mucse rnpvf PCIe driver support (Yibo Dong) [task:121494]
  - MUCSE: rnp: Add Mucse rnp PCIe driver support (Yibo Dong) [task:121494]
  - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian) [task:576891] {CVE-2023-53995}
  - net: ipv4: remove erroneous advancement of list pointer (Florian Westphal) [task:358305]
  - net: ipv4: fix infinite loop on secondary addr promotion (Florian Westphal) [task:358305]
  - plip: avoid rcu debug splat (Florian Westphal) [task:358305]
  - net: ipv4: provide __rcu annotation for ifa_list (Florian Westphal) [task:358305]
  - drivers: use in_dev_for_each_ifa_rtnl/rcu (Florian Westphal) [task:358305]
  - net: use new in_dev_ifa iterators (Florian Westphal) [task:358305]
  - devinet: use in_dev_for_each_ifa_rcu in more places (Florian Westphal) [task:358305]
  - netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [task:574473]
  - netfilter: conntrack: fix infinite loop on rmmod (Florian Westphal) [task:574473]
  - netfilter: conntrack: allow insertion of clashing entries (Florian Westphal) [task:48072, task:574473]
  - netfilter: conntrack: split resolve_clash function (Florian Westphal) [task:48072, task:574473]
  - netfilter: conntrack: place confirm-bit setting in a helper (Florian Westphal) [task:48072, task:574473]
  - netfilter: conntrack: remove two args from resolve_clash (Florian Westphal) [task:48072, task:574473]
  - netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash (Florian Westphal) [task:48072, task:574473]
  - net: ensure correct skb->tstamp in various fragmenters (Eric Dumazet) [task:574473]
  - netfilter: never get/set skb->tstamp (Florian Westphal) [task:48072, task:574473]
  - cifs: return errors during session setup during reconnects (Shyam Prasad N) [task:162162, task:562209]
  - cifs: fail i/o on soft mounts if sessionsetup errors out (Ronnie Sahlberg) [task:153627, task:562209]
  - dm: Fix inaccurate iostat statistics that occur when I/O requests are split (zhanggenjian) [task:560365]
  - mtk-sd: reset host->mrq on prepare_data() error (Sergey Senozhatsky) [task:505919]
  - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu (Google)) [task:505919] {CVE-2025-38401}
  - mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() (Yue Hu) [task:505919]
  - mmc: mediatek: fix SDIO IRQ detection issue (jjian zhou) [task:505919]
  - mmc: bcm2835: Drop pointer to mmc_host from bcm2835_host (Lukas Wunner) [task:505919]
  - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (Minsuk Kang) [task:577645] {CVE-2022-50881}
  - ath9k: Fix typo in function name (Pavel Machek) [task:577645]
  - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (Qiujun Huang) [task:157172]
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [task:330540] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Bob Peterson) [task:330540]
  - gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [task:160493]
  - gfs2: Don't skip dlm unlock if glock has an lvb (Bob Peterson) [task:158034]
  - mm/hugetlb: add mempolicy check in the reservation routine (Muchun Song) [task:595137]
  - xfs: Retry allocating space in xfs_bmap_extents_to_btree (Chi Zhiling) [task:566335, task:587243, task:589957, task:593187, task:594873, task:595621]
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (Ilya Dryomov) [task:590125] {CVE-2026-22990}
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Will Rosenberg) [task:589013] {CVE-2025-71085}
  - sfc: complete the next packet when we receive a timestamp (Tom Zhao) [task:582061]
  - OPENEULER: livepatch: support for super-long symbol repositioning (caixiaomeng 00662745) [task:479611]
  - netdevsim: fix a race issue related to the operation on bpf_bound_progs list (Yun Lu) [task:583035]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (Ilya Dryomov) [task:573593] {CVE-2025-68285}
  - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set (Mike Manning) [task:583459]
  - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() (Eric Dumazet) [task:583459]
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() (Eric Dumazet) [task:583459]
  - net: tcp: add tcp no delay ack function (Chenguang Zhao) [task:546453]
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [task:534337] {CVE-2025-39860}
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou) [task:540515] {CVE-2022-50422}
  - scsi: sg: Do not sleep in atomic context (Bart Van Assche) [task:566401] {CVE-2025-40259}
  - i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [task:534327] {CVE-2025-39853}
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [task:527673] {CVE-2025-38680}
  - f2fs: fix to avoid out-of-boundary access in devs.path (Chao Yu) [task:523433] {CVE-2025-38652}
  - pptp: fix pptp_xmit() error path (Eric Dumazet) [task:520779]
  - pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [task:520779] {CVE-2025-38574}
  - usb: gadget : fix use-after-free in composite_dev_cleanup() (Tao Xue) [task:520579] {CVE-2025-38555}
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Xinyu Liu) [task:530219] {CVE-2025-39760}
  - USB: core: Change configuration warnings to notices (Alan Stern) [task:530219]
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Wupeng Ma) [task:491653] {CVE-2025-38102}
  - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF (George Kennedy) [task:491653]
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han) [task:540621]
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu) [task:540621] {CVE-2023-53454}
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Sravan Kumar Gundu) [task:527585] {CVE-2025-38685}
  - lwt: Fix return values of BPF xmit ops (Yan Zhai) [task:532829] {CVE-2023-53338}
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar) [task:533643] {CVE-2023-53395}
  - OPENEULER: xfs: fix sb write verify for lazysbcount (Shida Zhang) [task:583267]
  - xfs: update superblock counters correctly for !lazysbcount (Dave Chinner) [task:583267]
  - xfs: reduce free inode accounting overhead (Dave Chinner) [task:583267]
  - xfs: gut error handling in xfs_trans_unreserve_and_mod_sb() (Dave Chinner) [task:583267]
  - iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Zhen Ni) [task:583485]
  - REDHAT: kernel.spec: avoid keeping two copies of vmlinux (Ondrej Mosnacek) [task:556803]
  - REDHAT: spec: speed up "cp -r" when it overwrites existing files. (Denys Vlasenko) [task:556803]
  - REDHAT: kernel.spec: Force remove tmp file (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: remove some temporary files early (Ondrej Mosnacek) [task:556803]
  - REDHAT: kernel.spec: Remove unnecessary output from pathfix.py (Prarit Bhargava) [task:556803]
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen) [task:455283]
  - icmp: guard against too small mtu (Eric Dumazet) [task:455283]
  - md/raid0, raid10: Don't set discard sectors for request queue (Xiao Ni) [task:569813] {CVE-2022-50583}
  - sit: replace 68 with micro IPV4_MIN_MTU (zhang kai) [task:576945]
  - sit: use dst_cache in ipip6_tunnel_xmit (Haishuang Yan) [task:576945]
  - scsi: qla2xxx: Fix buffer overrun (Quinn Tran) [task:577017] {CVE-2023-54054}
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Jonathan Curley) [task:576577] {CVE-2025-68349}
  - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (Long Li) [task:577049] {CVE-2025-68367}
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (Edward Adam Davis) [task:573827] {CVE-2025-68305}
  - net/sched: Abort __tc_modify_qdisc if parent is a clsact/ingress qdisc (Victor Nogueira) [task:573535]
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [task:567355] {CVE-2025-40277}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [task:570205] {CVE-2025-40322}
  - xprtrdma: Ensure MRs are DMA-unmapped when posting LOCAL_INV fails (Chuck Lever) [task:570023]
  - xprtrdma: Explicitly resetting MRs is no longer necessary (Chuck Lever) [task:570023]
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy (Amir Goldstein) [task:540123]
  - sched: Fix race between yield_to() and try_to_wake_up() (Tianchen Ding) [task:564633]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [task:570029] {CVE-2025-40304}
  - USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) [task:569979] {CVE-2023-53761}
  - OPENEULER: proc: fix use-after-free in proc_get_inode() (Ye Bin) [task:451122] {CVE-2025-21999}
  - smb: client: fix use-after-free in cifs_oplock_break (Wang Zhaolong) [task:519691] {CVE-2025-38527}
  - net: rose: convert 'use' field to refcount_t (Takamitsu Iwai) [task:532201] {CVE-2025-39826}
  - net: rose: split remove and free operations in rose_remove_neigh() (Takamitsu Iwai) [task:532201]
  - net/rose: fix races in rose_kill_by_device() (Eric Dumazet) [task:397891]
  - net: rose: fix netdev reference changes (Eric Dumazet) [task:162162]
  - net/rose: remove redundant assignment to variable failed (Colin Ian King) [task:532201]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.64.v2101
changelog:
  - OPENEULER: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: icrypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Only wake up when ctx->more is zero (Herbert Xu) [task:622625]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.65.v2101
changelog:
  - MAILLIST: esp: Force skb_cow_data() on RX when the skb is non-linear (Hyunwoo Kim) [task:626683]
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [task:623091] {CVE-2026-31668}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.66.v2101
changelog:
  - MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:629903] {CVE-2026-46300}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.67.v2101
changelog:
  - sched: fix build error (Guopeng Zhang) [task:630943]
  - crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek) [bug:629353]
  - sched: fix task_struct kABI for user_dumpable (Guopeng Zhang) [task:630943]
  - ptrace: slightly saner 'get_dumpable()' logic (Guopeng Zhang) [task:630943]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.69.v2101
changelog:
  - update changelog for incoming 4.19.90-23.69.v210 (Zhengyuan Liu)
  - blk-mq: remove hybrid polling (Keith Busch) [task:576189, task:559773, task:458277]
  - block: ignore RWF_HIPRI hint for sync dio (Ming Lei) [task:576189, task:559773, task:458277]
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [task:567289] {CVE-2025-40280}
  - net/ip6_tunnel: Prevent perpetual tunnel growth (Dmitry Safonov) [task:554173] {CVE-2025-40173}
  - regulator: core: Fix resolve supply lookup issue (ChiYuan Huang) [task:569843]
  - regulator: core: Use different devices for resource allocation and DT lookup (ChiYuan Huang) [task:569843] {CVE-2022-50616}
  - regulator: gpio: Convert to devm_regulator_register (Axel Lin) [task:569843]
  - regulator: dummy: Use devm_regulator_register() (Zenghui Yu) [task:569843]
  - regulator: Avoid a double 'of_node_get' in 'regulator_of_get_init_node()' (Christophe JAILLET) [task:569843]
  - regulator: of: Add of_node_put() before return in function (Nishka Dasgupta) [task:569843]
  - regulator: Factor out location of init data OF node (Charles Keepax) [task:569843]
  - ixgbe: Make use of cpumask_local_spread to improve RSS locality (Alexander Duyck) [task:43296]
  - Revert "ixgbe: network card performance optimization for ft2500" (luoqing) [task:43296]
  - arm64: topology: Stop using MPIDR for topology information (Valentin Schneider) [task:618375]
  - xen/privcmd: unregister xenstore notifier on module exit (GuoHan Zhao) [task:622715]
  - xen/privcmd: restrict usage in unprivileged domU (Juergen Gross) [task:622715] {CVE-2026-31788}
  - f2fs: fix out-of-bounds access in sysfs attribute read/write (Yongpeng Yang) [task:600181] {CVE-2026-23235}
  - f2fs: fix to avoid UAF in f2fs_write_end_io() (Chao Yu) [task:600273] {CVE-2026-23234}
  - Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz) [task:613213] {CVE-2026-23462}
  - sched/fair: Add ancestors of unthrottled undecayed cfs_rq (Michal Koutný) [task:620621]
  - ALSA: aloop: Fix racy access at PCM trigger (Takashi Iwai) [task:597107] {CVE-2026-23191}
  - ALSA: aloop: Introduce a function to get if access is interleaved mode (Chancel Liu) [task:597107]
  - ALSA: aloop: Add control element for getting the access mode (Ivan Orlov) [task:597107]
  - ALSA: aloop: Add support for the non-interleaved access mode (Ivan Orlov) [task:597107]
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [task:623139] {CVE-2026-31532}
  - drivers: base: Free devm resources when unregistering a device (David Gow) [task:540545] {CVE-2023-53596}
  - ext4: no need to verify new add extent block (yangerkun) [task:613187]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Zicheng Qu) [task:613155]
  - sched/fair: Prevent unlimited runtime on throttled group (Vincent Guittot) [task:613155]
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim) [task:614475] {CVE-2026-31408}
  - security/lsm: Fix crash empty inode security field (mengdehui) [task:616919]
  - lsm: Fix uncleaned security domain in inode init (mengdehui) [task:624405]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [task:626683] {CVE-2026-43284}
  - Revert "MAILLIST: esp: Force skb_cow_data() on RX when the skb is non-linear" (Jackie Liu)
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Cryolitia PukNgae) [task:589059] {CVE-2025-71118}
  - ACPICA: Avoid walking the ACPI Namespace if it is not there (Rafael J. Wysocki) [task:589059]
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Takashi Iwai) [task:567349] {CVE-2025-40269}
  - ALSA: usb-audio: Replace s/frame/packet/ where appropriate (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Fix packet size calculation (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Improve frames size computation (Alexander Tsoy) [task:567349]
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin) [task:569275] {CVE-2022-50630}
  - ACPI: CPPC: Assume no transition latency if no PCCT (Pierre Gondois) [bug:474457, bug:498271]
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Yongzhen Zhang) [task:527563, task:604597] {CVE-2025-38702}
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Aditya Garg) [task:593597, task:604597] {CVE-2026-23054}
  - hv_netvsc: Allocate rx indirection table size dynamically (Shradha Gupta) [task:593597, task:604597]
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang) [task:532589, task:604597] {CVE-2023-53305}
  - jfs: upper bound check of tree index in dbAllocAG (Arnaud Lecomte) [task:527301, task:604597] {CVE-2025-38697}
  - ext4: fix kabi error due to IMA readcount (liubaolin) [task:606289]
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein) [task:606289]
  - locks: eliminate false positive conflicts for write lease (Amir Goldstein) [task:606289]
  - locks: Use inode_is_open_for_write (Nikolay Borisov) [task:606289]
  - sched/fair: Prevent dead task groups from regaining cfs_rq's (Mathias Krause) [task:600509]
  - sched/fair: Correctly insert cfs_rq's to list on unthrottle (Odin Ugedal) [task:600509]
  - fix kabi issue for "clocksource: Reduce clocksource-skew threshold" (liqiang) [task:618319]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Thomas Gleixner) [task:608211]
  - clocksource: Set cs_watchdog_read() checks based on .uncertainty_margin (Paul E. McKenney) [task:608211]
  - clocksource: Reduce clocksource-skew threshold (Paul E. McKenney) [task:608211]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Anil Gurumurthy) [task:600165] {CVE-2025-71238}
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Manish Rangankar) [task:600165]
  - scsi: qla2xxx: Fix sparse warning for dport_data (Nilesh Javali) [task:600165]
  - scsi: qla2xxx: Add a new v2 dport diagnostic feature (Bikash Hazarika) [task:600165]
  - scsi: qla2xxx: Add support for mailbox passthru (Bikash Hazarika) [task:536567, task:600165]
  - scsi: qla2xxx: edif: Add extraction of auth_els from the wire (Quinn Tran) [task:149541, task:600165]
  - scsi: qla2xxx: edif: Add send, receive, and accept for auth_els (Quinn Tran) [task:149541, task:600165]
  - scsi: qla2xxx: Add heartbeat check (Quinn Tran) [task:149541, task:600165]
  - scsi: qla2xxx: edif: Add start + stop bsgs (Quinn Tran) [task:149541, task:600165]
  - net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [task:597119] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Eric Dumazet) [task:597119]
  - OPENEULER: PCI: Fix AB-BA deadlock between aer_isr() and device_shutdown() (Ziming Du) [task:612083]
  - PCI: Fix pci_slot_trylock() error handling (Jinhui Guo) [task:612081]
  - fs: move file_start_write() into direct_splice_actor() (Amir Goldstein) [task:604191, task:607439]
  - xfs: check buffer pin state after locking in delwri_submit (Dave Chinner) [task:602811]
  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe) [task:606387] {CVE-2026-23253}
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [task:606589] {CVE-2026-23274}
  - sched: add lightweight tracing for rq lock (liwanwu) [task:569877]
  - sched/core: Extend struct rq (Bing Huang) [task:569877]
  - tcp: add a fast path in tcp_delack_timer() (Eric Dumazet) [task:603877]
  - tcp: add a fast path in tcp_write_timer() (Eric Dumazet) [task:603877]
  - tcp: annotate data-races around icsk->icsk_pending (Eric Dumazet) [task:603877]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [task:535605] {CVE-2025-39883}
  - xfs: make inode reclaim almost non-blocking (Dave Chinner) [task:603105]
  - tls: separate no-async decryption request handling from async (Sabrina Dubroca) [task:525255] {CVE-2024-58240}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [task:596501] {CVE-2026-23216}
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [task:593557] {CVE-2026-23089}
  - net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [task:593593] {CVE-2026-23074}
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [task:593625] {CVE-2026-23073}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [task:593607] {CVE-2026-23076}
  - e1000: fix OOB in e1000_tbi_should_accept() (Guangshuo Li) [task:590055] {CVE-2025-71093}
  - net: hns3: add VLAN id validation before using (Jian Shen) [task:589439] {CVE-2025-71112}
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima) [task:593627] {CVE-2026-23083}
  - nbd: defer config unlock in nbd_genl_connect (Zheng Qixing) [task:576883] {CVE-2025-68366}
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (Thorsten Blum) [task:576567] {CVE-2025-68724}
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion) [task:539047] {CVE-2023-53616}
  - cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [task:539197] {CVE-2025-39945}
  - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) [task:539297] {CVE-2023-53668}
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin) [task:540563] {CVE-2023-53676}
  - wifi: mwifiex: Initialize the chan_stats array to zero (Qianfeng Rong) [task:539911] {CVE-2025-39891}
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) [task:540557] {CVE-2023-53622}
  - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [task:527683] {CVE-2025-38708}
  - bpf: Fix ORC unwinding in non-JIT BPF code (Josh Poimboeuf) [task:605427]
  - x86/unwind/orc: Fall back to using frame pointers for generated code (Josh Poimboeuf) [task:605427]
  - perf/x86: Always store regs->ip in perf_callchain_kernel() (Song Liu) [task:605427]
  - perf/x86: Make perf callchains work without CONFIG_FRAME_POINTER (Kairui Song) [task:605427]
  - arm64: fpsimd: Always set TIF_FOREIGN_FPSTATE on task state flush (Dave Martin) [task:150352, task:616369]
  - fix missing __annotate_jump_table when CONFIG_STACK_VALIDATION undefined (Yun Lu) [task:617201]
  - mm/khugepaged: fix ->anon_vma race (Jann Horn) [task:448841] {CVE-2023-52935}
  - Revert "scsi: qla2xxx: Fix buffer overrun" (Nilesh Javali) [task:536567, bug:510163]
  - locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin) [task:162162]
  - HYGON: crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Mengbiao Xiong) [task:556059]
  - ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [task:554287] {CVE-2025-40190}
  - net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru) [task:481987] {CVE-2022-50073}
  - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi) [task:576303] {CVE-2022-50735}
  - PCI: pnv_php: Clean up allocated IRQs on unplug (Timothy Pearson) [task:522801] {CVE-2025-38624}
  - MAILLIST: net/rds: reset op_nents when zerocopy page pin fails (Allison Henderson) [task:632491]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.70.v2101
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}
  - Revert "net/sched: act_pedit: check static offsets a priori" (luoxuanqiang)
  - Revert "net/sched: act_pedit: free pedit keys on bail from offset check" (luoxuanqiang)
  - Revert "net/sched: fix pedit partial COW leading to page cache corruption" (luoxuanqiang)
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}
  - net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [task:642737]
  - net/sched: act_pedit: check static offsets a priori (Pedro Tammela) [task:642737]
  - net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni) [task:162162]
  - net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni) [task:162162]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.71.v2101
changelog:
  - fix KABI change in eth_parse_header (YANGANG) [task:623005]
  - bonding: Fix kabi change in struct header_ops (Wang Yan) [task:623005]
  - bonding: prevent potential infinite loop in bond_header_parse() (Eric Dumazet) [task:623005]
  - bonding: fix type confusion in bond_setup_by_slave() (Jiayuan Chen) [task:623005]
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:634641]
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [task:634641] {CVE-2026-43503}
  - Revert "MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers" (Yun Lu) [task:634641]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.72.v2101
changelog:
  - KVM: x86: Fix shadow paging UAF from stale child pages (Jackie Liu) [task:649409] {CVE-2026-53359}
  - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Sebastian Andrzej Siewior) [task:633141]
  - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Ji'an Zhou) [task:633141]
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [task:633141]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [task:633141] {CVE-2026-43499}


author: huayadong <huayadong@kylinos.cn>-3.12.2-8.p05
changelog:
  - add Patch:kylin-brasero-fix-bug-42668-after-switching-the-language-to-English-the-name-is-still-Chinese.patch


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-11
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: guoshengsheng <guoshengsheng@kylinos.cn>--1.12.7-1kord0k233.p10
changelog:
  - Right click Trash , Filesystem in my computer, Removable storage device, hide Send to Desktop action


author: gaohaobo <gaohaobo@kylinos.cn>
changelog:
  - add  caja-1.12.7-Kylin-tpm.patch   由<lvfei@kylinos.cn> 提供方案，<guoshengsheng@kylinos.cn> 制作patch. 
    替换 搜索 工具为 mate-search-tool  
  - add  caja-1.12.7-kylin-replace-search-engine.patch 由<baiguanglei@kylinos.cn> 提供方案， <gaohaobo@kylinos.cn>
    制作patch , 使用更为流畅的catfish 作为第三搜索工具。
  - add  caja-1.12.7-kylin-open-searchtools-thread-way.patch
    使用线程运行catfish   by <gaohaobo@kylinos.cn>


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p12
changelog:
  - Add caja-1.12.7-Kylin-hide-three-option-in-trash.patch
  - Delete "Listview New Documents" "cut" "copy" in trash


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p13
changelog:
  - Add caja-1.12.7-Kylin-fix-bug-17932.patch
  - Resolve Changing the resolution will cause the desktop icons to not be adaptively arranged


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p37
changelog:
  - Type: bugfix
  - ID:   [BUG#340468]
  - SUG:  NA
  - DESC: don't free memory that was not dynamically allocated


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p39
changelog:
  - Type: update
  - ID:   [TASK#500863]
  - SUG:  NA
  - DESC: fix nonremovable disks incorrectly placed under removable disks


author: Neal Gompa <ngompa13@gmail.com> - 0.7.0-6
changelog:
  - Backport patch to fix aliasing violation breaking builds on GCC 10 on ARM (#1807872)
  - Disable "DiskFile holes" test to stop build failures


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.07
changelog:
  - Type:update
  - ID: [TASK#121480]
  - SUG:NA
  - DESC: 解决chpolicy切换策略，强制重启后，策略切换失败的问题
  -         add patch: chpolicy-fix-selinux-error-after-force-reboot.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-3.skl3.se.08
changelog:
  - Type:update
  - ID: [BUG#541279]
  - SUG:NA
  - DESC: 命令行完善参数校验
  -    add path: chpolicy-20260706-add-param-verify.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-3.skl3.se.08.01
changelog:
  - Type:update
  - ID: [BUG#541279]
  - SUG:NA
  - DESC: 
  - DESC: 命令行完善参数校验
  -    add path: chpolicy-20260706-add-param-verify.patch


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Martin Pitt <mpitt@redhat.com> - 197.1-1
changelog:
  - Machines: Fix crash on deleting VM in the middle of the installation (rhbz#1715399)
  - Machines: Properly refresh storage pools (rhbz#1680293)
  - Machines: Fix pool types which don't support volume creation (rhbz#1731849)
  - Machines: Disable PXE booting on session connection (rhbz#1731803)


author: Martin Pitt <mpitt@redhat.com> - 197.2-1
changelog:
  - Machines: Stop bringing libvirt package as a dependency (rhbz#1728219)
  - Machines: Implement VM installation for additional disk types
  - Machines: Fix setting of volume format when adding new disks to VMs (rhbz#1732303)
  - Machines: Disallow pool deletion if pool/volumes are used by any VM (rhbz#1731865)
  - Check for subscription only if enabled in package manager (rhbz#1701067)


author: Liang yangang <liangyangang@kylinos.cn> - 196.3-1.01.p01
changelog:
  - add mips64el arch support,
  - add Requires for storaged to support lvm: libblockdev libblockdev-devel libudisks2 udisk2-lvm2


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: zhangzeyang <zhangzeyang@kylinos.cn> - 1.2.0-202.p01
changelog:
  - Solve the problem of container sticking when starting or stopping on mips64 architecture.(Patch2)
  - add 0058-container-fix-build-errors-for-kylin.patch


author: shaoning <shaoning@kylinos.cn> - 1.2.0-208.p01
changelog:
  - Solve the problem of container sticking when starting or stopping on mips64 architecture.(Patch2)
  - add 0058-container-fix-build-errors-for-kylin.patch
  - add 0058-container-fix-build-errors-for-kylin-01.patch


author: lvxiangcong<lvxiangcong@kylinos.cn> - 1.2.0-209.p03
changelog:
  - Type:update
  - ID:[TASK#206575]
  - SUG:NA
  - DESC:fix cve-2023-39325 and cve-2022-41723 skipping p02 due to the presence of koji


author: lijian<lijian2@kylinos.cn> - 1.2.0-209.p06
changelog:
  - Type:bugfix
  - ID:[BUG#352209]
  - SUG:NA
  - DESC:Added package conflict with docker-engine to avoid co-installation issues


author: weiyucheng<weiyucheng@kylinos.cn> - 1.2.0-209.p08
changelog:
  - Type:cves
  - ID:CVE-2024-25621
       CVE-2025-64329
  - SUG:NA
  - DESC:upgrade to 1.2.0-209.p08
         fix CVE-2024-25621 CVE-2025-64329


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 4.11.12-32.p08
changelog:
  - Type:bugfix
  - ID:[BUG#550911]
  - SUG:NA
  - DESC:Fix duplicate SMB file_ids leading to client cache poisoning


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: lunankun <lunankun@huawei.com> - 4.11.12-3
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: xihaochen <xihaochen@huawei.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1.26.1-8.p01
changelog:
  - Type:compile
  - ID:[Task#564101]
  - SUG:NA
  - DESC:Add BuildRequires nss to mips and and handle same-origin


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-47
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhaoqingyou<zhaoqingyou@kylinos.com> - 1:1.12.16-16.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#160422]
  - SUG:NA
  - DESC: Add Patch7001:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: baiguo <baiguo@kylinos.cn> - 8:2.02.181-8.p05
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: yueyuankun <yueyuankun@kylinos.cn> - 4.2.15-7.p03
changelog:
  - Type:bugfix
  - ID:BUG#218133
  - SUG:NA
  - DESC:Fix package dnf obsoletes dnf-data provided by dnf-data


author: yueyuankun <yueyuankun@kylinos.cn> - 4.2.15-7.p04
changelog:
  - Type:bugfix
  - ID:BUG#221805
  - SUG:NA
  - DESC:Fix dnf-help conflicts with dnf-data, dnf-automatic
         Remove /usr/share/man/man5/dnf.conf.5.gz from dnf-data
         Remove /usr/share/man/man8/dnf-automatic.8.gz from dnf-automatic


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.15-7.p06
changelog:
  - Type:bugfix
  - ID:BUG#231758
  - SUG:NA
  - DESC:Fix yum update ignore gnutls because of Obsoletes without version


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.15-7.p07
changelog:
  - Type:TASK
  - ID:TASK#340353
  - SUG:NA
  - DESC:Add Ignore rpm < 4.15.1-28 because of Obsoletes without version


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.15-7.p08
changelog:
  - Type:update
  - ID:TASK#352125
  - SUG:NA
  - DESC:Add Ignore libtirpc-1.2.6-2 because of libtirpc Obsoletes libtirpc-devel < V-R


author: majianhan <majianhan@kylinos.cn> - 4.2.15-7.p09
changelog:
  - Type:bugfix
  - ID:BUG#345903
  - SUG:NA
  - DESC:Fix cannot install best candidate only in upgrade transaction


author: Qin Fandong <qinfandong@kylinos.cn> - 4.2.15-7.p12
changelog:
  - Type:bugfix
  - ID:BUG#526303
  - SUG:NA
  - DESC: ignore giflib versions which has no utils sub package to fix upgrade issue


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.82-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.82-19
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.82-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
    Fix bounds checking in check_ia
    Fix SEGV in Dbus code
    More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.82-21
changelog:
  - Type:CVE
  - CVE:CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix buffer overflow in struct bigname (CVE-2026-2291)
         Fix NSEC bitmap parsing infinite loop (CVE-2026-4890)
         Verify rdlen field in RRSIG packets (CVE-2026-4891)
         Fix buffer overflow in helper with large CLIDs (CVE-2026-4892)
         Fix broken client subnet validation (CVE-2026-4893)


author: wangshuo <wangshuo@kylinos.cn> - 18.09.0-101.p05
changelog:
  - Type:CVE-2024-21626
  - ID:[TASK#198073]
  - SUG:NA
  - DESC: rebuild for docker-runc-1.0.0.rc3-103.p05, fix RootDir fd leaks


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-101.p06
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: weiyucheng <weiyucheng@kylinos.cn> -18.09.0-101.p08
changelog:
  - Type: cves
  - ID: CVE-2021-21284
        CVE-2021-21285
  - SUG: NA
  - DESC: backport fix CVE-2021-21284 and CVE-2021-21285 with patch
          1001-Fix-Access-to-remapped-root-allows-privilege-escalat.patch
          1002-docker-prevent-an-invalid-image-from-crashing-docker.patch


author: weiyuan <weiyuan@kylinos.cn> - 18.09.0-101.p09
changelog:
  - Type: CVE
  - ID: CVE-2021-41091
        CVE-2024-29018
        CVE-2024-24557
        CVE-2021-41092
        CVE-2021-41089
  - SUG: NA
  - DESC: backport fix cve CVE-2021-41091 CVE-2024-29018 CVE-2024-24557 CVE-2021-41092 CVE-2021-41089


author: weiyucheng <weiyucheng@kylinos.cn> - 18.09.0-101.p10.01
changelog:
  - Type: cves
  - ID: CVE-2024-36621
        CVE-2024-36623
        CVE-2022-24769
  - SUG: NA
  - DESC: backport fix cve CVE-2024-36621 CVE-2024-36623 CVE-2022-24769


author: zhangbowei <zhangbowei@kylinos.cn> -1.0.0.rc3-103.p04
changelog:
  - Type: bugfix
  - ID:   [bug#210840]
  - SUG:  NA
  - DESC: update golang.org/x/sys/unix and fix bug#210840


author: wangshuo <wangshuo@kylinos.cn> - 1.0.0.rc3-103.p05
changelog:
  - Type:CVE-2024-21626
  - ID:[TASK#198073]
  - SUG:NA
  - DESC:add patch 0120-runc-fix-CVE-2024-21626-without-close_range.patch, fix RootDir fd leaks


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-223.p02.01
changelog:
  - Type:cves
  - ID:CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
  - SUG:NA
  - DESC:upgrade to 1.0.0.rc3-223.p02
         fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport from openEuler
         support loongarch64 and mips64el


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport missing rlimit mapping patch to fix runc error on mips


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: Zhao Penghui <zhaopenghui@kylinos.cn> - 049-8.p04.se.09
changelog:
  - 梳理历史编译记录，重新命名软件包版本为：dracut-049-8.p04.se.09.ky10
    含通用4次修改，安全9次修改
  - import patch from dracut-049-8.p04.ky10
    add Patch9013, kylin fix plymouth and fonts when OS starting


author: li qian <liqian@kylinos.cn> - 049-8.p04.se.10
changelog:
  - Fixed the problem of hardware RNG entropy failure when 
  - PXE was installed with Netcom NIC. The blocking process 
  - caused the problem to be stuck all the time
  - patch9014: 0001-modify-pxe-install-need-input-key.patch


author: wanghao <wanghao2@kylinos.cn> 049-8.p04.se.14
changelog:
  - Type: update
  - ID: [Task#129149]
  - SUG:NA
  - DESC: 添加magic配置文件,修复执行控制白名单初始化时类型判断失败的问题
  -         add patch: dracut-049-add-magic-config-file.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: hanguanqiang <hanguanqiang@kylinos.cn> - 22.2.1-1.p04
changelog:
  - Type: CVE
  - ID:   Task#524829
  - SUG:  NA
  - DESC: Fix CVE-2025-48038,CVE-2025-48039,CVE-2025-48041
  -       and adjust config files to be compatible with newer autoconf


author: xiehongyu <xiehongyu@kylin.cn> - 3.30.1-4.01
changelog:
  - Add evince-3.30.1-kylin-perfect-Internationalization.patch
  - Fixed BUG #12046, #11966, perfect Internationalization


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-3
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1.96-43.p01
changelog:
  - Type:update
  - ID:[TASK#358997]
  - SUG:NA
  - DESC: 1. Use C++98 and disable NULL pointer check optimizations
          2. add patch:0001-modify-sensitive-information.patch, modify sesitive information.


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p03
changelog:
  - Type: cves
  - ID: [TASK#402117] [TASK#454373] [TASK#453302] [TASK#453252]
  - SUG: NA
  - DESC: Fix CVE-2024-35366,CVE-2024-35367,CVE-2024-35368,CVE-2024-36616,CVE-2024-36617,CVE-2024-36618
          Fix CVE-2024-31578,CVE-2023-51794
          Fix CVE-2023-50010,CVE-2024-32230
          Fix CVE-2021-38291,CVE-2022-48434


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p06
changelog:
  - Type: cves
  - ID: [TASK#480707]
  - SUG: NA
  - DESC: Fix CVE-2017-9994,CVE-2019-12730,CVE-2019-17542,CVE-2019-17539,CVE-2019-11339,CVE-2018-15822


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p07
changelog:
  - Type: cves
  - ID: [TASK#494103]
  - SUG: NA
  - DESC: Fix CVE-2020-22019,CVE-2020-22021,CVE-2020-22026,CVE-2020-22038,CVE-2020-22039,CVE-2020-22043,CVE-2020-22044


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p08
changelog:
  - Type: cves
  - ID: [TASK#500913]
  - SUG: NA
  - DESC: Fix CVE-2020-21697,CVE-2020-22020,CVE-2020-22037,CVE-2020-22051,CVE-2020-22054


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p09
changelog:
  - Type: cves
  - ID: [TASK#500913]
  - SUG: NA
  - DESC: Fix CVE-2020-21688,CVE-2020-22042,CVE-2025-22919,CVE-2025-22921


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p11
changelog:
  - Type: cves
  - ID: [BUG#597617] [BUG#597615] [BUG#597613] [BUG#599939]
  - SUG: NA
  - DESC: Fix CVE-2020-20445, CVE-2020-21041, CVE-2020-23906, CVE-2025-10256


author: mengchaoming <mengchaoming@kylinos.cn> - 0.6.2-4.p04
changelog:
  - Type: bugfix
  - ID: [TASK#218348]
  - SUG: NA
  - DESC: fix ipset configuration error
  - add patch: firewalld-0.6.2-fix-ipset-configuration-error.patch


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p01
changelog:
  - Type: bugfix
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: Add sed -i '/^95$/d' /etc/uid_list,resolve the issue of installation failure after uninstallation.


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39352
  - Fix CVE-2023-39353
  - Fix CVE-2023-39354
  - Fix CVE-2023-39356
  - Fix CVE-2023-40181
  - Fix CVE-2023-40186
  - Fix CVE-2023-40188
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40589


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: huayadong<huayadong@kylinos.cn> 1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#378883]
  - SUG : NA
  - DESC: add patch gb-cjk-fonts-1.0.0-kylin-add-GB_SS_CDK.TTF.patch
          新增国标宋体-超大字符集扩.TTF


author: huayadong <huayadong@kylinos.cn> - 1:3.30.1-10.p01
changelog:
  - Type:	compile
  - ID: 	[TASK#75897]
  - SUG:	NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: compile
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch0:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p02
changelog:
  - Type: cve
  - ID:   [TASK#133075]
  - SUG:  NA
  - DESC: add patch1:gdm-3.38.2.1-kylin-use-autoptr-to-handle-errors-in-look-for-existing-users.patch
  	Fix CVE-2020-16125


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#160751]
  - SUG:  NA
  - DESC: add patch2:gdm-3.38.2.1-kylin-fix-fix-the-problem-of-failing-to-start.patch


author: huayadong <huayadong@kylinos.com> - 2.5.6-1.p01
changelog:
  - Type:bugfix
  - ID  :[bug#135451]
  - SUG :NA
  - DESC:add patch0: geoclue-2.5.6-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: duyuanzheng <duyuanzheng@kylinos.cn> - 9.27-10.p01
changelog:
  - Type:CVE
  - ID:CVE-2023-43115
  - SUG:NA
  - DESC:fix CVE-2023-43115, fetch SAFER from ghostscript 9.5X


author: gaoyukun <gaoyukun@kylinos.cn> - 9.52-20.p02
changelog:
  - Type:cves
  - ID:CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837 CVE-2023-52722
  - SUG:NA
  - DESC:fix CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837, CVE-2023-52722


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-26
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify patch
         backport-CVE-2025-27613-CVE-2025-46334-CVE-2025-46835.patch


author: gaihuiying <gaihuiying1@huawei.com> - 2.23.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-11008
  - SUG:NA
  - DESC:fix CVE-2020-11008
         credential: detect unrepresentable values when parsin urls
         fsck: detect gitmodules URLs with embedded newlines


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: huayadong <huayadong@kylinos.cn> - 3.22.1-5.p01
changelog:
  - Type: cve
  - ID  : [TASK#453306]
  - SUG : NA
  - DESC: Patch01: glade-3.22.1-kylin-fix-CVE-2020-36774.patch


author: litenglong <litenglong@kylinos.cn> - 2.62.5-4.p03
changelog:
  - Type:bugfix
  - ID:[BUG#329022]
  - SUG:NA
  - DESC:Fix race between D-Bus signal emission and unsubscription


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.62.5-4.p06
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: Cuiyudong<cuiyudong@kylinos.cn> 2.28-36.p03
changelog:
  - Type:update
  - ID:TASK#163450
  - SUG:NA
  - DESC: add patch for support gb18030-2022
          delete buildrequire gcc_secure


author: wangshuo <wangshuo@kylinos.cn> - 2.28-36.p04
changelog:
  - Type:bugfix
  - ID:[Bug#169227]
  - SUG:NA
  - DESC:Add Patch119, fix ltp semctl09 testcase.
  -      https://sourceware.org/git/?p=glibc.git;a=commit;h=574500a108be


author: panzhe <panzhe@kylinos.cn> - 2.28-36.p08
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC: fix pthread_once hangs when init routine throws an exception


author: Yu Peng <yupeng@kylinos.cn> - 2.28-36.p12
changelog:
  - Type:bugfix
  - ID:[Task#571025]
  - SUG:NA
  - DESC: Fix /etc/resolv.conf reloading defects backport from glibc 2.32
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=6c80c6e8767b860a5e18e136d04a80be2a8dce15
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=9642b85fd0dfa5731020a3271c08e33e1dc05c85
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=a1a20f029299dc27170912bb9233070c8403444d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=dd0b4df329ff7ff2a656404db271c8ee8379ff9d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=fa00db0a6eb755837ae5d413515e0da582b304f3
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=631cf64bc1d8306e011ef39f60b8cb6de91bd271


author: panzhe <panzhe@kylinos.cn> - 2.28-36.p13
changelog:
  - Type:update
  - ID:[Task#588463]
  - SUG:NA
  - DESC: resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: litenglong <litenglong@kylinos.cn> - 2.28-36.p14
changelog:
  - Type:update
  - ID:[Task#595081]
  - SUG:NA
  - DESC: posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)


author: litenglong <litenglong@kylinos.cn> - 2.28-36.p15
changelog:
  - Type:cves
  - ID:[BUG#572921]
  - SUG:NA
  - DESC: Use pending character state in IBM1390, IBM1399 character
   sets (CVE-2026-4046)


author: litenglong <litenglong@kylinos.cn> - 2.28-36.p16
changelog:
  - Type:cves
  - ID:[BUG#556837]
  - SUG:NA
  - DESC: fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: mengchaoming<mengchaoming@kylinos.cn>- 3.30.1-2.p03
changelog:
  -add patch:gnome-calculator-3.30.1-kylin-fix-bug.patch
  -输入等于号等同于回车计算结果
  -进制转化的时候置灰不能输入的数字
  -单位转换的时候，对应的标签做相应的变化


author: huayadong <huayadong@kylinos.cn>- 3.30.1-2.p06
changelog:
  - add Patch:gnome-calculator-3.30.1-kylin-numlook-bug.patch
  - add Source1:gnome-calculator.tar.gz  --chengrui


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: huayadong <huayadong@kylinos.cn> - 3.30.1-10.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#165420]
  - SUG:  NA
  - DESC: add Requires: llvm-libs >= 8.0.1-1.6.p01 only for loongarch64


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p00.04
changelog:
  - Type:cves
  - ID:CVE-2024-0567,CVE-2024-12243,CVE-2025-32988,CVE-2025-32990,CVE-2025-6395
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2024-0567,CVE-2024-12243,CVE-2025-32988,CVE-2025-32990,CVE-2025-6395


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p00.07
changelog:
  - Type:cves
  - ID:[BUG#560111]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2026-33845,CVE-2026-33846,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-19.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove package:help  BuildArch require
  -      Fix bad /usr/lib/golang}/lib/ macro


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-19.p02
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64


author: hanchao<hanchao47@huawei.com> - 1.15.7-21
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC:fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-22.p02
changelog:
  - Type:update
  - ID:[TASK#128209]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-23.p01
changelog:
  - Type:update
  - ID:[TASK#134792]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64


author: hanchao <hanchao47@huawei.com> - 1.15.7-24
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC:fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-23.p01
changelog:
  - Type:update
  - ID:[TASK#143221]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64


author: hanchao <hanchao47@huawei.com> - 1.15.7-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC:fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-26.p01
changelog:
  - Type:update
  - ID:[TASK#147392]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64


author: hanchao <hanchao63@huawei.com> - 1.15.7-27
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-27.p01
changelog:
  - Type:update
  - ID:[TASK#153849]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64


author: hanchao <hanchao63@huawei.com> - 1.15.7-28
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC: fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-30.p01
changelog:
  - Type:update
  - ID:[TASK#160876]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64
  -      Add Patch9005, support loong64 mips64el for CVE-2023-29403


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-30.p01
changelog:
  - Type:update
  - ID:[TASK#169347]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64
  -      Add Patch9005, support loong64 mips64el for CVE-2023-29403


author: luoyujie <luoyujie5@huawei.com> - 1.15.7-34
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-36.p01
changelog:
  - Type:update
  - ID:[TASK#180565]
  - SUG:NA
  - DESC:Add Patch9003-9004, modify spec, support mips64el and loongarch64
  -      Add Patch9005, support loong64 mips64el for CVE-2023-29403


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-37.p02
changelog:
  - Type:update
  - ID:[TASK#189214]
  - SUG:NA
  - DESC:Add Patch9004, fix test error about mod_insecure_issue63845


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-37.p03
changelog:
  - Type:update
  - ID:[TASK#189214]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: hanchao <hanchao63@huawei.com> - 1.15.7-39.p01
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42.p01
changelog:
  - Type:bugfix
  - ID:[TASK#206034]
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42.p02
changelog:
  - Type:update
  - ID:[TASK#204403]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-43.p02
changelog:
  - Type:update
  - ID:[TASK#213363]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: gaoxiang <gaoxiang@kylinos.cn> - 1.15.7-48.p02
changelog:
  - Type:CVE
  - CVE:CVE-2024-45341, CVE-CVE-2024-45336
  - SUG:NA
  - DESC:fix CVE-2024-45341, CVE-CVE-2024-45336


author: wujichao <wujichao1@huawei.com> - 1.15.7-50
changelog:
  - Type:CVE
  - CVE:CVE-2024-45336
  - SUG:NA
  - DESC:remove 0001-drop-hard-code-cert.patch and modify CVE-2024-45336


author: songliyang <songliyang@kylinos.cn> - 1.15.7-52.p01
changelog:
  - Type: CVE
  - ID:   [TASK#484037]
  - SUG:  NA
  - DESC: 1.Sync Patch6129 to fix CVE-2025-4673
          2.Add Patch9005 to fix CVE-2025-22871
          3.Sync patches and changelogs from openEuler-20.03-LTS-SP4


author: huzhangying <huzhangying@huawei.com> - 1.15.7-55
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183, CVE-2025-58185, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183, CVE-2025-58185, CVE-2025-61724


author: songliyang <songliyang@kylinos.cn> - 1.15.7-57.p01
changelog:
  - Type: CVE
  - ID:   [TASK#560335]
  - SUG:  NA
  - DESC: 1.Ugrade to fix CVE-2025-58183 CVE-2025-58185 CVE-2025-61724 CVE-2025-58187 CVE-2025-61723 CVE-2025-47912 CVE-2025-58186
          2.Backport kylin patches to support loongarch64 and mips64el, and support other optimazations


author: huzhangying <huzhangying@huawei.com> - 1.15.7-59
changelog:
  - Type:CVE
  - CVE:CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61726,CVE-2025-68121
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61726,CVE-2025-68121


author: songliyang <songliyang@kylinos.cn> - 1.15.7-60.p01
changelog:
  - Type: updates
  - ID:   [TASK#573427] [TASK#610533]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2025-47912 CVE-2025-58186 CVE-2025-61727 CVE-2025-61729
            CVE-2025-61732 CVE-2025-68119 CVE-2025-61731 CVE-2025-61726 CVE-2025-68121
          2.Backport kylin patches to support loongarch64 and mips64el and other optimazations


author: houhongxun <houhongxun@kylinos.cn> - 20200916-3.p02
changelog:
  - Type: update
  - ID:   [TASK#327639]
  - SUG:  NA
  - DESC: rebuild to remove sensitive information for sp1、sp2、sp3、sp4


author: wangqiang <wangqiang1@kylinos.cn> - 2.7-7.p01
changelog:
  - Type:enhancement
  - ID:[TASK#393475]
  - SUG:NA
  - DESC:Add configure option '--with-tcmalloc-pagesize=64' adopt to aarch64 with 64K pazgesize


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.02-0.44.se.01.p18.01
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-61663,CVE-2025-61664
  - ID:TASK#571799
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload


author: songliyang <songliyang@kylinos.cn> - 8.40-23.p02
changelog:
  - Type:bugfix
  - ID:[BUG#167429]
  - SUG:NA
  - DESC:Add Patch 9006 to fix a bug that can't choose old kernel in grub after upgrading


author: gaoyukun <gaoyukun@kylinos.cn> - 1.14.4-3.p02
changelog:
  - Type:cves
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2023-37328,CVE-2024-47538,CVE-2024-47541,CVE-2024-47542,CVE-2024-47600,CVE-2024-47607,CVE-2024-47615,CVE-2024-47835


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: houhongxun <houhongxun@kylinos.cn> 2.24.32-11.p02
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix media volume control applet tooltip position


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: kouwenqi <kouwenqi@kylinos.cn> - 1.9.8-2.p01
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: solve startup failure, fix the issue of "ExecStart" in haveged.service


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: hanjinpeng <liutao1@kylinos.cn> - 2.4.43-20.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: lifeifei <lifeifei@kylinos.cn> - 2.4.43-28.p01
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: merge 2.4.43-26.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.

   * Thu Aug 14 2025 yanglu <yanglu72@h-partners.com> - 2.4.43-28
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: yanglu <yanglu72@h-partners.com> - 2.4.43-28
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-31
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: wanggang <wanggang1@kylinos.cn> - 2.4.43-32.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.43-34
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: yuboyun <yuboyun@huawei.com> - 2.4.43-3
changelog:
  - Type:cves
  - ID:CVE-2020-9490 CVE-2020-11984 CVE-2020-11993
  - SUG:restart
  - DESC:fix CVE-2020-9490CVE-2020-11984CVE-2020-11993


author: yanglu <yanglu72@huawei.com> - 2.4.43-5
changelog:
  - Type:cves
  - ID:CVE-2020-13950 CVE-2020-35452
  - SUG:restart
  - DESC:fix CVE-2020-13950 CVE-2020-35452


author: lijingyuan <lijingyuan3@huawei.com> - 2.4.43-6
changelog:
  - Type:cves
  - ID:CVE-2021-30641 CVE-2021-26690
  - SUG:restart
  - DESC:fix CVE-2021-30641 CVE-2021-26690


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-7
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: Like <like@kylinos.cn> - 2.4.43-8.p04
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 
         CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.01-6.p01
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch9009 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch6002 and patch9005.


author: weishuaihao <weishuaihao@kylinos.cn> - 0.6-20.p01
changelog:
  - Type:bugfix
  - ID:[TASK#417255]
  - SUG:NA
  - DESC: Fix open name ontain non-UTF8 error, and due to community patch cannot be used
  directly, after analysing them, modiffications and merges has been done.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: lixiang <lixiang172@huawei.com> - 0.9.4-14
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:Modify gen-version script and add changelog automatically


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: like <like@kylinos.cn> - 30-13.p03
changelog:
  - add patch1: rpm-config-mips64el-macros-debugsource-optflags-O2.patch
  --fix macros-debugsource_template and gcc-optflags-O3-to-O2


author: openEuler Buildteam <buildteam@openeuler.org> - 2.0-17.12
changelog:
  - add secure compile options and merge bugfix patches from community
    xen: Avoid overlapping segments in low memory
    x86: Check /proc/mounts before mtab for mounts
    x86: Find mounts by FS type, not name
    kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()
    kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
    kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
    kexec/arm64: Add support for handling zlib compressed (Image.gz) image


author: Jialong Chen <chenjialong@huawei.com> - 2.0.17-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify SECTION_SIZE_BITS to 30 and keep the same as the kernel configuration.
         add executable permissions for kdump-error-handler.sh.


author: openEuler Buildteam <buildteam@openeuler.org> - 2.0.20-13
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:fix kdump service failed on x86 because of KDUMP_FILE_LOAD is set to on


author: GuoCe <guoce@kylinos.cn> 2.0.20-13.p02
changelog:
  - Modify spec to disable kdump.service for mips
  - Add patch: arm64-support-more-than-one-crash-kernel-regions.patch


author: likai01 <likai01@kylinos.cn> 2.0.20-13.p04
changelog:
  - Type:cves
  - ID:CVE-2021-20269
  - SUG:NA
  - DESC:FIX CVE-2021-20269,modify kdump-lib-initramfs.sh under SOURCES directly


author: litianzhi <litianzhi@kylinos.cn> - 25-6.se.1
changelog:
  - add history security patchs
  - KYLIN: add apis to get kernel module name
  - KYLIN: use no-tmpl flavour for gtk-doc-tools


author: yueyuankun <yueyuankun@kylinos.cn> - 27-2.se.3.p01
changelog:
  - Type:bugfix
  - ID:[TASK#542831]
  - SUG:NA
  - DESC:support decompressing modern initramfs with early_cpio


author: yueyuankun <yueyuankun@kylinos.cn> - 27-2.se.3.p02
changelog:
  - Type:bugfix
  - ID:[BUG#423599]
  - SUG:NA
  - DESC:Require libkysec >= 3.2.23kord-se.06 to ensure compatibility


author: Yu Peng <yupeng@kylinos.cn> - 0.8.4-6.p08
changelog:
  - Type:bugfix
  - ID:[Task#453521]
  - SUG:NA
  - DESC:fix check_path errors with removed map.
         sync community patches:
         multipathd-fix-check_path-errors-with-removed-map.patch
         libmultipath-make-dm_get_map-status-return-codes-sym.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 0.8.4-6.p09
changelog:
  - Type:bugfix
  - ID:[Task#514047]
  - SUG:NA
  - DESC:libmultipath: check if user_friendly_name is in use


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p18
changelog:
  - add patch 18:kylin_activation_fix_103100.patch
  - bug 103100:【济宁市委】ukey激活异常 
  - 本次更新解决激活ukey后会导致断错误,移除了华为可信1.3.10-10到1.3.10-17版本.


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p20
changelog:
  - add patch30 kylin_activation_fix_103100_ukey_activation_error.patch
  - bug 103100 ukey激活异常，优化激活过程。使界面不弹出Marco，系统不卡顿。


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p22
changelog:
  - Type:bugfix&task
  - ID:[BUG#122719] [TASK#88923] 
  - SUG:NA
  - DESC:limit dbus method import_auth_file


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.2-1.p33.07
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387985][BUG#390917]
  - SUG:NA
  - DESC: mv autostart to libkylin-activation
          fix kms ui miss deactivate button
          fix kms ui deactivate set autoactivated=0


author: liyunqing<liyunqing@kylinos.cn>-3.0.1s1-1.p06
changelog:
  -add patch6:kylin-computer-viewer-3.9.1s1-kylin-meminfo-incorrect.patch
  -add patch5:kylin-computer-viewer-3.9.1s1-kylin-modify-HDD-unit.patch


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#117856]
  - SUG : NA
  - DESC: add Patch18 kylin-computer-viewer-3.9.1s1-kylin-delete-comment.patch


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p20
changelog:
  - Type: bugfix
  - ID  : [TASK#90519]
  - SUG : NA
  - DESC: add Patch19 kylin-computer-viewer-3.9.1s1-kylin-fix-fortify-3.patch


author: peijiankang <peijiankang@kylinos.cn> -3.0.1s1-1.p22
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: kylin-computer-viewer-add-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> -3.0.1s1-1.p24
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: add patch:kylin-computer-viewer-3.9.1s1-kylin-update-HK-pdf.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p26
changelog:
  - Type: update
  - ID: [TASK#187798]
  - SUG: NA
  - DESC:add patch:kylin-computer-viewer-3.9.1s1-kylin-change-copyright-for-sp4.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p27
changelog:
  - Type: update
  - ID: [BUG#217688]
  - SUG: NA
  - DESC:kylin-computer-viewer-kylin-Whenthe-activation-is-not-expired-add-the-Extend-Service-button.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p28
changelog:
  - Type: update
  - ID: [BUG#222530]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-kylin-activation-delete-the-Extend-Service-button.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p29
changelog:
  - Type: update
  - ID: [TASK#369205]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-kylin-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p30
changelog:
  - Type: update
  - ID: [TASK#187789]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-add-get-v10-sp-version.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p31
changelog:
  - Type: bugfix
  - ID: [BUG#281681]
  - SUG: NA
  - DESC:update kylin-computer-viewer-3.9.1s1-add-get-v10-sp-version.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p32
changelog:
  - Type: update
  - ID  : [TASK#510971]
  - SUG : NA
  - DESC: add kylin-computer-viewer-3.9.1s1-kylin-add-customer-name.patch


author: huayadong <huayadong@kylinos.cn> -p41
changelog:
  - add patch:kylin-control-center-3.9.5-Fix-bug-48008-xrandr-resolution-list-inconsistent-with-control-panel.patch


author: mengchaoming<mengchaoming@kylinos.cn> - p46
changelog:
  - add patch45:kylin-control-center-3.9.5-kylin-3adm-adjust-the-display-items.patch
  - fix bug#57147
  - 三权分立下,调整了用户的显示项;
  - 对用户管理部分做了部分调整;
    - 三权后,root不能对auditadm、secadm用户进行修改密码、删除用户、更改头像等操作;
    - 加入用户label、汉化等;


author: huayadong <huayadong@kylinos.cn> -p48
changelog:
  - add Patch47:    0001-fix-chandao-bug-44426.patch
  - add Patch48:    0001-fix-chandao-bug-49137.patch
  - add Patch49:    0001-fix-chandao-bug-58997.patch
  - add Patch50:    0001-fix-chandao-bug-60615.patch
  - add Patch51:    0001-Fix-kylin-chandao-bug-54138.patch
  - add Patch52:    fix-bug-54106.patch
  - 合并龙芯补丁


author: mengchaoming<mengchaoming@kylinos.cn> -p51
changelog:
  - add patch55: kylin-control-center-3.9.5-kylin-fix-chandao-bug-92609.patch
  - root 用户修改自身密码需要输入旧密码，修改其他用户的密码不需要。


author: huayadong <huayadong@kylinos.cn> -p52
changelog:
  - add Patch56: kylin-control-center-3.9.5-kylin-fix-bugzilla-8314.patch
  - 修复把指针移动速度调节至最慢(最左),再次打开控制面板鼠标配置界面,显示指针移动速度跳至最快(最右)问题.


author: huayadong <huayadong@kylinos.cn> -p55
changelog:
  -- Type: bugfix
  -- ID  : [BUG#8485][bugzilla]
  -- SUG : NA
  -- DESC: add Patch58:kylin-control-center-3.9.5-kylin-fix-bugzilla-8485.patch
  	 屏蔽显示1024x768规格以下分辨率


author: huayadong <huayadong@kylinos.cn> -p56
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch59 kylin-control-center-3.9.5-kylin-Modify-adduser-rule.patch
          统一用户名密码创建规则.


author: huayadong <huayadong@kylinos.cn> -p57
changelog:
  - Type: bugfix
  - ID  : [BUG#110773]
  - SUG : NA
  - DESC: add Patch60 kylin-control-center-3.9.5-kylin-fix-mode-gsetting-change-but-program-interface-unchanged.patch 
          修复gsetting设置屏保模式后，界面未立即更改问题.


author: huayadong <huayadong@kylinos.cn> -p58
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch60 kylin-control-center-3.9.5-kylin-fix-the-problem-that-palindrome-detection-does-not-take-efffect.patch
          修复密码回文检测不生效问题.


author: huayadong <huayadong@kylinos.cn> -p58
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch61 kylin-control-center-3.9.5-kylin-fix-the-problem-that-palindrome-detection-does-not-take-efffect.patch
          修复密码回文检测不生效问题.


author: huayadong <huayadong@kylinos.cn> -p59
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch62 kylin-control-center-3.9.5-kylin-supplementary-password-configuration-rules.patch
          对密码设置增加规制限制.


author: huayadong <huayadong@kylinos.cn> -p60
changelog:
  - Type: bugfix
  - ID  : [BUG#122944]
  - SUG : NA
  - DESC: add Patch63 kylin-control-center-3.9.5-kylin-add-dictionary-detection-function-for-password-modif.patch


author: huayadong <huayadong@kylinos.cn> -p61
changelog:
  - Type: bugfix
  - ID  : [BUG#128211][BUG#136078]
  - SUG : NA
  - DESC: add Patch64 kylin-control-center-3.9.5-kylin-fix-adding-pictures-in-lock-screen-background-without-saving.patch
  	添加密码相似性检查，修复锁屏壁纸不保存问题.


author: huayadong <huayadong@kylinos.cn> -p63
changelog:
  - Type: bugfix
  - ID  : [BUG#144468]
  - SUG : NA
  - DESC: add Patch65 kylin-control-center-3.9.5-kylin-fix-password-verification-problems.patch
          修复root用户密码更新不对原密码进行校验.


author: huayadong <huayadong@kylinos.cn> -p64
changelog:
  - Type: bugfix
  - ID  : [BUG#151189]
  - SUG : NA
  - DESC: add Patch66 kylin-control-center-3.9.5-fix-crash-when-switching-lock-screen-mode.patch 
  	修复切换屏保模式时的崩溃问题。


author: huayadong <huayadong@kylinos.cn> -p65
changelog:
  - Type: bugfix
  - ID  : [Bug#158569]
  - SUG : NA
  - DESC: add Patch67 kylin-control-center-3.9.5-kylin-Merge-display-in-control-panel-for-users-with-the-same-UID.patch
  	为具有相同UID的用户在控制面板合并显示.


author: huayadong <huayadong@kylinos.cn> -p66
changelog:
  - Type: bugfix
  - ID  : [Bug#159672]
  - SUG : NA
  - DESC: add Patch68 kylin-control-center-3.9.5-kylin-fix-the-problem-that-the-screensaver-image-appears-black.patch
  	修复每次打开控制面板屏保预览都是黑色问题.


author: huayadong <huayadong@kylinos.cn> -p67
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: add Patch69 kylin-control-center-3.9.5-kylin-fix-the-same-uid-user-deletion-problem.patch


author: huayadong <huayadong@kylinos.cn> -p69
changelog:
  - Type: bugfix
  - ID  : [Bug#173828]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-network-browser-error-in-default-application.patch


author: huayadong <huayadong@kylinos.cn> -p70
changelog:
  - Type: bugfix
  - ID  : [Bug#173825]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-change-gtk-theme-blue-icon-for-kylin-blue-theme.patch


author: peijiankang <peijiankang@kylinos.cn> - p72
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: kylin-control-center-update-translations-for-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - p73
changelog:
  - Type: bugfix
  - ID:   [BUG#211927]
  - SUG:  NA
  - DESC: add 0001-kylin-control-center-memory-leak-fixs.patch


author: peijiankang <peijiankang@kylinos.cn> - p74
changelog:
  - Type: bugfix
  - ID:   [BUG#231576]
  - SUG:  NA
  - DESC: add kylin-control-center-3.9.5-kylin-fix-coredump-about-memory-leak.patch


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p08
changelog:
  - Add Patch6:kylin-menu-5.5.9-kylin-merge-xgs-patch.patch
  - 主要增加了菜单中的分类功能
  - 禁用菜单右键
  - 解决搜索框长按字符输入卡顿问题
  - 用户注销后卸载挂载的设备
  - 对相关应用的权限进行了限制,解决了禅道上一些bug;
  - 解决python-distutils-extra升级后的编译问题


author: liufeng<liufeng@kylinos.cn> - 5.5.9-3.1.p10
changelog:
  - add patch8: kylin-menu-5.5.9-Kylin-fix-click-user-button-no-response.patch
  - fix click user button no response. 
  - fix chandao bug 34693. (liufeng@kylinos.cn)


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p11
changelog:
  - add patch9: kylin-menu-5.5.9-kylin-fix-bug-42668-Unable-to-internationalize.patch
  - fix bug 42668
  - "新增菜单中的分类功能" 在英文模式下会导致应用丢失无法国际化，屏蔽


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p12
changelog:
  - add patch10: kylin-menu-5.5.9-kylin-fix-tw-and-hk-chinese.patch  ---xiaozai@kylinos.cn
  - fix bug 47488 
  - "将香港繁体和台湾繁体的开始菜单列表汉化
  - add patch11:kylin-menu-5.5.9-kylin-Solve-traditional-Chinese-and-English.patch
  - spec:注释掉patch9
  - "隐藏磁盘管理"
  - “保证语言在简体中文 繁体中文 英文在安装以及来回切换过程中保持风格一致且显示正常”


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p13
changelog:
  -add patch12:kylin-menu-kylin-strict-non-administrators-hide-system-monitor.patch
  -strict 模式下,非root用户 菜单隐藏 mate-system-monitor;fix bug 49504;


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p19
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch15: kylin-menu-5.5.9-delete-comment.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p20
changelog:
  - Type:bugfix
  - ID  :[bug#138701][bug#123656]
  - SUG :NA
  - DESC:add Patch16: kylin-menu-5.5.9-kylin-non-root-users-hide-shutdown-and-restart-functions.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p22
changelog:
  - Type:bugfix
  - ID  :[bug#139752]
  - SUG :NA
  - DESC:add patch17:kylin-menu-5.5.9-kylin-fix-the-default-mode-The-start-menu-has-no-gnome-logs.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p24
changelog:
  - Type:bugfix
  - ID  :[bug#169280]
  - SUG :NA
  - DESC:add patch18:kylin-menu-5.5.9-kylin-fix-clicking-on-MyComputer-twice-will-bring-up-three-folders.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p25
changelog:
  -Type:bugfix
  -ID:[BUG#195923]
  -SUG:NA
  -DESC:add patch 0001-fix-the-problem-that-windows-can-t-be-activated-when.patch
        fix the problem that windows can't be activated when start menu open


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p26
changelog:
  -Type:bugfix
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-traditional-chinese-translation-for-Logout.patch
        add missing traditional chinese translation for "Logout"


author: peijiankang <peijiankang@kylinos.cn> - 5.5.9-3.1.p27
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: update-timing-shutdown.desktop-and-kylinmenu.py-about-ranslations-of-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p29
changelog:
  - Type: bugfix
  - ID:   [TASK#572465]
  - SUG:  NA
  - DESC: add patch 0001-kylin-menu-fix-memory-leaks.patch
         fix potential memory leaks


author: Qin Fandong <qinfandong@kylinos.cn> - 10-24.6.p37.02
changelog:
  - Type: task
  - ID: [TASK#392855]
  - SUG: NA
  - Desc: Update EULA of V10 SP1.1
          Fix bad changelog
          Rebuilt package


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.04
changelog:
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: KYLIN-kylin-security-daemon-fix-sql-inject-by-retrieve.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.05
changelog:
  - Type: update
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复kysec-sync-notify中的sub_3960函数存在命令注入漏洞
  -         add patch: kylin-security-daemon-fix-fix-notify-get-file-type.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.06
changelog:
  - Type: bugfix 
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kylin-security-daemon-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#147906]
  - SUG:NA
  - DESC: 修复文件保护无法添加含有特殊字符文件名的文件
  -         add patch: kylin-security-daemon-fix-fpro-not-add-special-character-file-name-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题 
  -         add patch: kylin-security-daemon-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#154600]
  - SUG:NA
  - DESC: 修复设置模块防卸载是提示kmod_whlist不存在的错误
  -         add patch: kylin-security-daemon-fix-kmod-set-protect-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kylin-security-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.12
changelog:
  - Type: update 
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kylin-security-daemon-fix-parse-pyc-file-error-in-sp2-version.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> 1.0.21-3.se.14
changelog:
  - Type: update
  - ID: [BUG#342169]
  - SUG:NA
  - DESC: KVE-2022-0401
  -         add patch: kylin-security-daemon-kve-2022-0401.patch


author: zhangjun <zhangjun@kylinos.cn> - p10
changelog:
  - Type:task
  - ID:[TASK#89131]
  - SUG:NA
  - DESC:add patch kylin_verify_add_command_help_for_task_89131.patch


author: liwenchong <liwenchong@kylinos.cn> - p11
changelog:
  - Type:task
  - ID:[TASK#90991]
  - SUG:NA
  - DESC:add patch kylin_verify_code_modification_for_fortify_scan.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 1.0.10kord-se.06
changelog:
  - Add patch 0001-change-version-1.0.10.patch
    This patch only updated the tool's version to 1.0.10 from 1.0.7.


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.09
changelog:
  - Type: update
  - ID: [Task#104022]
  - SUG:NA
  - DESC: 修复kysec_get和kysec_set通过rpm查询命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-rpm-query-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#138162]
  - SUG:NA
  - DESC: dnf和dnf-3添加kysoft的执行标记
  -         add patch: kysec-utils-exectl-dnf-add-kysoft-label.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#127829]
  - SUG:NA
  - DESC: 修复模块标签是unknown是可以insmod的bug
  -       修复sh执行脚本，无法执行修改后还原的脚本
  -       修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kysec-utils-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.12
changelog:
  - Type: bugfix 
  - ID: [BUG#128013]
  - SUG:NA
  - DESC: 从audadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-audadm-list.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.13
changelog:
  - Type: bugfix 
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题
  -         add patch: kysec-utils-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.14
changelog:
  - Type: update
  - ID: [TASK#122582]
  - SUG:NA
  - DESC: 修复arm平台编译错误的问题
  -         add patch: kysec-utils-fix-arm-build-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.15
changelog:
  - Type: update
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kysec-uitls-fix-parse-pyc-file-error-in-sp2-version.patch


author: Martin Stransky <stransky@redhat.com> - 68.0.1-2
changelog:
  - Added fix for rhbz#1709840
  - Added node js wrapper to fix koji freezes
    (https://pagure.io/fedora-infrastructure/issue/8026)
  - Updated mozbz#1512162 for ppc64le


author: Huang Wenjun <huangwenjun-hf@loongson.cn> - 68.0.2-1
changelog:
  - MozID: 7361ab5c3ad21eb2de3dc730cb4da9f4ca41a7b9.
  - GerritID: eda7559d77ce6250bfe7d82b7e08c083080cd935.
  - First Release On Loongson 3A3000.
  - Build with LLVM CLANG.
  - Disable jemalloc, Because close crashed.
  - Disable system nss.
  - Fix JS Engine wasm mechanism bug.
  - Add support flash、WPS、Java Plugin.
  - Fixed chinese not display somewhere.
  - Change mesa verision check For WebGL.
  - Optimize snappy.
  - Fix filename display error when download file from https://wx.qq.com.
  - Fix black quard when use opengl backend.


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memleak in fdisk_script_read_file
         Fix heap-buffer-overflow in fdisk_partname
         Fix integer overflow in partno_from_devname


author: wangxiaomeng<wangxiaomeng@kylinos.cn> - 2.35.2-9.p02
changelog:
  - Type:bugfix
  - ID:[TASK#143321]
  - SUG:NA
  - DESC:backport patch to fix rounding in size_to_human_string()


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-9.p03
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: huangwenhua <huangwenhuag@kylinos.cn> - 2.35.2-9.p05
changelog:
  - Type:bugfix
  - ID:[TASK#172942]
  - SUG:NA
  - DESC: add patch 0001-fix-soft-link-missing.patch
          fix soft link missing


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-9.p07
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-9.p08
changelog:
  - Type:bugfix
  - ID:[TASK#497341]
  - SUG:NA
  - DESC:add patch:backport-libfdisk-dos-fix-default-partition-start.patch
         backport-tests-sfdisk-fill-correctly-gaps-if-default-start-re.patch
         backport-libfdisk-fix-last-free-sector-detection-if-partition.patch
         fix default partition offset creates overlapping partitions


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p22
changelog:
  - Add patch:libkylin_activation_add_print_expiration_time.patch
  - [TASK#66101]KMS2.2需求实现/新增一个终端命令来查询服务到期时间
  - 本次更新新增终端命令kylin_status_check -t来查询服务到期时间


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p39
changelog:
  - Type:update
  - ID:[BUG#122522][BUG#121006]
  - SUG:NA
  - DESC:kylin_activation_check improve permissions


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p43
changelog:
  - Type:update
  - ID:[TASK#102068][BUG#135390][BUG#134276]
  - SUG:NA
  - DESC:add limit time palce authorization (patch45)
         fix bug135390 (patch46)
         fix buf134276 (modify spec file)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p45
changelog:
  - Type:update
  - ID:[TASK#110237]
  - SUG:NA
  - DESC:Limited time unlimited site authorization activated when booting (patch48)


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p46
changelog:
  - Type:bugfix
  - ID:[BUG#137974]
  - SUG:NA
  - DESC:slove when replaceing the authorization file view computer properties then serial number changed (patch49)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p47
changelog:
  - Type:bugfix
  - ID:[BUG#152498]
  - SUG:NA
  - DESC:slove the problem of check error for private activation ordinary users (patch50)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p49
changelog:
  - Type:bugfix
  - ID:[BUG#166387]
  - SUG:NA
  - DESC:add buildrequires and requires  version of paho-c in spec


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p58
changelog:
  - Type: update
  - ID:[TASK#176779]
  - SUG:NA
  - DESC: add auto activation for kms privatization and fix bug 199947
  - DESC: cancel read hardinfo from khwid and five m extension


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.08
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.15
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387899][BUG#387025]
  - SUG:NA
  - DESC: hwid not use bios uuid
          vm client not use disk


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.21
changelog:
  - Type:update
  - ID:[TASK#642797]
  - SUG:NA
  - DESC:fix cpu=100% when can not connect to kms server 
         fix delete_post and KVE-2026-05155


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.22
changelog:
  - Type:bugfix
  - ID:[BUG#510541][BUG#510541][TASK#642797]
  - SUG:NA
  - DESC: optimize the mechanism for obtaining unique hardware identifiers
          fix mem leak and get virtio net pci addr
          fix get raid disk and is network disk
          fix cpu=100% when can not connect to kms server
          fix delete_post and KVE-2026-05155


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1.42.0-1.p01
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:backport CVE
  - add backport-replace-the-use-of-strtoul-and-strtol-with-parse_uint.patch
  - add backport-CVE-2023-35945.patch
  - add backport-CVE-2023-44487.patch


author: liyunqing <linyunqing@kylinos.cn> - 1.42.0-1.p02
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:backport CVE
  - add backport-CVE-2024-28182-1.patch
  - add backport-CVE-2024-28182-2.patch


author: liyunqing <liyunqing@kylinos.cn> - 1.18.22-4.p09.01
changelog:
  - Type:bugfix
  - ID:task#156283
  - SUG:NA
  - DESC: only display provider's name when country_code is none


author: liujilin <liujilin@kylinos.cn> - 1.18.22-4.p02
changelog:
  - add patch4: network-manager-applet-1.8.22-kylin-tooltip-shows-error.patch
  - network-manager-applet tooltips display error.


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.18.22-4.p03
changelog:
  - Add patch5 resolve bug2846
  - The desktop operating system has been resolved,modify the prompt content


author: mengchaoming<mengchaoming@kylinos.cn>--1.18.22-4.p09
changelog:
  -add patch10: nm-applet-1.8.22-kylin-fix-bug49556.patch
  -strict模式下，只有root用户显示左键菜单; 
  -strict模式下, 右键菜单只有root用户会显示全,其他用户只显示“连接信息"、“启用联网”
  -非strict 模式下,流程不变;


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: xinghe <xinghe2@h-partners.com> - 2:1.6.37-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: zhoukangyu <zhoukangyu@kylinos.cn> - -1.4.0-11.p03
changelog:
  - Type:update 
  - ID:[BUG#379147]
  - SUG:NA
  - DESC: add setting retry enforce_for_root and local_users_only options


author: zhangjun <zhangjun@kylinos.cn> 1.0-1.11.1.p01
changelog:
  - update spec:Install libRockeyARM.s0.0.3 library to /usr/lib/xxx-linux-gnu directory
  - bug102904平安银行定制iso授权Key激活失败
  - 本次更新修复将动态库安装到对应架构指定目录


author: wanghao <wanghao2@kylinos.cn> - 1.0-8kord.se.01
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: Meng Dehui <mengdehui@kylinos.cn> - 2.9-se.06
changelog:
  - AddPatch:libselinux-fix-ston-wrong.patch
  - Author:Meng Dehui
  - resume USER_AVC checks

  - RemovePatch:libselinux-20200326.patch
  - Author:Jiang Xingsong
  - fix user_avc wrong, Audit cannot be controlled by policy.


author: hanhuijie <hanhuijie@kylinos.com> - 2.9-4.se.02
changelog:
  - Type:update
  - ID:[任务#195738]同步libsemanage的补丁到sp1-libsemanage
  - SUG:NA
  - DESC:
  - [BUG#209238]【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  - add patch: libsemanage-homedircon.patch
  - desc:secadm和auditadm不存在,genhomedircon生成adm_home_t的定义。


author: xingxing <xingxing9@h-partners.com> - 0.7.14-5
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p02
changelog:
  - Type:cves
  - Id:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p03
changelog:
  - Type:cves
  - Id:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p06
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: houhongxun <houhongxun@kylinos.cn> - 2.71.0-4.p09
changelog:
  - Type:cves
  - ID:[TASK#593047][TASK#595441]
  - SUG:NA
  - DESC:fix CVE-2026-0719 CVE-2025-14523 CVE-2026-1761 CVE-2026-1539 CVE-2026-1467
         CVE-2026-0716 CVE-2026-2369 CVE-2026-1801 CVE-2026-1760


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaihuiying <eaglegai@163.com> - 0.9.4-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.4-15
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.9.0-10
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: Yu Peng <yupeng@kylinos.cn> - 1.27-14.p01
changelog:
  - Type:bugfix
  - ID:[Task#456739]
  - SUG:NA
  - DESC:sync community patches:
         backport-libteamdctl-validate-the-bus-name-before-using-it.patch


author: wangye <wangye70@huawei.com> - 4.1.0-2
changelog:
  - Type:cves
  - ID:CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524
  - SUG:NA
  - DESC: fix CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524


author: Like <like@kylinos.cn> - 4.1.0-5.p01
changelog:
  - Type:cves
  - ID:CVE-2022-0908 and CVE-2022-0891
  - SUG:NA
  - DESC:fix CVE-2022-0908 and CVE-2022-0891


author: sunjialin <sunjialin@kylinos.cn> - 4.1.0-5.p02
changelog:
  - Type:cves
  - ID:CVE-2022-0907 CVE-2022-0909 CVE-2022-0924 CVE-2022-0865
  - SUG:NA
  - DESC:fix CVE-2022-0907 CVE-2022-0909 CVE-2022-0924 CVE-2022-0865


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:update
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Lizhanchun <lizhanchun@kylinos.cn>
changelog:
  - add phytium support host-model on aarch64
  - Kunpeng-920 skip virQEMUCapsInitCPUModel() for host-model functional.


author: wangshuo <wangshuo@kylinos.cn> - 6.2.0-11.p03
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Add Patch0035-0037, add loongson mips64el support
  -      Modify spec file, add BuildRequires of rbd, without storage zfs and disable werror


author: wangguochun <wangguochun@kylinos.cn> - 6.2.0-11.p05
changelog:
  - Type: Bug
  - ID: [BUG#210217]
  - SUG:NA
  - DESC:Add mips64 CPU host-model support, depends on X86 and ARM CPU.


author: lilong <lilong@kylinos.cn> - 6.2.0-11.p06
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-11.p08
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: fuanan <fuanan3@h-partners.com> - 2.9.10-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.10-43.p03
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.9.10-43.p07
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794、CVE-2025-49796、CVE-2025-6170
  - SUG:NA
  - DESC: fix CVE-2025-49794、CVE-2025-49796、CVE-2025-6170


author: zuo <zuohongsheng@kylinos.cn> - 2.9.10-43.p13
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 20241017-1.p02
changelog:
  - Type:cves
  - ID:[Task#536541]
  - CVE:CVE-2024-36350 CVE-2024-36357
  - SUG:NA
  - DESC:Fix CVE-2024-36350 CVE-2024-36357


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.16.1-4.p04
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix window minimize animation to wrong direction


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: sunjialin <sunjialin@kylinos.cn> - 1:10.3.39-1.p01
changelog:
  - Type: bugfix
  - ID: TASK#116655
  - SUG: NA
  - DESC: Add patch for loongarch64 build & patch added by xuhe@kylinos.cn


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p02
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p21
changelog:
  - Type: bugfix
  - ID:   [TASK#220038]
  - SUG:  NA
  - DESC: don't repeatedly reset desktop background which was used by caja


author: Zhao Penghui <zhaopenghui@kylinos.cn> - 20150918kord0ukui58.xgs.09
changelog:
  - Add Patch9: 修复服务器日志中dpkg报错的问题，添加服务器和桌面的判断.
    Modify the SPEC, add BuildRequires: libkylinos-type-devel;Requires: libkylinos-type


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p12
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-tranditional-chinese-translation.patch


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#205717]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-some-missing-translations-for-ca.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p14
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0001-fix-mate-indicators-memory-leaks.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p15
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0002-fix-mate-indicators-memory-leaks.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p16
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add Requires: mate-panel-libs >= 1.12.2-1kord37.p10.a.ky10


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#449341]
  - SUG : NA
  - DESC: add patch 0003-fix-mate-indicators-memory-leaks.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p05
changelog:
  -Type:bugfix
  -ID:[BUG#194507]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-system-monitor-menu-if-current-user-is-no.patch
        don't show system monitor when not logged in as root


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: jianghong <jianghong@kylinos.cn> 1.12.1-1kord30~rc3
changelog:
  - mate-power-manager (1.12.1-1kord30~rc3) juniper; urgency=medium
  - power mode selection for longson computer.


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn> - 1.16.1-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus, add  Requires: kylin-menu


author: gaohaobo <gaohaobo@kylinos.cn> - 1.12.2-1kord13.p01
changelog:
  - add patch0 to  remove Hibernate&Suspend feature form  logout dialog ,cause we don't need it on server version


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch60 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: peijiankang <peijiankang@kylinos.cn>- 1.12.2-1kord13.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#194919]
  - SUG : NA
  - DESC: add Patch4 mate-session-manager-1.12.2-kylin-add-min-and-max-for-idle-delay.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.12.2-1kord13.p07
changelog:
  -Type:bugfix
  -ID:[BUG#203419]
  -SUG:NA
  -DESC:add patch 0001-mate-session-manager-add-missing-translations-for-zh.patch


author: douyan <douyan@kylinos.cn>- 1.12.2-1kord13.p08
changelog:
  -Type:bugfix
  -ID:[BUG#205945]
  -SUG:NA
  -DESC:add patch mate-session-manager-1.12.2-kylin-fix-autostart-process-no-quit-when-loggingout.patch


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p09
changelog:
  - Type: bugfix
  - ID  : [Task#573493]
  - SUG : NA
  - DESC: add patch7: mate-session-manager-1.12.2-kylin-fix-core-problem-caused-by-long-uid.patch
          修复当用户uid过长导致会话管理器崩溃.


author: mengchaoming<mengchaoming@kylinos.cn> 1.24.0-1.p01
changelog:
  --add patch:mate-system-monitor-1.24.0-kylin-del-help.patch
  --add patch:mate-system-monitor-1.24.0-kylin-adjust-proc-spacing.patch


author: wangming <wangming1@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID: chandao116445
  - SUG: NA
  - DESC: Solve the problem that the graphics can still operate when the process stoped.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: huayadong <huayadong@kylinos.cn> - 1.1.6-0.4.gitfb4118d.13
changelog:
  - Type: bugfix
  - ID  : [BUG#264497]
  - SUG : NA
  - DESC: add patch8:linuxmint-mintlocale-fb4118d-fix-sensitive-flags.patch


author: xuhe <xuhe@kylinos.cn> - 2.0.11-1
changelog:
  - Fix build bug: add environment MP_USE_MY_EXTUTILS_EMBED=1 under
  - build, install, check sections
  - Fix build bug: make it force running even if check section failed


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: Like <like@kylinos.cn> - 2.15.03-2.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:tranplat Patch6003: 0001-change-log-level.patch from nasm-2.13.03-4.p01


author: Like <like@kylinos.cn> - 2.15.03-6.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:tranplat Patch6006: 0001-change-log-level.patch from nasm-2.13.03-4.p01


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: gongxingliang <gongxingliang@kylinos.cn> - 2.15.05-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:tranplat Patch6004: 0001-change-log-level.patch from nasm-2.15.03-7.p01


author: gongxingliang <gongxingliang@kylinos.cn> - 2.15.05-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:tranplat Patch10000: 0001-change-log-level.patch from nasm-2.15.03-7.p01


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: zhangchaorui <zhangchaorui@kylinos.cn> - 6.2-7.p01
changelog:
  - Add patch: ncurses-support-loongarch.patch
  - Modify config.sub/config.guess for supporting loongarch


author: likai01 <likai01@kylinos.cn> - 5.8-8.p01
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: baiguo <baiguo@kylinos.cn> - 5.8-7.p05
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is nul


author: Shao Jiansong <shaojiansong@kylinos.cn> - 5.8-7.p09
changelog:
  - Type:bugfix
  - ID:[Task#197896]
  - SUG:NA
  - DESC:fix double free when use snmpbulkget or snmpbulkwalk with special params.


author: Shao Jiansong <shaojiansong@kylinos.cn> - 5.8-7.p10
changelog:
  - Type:bugfix
  - ID:[Task#197896]
  - SUG:NA
  - DESC:add kylin-backport-net-snmp-5.8-v3-forward.patch and fix error when truncate msg.


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2.4.2-2.p06
changelog:
  - Type:bugfix
  - ID:[BUG#343916]
  - SUG:NA
  - DESC:systemd: install nfsdcld.service when nfsdcld is enabled


author: yuxiangyang <yuxiangyang4@huawei.com> - 1:1.16.1-2
changelog:
  - delete http_stub_status_module.This configuration creates a simple
    web page with basic status data,but it will affect cpu scale-out because
    it use atomic cas.


author: Like <like@kylinos.cn> - 1:1.16.1-9.p01
changelog:
  -Type:bugfix 
  -ID:BugID#74947
  -DESC:set with_mailcap_mimetypes 1 to fix nginx conflicts with mailcap


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p09
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p10
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: Stephen Gallagher <sgallagh@redhat.com> - 1:14.17.6-1
changelog:
  - Update to 14.17.6
  - https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.17.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1:14.18.0-1
changelog:
  - Update to 14.18.0
  - https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.18.0


author: Stephen Gallagher <sgallagh@redhat.com> - 1:14.18.1-1
changelog:
  - Update to security release 14.18.1
  - https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.18.1


author: Stephen Gallagher <sgallagh@redhat.com> - 1:14.18.2-1
changelog:
  - Update to bugfix release 14.18.2
  - Fixes a regression in DNS lookups of CNAME records with an underscore
  - https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.18.2


author: Stephen Gallagher <sgallagh@redhat.com> - 1:14.18.3-1
changelog:
  - Security release 14.18.3
  - Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
  - Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
  - Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
  - Prototype pollution via `console.table` properties (Low)(CVE-2022-21824)


author: Stephen Gallagher <sgallagh@redhat.com> - 1:14.19.0-1
changelog:
  - Update to Node.js 14.19.0
  - Node.js now includes Corepack
  - ICU has been updated to 70.1
  - New option (--no-addons) to disable loading of native addons
  - Updated Root Certificates


author: Stephen Gallagher <sgallagh@redhat.com> - 1:14.19.0-3
changelog:
  - Drop executable bit on powershell scripts (bz2053637)
  - Add gating.yaml for installability and dependency checks


author: panzhe <panzhe@kylinos.cn> - 3.54.0-9.p01
changelog:
  - Type:CVE
  - CVE:CVE-2022-22747
  - CVE:CVE-2023-0767
  - SUG:NA
  - DESC: fix CVE-2022-22747 CVE-2023-0767


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#337735]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: juntao<songjuntao@kylinos.cn> - 8.2P1-0.p06
changelog:
  - use international algorithm standards as default config
  - fix keyscan host key
  - add the sm2 host key always ready


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p12
changelog:
  - Type:update
  - ID:TASK#184873
  - SUG:NA
  - DESC:fix ssh-agent core dump when ssh-add exec add library


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p15
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC: support sm3 hmac feature, add ssh change mode script, 
  	enable ssh login without password and fix algo show problem,
          update ssh finger print hash and fix memory leak


author: liuming <liuming@kylinos.cn> - 8.2P1-9.p23
changelog:
  - Type: update
  - ID: TASK#554963
  - SUG: NA
  - DESC: backport feature of ChannelTimeout/UnusedConnectionTimeout


author: liuming <liuming@kylinos.cn> - 8.2P1-9.p24
changelog:
  - Type: update
  - ID: TASK#567487;BUG#247641;BUG#345532
  - SUG: NA
  - DESC: remove abandoned configs: RSAAuthentication/RhostsRSAAuthentication;
          rm sha1 in MACs and KexAlgorithms, and mv etm to MACs head


author: jiaocong <jiaocong@kylinos.cn> - 8.2P1-9.p27
changelog:
  - Type: update
  - ID: TASK#608701
  - SUG: NA
  - DESC: add comment for strict scp check option in sshd_config


author: liuming <liuming@kylinos.cn> - 8.2P1-9.p29
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: like <like@kylinos.cn> - 1:1.1.1f-4.p01
changelog:
  - Add kylin patch to fix CVE-2021-3449
  - Add modify the spec file , set sslarch=linux64-mips64el for mips64


author: Like <like@kylinos.cn> - 1:1.1.1f-4.p03
changelog:
  - Type:cves
  - ID:CVE-2021-3711 and CVE-2021-3712
  - SUG:NA
  - DESC:Fix the CVE-2021-3711 and CVE-2021-3712


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 1:1.1.1f-4.p10
changelog:
  - Type:cves
  - ID:CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286
  - SUG:NA
  - DESC:Fix CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286


author: shaoning <shaoning@kylinos.cn> - 1:1.1.1f-4.p11
changelog:
  - Type:cves
  - ID:CVE-2023-0464、CVE-2023-0466、CVE-2023-0465
  - SUG:NA
  - DESC:Fix CVE-2023-0464、CVE-2023-0466、CVE-2023-0465


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p17
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p27
changelog:
  - Type:update
  - ID:TASK#560665
  - SUG:NA
  - DESC:solve some tls and national encryption suite usage issues under
         kylin server V10 and V11 systems


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p28
changelog:
  - Type:update
  - ID:TASK#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160、CVE-2026-22796、CVE-2026-22795、
             CVE-2025-69418、CVE-2025-69421、CVE-2025-69419、
             CVE-2025-69420


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p29
changelog:
  - Type:update
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-28390,CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p30
changelog:
  - Type:update
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-42766,
             CVE-2026-45447


author: zhaojingyu <zhaojingyu@kylinos.cn> - 20200203-1.05
changelog:
  - Type: bugfix
  - ID: [BUG#142373]
  - SUG: NA
  - DESC: add patch0007:0001-fix-bug-virt-manager-min-memory.patch, fix virt-manager memory bug


author: huangwenhua <huangwenhua@kylinos.cn> - 20200203-1.p06
changelog:
  - Type: bugfix
  - ID: [Bug#69916]
  - SUG: NA
  - DESC: add patch:0002-add-eol-date.patch 
  	add eol-date for kylin-10.0.xml


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: gongxingliang <gongxingliang@kylinos.cn> - 1.4.0-1.p08
changelog:
  - Type:cves
  - ID:CVE-2024-22365 CVE-2024-10963
  - SUG:NA
  - DESC:add patch 6001 to fix CVE-2024-22365,add patch 6002 6003 6004 6005 to fix CVE-2024-10963


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.4.0-1.p11
changelog:
  - Type:update
  - ID: [TASK#547425]
  - SUG:NA
  - DESC: bugfix on cannot open database file
          Use gdbm


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: yinyongkang <yinyongkang@kylinos.cn> - 1.8.23-9.p01
changelog:
  - Type: bugfix
  - ID: [BUG#344744]
  - SUG: NA
  - DESC: Exit with EXIT_SUCCESS on shutdown to please systemd


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - More Makefile.PL updates
    - Makefile.PL now checks for a working compiler using ExtUtils::HasCompiler
      (inlined into the build) rather than ExtUtils::CBuilder (CPAN RT#113685)
  - Simplify find command using -delete
  - Fix EPEL conditional - only currently buildable for EPEL 7 onwards
  - Drop BR: for Test::Pod::No404s, which breaks koji builds


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Added 5.27.7 changes (CPAN RT#123948)
    - Added cperl class keywords
    - Added keywords per version back to 5.004
  - Drop legacy Group: tag
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 2.24-1
changelog:
  - Update to 2.24
    - Delete from caveats in documentation where it used to say:
        'Config::Tiny will only recognize the first time an option is set in a
         config file. Any further attempts to set the same option later in the
         config file are ignored.'
      In reality the code uses the 2nd and subsequent values to overwrite earlier
      values
    - Make this topic a new FAQ
    - Add corresponding test t/06.repeat.key.t
    - Update POD to clarify trailing comment options
    - Add corresponding test t/07.trailing.comment.t
    - Romanize Gregory Kidrenko's name so Config::IniFiles does not get 'Wide
      char in print'
    - Move xt/pod.t to xt/author/pod.t
    - Adopt new repo structure: see
      http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html
    - Move require 5.008001 from Tiny.pm into Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 0.0010-1
changelog:
  - Update to 0.0010
    - Makefile.PL: better prereqs declaration
    - Documentation typo fix
  - Switch upstream from search.cpan.org to metacpan.org
  - Drop legacy Group: tag
  - Use plain 'perl' instead of '%{__perl}' macro
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.05-10
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.9-17
changelog:
  - Specify all explicitly-used build requirements
  - Remove some legacy cruft
    - Drop BuildRoot: and Group: tags
    - Drop explicit %clean section
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.9-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.14-1
changelog:
  - Update to 0.14
    - A couple of minor optimizations (GH#8)
  - BR: perl-generators
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    - Switch to GitHub Issues
  - Author/Release tests moved to xt/, so don't bother trying to run them


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    - Generated exception classes are now added to %INC; if you subclass a
      generated class with "use base" then base.pm will no longer attempt to load
      the requested class (GH#8)


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    - The full_message() method in Exception::Class::Base now calls message()
      instead of accessing the object's hash key, which makes it easier to
      override message() in a subclass (GH#11)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    - You can now pass "frame_filter", "filter_frames_early" and "skip_frames"
      to the throw() method of an exception class; these will be passed on to
      the Devel::StackTrace constructor (GH#6)


author: Paul Howarth <paul@city-fan.org> - 1.15-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Replace source files filter patch with a less invasive workaround
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 6.05-1
changelog:
  - Update to 6.05
  - Add %license tag
  - Repllace calls to %{__perl} with /usr/bin/perl
  - Replace call to "make pure_install" with %{make_install}
  - Replace calls to make with %{make_build}


author: Paul Howarth <paul@city-fan.org> - 0.52-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Unbundle inc::Module::Install
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.07-30
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Retain timestamp of Jcode/Nihongo.pod when patching


author: Petr Pisar <ppisar@redhat.com> - 1:0.65-13
changelog:
  - Correct misspellings in Net::LDAP::FAQ
  - Perform tests against a server
  - Net::LDAP::DSML moved to perl-Net-LDAP-DSML package due to XML dependencies


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - classify buildreqs by usage
  - make %files list more explicit
  - don't need to remove empty directories from the buildroot


author: Petr Pisar <ppisar@redhat.com> - 0.09-10
changelog:
  - Break build cycle when bootstrapping (Test::CleanNamespaces →
    Package::Stash → Module::Implementation)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 8.23-1
changelog:
  - Update to 8.23
  - Replace calls to %{__perl} with /usr/bin/perl
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to "make" with %{make_build}
  - Pass NO_PERLLOCAL=1 to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 0.19-27
changelog:
  - Spec tidy-up
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit
    - Use tabs consistently


author: Paul Howarth <paul@city-fan.org> - 1.250-1
changelog:
  - Update to 1.250
    - Support postfix dereference
    - Add support for lexical subroutines from perl-5.26
    - Support key-value and index-value slices in PPI::Token::Symbol symbol
      method
    - Support indented here-docs
    - Parse list-embedded curlies as hash constructors
    - Keep exponents of 2 or more zeroes from trapping PPI in an endless loop
    - Remove dependencies on vars, base and List::MoreUtils
    - Remove dependency on File::Remove
    - Reduce globals and cross-package variables
    - Move to Dist::Zilla
    - Add some tests including a TODO test for misparse bug on '(1)-1'
    - Allow tests to run without pre-determined module versions
    - Make xt/api.t skip/run properly
    - Fix some typos and formatting in Changes
    - Add travis-perl helper to be run before install
    - Update versions of Perl Travis tests on
  - Modernize spec using %{make_build} and %{make_install}
  - Don't try to run the release tests in the package build


author: Paul Howarth <paul@city-fan.org> - 1.262-1
changelog:
  - Update to 1.262
    - Add support for the double diamond (<<>>) input operator
    - Adjust position of a todo marker to not catch a passing test
    - Recognize `for (;<$foo>;) {}` as containing a readline operator
    - Remove accidentally included use of Test::InDistDir
    - Allow all PPI::Document instances to have a filename attribute
    - Allow underscores in vstrings
    - Convert newlines in some raw test files from win32 to unix


author: Paul Howarth <paul@city-fan.org> - 1.266-1
changelog:
  - Update to 1.266
    - Prevent heredoc terminator detection triggering regex errors
    - Small clean-ups
  - Work around test failures caused by DOS line endings in test data files
    (https://github.com/adamkennedy/PPI/issues/243)


author: Paul Howarth <paul@city-fan.org> - 0.28-10
changelog:
  - Classify buildreqs by usage
  - Use %license where possible
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - The source_for() exported by Params::ValidationCompiler did not work at all
      (GH#16)


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - All exceptions now include a stack trace by default when treated as a
      string; this makes finding where validation failed a lot easier (GH#18)
    - The name for a subroutine is now used in some exception messages, even if
      Sub::Util cannot be installed


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - The exceptions.t test would fail if Sub::Util was not installed (GH#19)
    - Fix test failures on Windows (GH#20)


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Fixed a bug with inlining Moose types: if a type's parent needed
      environment variables, those would not get closed over (GH#22)
    - Added a debug option to dump the source of the subroutine before it is
      eval'd


author: Paul Howarth <paul@city-fan.org> - 1.967014-1
changelog:
  - Update to 1.967014
    - Add a newline to package declaration lines in precompiled parsers, to keep
      CPAN from indexing them (CPAN RT#110404)
    - Provide repository and bugtracker entries in MYMETA.* (CPAN RT#110403)
    - Update tests to handle '.' no longer being part of @INC in perl-5.26.0
      (CPAN RT#120415)


author: Paul Howarth <paul@city-fan.org> - 1.134-1
changelog:
  - Update to 1.134
    New Features
    - Added new policy BuiltinFunctions::ProhibitShiftRef (GH#837)
    - Support indented heredocs (GH#861)
    - In Subroutines::ProhibitManyArgs, you can now omit the object variable
      (C<$self> or C<$class>) from the argument count (GH#815)
    Policy Changes
    - The policy Documentation::RequirePodLinksIncludeText is obsolete and has
      been removed (GH#494)
    Dependencies
    - Removed use of File::HomeDir
    - Upgrade to PPI 1.265 (GH#860)
    - Fix failed tests caused by new PPI (GH#858)
    Internals
    - Updated the Appveyor config (GH#851)


author: Paul Howarth <paul@city-fan.org> - 1.38-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit
    - Bootstrapping not required for EPEL-8
    - Drop redundant dependency filter


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Adapt to dot no longer being in @INC
    - Adapt to unicode syswrite being deprecated
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.200-1
changelog:
  - Update to 0.200
    - Reimplement in pure Perl, with a dynamic dependency on a new Ref::Util::XS
      module that contains the fast XS implementation
  - This release by ARC → update source URL
  - Package is now noarch


author: Paul Howarth <paul@city-fan.org> - 0.203-1
changelog:
  - Update to 0.203
    - Fix space/tab issue in Makefile
    - Don't use DynamicPrereqs for unrelated Makefile.PL snippet
    - Use of the Pure-Perl implementation can now be forced at runtime by setting
      either $Ref::Util::IMPLEMENTATION or $ENV{PERL_REF_UTIL_IMPLEMENTATION} to
      "XS"
    - Fix is_*_formatref() error messages (GH#38)
    - Speed enhancements for is_*_formatref() on 5.8+
    - Restore 5.6 and 5.8 compatibility
    - PP behaviour now matches XS for \v1.2.3 and \sub {}
    - Updated documentation to reflect the PP/XS split


author: Paul Howarth <paul@city-fan.org> - 0.204-1
changelog:
  - Update to 0.204
    - Fix Makefile.PL so that the 'install' sub is patched before WriteMakefile()
      is called (GH#41)


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Paul Howarth <paul@city-fan.org> - 2017060201-11
changelog:
  - Tidy up for EPEL-8 build
    - Specify all build dependencies
    - Expand %description
    - Add patch to fix POD so we get properly-coded manpage
    - Modernize spec using %{make_build} and %{make_install}
    - Make %files list more explicit
    - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37
    - Possible fix for very weird failures seen under threaded Perls with some
      modules that use Specio


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Simplify checks for overloading to not call overload::Overloaded(); just
      checking the return value of overload::Method() is sufficient


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Many bug fixes and improvements to the types created by
      {any,object}_{can,does,isa}_type; in some cases, an invalid value could
      cause an exception in type check itself, and in other cases, a value that
      failed a type check would cause an exception when generating a message
      describing the failure
    - The messages describing a failure for all of these types have been improved
    - You can now create anonymous *_does and *_isa types using the exports from
      Specio::Declare


author: Paul Howarth <paul@city-fan.org> - 0.40-1
changelog:
  - Update to 0.40
    - Fixed more bugs with {any,object}_{can,does,isa}_type
      - When passed a glob (not a globref) they would die in their type check
      - On Perl 5.16 or earlier, passing a number to an any_* type would also die
    - Fixed subification overloading: if Sub::Quote was loaded, this would be
      used, but any environment variables needed for the closure would not be
      included, which broke enums, among other things


author: Paul Howarth <paul@city-fan.org> - 0.42-1
changelog:
  - Update to 0.42
    - Fixed checks for whether a class is loaded in light of upcoming
      optimization in Perl 5.28 (GH#12)
    - The Perl library claimed it provided types named LaxVersionStr and
      StrictVersionStr but they were really named LaxVersion and StrictVersion;
      the names have now been fixed to match the documentation, so they are
      LaxVersionStr and StrictVersionStr


author: Paul Howarth <paul@city-fan.org> - 2.40-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Convert Changes file to UTF-8
    - Fix permissions verbosely
    - Don't need to remove empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18
    - Escape { and } (CPAN RT#124147)
  - This release by SREZIC → update source URL
  - Specify all dependencies
  - Simplify find command using -delete
  - Use %license where possible
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Paul Howarth <paul@city-fan.org> = 0.101082-11
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant permission fixing in %prep section
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.02-1
changelog:
  - Update to 2.02
    - Altered a test to not bake @INC into -I options for a subprocess, to avoid
      too-long commands


author: Paul Howarth <paul@city-fan.org> - 1.25-2
changelog:
  - Tidy up for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Modernize spec using %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.10-1
changelog:
  - Update to 1.10
    - Switch packaging to Dist::Zilla, which makes the distribution installable
      again on perl 5.27.7 (CPAN RT#123867)
  - This release by ETHER ⇒ update source URL
  - Use %license where possible
  - Enhance %description
  - Drop EL-5 support
    - Drop legacy BuildRoot: and Group: tags
    - Drop redundant buildroot cleaning


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-15
changelog:
  - Add Test-Taint-1.06-Test-taintedness-on-X-instead-of-environment-variabl.patch.
    (Address RHBZ#1413022, F26FTBFS)


author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31
    - Improve support for warnings with trailing newlines
  - This release by BIGJ → update source URL
  - Classify buildreqs by usage
  - Simplify find command using -delete
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.03-1
changelog:
  - Update to 0.03
    - Add the $SIG{__WARN__} hook in an INIT block; we really don't want to
      trigger this because of a compile-time warning, and because of a bug in
      Test::Builder, this can actually cause the warning to be lost entirely
      (https://github.com/Test-More/test-more/issues/729)
    - The Test2::Event::Warning event now returns true for increments_count,
      which means that the test failure caused by a warning will not be output
      as a TAP test line; previously this was just seen as a diag line, which
      could be quite confusing
      (https://github.com/Test-More/test-more/issues/728)


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04
    - Load Test2::Event::Warning in the plugin instead of relying on Test2 to do
      it for us; this should avoid the bug fixed in the previous version and
      eliminates the need for the INIT block, which caused its own problems


author: Paul Howarth <paul@city-fan.org> - 0.05-1
changelog:
  - Update to 0.05
    - Skip compile.t on Windows; this test uses IPC::Run3, which doesn't seem to
      work well on that platform (CPAN RT#118443)


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Warnings inside a subtest were not emitted as TAP events, breaking the TAP
      and making for great confusion: this is because of a bug in the core TAP
      formatter (https://github.com/Test-More/test-more/issues/776); warnings
      are now emitted as Ok events instead of Warning events


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.92-1
changelog:
  - Update to 1.92
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PERLLOCAL=1 to Makefile.PL
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to "make" with %{make_build}
  - Remove patch (no longer needed)


author: Petr Pisar <ppisar@redhat.com> - 0.28-3
changelog:
  - Break build-cycle: perl-namespace-autoclean → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Break build-cycle: perl-namespace-autoclean → perl-Mouse → perl-Moose
   → perl-Package-DeprecationManager → perl-namespace-autoclean
  - Remove unused direct test dependency on Class::MOP


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Allow packages to be cleaned multiple times
    - Ensure the debugger workarounds are applied only when DB::sub is actively
      used (they are superfluous otherwise)
    - Work around P5#72210, resulting in fails on 5.8.8 -Duselongdouble
    - Fix incorrect name in META (CPAN RT#107813)
  - BR: perl-generators where available
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 20160302-1
changelog:
  - Update to 20160302
    - Corrected a minor problem in which an unwanted newline was placed before
      the closing brace of an anonymous sub with a signature, if it was in a
      list (CPAN RT#112534)
    - Corrected a minor problem in which occasional extra indentation was given
      to the closing brace of an anonymous sub in a list when the -lp parameter
      was set


author: Paul Howarth <paul@city-fan.org> - 20170521-1
changelog:
  - Update to 20170521
    - Includes fix for CVE-2016-10374: Uses current working directory without
      symlink-attack protection
    - See CHANGES for details of other bug fixes and enhancements
  - Simplify find command using -delete


author: liuxiong <liuxiong@kylinos.cn> - 7.2.10-18.p01
changelog:
  - add BuildRequire:libnl3-devel
  - modify  spec  global with_imap
  - add change-stronger-protocol.patch


author: xiehongyu <xiehongyu@kylinos.cn> - 7.2.10-18.p02
changelog:
  - Type:cves
  - ID:CVE-2022-31625 CVE-2022-31626
  - SUG:restart
  - DESC:Fix CVE-2022-31625 CVE-2022-31626


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p03
changelog:
  - Type:cves
  - ID:CVE-2024-8925、CVE-2024-8926、CVE-2024-8927、CVE-2024-9026
  - SUG:NA
  - DESC:fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-2756,CVE-2024-3096,CVE-2024-5458
  - SUG:NA
  - DESC:fix CVE-2024-2756,CVE-2024-3096,CVE-2024-5458


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p07
changelog:
  - Type:cves
  - ID:CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233
  - SUG:NA
  - DESC:fix CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: gaoyukun <gaoyukun@kylinos.cn> - 8.0.30-10.p01
changelog:
  - Type:compile
  - ID:[BUG#338391]
  - SUG:NA
  - Desc: Add --without-pcre-jit to resolve loongarch compilation failure


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Funda Wang <fundawang@yeah.net> - 8.0.30-12
changelog:
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Funda Wang <fundawang@yeah.net> - 8.0.30-13
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: lipengyu <lipengyu@kylinos.cn> - 8.0.30-13.p01
changelog:
  - Type:update
  - ID:[BUG#613863]
  - SUG:NA
  - Desc: Add --without-pcre-jit to resolve loongarch compilation failure


author: lijian <lijian01@kylinos.cn> - 1.2.3-18.p03
changelog:
  - Type:Task
  - ID:[Bug#408625]
  - SUG:NA
  - DESC: add fixes for php >= 8.0 (patches from Patrick Monnerat <patrick@monnerat.net>)


author: zhangbowei<zhangbowei@kylinos.cn> - 1:0.10.1-10.p03
changelog:
  - Type:bugfix
  - ID:[Bug#374071]
  - SUG:NA
  - DESC:change exec path from /usr/bin to /usr/local/bin about podman-docker,change man file from docker to podman


author: weiyucheng<weiyucheng@kylinos.cn> - 1:0.10.1-10.p04
changelog:
  - Type:CVE
  - CVE: CVE-2025-22870
  - SUG:NA
  - DESC:fix CVE-2025-22870 && update mips podman version same as x86/arm && fix mips build errors


author: songliyang <songlyang@kylinos.cn> - 0.116-12.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100: polkit-0.116-backport-Fix-two-minor-memory-leaks.patch. Author: mengchaoming
          3.Revert port polkit to mozjs78, use mozjs60 on v10 sp1


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2019-10872 CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: lichenguang <lichenguang@kylinos.cn> - 0.67.0-8.p03
changelog:
  - Type: cves
  - ID: CVE-2025-32364 CVE-2025-32365 CVE-2024-4141
  - SUG: NA
  - DESC: fix CVE-2025-32364 CVE-2025-32365 CVE-2024-4141


author: huayadong <huayadong@kylinos.cn> - 0.67.0-8.p04
changelog:
  - Type: cves
  - ID: [Task#460978]
  - SUG: NA
  - DESC: add Patch10008: poppler-0.67.0-kylin-backport-CVE-2024-6239.patch


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: modify spec according to 239koji:postgresql-10.5-12.p01:
  -- Modify spec file to add --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p02
changelog:
  - Type: BUG fix 
  - ID: NA
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel resolved conflicts


author: lilu <lilu@kylinos.cn> - 10.5-23.p07
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 and CVE-2026-2006


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: Xiao Zai<xiaozai@kylinos.cn> - 3.16-2.p01
changelog:
  - add Patch: pykickstart-3.16-kylin-fix-can-not-parse-float-size-for-parttition.patch
  - fix the Bug#3510,  to enable ksparser to parse the float type for partition size from ks file


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: wanggang <wanggang1@kylinos.cn> - 20.2.2-9.p08
changelog:
  - Type: CVEs
  - ID: CVE-2026-44431 CVE-2026-25645 CVE-2026-8643 CVE-2026-3219
  - SUG: NA
  - DESC: fix CVE-2026-44431 CVE-2026-25645 CVE-2026-8643 CVE-2026-3219


author: chenjianhu <chenjianhu@kylinos.cn> 44.1.1-3.p02
changelog:
  - Type:bugfux
  - ID: [BUG#460643]
  - SUG:NA
  - DESC: Fix the TypeError issue in the patch for CVE-2024-6345


author: shixuantong <shixuantong@huawei.com> - 4.15.1-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-28.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118587]
  - SUG:NA
  - DESC:update and modify spec file,delete cron.daily of rpm


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-5.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch1 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-5.p03
changelog:
  - Type:compile
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add support for loongarch64 in spec file to be homologous with loongarch.


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: yaoxin <1024769339@qq.com> - 1.4.4-1
changelog:
  - Update to 1.4.4 for fix CVE-2019-16785,CVE-2019-16786,CVE-2019-16789 and CVE-2019-16792
  - Add patches for CVE-2024-49769: DoS due to resource exhaustion


author: BruceGW<gyl93216@163.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: xuyujun <xuyujun@kylinos.cn> - 3.7.9-20.se.01
changelog:
  - add Python3-judge-python-file-run.patch
  - devel package add require libkysec-devel libsecurity1-devel
  - add buildrequire libsecurity1-devel


author: likai01 <likai01@kylinos.cn> - 3.7.9-20.p05.se
changelog:
  - Type:cves
  - ID:CVE-2020-10735 CVE-2022-45061 CVE-2022-37454
  - SUG:NA
  - DESC:Fix CVE-2020-10735 CVE-2022-45061 CVE-2022-37454


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-20.p10.se
changelog:
  - Type:CVE
  - ID:[TASK#373363]
  - SUG:NA
  - DESC:fix CVE-2007-4559
  -      fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-20.p11.se
changelog:
  - Type:CVE
  - ID:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: chenjianhu <chenjinahu@kylinos.cn> - 3.7.9-20.p15.se
changelog:
  - Type:CVE
  - ID:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
       CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
         CVE-2025-4330 CVE-2025-4435


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-20.p17.se
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: liuxiong <liuxiong@kylinos.cn> - 3.7.9-7.p02
changelog:
  - Type:cves
  - ID:CVE-2021-23336
  - SUG:NA
  - DESC:fix CVE-2021-23336 and revert fix a reference leak if a thread is not joined


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch10 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488
  -- add unbound pid dir to fix unbound.service faild


author: Like <like@kylinos.cn> - 1.11.0-2.p06
changelog:
  - Type:cves
  - CVE:CVE-2024-8508 CVE-2024-33655
  - SUG:NA
  - DESC:add patch 15,16 fix CVE-2024-8508 CVE-2024-33655


author: lifeifei <lifeifei@kylinos.cn> - 1.11.0-2.p08
changelog:
  - Type:cves
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:fix CVE-2025-11411
         backport upstream to add CVE-2025-5994's after patches


author: backport from qemu upstream v4.0.1 release
changelog:
  - tpm: Exit in reset when backend indicates failure
  - tpm_emulator: Translate TPM error codes to strings


author: backport from qemu upstream
changelog:
  - linux headers: update against "KVM/ARM: Fix >256 vcp
  - intc/arm_gic: Support IRQ injection for more than 256 vpus
  - ARM: KVM: Check KVM_CAP_ARM_IRQ_LINE_LAYOUT_2 for smp_cpus > 256


author: Huawei Technologies Co., Ltd. <fangying1@huawei.com>
changelog:
  - 9pfs: Fix a possible memory leak in local_link
  - scsi-disk: disk define props in scsi_block to avoid memleaks
  - arm/translate-a64: fix uninitialized variable warning
  - nbd: fix uninitialized variable warning
  - xhci: Fix memory leak in xhci_kick_epctx when poweroff


author: backport from qemu upstream
changelog:
  - tcp_emu: Fix oob access
  - slirp: use correct size while emulating IRC commands
  - slirp: use correct size while emulating commands
  - tcp_emu: fix unsafe snprintf() usages


author: GuoCe <guoce@kylinos.cn> 4.0.1-9
changelog:
  - jianghaoran add patch to support loongson
  - Patch0038: 0001-KYLIN-Add-loongon3a-kvm-support-for-kylin.patch
  - Patch0039: 0002-target-mips-Loongson-3A-memory-hotplug-bugfix.patch
  - Patch0040: 0003-target-mips-change-prid.patch
  - Patch0041: 0004-Loongson3A-ipi-bugfix.patch
  - Patch0042: 0005-Loongson3A-change-acpi-base.patch
  - Patch0043: 0006-target-mips-add-loongson7a-machine.patch
  - Patch0044: 0007-KYLIN-target-mips-add-some-simple-acpi-tables-and-sm.patch
  - Patch0045: 0008-target-mips-Add-vnuma-support.patch
  - Patch0046: 0009-KYLIN-target-mips-Add-acpi-dsdt-table-support-for-ac.patch
  - Patch0047: 0010-KYLIN-target-mips-Add-some-new-functions-support.patch
  - Patch0048: 0011-KYLIN-target-mips-Remove-unused-romfile.patch
  - Patch0049: 0012-KYLIN-virtual-machine-failed-to-start.patch
  - Patch0050: 0013-KYLIN-update-bios.patch


author: CuiTao <cuitao@kylinos.cn> 4.0.1-10
changelog:
  - add patch, fix bug when virtual machine reboot.
  - Patch0051: 0014-KYLIN-Fix-bug-when-virtual-machine-reboot.patch


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/pci-host: add pci-intack write method
  - pci-host: add pcie-msi read method
  - vfio: add quirk device write method
  - prep: add ppc-parity write method
  - nvram: add nrf51_soc flash read method
  - spapr_pci: add spapr msi read method
  - tz-ppc: add dummy read/write methods
  - imx7-ccm: add digprog mmio write method


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
  - usb: limit combined packets to 1 MiB (CVE-2021-3527)


author: wanglixing <wanglixing@kylinos.cn> - 4.1.0-44.p01
changelog:
  - apply Kylin patches to openEuler package ver
  - modified spec for support spice(x86_64).
  - disable check
  - add mips64el


author: zhangzeyang <zhangzeyang@kylinos.cn>
changelog:
  - fix CVE-2021-3682 CVE-2021-3713 CVE-2021-3748 cve-2021-3592 cve-2021-3593 cve-2021-3595 cve-2020-35504 cve-2020-35505 
  - fix CVE-2021-3930 CVE-2021-3582 CVE-2021-3607 CVE-2021-3608
  - fix CVE-2022-26354 CVE-2022-26353 CVE-2021-20196 CVE-2021-4207 CVE-2021-4206


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p05
changelog:
  - fix CVE-2021-20257 CVE-2020-13253 and fix gcc 10.3.1 compile error
  - fix CVE-2022-35414
  - fix CVE-2020-14394
  - fix CVE-2021-3750 and Check that colo-compare is active


author: GuoCe <guoce@kylinos.cn> - 4.1.0-44.p07
changelog:
  - Type:task
  - ID:[TASK#135597]
  - SUG:NA
  - DESC: fix CVE-2022-0216
          hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
          scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
          scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.0-44.p09
changelog:
  - Type:task
  - ID:[TASK#153847]
  - SUG:NA
  - DESC: add patch to fix cve-2022-1050
          hw/pvrdma: Protect against buggy or malicious guest driver (CVE-2022-1050)


author: songliyang <songliyang@kylinos.cn> - 4.1.0-44.p10
changelog:
  - Type:task
  - ID:[TASK#166810]
  - SUG:NA
  - DESC: add 3 patches: Patch0441&Patch0442&Patch0443, Patch0441&Patch0442 has fixed cve-2023-0664: A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent s Windows installer via repair custom actions to elevate their privileges on the system. Patch0443 has fixed cve-2023-2861: A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.


author: songliyang <songliyang@kylinos.cn> - 4.1.0-44.p11
changelog:
  - Type:task
  - ID:[TASK#170642]
  - SUG:NA
  - DESC: add Patch0444 to fix CVE-2023-3180: A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.


author: songliyang <songliyang@kylinos.cn> - 4.1.0-44.p12
changelog:
  - Type:task
  - ID:[TASK#174976]
  - SUG:NA
  - DESC: add Patch0445 Patch0446 Patch0447 to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: songliyang <songliyang@kylinos.cn> - 4.1.0-44.p13
changelog:
  - Type:task
  - ID:[TASK#186727]
  - SUG:NA
  - DESC: add Patch0448 to fix CVE-2023-1544: Protect against buggy or malicious guest driver


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-44.p15
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p16
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-44.p21
changelog:
  - Type: cves
  - ID:   CVE-2025-11234
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 4.1.0-44.p22
changelog:
  - Type: Update
  - ID:   [TASK#642435]
  - SUG:  NA
  - DESC: drop dirty rect update to fix memory allocation error


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p04
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: lvying<lvying6@huawei.com> - 0.6.3-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix file descriptor leak in ras-report.c:setup_report_socket()


author: chenjianhu <chenjianhu@kyilinos.cn> - 0.6.3-2.p03
changelog:
  - Type:bugfix
  - ID:[Task#575099]
  - SUG:NA
  - DESC:Add a filtering mechanism to ignore noise-level event logs.


author: lifeifei <lifeifei@kylinos.cn> 7.2.10-1.p01
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.
         2.Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: wangxiaomeng <wangxiaomeng@kylinos.cn> 7.2.11-1.p01
changelog:
  - Type:update
  - ID:[Task#540289]
  - SUG:NA
  - DESC:Sync 7.2.10-1.p01:
         - Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangshuo <wangshuo@kylinos.cn> - 8.1907.0-5.p04
changelog:
  - Type:update
  - ID:[TASK#511557][TASK#521787]
  - SUG:NA
  - DESC:Add Patch9006, obey net.enableDNS=off when querying local hostname
  -      Add BuildRequires:libpq-devel, Patch9007, fix configure error


author: wangshuo <wangshuo@kylinos.cn> - 8.1907.0-5.p05
changelog:
  - Type:update
  - ID:[TASK#576237]
  - SUG:NA
  - DESC:Add Patch9008, change systemd file to wait for network
  -      Fix the permission risk of the /etc/cron.hourly/logrotate and /etc/cron.weekly/logrotate


author: wangshuo <wangshuo@kylinos.cn> - 8.1907.0-5.p06
changelog:
  - Type:bugfix
  - ID:[TASK#623985]
  - SUG:NA
  - DESC:Add Patch9009, core/janitor bugfix: properly maintain dynafile cache


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: sunjin <sunjin@kylinos.cn> - 1.2.4kord-se.05
changelog:
  - Type:update
  - ID:[Bug#145066]
  - SUG:NA
  - DESC:security-switch版本拉齐
  -     【sp1sp2】只开selinux，grub里会多出kysec_3adm=0这个参数


author: xuyujun <xuyujun@kylinos.cn> - 1.2.4kord-se.06
changelog:
  - Type:update
  - ID:[Bug#153572]
  - SUG:NA
  - DESC: 修正strict模式切换失败问题
  -		添加补丁 security-switch-fix-can-not-change-to-strict-mode.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.36
changelog:
  - Add patch forbid-root-to-kylin-view-log.patch
    Fix bug No.47665:auditadm can change the audit log.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.37
changelog:
  - Add patch forbid-secadm-log-manage.patch
    Fix bug No.47506:Secadm can search the root homedir.
  - Add patch fix-kylin-user-cannot-open-firefox.patch
    Fix bug :kylin-user cannot open firefox in strict.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.38
changelog:
  - Add patch fix-kylin-user-cannot-open-firefox2.patch
    Fix bug : New user cannot open firefox in strict.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.39
changelog:
  - Add patch fix-login-stuck-after-update-libselinux.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06.
    Fix bug 52541:audit service should not be operated by root user.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.40
changelog:
  - Add patch fix-login-stuck-targeted.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06 in custom mode.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.42
changelog:
  - Add patch httpd-memcached-service.patch
    Fix bug No.56070:Httpd and memcached service can't restart both in ukmcs and targeted.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.43
changelog:
  - Add patch forbid-fdisk-others.patch
  - Add patch forbid-fdisk-others-2.patch
    Forbid others using fdisk except root.


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.46
changelog:
  - Type:update
  - ID:[bug#136994]
  - SUG:NA
  - add Patch74: selinux-policy-forbid-systemctl.patch
  - DESC: 136994 【服务管理】除root外，其他用户可以启停服务

  - add Patch73: selinux-policy-hwzs-sudosu-auditctl.patch
  - DESC: TASK#104920 targeted定制策略摸底


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.47
changelog:
  - Type:update
  - ID:[任务#120597][BUG#128013]
  - SUG:NA
  - add: 
    Patch6001: backport-Add-file-context-for-.config-Yubico.patch
    Patch6002: backport-Change-transitions-for-.config-Yubico.patch
  - DESC: 120597 修复漏洞CVE-2020-24612

  - add Patch75: selinux-policy-eal-seutil.patch
  - DESC: 128013 【用户管理】三权命令集中部分命令与实际不符


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.48
changelog:
  - Type:update
  - ID:[任务#121415]
  - SUG:NA
  - Add:
    Patch7001: boot-3c5000-targeted.patch:                 Fix 3c5000 system can't boot in targeted mode.
    Patch7002: security-switch-3c5000.patch:               Fix 3c5000 selinux bug.
    Patch7003: passwd-firewall-cmd-logviewer-3c5000.patch: Fix passwd, firewall-cmd, log-viewer bugs in ukmcs.
    Patch7004: sshd-firewall-list.patch:                   Fix root can manage auditd and firewalld-list in ukmcs.
    Patch7005: audit-start-stop.patch:                     Fix root can manage auditd start-stop in ukmcs.
    Patch7006: auditd-ctl-warning.patch:                   Fix root can manage auditd start-stop in ukmcs.
  - DESC: 【sp1】在飞腾、龙芯，arm/x86上同源策略源码


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.49
changelog:
  - Type:update
  - ID:[BUG#57820]
  - SUG:NA
  - add: Patch7007: selinux-policy-httpd.patch
  - DESC: 57820 用例“05系统安全-02访问控制-02强制访问控制-13semanage-端口管理”失败  来源用例-93751


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.50
changelog:
  - Type:update
  - ID:[任务#121415]
  - SUG:NA
  - Upgrade releae to 56.se.50 to be compatible with Loongson koji version.
  - DESC: 【sp1】在飞腾、龙芯，arm/x86上同源策略源码


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.51
changelog:
  - Type:fixbug
  - ID:[BUG#209238]
  - SUG:NA
  - DESC: 由于libsemanage包的改动，需要重新rebuild包，无内容改动，版本号+1.
  - [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.52
changelog:
  - Type:bugfix
  - ID:[BUG#451409][BUG#452513]
  - SUG:NA
  - DESC: 解决开启selinux 默认策略下 虚拟机无法正常启动,vnc无法连连接问题
  -   add patch: selinux-policy-20251120-fix-create-virt-host-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.53
changelog:
  - Type:bugfix
  - ID:[BUG#463849][BUG#464079][BUG#463909]
  - SUG:NA
  - DESC: 
  -    [BUG#463849] loongarch开启selinux reboot无法关机
  -    [BUG#463909] loongarch开启selinux vritlogd服务无法启动 无法安装虚拟机
  -    [BUG#464079] 适配mugen selinux测试
  -   add patch: selinux-policy-20251211-fix-some-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.54
changelog:
  - Type:bugfix
  - ID:[BUG#474973]
  - SUG:NA
  - DESC:  修复mugen测试问题
  -   add patch: selinux-policy-20251229-fix-mugen-01.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.55
changelog:
  - Type:bugfix
  - ID:[BUG#471173]
  - SUG:NA
  - DESC:  修复journalctl在仅开启selinux时 无法查看日志问题
  -   add patch: selinux-policy-20260106-journalctl-read-log-error.patch


author: xiaozai <xiaozai@kylinos.cn> - 2.13.3-4.2.p01
changelog:
  - Type:bugfix
  - ID:TASK#147198
  - SUG:NA
  - DESC: add patch 0001-fix-variable-LANG-in-csh.patch, fix the bug that the value of variable LANG in tcsh is 1 or 0


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.7-8.se.7
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch:backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.8
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.9
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: fix CVE-2013-4235
  -     add patch(from cve):shadow-backport-CVE-2013-4235.patch


author: lizhipeng <lizhipeng@kylinos.cn> - 1:6.6-8.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#345323]
  - SUG:  NA
  - DESC: os_linux.cpp: Rework handling of glob() return code.


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: xinghe <xinghe2@h-partners.com> - 7:4.9-25
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: duanhongtao <duanhongtao@kylinos.cn> - 5.7.2-10.p03
changelog:
  - Type:CVE
  - CVE:CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: openEuler Buildteam <buildteam@openeuler.org> - 243-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add 1603-udev-add-actions-while-rename-netif-failed.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 243-17
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2020-1712 and close journal files that were deleted by journald
         before we've setup inotify watch and bump pim_max to 80%


author: Yu Peng <yupeng@kylinos.cn> 243-17.se.p02
changelog:
  - Change NTP server.
  - Patch9015: 0002-Change-the-NTP-server.patch
  - delete 60-block-scheduler.rules file
  - Patch9014: 0001-delete-60-block-scheduler.rules.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p07
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p10
changelog:
  - Type:bugfix
  - ID:rhbz#1970945
  - SUG:NA
  - DESC: Fix Systemd memory corruption (rhbz#1970945)
          Fix bunch of memory management bugs uncovered by dfuzzer and UBSAN (rhbz#2047373)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p12
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          fix mips64el build
          Remove gnu-efi check when in loongarch64 and mips64
          support systemd-detect-virt for Loongarch64


author: Shen Zhongwei <shenzhongwei@kylinos.cn> - 243-31.se.p15
changelog:
  - Type:bugfix
  - ID:[TASK#171982]
  - SUG:NA
  - DESC: add patch 0002-rc-local-order-after-network-online.target.patch
          fix rc-local service start failed


author: yinyongkang <yinyongkang@kylinos.cn> - 243-31.se.p17
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch100719: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p18
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SBUG:NA
  - DESC: add patch10720: 0001-backport-donot-open-cdrom-use-exclusive-mode.patch
          fix eject cdrom issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p19
changelog:
  - Type:bugfix
  - ID:[TASK#205426]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p21
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p22
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p20
changelog:
  - Type:cve
  - ID:CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC: Fix CVE-2023-50387 and CVE-2023-50868


author: lijian <lijian01@kylinos.cn> - 243-31.se.p24
changelog:
  - Type:update
  - ID:[TASK#455059]
  - SUG:NA
  - DESC: fix wrong suffix assignment on putting dead process


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p25
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p26
changelog:
  - Type:update
  - ID:[TASK#533091]
  - SUG:NA
  - DESC: 1. preset disable systemd-timesyncd service.
          2. add drop-in config file, condition disable timesyncd service,
             resolve service conflicts in certain situations.


author: andy <liuyang01@kylinos.cn> - 243-31.se.p27
changelog:
  - Type:bugfix
  - ID:[TASK#541799]
  - SUG:NA
  - DESC: backport upstream patch: Avoid spurious realization of unit cgroups


author: fandeyuan <fandeyuan@kylinos.cn> - 243-31.se.p29
changelog:
  - Type:bugfix
  - ID:[TASK#559935]
  - SUG:NA
  - DESC: systemctl: do not print items twice in list-dependencies


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p30
changelog:
  - Type: update
  - ID:   [BUG#567989]
  - SUG:  NA
  - DESC: fix CVE-2022-4415, CVE-2025-4598, CVE-2026-4105, CVE-2026-29111, CVE-2026-40226, CVE-2026-40225


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 233-6.p01
changelog:
  - Type:bugfix
  - ID:[BUG#385837]
  - SUG:NA
  - DESC: Fix crash issue. and Increase max PID and CPU constants


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-77.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: GuoCe <guoce@kylinos.cn> - 20180414-28.p09
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          add BuildRequires nss


author: songliyang <songliyang@kylinos.cn> - 20180414-28.p10
changelog:
  - Type: bugfix
  - ID:   [BUG#319097]
  - SUG:  NA
  - DESC: Add texlive-kpathsea requires texlive-tetex and update spec file to fix install error information


author: songliyang <songliyang@kylinos.cn> - 7:20180414-40.p01
changelog:
  - Type: updates
  - ID:   [TASK#561625]
  - SUG:  NA
  - DESC: 1. Update to fix CVE-2023-62668 CVE-2024-25262
          2. Add mips64el support and fix a build error on mips64el


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:9.0.10-28.p03
changelog:
  - Type: CVE
  - ID: NA
  - SUG:NA
  - DESC:Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: xiejing <xiejing@kylinos.cn> - 2.24.1-1.p01
changelog:
  - Type: update
  - ID: [Task#418871]
  - SUG: NA
  - DESC: Migrate patches corresponding to task#153403,task#186385,bug#217426,bug#217442 in v10:
        - split package tuned-utils-systemtap, reduce main package installation dependencies
        - add the tuned profile sbm-performance, optimize filesystem and network performance
        - add disk IO optimization to sbm-performance profile, optimize disk IO performance
        - add jvm flag UseNUMA, optimize jvm performance
        - split sbm-performance mode to sbm and sbm-performance mode
        - improve disk IO and exec performance


author: cenhuilin<cenhuilin@kylinos.cn> - 2020a-1.p02
changelog:
  - Type:bugfix
  - ID:task#154455
  - SUG:NA
  - DESC:The northern edge of Chihuahua changes to US rules.
  -      Most of Mexico will no longer observe DST.
  -      Treat 1931 changes in Mexico as DST.
  -      update java source 1.5 to 1.6 in line 84 because of buildrequires java-11.


author: guoce <guoce@kylinos.cn> -p04
changelog:
  - add patch: ukui-greeter-1.2.1-48.1-fix-chandao-12928.patch
  - modify system time display coordinates


author: mengchaoming<mengchaoming@kylinos.cn>-p13
changelog:
  -add patch11: ukui-greeter-kylin-Solve-bug49330-translation.patch
  -添加的定时器有问题,去掉,使用原有定时器;pam传上来的message,greeter进行翻译;


author: huayadong<huayadong@kylinos.cn>-p14
changelog:
  - add ukui-greeter-kylin-fix-bug-can-not-count-down-normally-after-entering-wrong-password-three-times.patch


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch21 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p25
changelog:
  - Type: bugfix
  - ID  : [Bug#128021]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-1.2.1-kylin-Prevent-failure-to-connect-to-xserver.patch
          修复因无法连接xserver而出现的登录界面键盘输入后闪屏问题.


author: huayadong<huayadong@kylinos.cn> -p26
changelog:
  - Type:bugfix
  - ID  :[Bug#137537]
  - SUG :NA
  - DESC:add patch24:ukui-greeter-1.2.1-kylin-prompt-for-password-expiration.patch


author: huayadong<huayadong@kylinos.cn> -p27
changelog:
  - Type:bugfix
  - ID  :[Bug#158569]
  - SUG :NA
  - DESC:add patch25:ukui-greeter-1.2.1-kylin-Add-login-status-detection-function-for-users-with-the-same-UID.patch
         为具有相同UID的用户添加登录状态检测功能，在用户列表合并显示相同UID用户


author: huayadong<huayadong@kylinos.cn> -p28
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch26:ukui-greeter-1.2.1-kylin-fix-crash-with-the-same-uid-user.patch


author: huayadong<huayadong@kylinos.cn> -p29
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch27:ukui-greeter-1.2.1-kylin-fix-the-problem-that-the-users-avatar-of-the-same-uid-is-not-centered.patch


author: huayadong<huayadong@kylinos.cn> -p30
changelog:
  - Type:bugfix
  - ID  :[Bug#164455]
  - SUG :NA
  - DESC:add patch28:ukui-greeter-1.2.1-kylin-increase-name-label-height.patch


author: huayadong<huayadong@kylinos.cn> -p31
changelog:
  - Type:bugfix
  - ID  :[Bug#167602]
  - SUG :NA
  - DESC:add patch29:ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch


author: huayadong<huayadong@kylinos.cn> -p32
changelog:
  - Type: bugfix
  - ID  : [Bug#161924]
  - SUG : NA
  - DESC: add patch14 ukui-greeter-1.2.1-kylin-fix-kyreplace3.0-4-lightdm-unable-to-start.patch


author: houhongxun<houhongxun@kylinos.cn> -p33
changelog:
  -Type:bugfix
  -ID:[BUG#194488]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-locked-user-on-login-window.patch
        don't show locked user on login window


author: huayadong <huayadong@kylinos.cn> -p34
changelog:
  - Type:bugfix
  - ID:[BUG#196489]
  - SUG:NA
  - DESC:add patch:0001-ukui-greeter-1.2.1-kylin-remove-xhost.patch


author: houhongxun<houhongxun@kylinos.cn> -p35
changelog:
  -Type:bugfix
  -ID:[BUG#205127]
  -SUG:NA
  -DESC:add patch 0001-ukui-greeter-adjust-according-to-pam-changes.patch


author: guoce <guoce@kylinos.cn> - 0.3.62-1s2.p02
changelog:
  - add patch: ukui-screensaver-0.3.62-fix-chandao-12928.patch
  - modify system time display coordinates


author: gaohaobo <gaohaobo@kylinos.cn> - 0.3.62-1s2.p04
changelog:
  - add patch: 0002-change-default-picture-folder-to-adjust-control-center-p12.patch  change the default srceensaver lookup directory to adjust kylin-control-center after p12.


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p28
changelog:
  - Type: bugfix
  - ID  : [BUG#520853]
  - SUG : NA
  - DESC: add Patch25:ukui-screensaver-0.3.62-fix-VirtualKeyboard-no-underline.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p29
changelog:
  - Type: bugfix
  - ID  : [TASK#600911]
  - SUG : NA
  - DESC: add Patch26:ukui-screensaver-0.3.62-kylin-add-PAM_SERVICE_ERR-detection.patch
          增加PAM服务配置错误检测


author: wangshuo <wangshuo@kylinos.cn> - 1:3.16.0-4.p01
changelog:
  - Type:bugfix
  - ID:[BUG#178237]
  - SUG:NA
  - DESC:Add Patch6, arm64: Handle sp, lr, fp as DwReg in CfiExpr


author: wangshuo <wangshuo@kylinos.cn> - 1:3.16.0-4.p02
changelog:
  - Type:bugfix
  - ID:[BUG#216971]
  - SUG:NA
  - DESC:Add Patch7-9, modify spec, add loongson-3a mips64el support
  -      https://bugs.kde.org/show_bug.cgi?id=429282
  -      https://bugs.kde.org/show_bug.cgi?id=429285


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-17
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: xiehongyu <xiehongyu@kylinos.cn> - 2:8.2-20.p01
changelog:
  - add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-21.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-22.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no,
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> -2:8.2-26.p01
changelog:
  - add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: wanglixing <wanglixing@kylinos.cn> - 2:8.2-28.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: sunjialin <sunjialin@kylinos.cn> - 2:8.2-34.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: likai01 <likai01@kylinos.cn> - 2:8.2-50.po1
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: li qian <liqian@kylinos.cn> - 2.2.1-2.01
changelog:
  - in arm64 install system failed  in click start install 
  - 0001-virt-manager-exec-start-install-failed-due-to-cursor.patch


author: lizhanchun <lizhanchun@kylinos.cn> 2.2.1-2.p15
changelog:
  - Type:	update
  - ID:	BUG#114583
  - SUG:	NA
  - DESC:	KYLIN-add-default-device-on-aarch64-when-inst-vm.patch 
  -		add default device on aarch64 when inst vm.


author: wangdi <wangdi@kylinos.cn> - 2.2.1-2.p16
changelog:
  - Type: update
  - ID:   BUG#129269
  - SUG:  NA
  - DESC: KYLIN-fix-virt-install-error-message-zh_CN-translation.patch 
  -               fix redundant characters in virt-install error message zh_CN translation.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p17
changelog:
  - Type: update
  - ID:   [TASK#159711]
  - SUG:  NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add kylin-virt-manager-2.2.1-4-fix-bug-68049-translation-of-tchinese.patch
  -       Add 0001-Set-minimum-memory-2048M-for-virt-install.patch
  -	Add 0001-Bug-119136-set-default-memory-2048.patch
  -	Add 0001-BUG-102438-Modify-is_loongarch64-to-is_loongarch.patch
  -	Add 0001-add-translations-for-zh_CN.patch
  -	Add 0001-temporarily-modify-version-V10-to-version-10.0.patch
  -	Delete duplicate machine types.
  -	Add mips64 loongarch support


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p18
changelog:
  - Type: update
  - ID:   [BUG#199984] [BUG#200170]
  - SUG:  NA
  - DESC: KYLIN-fix-virt-manager-error-message-zh_CN-translation.patch
  -               Fixed the issue that the virt-manager interface preference menu was displayed in English


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p19
changelog:
  - Type: update
  - ID:   TASK#187051
  - SUG:  NA
  - DESC: Add 0001-add-Chinese-traditional-translation-HK.po.patch
  -               add traditional Chinese translations for the HK versions.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p21
changelog:
  - Type: update
  - ID:   TASK#187713
  - SUG:  NA
  - DESC: add 0001-fix-cockpit-reboot-error-issue.patch
  -               fix-cockpit-reboot-error-issue.


author: wangguochun <wangguochun@kylinos.cn> - 2.2.1-2.p23
changelog:
  - Type: update
  - ID:   TASK#194653
  - SUG:  NA
  - DESC: Changed the traditional Chinese translation "服务器" to "伺服器"
  	Correction of Traditional Chinese Translation zh_HK.po file


author: songliyang <songliyang@kylinos.cn> - 2.2.1-2.p24
changelog:
  - Type: update
  - ID:   BUG#19060 and BUG#68208
  - SUG:  NA
  - DESC: add patch33 to fix 2 bugs that virsh-install failed on mips


author: songliyang <songliyang@kylinos.cn> - 2.2.1-2.p25
changelog:
  - Type: update
  - ID:   BUG#215480
  - SUG:  NA
  - DESC: add patch34 to fix stuck error while creating vm with cockpit


author: houhongxun <houhongxun@kylinos.cn> - 0.28.2-14.p01
changelog:
  - Type:bugfix
  - ID  :[Bug#203586]
  - SUG :NA
  - DESC:add Patch6:0001-vte-swallow-hyperlink-control-sequence-and-make-it-n.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.28.2-14.p02
changelog:
  - Type:bugfix
  - ID  :[TASK#532381]
  - SUG :NA
  - DESC:add Patch7: 0002-vte-fix-max-bytes-mate-terminal.patch


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: houhongxun <houhongxun@kylinos.cn> - 2.24-6.p04
changelog:
  - Type: bugfix
  - ID:   [BUG#264389]
  - SUG:  NA
  - DESC: fix sensitive words, and remove unused translations


author: zhanzhimin<zhanzhimin@huawei.com> - 1.20.8-2
changelog:
  - Type:CVE
  - Id:CVE-2020-14346,CVE-2020-14361,CVE-2020-14362
  - SUG:NA
  - DESC:fix CVE-2020-14346,CVE-2020-14361,CVE-2020-14362


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-3.p02
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p06
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p07
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p09
changelog:
  - Type: CVE
  - ID:   [TASK#453291]
  - SUG:  NA
  - DESC: fix CVE-2024-31080, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p10
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p11
changelog:
  +- Type: CVE
  +- ID:   [TASK#593649]
  +- SUG:  NA
  +- DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p11
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p12
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p14
changelog:
  - Type: CVE
  - ID:   [BUG#552387]
  - SUG:  NA
  - DESC: fix tigervnc-server test failed (revert CVE-2023-5574 patch)


author: cuilei <cuilei@kylinos.cn> - 4.0.11.1.0.9kord1{?ns_dist}03
changelog:
  - Bug 3770:fix-delete-backup-page-banner-pic-layout.patch
  - Bug 3771:fix-data-inc-backup-error.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}17
changelog:
  - Type:bugfix
  - ID  :[bug#181281]
  - SUG :add patch 0001-fix-ghost-backup-oday.patch
  - DESC:fix ghost backup oday


author: HouHongxun <houhongxun@kylinos.cn> - 4.0.12kord1p18
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation-for-desktop-file.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}19
changelog:
  - Type: update
  - ID: [TASK#185224]
  - SUG: NA
  - DESC: add 0001-add-zh_HK-translate.patch 0001-add-zh_HK-qss-file.patch
          0001_backup_store_hk_png.patch


author: lichenguang <lichenguang@kylinos.cn> - 0.2.35-9.p02
changelog:
  - Type:cves
  - ID: CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177
  - SUG:NA
  - DESC: fix CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177


