# changelog

author: BruceGW<gyl93216@163.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: xuyujun <xuyujun@kylinos.cn> - 3.7.9-20.se.01
changelog:
  - add Python3-judge-python-file-run.patch
  - devel package add require libkysec-devel libsecurity1-devel
  - add buildrequire libsecurity1-devel


author: zhangchaorui <zhangchaorui@kylinos.cn> - 3.7.9-20.se.02
changelog:
  - Type:cves 
  - ID:CVE-2015-20107
  - SUG:NA
  - DESC:Fix CVE-2015-20107 and make test suite support upstream Expat >=2.4.5


author: likai01 <likai01@kylinos.cn> - 3.7.9-20.p04.se
changelog:
  - Type:cves
  - ID:CVE-2020-10735 CVE-2022-45061 CVE-2022-37454
  - SUG:NA
  - DESC:Fix CVE-2020-10735 CVE-2022-45061 CVE-2022-37454


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-20.p09.se
changelog:
  - Type:CVE
  - ID:CVE-2007-4559
  - SUG:NA
  - DESC:fix CVE-2007-4559
  -      fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-20.p10.se
changelog:
  - Type:CVE
  - ID:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-20.p14.se
changelog:
  - Type:CVE
  - ID:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
       CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
         CVE-2025-4330 CVE-2025-4435


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-20.p16.se
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: liuxiong <liuxiong@kylinos.cn> - 3.7.9-7.p02
changelog:
  - Type:cves
  - ID:CVE-2021-23336
  - SUG:NA
  - DESC:fix CVE-2021-23336 and revert fix a reference leak if a thread is not joined


author: gongxingliang <gongxingliang@kylinos.cn> - 3.6.0-2.p02
changelog:
  - Type: compile
  - ID: NA 
  - SUG: NA
  - DESC: fix build error due to hdf5 upgrade(patch1 patch2 patch3)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.5-13
changelog:
  - Subpackage python2-moksha-common has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Kevin Fenzi <kevin@scrye.com> - 2.0.0-7
changelog:
  - Review fixes: drop python3 dep, Update obsoletes, add python_provide
  - Review fixes: Use pypi_source, fixed files globbing.


author: Anakin Zhang <benjamin93@163.com> - 4.15.1-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use user.digest_list to avoid duplicate processing of the digest lists


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-22
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: fix digest list plugin and reorder digest lists in RPM headers


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-23
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: avoid generating digest lists if they are already packaged


author: xiehongyu <xiehongyu@kylinos.cn> - 4.15.1-23.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-3421, CVE-2021-20271,CVE-2021-20266
  - SUG:NA
  - DESC:fix CVE-2021-3421, CVE-2021-20271,CVE-2021-20266.
         CVE-2021-3421补丁与CVE-2021-20271修复补丁相同.


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.1-17
changelog:
  - Subpackage python2-txws has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Carl George <carl@george.computer> - 0.9.1-20
changelog:
  - Include LICENSE file
  - Fix automatic dependency generation
  - Add provides for python-txws
  - Run test suite


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.0-11
changelog:
  - Subpackage python2-txzmq has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch10 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488
  -- add unbound pid dir to fix unbound.service faild


author: Like <like@kylinos.cn> - 1.11.0-2.p06
changelog:
  - Type:cves
  - CVE:CVE-2024-8508 CVE-2024-33655
  - SUG:NA
  - DESC:add patch 15,16 fix CVE-2024-8508 CVE-2024-33655


author: lifeifei <lifeifei@kylinos.cn> - 1.11.0-2.p08
changelog:
  - Type:cves
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:fix CVE-2025-11411
         backport upstream to add CVE-2025-5994's after patches


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/sd: sdhci: Don't transfer any data when command time out
  - hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in progress
  - hw/sd: sdhci: Correctly set the controller status for ADMA
  - hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable
  - hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - net: introduce qemu_receive_packet()
  - e1000: switch to use qemu_receive_packet() for loopback
  - dp8393x: switch to use qemu_receive_packet() for loopback packet
  - sungem: switch to use qemu_receive_packet() for loopback
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback
  - rtl8139: switch to use qemu_receive_packet() for loopback
  - pcnet: switch to use qemu_receive_packet() for loopback
  - cadence_gem: switch to use qemu_receive_packet() for loopback
  - lan9118: switch to use qemu_receive_packet() for loopback


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/pci-host: add pci-intack write method
  - pci-host: add pcie-msi read method
  - vfio: add quirk device write method
  - prep: add ppc-parity write method
  - nvram: add nrf51_soc flash read method
  - spapr_pci: add spapr msi read method
  - tz-ppc: add dummy read/write methods
  - imx7-ccm: add digprog mmio write method


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
  - usb: limit combined packets to 1 MiB (CVE-2021-3527)


author: wanglixing <wanglixing@kylinos.cn> - 4.1.0-44.p01
changelog:
  - apply Kylin patches to openEuler package ver
  - modified spec for support spice(x86_64).
  - disable check
  - add mips64el


author: zhangzeyang <zhangzeyang@kylinos.cn>
changelog:
  - fix CVE-2021-3682 CVE-2021-3713 CVE-2021-3748 cve-2021-3592 cve-2021-3593 cve-2021-3595 cve-2020-35504 cve-2020-35505 
  - fix CVE-2021-3930 CVE-2021-3582 CVE-2021-3607 CVE-2021-3608
  - fix CVE-2022-26354 CVE-2022-26353 CVE-2021-20196 CVE-2021-4207 CVE-2021-4206


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p05
changelog:
  - fix CVE-2021-20257 CVE-2020-13253 and fix gcc 10.3.1 compile error
  - fix CVE-2022-35414
  - fix CVE-2020-14394
  - fix CVE-2021-3750 and Check that colo-compare is active


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p07
changelog:
  - Type: Update
  - ID:   [TASK#132801]
  - SUG:  NA
  - DESC: fix CVE-2022-0216
  -       hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
  -       scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
  -       scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: wangdi <wangdi@kylinos.cn> - 4.1.0-44.p08
changelog:
  - Type: bug
  - ID:   [TASK#132773]
  - SUG:  NA
  - DESC: Fix qemu-nbd child daemon connection process wont close stderr file


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p09
changelog:
  - Type: cve
  - ID:   CVE-2022-1050
  - SUG:  NA
  - DESC: hw/pvrdma: Protect against buggy or malicious guest driver (CVE-2022-1050)


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-44.p10
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p12
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p13
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-44.p16
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p17
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.10-44.p21
changelog:
  - Type: Bugfix
  - ID:   [BUG#385783]
  - SUG:  NA
  - DESC: Forbid repeated device_del to fix hot-unplug issue


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-44.p22
changelog:
  - Type: Bugfix
  - ID:   [BUG#375209]
  - SUG:  NA
  - DESC: Enable blockdev support for copying across storage block devices


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p23
changelog:
  - Type: Bugfix
  - ID:   [BUG#425473]
  - SUG:  NA 
  - DESC: Fix integer left shift error in qcow2_alloc_cluster_link_l2()
          Fix common problems from qemu.spec in check


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-44.p25
changelog:
  - Type: cves
  - ID:   [BUG#597857]
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 4.1.0-44.p26
changelog:
  - Type: Update
  - ID:   [TASK#642435]
  - SUG:  NA
  - DESC: drop dirty rect update to fix memory allocation error


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p04
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: lvying<lvying6@huawei.com> - 0.6.3-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix file descriptor leak in ras-report.c:setup_report_socket()


author: zhangqiang <zhangqiang@kylinos.cn> - 0.6.3-2.p01
changelog:
  - optimize error value detection to prevent false positives caused by systemd parallel configuration


author: chenjianhu <chenjianhu@kyilinos.cn> - 0.6.3-2.p03
changelog:
  - Type:bugfix
  - ID:[Task#575099]
  - SUG:NA
  - DESC:Add a filtering mechanism to ignore noise-level event logs.


author: yueyuankun <yueyuankun@kylinos.cn> - 2.4-3.p02
changelog:
  - Type:bugfix
  - ID:TASK#217377
  - SUG:NA
  - Desc:fix(uefi-functions.sh):remove non-existent linuxefi module when creating grub-efi


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 6.2.7-1.p01
changelog:
  - Type:cves
  - Id:CVE-2022-36021 CVE-2022-24834 CVE-2023-28856
  - SUG:NA
  - DESC:回合低版本补丁CVE-2022-36021 CVE-2022-24834 CVE-2023-28856 and fix-building-error-of-malloc.patch
     Fix redis.spec and redis.service


author: gaoyukun <gaoyukun@kylinos.cn> - 6.2.7-1.p03
changelog:
  - Type:cves
  - Id:CVE-2023-45145,CVE-2024-31228,CVE-2024-31449
  - SUG:NA
  - DESC:Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449


author: lifeifei <lifeifei@kylinos.cn>
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.
         2.Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.11-1.p01
changelog:
  - Type:update
  - ID:[Task#540289]
  - SUG:NA
  - DESC:Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: guojunding <guojunding@kylinos.cn> - 8.10-9
changelog:
  - Type:update
  - ID:task#163840
  - SUG:NA
  - DESC:BZ 1851499 port to str return values 
         fix return value error for rpminfo


author: Qin Fandong <qinfandong@kylinos.cn> - 8.10-9.p01
changelog:
  - Type: bugfix
  - ID: [BUG#289003]
  - SUG: NA
  - DESC: Fix rpminfo exit unnormally every time when bash fork subprocess


author: wangshuo <wangshuo@kylinos.cn> - 8.1907.0-5.p04
changelog:
  - Type:update
  - ID:[TASK#511557][TASK#521787]
  - SUG:NA
  - DESC:Add Patch9006, obey net.enableDNS=off when querying local hostname
  -      Add BuildRequires:libpq-devel, Patch9007, fix configure error


author: wangshuo <wangshuo@kylinos.cn> - 8.1907.0-5.p05
changelog:
  - Type:update
  - ID:[TASK#576237]
  - SUG:NA
  - DESC:Add Patch9008, change systemd file to wait for network
  -      Fix the permission risk of the /etc/cron.hourly/logrotate and /etc/cron.weekly/logrotate


author: wangshuo <wangshuo@kylinos.cn> - 8.1907.0-5.p06
changelog:
  - Type:bugfix
  - ID:[TASK#623985]
  - SUG:NA
  - DESC:Add Patch9009, core/janitor bugfix: properly maintain dynafile cache


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: chenjianhu <chenjianhu@kylinos.cn> - 2.5.8-136.p01
changelog:
  - Type:compile
  - ID:[Task#564099]
  - SUG:NA
  - DESC:add requires elfutils-extra and add CVE-2025-58767 test case


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: sunjin <sunjin@kylinos.cn> - 1.2.4kord-se.05
changelog:
  - Type:update
  - ID:[Bug#145066]
  - SUG:NA
  - DESC:security-switch版本拉齐
  -     【sp1sp2】只开selinux，grub里会多出kysec_3adm=0这个参数


author: mengchaoming<mengchaoming@kylinos.cn>2.0-1.48.4
changelog:
  - update to release 48
  - rm zzz_openEuler_history.sh
  - Move -- befora path
  - Do not set umask to 077 any more
  - Update LICENSE of files
  - Update LICENSE to Mulan PSL v2.0


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.33
changelog:
  - Add patch insmod-ssh-ifconfig-viewfirewall-list-ttylogin.patch
  - Add patch allow-rpm-q-allusers.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.36
changelog:
  - Add patch forbid-root-to-kylin-view-log.patch
    Fix bug No.47665:auditadm can change the audit log.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.37
changelog:
  - Add patch forbid-secadm-log-manage.patch
    Fix bug No.47506:Secadm can search the root homedir.
  - Add patch fix-kylin-user-cannot-open-firefox.patch
    Fix bug :kylin-user cannot open firefox in strict.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.38
changelog:
  - Add patch fix-kylin-user-cannot-open-firefox2.patch
    Fix bug : New user cannot open firefox in strict.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.39
changelog:
  - Add patch fix-login-stuck-after-update-libselinux.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.40
changelog:
  - Add patch fix-login-stuck-targeted.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06 in custom mode.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.42
changelog:
  - Add patch httpd-memcached-service.patch
    Fix bug No.56070:Httpd and memcached service can't restart both in ukmcs and targeted.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.39
changelog:
  - Add patch fix-login-stuck-after-update-libselinux.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06.
    Fix bug 52541:audit service should not be operated by root user.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.43
changelog:
  - Add patch forbid-fdisk-others.patch
  - Add patch forbid-fdisk-others-2.patch
    Forbid others using fdisk except root.


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.46
changelog:
  - Type:update
  - ID:[bug#136994]
  - SUG:NA
  - add Patch74: selinux-policy-forbid-systemctl.patch
  - DESC: 136994 【服务管理】除root外，其他用户可以启停服务

  - add Patch73: selinux-policy-hwzs-sudosu-auditctl.patch
  - DESC: TASK#104920 targeted定制策略摸底


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.47
changelog:
  - Type:update
  - ID:[任务#120597][BUG#128013]
  - SUG:NA
  - add: 
    Patch6001: backport-Add-file-context-for-.config-Yubico.patch
    Patch6002: backport-Change-transitions-for-.config-Yubico.patch
  - DESC: 120597 修复漏洞CVE-2020-24612

  - add Patch75: selinux-policy-eal-seutil.patch
  - DESC: 128013 【用户管理】三权命令集中部分命令与实际不符


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.48
changelog:
  - Type:update
  - ID:[任务#121415]
  - SUG:NA
  - Add:
    Patch7001: boot-3c5000-targeted.patch:                 Fix 3c5000 system can't boot in targeted mode.
    Patch7002: security-switch-3c5000.patch:               Fix 3c5000 selinux bug.
    Patch7003: passwd-firewall-cmd-logviewer-3c5000.patch: Fix passwd, firewall-cmd, log-viewer bugs in ukmcs.
    Patch7004: sshd-firewall-list.patch:                   Fix root can manage auditd and firewalld-list in ukmcs.
    Patch7005: audit-start-stop.patch:                     Fix root can manage auditd start-stop in ukmcs.
    Patch7006: auditd-ctl-warning.patch:                   Fix root can manage auditd start-stop in ukmcs.
  - DESC: 【sp1】在飞腾、龙芯，arm/x86上同源策略源码


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.49
changelog:
  - Type:update
  - ID:[BUG#57820]
  - SUG:NA
  - add: Patch7007: selinux-policy-httpd.patch
  - DESC: 57820 用例“05系统安全-02访问控制-02强制访问控制-13semanage-端口管理”失败  来源用例-93751


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.50
changelog:
  - Type:update
  - ID:[任务#121415]
  - SUG:NA
  - Upgrade releae to 56.se.50 to be compatible with Loongson koji version.
  - DESC: 【sp1】在飞腾、龙芯，arm/x86上同源策略源码


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.51
changelog:
  - Type:fixbug
  - ID:[BUG#209238]
  - SUG:NA
  - DESC: 由于libsemanage包的改动，需要重新rebuild包，无内容改动，版本号+1.
  - [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.52
changelog:
  - Type:bugfix
  - ID:[BUG#451409][BUG#452513]
  - SUG:NA
  - DESC: 解决开启selinux 默认策略下 虚拟机无法正常启动,vnc无法连连接问题
  -   add patch: selinux-policy-20251120-fix-create-virt-host-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.53
changelog:
  - Type:bugfix
  - ID:[BUG#463849][BUG#464079][BUG#463909]
  - SUG:NA
  - DESC: 
  -    [BUG#463849] loongarch开启selinux reboot无法关机
  -    [BUG#463909] loongarch开启selinux vritlogd服务无法启动 无法安装虚拟机
  -    [BUG#464079] 适配mugen selinux测试
  -   add patch: selinux-policy-20251211-fix-some-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.54
changelog:
  - Type:bugfix
  - ID:[BUG#474973]
  - SUG:NA
  - DESC:  修复mugen测试问题
  -   add patch: selinux-policy-20251229-fix-mugen-01.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.55
changelog:
  - Type:bugfix
  - ID:[BUG#471173]
  - SUG:NA
  - DESC:  修复journalctl在仅开启selinux时 无法查看日志问题
  -   add patch: selinux-policy-20260106-journalctl-read-log-error.patch


author: xiaozai <xiaozai@kylinos.cn> - 2.13.3-4.2.p01
changelog:
  - Type:bugfix
  - ID:TASK#147198
  - SUG:NA
  - DESC: add patch 0001-fix-variable-LANG-in-csh.patch, fix the bug that the value of variable LANG in tcsh is 1 or 0


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.7-8.se.7
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch(from cve):backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch
  -     add patch(for compatibility sp1-updates):shadow-selinux-compile-err-for-sp1updates.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.8
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.9
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: fix CVE-2013-4235
  -     add patch(from cve):shadow-backport-CVE-2013-4235.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.10
changelog:
  - Type:bugfix
  - ID:[Bug#212224]
  - SUG:NA
  - DESC: 【20240130update内网源更新测试】SP1arm升级 shadow-4.7-8.se.9.ky10包失败


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p08
changelog:
  - Types:bugfix
  - ID:BUG#500861
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 1:6.6-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:os_linux.cpp/os_netbsd.cpp: fix crash on --scan if WITH_NVME_DEVICESC is not set and '-d <type>' is not specified
         ataprint.cpp: Fix detection of Device Statistics log with 256 sectors (#922)
         drivedb.h: - Western Digital Red: WD80EZZX - USB: WD
         update-smart-drivedb.in: Include configured PATH in help and error messages
         os_linux.cpp: Add missing braces to 3ware SELinux code
         drivedb.h: fix Innolite Satadom D150QV entry (#939)
         os_freebsd.cpp: on error was setting set_nvme_err() to 1
         os_linux.cpp: Fix device scan crash on missing /proc/devices
         smartd.cpp: Always ignore failure of ATA SMART ENABLE command if
         os_linux.cpp: Fix '-d megaraid' open crash on missing /proc/devices
         os_darwin.cpp, os_freebsd.cpp: fix return value in error paths
         ataprint.cpp: Fix Form Factor string with bits set in reserved area
  - Package init


author: openEuler Buildteam <buildteam@openeuler.org> - 1:6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the "-q never" option while executing smartd command in smartd.service


author: lizhipeng <lizhipeng@kylinos.cn> - 1:6.6-8.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#345323]
  - SUG:  NA
  - DESC: os_linux.cpp: Rework handling of glob() return code.


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangdi <wangdi@kylinos.cn> - 0.20.0-2.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: openEuler Buildteam <buildteam@openeuler.org> - 3.24.0-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix CVE-2019-19923 CVE-2019-19924 CVE-2019-19925 CVE-2019-19926 CVE-2019-20218


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: xinghe <xinghe2@h-partners.com> - 7:4.9-25
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: duanhongtao <duanhongtao@kylinos.cn> - 5.7.2-10.p03
changelog:
  - Type:CVE
  - CVE:CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: lingsheng <lingsheng1@h-partners.com> - 6.04-14
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: Guo Jianxing <guojianxing@kylinoscn> - 243.31.se.p02
changelog:
  - import changes from 17.se.4
  -- add patch9014:systemd-243-kylin-init5-hang.patch
  -- Modify ctrl+alt+F2 switch to init5 stuck problem
  -- Patch9013: 0002-Change-the-NTP-server.patch
  -- Change NTP server.
  -- urnal: fix selinux denied error for systemctl when lsm stacking is enable
  -- change to kylin


author: mengchaoming<mengchaoming@kylinos.cn>243-31.se.p03
changelog:
  -add patch9015:systemd-243-kylin-init1-add-check-console-tty1.patch
  -fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p07
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p10
changelog:
  - Type:bugfix
  - ID:rhbz#1970945
  - SUG:NA
  - DESC: Fix Systemd memory corruption (rhbz#1970945)
          Fix bunch of memory management bugs uncovered by dfuzzer and UBSAN (rhbz#2047373)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p12
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          fix mips64el build
          Remove gnu-efi check when in loongarch64 and mips64
          support systemd-detect-virt for Loongarch64


author: Shen Zhongwei <shenzhongwei@kylinos.cn> - 243-31.se.p15
changelog:
  - Type:bugfix
  - ID:[TASK#171982]
  - SUG:NA
  - DESC: add patch 0002-rc-local-order-after-network-online.target.patch
          fix rc-local service start failed


author: yinyongkang <yinyongkang@kylinos.cn> - 243-31.se.p17
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch100719: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p18
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SBUG:NA
  - DESC: add patch10720: 0001-backport-donot-open-cdrom-use-exclusive-mode.patch
          fix eject cdrom issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p19
changelog:
  - Type:bugfix
  - ID:[TASK#205426]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p21
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p22
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p20
changelog:
  - Type:cve
  - ID:CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC: Fix CVE-2023-50387 and CVE-2023-50868


author: lijian <lijian01@kylinos.cn> - 243-31.se.p24
changelog:
  - Type:update
  - ID:[TASK#455059]
  - SUG:NA
  - DESC: fix wrong suffix assignment on putting dead process


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p25
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p26
changelog:
  - Type:update
  - ID:[TASK#533091]
  - SUG:NA
  - DESC: 1. preset disable systemd-timesyncd service.
          2. add drop-in config file, condition disable timesyncd service,
             resolve service conflicts in certain situations.


author: andy <liuyang01@kylinos.cn> - 243-31.se.p27
changelog:
  - Type:bugfix
  - ID:[TASK#541799]
  - SUG:NA
  - DESC: backport upstream patch: Avoid spurious realization of unit cgroups


author: fandeyuan <fandeyuan@kylinos.cn> - 243-31.se.p29
changelog:
  - Type:bugfix
  - ID:[TASK#559935]
  - SUG:NA
  - DESC: systemctl: do not print items twice in list-dependencies


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p30
changelog:
  - Type: update
  - ID:   [BUG#567989]
  - SUG:  NA
  - DESC: fix CVE-2022-4415, CVE-2025-4598, CVE-2026-4105, CVE-2026-29111, CVE-2026-40226, CVE-2026-40225


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 233-6.p01
changelog:
  - Type:bugfix
  - ID:[BUG#385837]
  - SUG:NA
  - DESC: Fix crash issue. and Increase max PID and CPU constants


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-77.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: songliyang <songliyang@kylinos.cn> - 7:20180414-40.p01
changelog:
  - Type: updates
  - ID:   [TASK#561625]
  - SUG:  NA
  - DESC: 1. Update to fix CVE-2023-62668 CVE-2024-25262
          2. Add mips64el support and fix a build error on mips64el


author: zhangdashuang <zhangdashuang@kylinos.cn> 1.10.1-4
changelog:
  - from 1.10.1-2.p01 transplant
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: xiejing <xiejing@kylinos.cn> - 2.24.1-1.p01
changelog:
  - Type: update
  - ID: [Task#418871]
  - SUG: NA
  - DESC: Migrate patches corresponding to task#153403,task#186385,bug#217426,bug#217442 in v10:
        - split package tuned-utils-systemtap, reduce main package installation dependencies
        - add the tuned profile sbm-performance, optimize filesystem and network performance
        - add disk IO optimization to sbm-performance profile, optimize disk IO performance
        - add jvm flag UseNUMA, optimize jvm performance
        - split sbm-performance mode to sbm and sbm-performance mode
        - improve disk IO and exec performance


author: cenhuilin<cenhuilin@kylinos.cn> - 2020a-1.p02
changelog:
  - Type:bugfix
  - ID:task#154455
  - SUG:NA
  - DESC:The northern edge of Chihuahua changes to US rules.
  -      Most of Mexico will no longer observe DST.
  -      Treat 1931 changes in Mexico as DST.
  -      update java source 1.5 to 1.6 in line 84 because of buildrequires java-11.


author: yueyuankun <yueyuankun@kylinos.cn> - 2021.10-8.p02
changelog:
  - Type:CVE
  - ID:BUG#580819
  - SUG:NA
  - DESC: fix CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257
          fix CVE-2024-57258 CVE-2024-57259 CVE-2026-33243 CVE-2024-42040


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.5-1
changelog:
  - update to 1.3.5
  - update upstream location
  - include SO version in files list to avoid unexpected bumps
  - use modern macros
  - drop obsolete comments


author: mengchaoming<mengchaoming@kylinos.cn>-p13
changelog:
  -add patch11: ukui-greeter-kylin-Solve-bug49330-translation.patch
  -添加的定时器有问题,去掉,使用原有定时器;pam传上来的message,greeter进行翻译;


author: huayadong<huayadong@kylinos.cn>-p14
changelog:
  - add ukui-greeter-kylin-fix-bug-can-not-count-down-normally-after-entering-wrong-password-three-times.patch


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch21 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p25
changelog:
  - Type: bugfix
  - ID  : [Bug#128021]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-1.2.1-kylin-Prevent-failure-to-connect-to-xserver.patch
          修复因无法连接xserver而出现的登录界面键盘输入后闪屏问题.


author: huayadong<huayadong@kylinos.cn> -p26
changelog:
  - Type:bugfix
  - ID  :[Bug#137537]
  - SUG :NA
  - DESC:add patch24:ukui-greeter-1.2.1-kylin-prompt-for-password-expiration.patch


author: huayadong<huayadong@kylinos.cn> -p27
changelog:
  - Type:bugfix
  - ID  :[Bug#158569]
  - SUG :NA
  - DESC:add patch25:ukui-greeter-1.2.1-kylin-Add-login-status-detection-function-for-users-with-the-same-UID.patch
         为具有相同UID的用户添加登录状态检测功能，在用户列表合并显示相同UID用户


author: huayadong<huayadong@kylinos.cn> -p28
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch26:ukui-greeter-1.2.1-kylin-fix-crash-with-the-same-uid-user.patch


author: huayadong<huayadong@kylinos.cn> -p29
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch27:ukui-greeter-1.2.1-kylin-fix-the-problem-that-the-users-avatar-of-the-same-uid-is-not-centered.patch


author: huayadong<huayadong@kylinos.cn> -p30
changelog:
  - Type:bugfix
  - ID  :[Bug#164455]
  - SUG :NA
  - DESC:add patch28:ukui-greeter-1.2.1-kylin-increase-name-label-height.patch


author: huayadong<huayadong@kylinos.cn> -p31
changelog:
  - Type:bugfix
  - ID  :[Bug#167602]
  - SUG :NA
  - DESC:add patch29:ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch


author: huayadong<huayadong@kylinos.cn> -p32
changelog:
  - Type: bugfix
  - ID  : [Bug#161924]
  - SUG : NA
  - DESC: add patch14 ukui-greeter-1.2.1-kylin-fix-kyreplace3.0-4-lightdm-unable-to-start.patch


author: houhongxun<houhongxun@kylinos.cn> -p33
changelog:
  -Type:bugfix
  -ID:[BUG#194488]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-locked-user-on-login-window.patch
        don't show locked user on login window


author: huayadong <huayadong@kylinos.cn> -p34
changelog:
  - Type:bugfix
  - ID:[BUG#196489]
  - SUG:NA
  - DESC:add patch:0001-ukui-greeter-1.2.1-kylin-remove-xhost.patch


author: houhongxun<houhongxun@kylinos.cn> -p35
changelog:
  -Type:bugfix
  -ID:[BUG#205127]
  -SUG:NA
  -DESC:add patch 0001-ukui-greeter-adjust-according-to-pam-changes.patch


author: guoce <guoce@kylinos.cn> - 0.3.62-1s2.p02
changelog:
  - add patch: ukui-screensaver-0.3.62-fix-chandao-12928.patch
  - modify system time display coordinates


author: gaohaobo <gaohaobo@kylinos.cn> - 0.3.62-1s2.p04
changelog:
  - add patch: 0002-change-default-picture-folder-to-adjust-control-center-p12.patch  change the default srceensaver lookup directory to adjust kylin-control-center after p12.


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: peijiankang <peijiankang@kylinos.cn> - 0.3.62-1s2.p26
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add ukui-screensaver-add-translations-for-hk-and-tw.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p28
changelog:
  - Type: bugfix
  - ID  : [BUG#520853]
  - SUG : NA
  - DESC: add Patch25:ukui-screensaver-0.3.62-fix-VirtualKeyboard-no-underline.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p29
changelog:
  - Type: bugfix
  - ID  : [TASK#600911]
  - SUG : NA
  - DESC: add Patch26:ukui-screensaver-0.3.62-kylin-add-PAM_SERVICE_ERR-detection.patch
          增加PAM服务配置错误检测


author: wangshuo <wangshuo@kylinos.cn> - 0.99.8-5.p01
changelog:
  - Type:bugfix
  - ID:[BUG#424939]
  - SUG:NA
  - DESC:Backport upstream patch form 0.99.12, improve stability
  -      Reduce list of HID++ devices, which have been supported in Linux kernel 3.19
  -      Remove support for CSR devices(usb device battery status), which manufature mid-2000s


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-17
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: xiehongyu <xiehongyu@kylinos.cn> - 2:8.2-20.p01
changelog:
  - add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-21.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-22.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no,
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> -2:8.2-26.p01
changelog:
  - add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: wanglixing <wanglixing@kylinos.cn> - 2:8.2-28.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: sunjialin <sunjialin@kylinos.cn> - 2:8.2-34.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: likai01 <likai01@kylinos.cn> - 2:8.2-50.po1
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p03.01.se.01
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p01
changelog:
  - Type:update
  - ID:[task#512917]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p02
changelog:
  - Type:update
  - ID:[bug#610811]
  - SUG:NA
  - DESC: fix CVE: CVE-2026-41411,CVE-2026-42307,CVE-2026-43961,CVE-2026-44656,CVE-2026-45130,CVE-2026-46483,CVE-2026-47162,CVE-2026-47167,CVE-2026-52858,CVE-2026-52859,CVE-2026-52860, consistent with 9.0-50


author: lizhanchun <lizhanchun@kylinos.cn> 2.2.1-2.p15
changelog:
  - Type:	update
  - ID:	BUG#114583
  - SUG:	NA
  - DESC:	KYLIN-add-default-device-on-aarch64-when-inst-vm.patch 
  -		add default device on aarch64 when inst vm.


author: wangdi <wangdi@kylinos.cn> - 2.2.1-2.p16
changelog:
  - Type: update
  - ID:   BUG#129269
  - SUG:  NA
  - DESC: KYLIN-fix-virt-install-error-message-zh_CN-translation.patch 
  -               fix redundant characters in virt-install error message zh_CN translation.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p17
changelog:
  - Type: update
  - ID:   [TASK#159711]
  - SUG:  NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add kylin-virt-manager-2.2.1-4-fix-bug-68049-translation-of-tchinese.patch
  -       Add 0001-Set-minimum-memory-2048M-for-virt-install.patch
  -	Add 0001-Bug-119136-set-default-memory-2048.patch
  -	Add 0001-BUG-102438-Modify-is_loongarch64-to-is_loongarch.patch
  -	Add 0001-add-translations-for-zh_CN.patch
  -	Add 0001-temporarily-modify-version-V10-to-version-10.0.patch
  -	Delete duplicate machine types.
  -	Add mips64 loongarch support


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p18
changelog:
  - Type: update
  - ID:   [BUG#199984] [BUG#200170]
  - SUG:  NA
  - DESC: KYLIN-fix-virt-manager-error-message-zh_CN-translation.patch
  -               Fixed the issue that the virt-manager interface preference menu was displayed in English


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p19
changelog:
  - Type: update
  - ID:   TASK#187051
  - SUG:  NA
  - DESC: Add 0001-add-Chinese-traditional-translation-HK.po.patch
  -               add traditional Chinese translations for the HK versions.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p21
changelog:
  - Type: update
  - ID:   TASK#187713
  - SUG:  NA
  - DESC: add 0001-fix-cockpit-reboot-error-issue.patch
  -               fix-cockpit-reboot-error-issue.


author: GuoCe <guoce@kylinos.cn> - 2.2.1-4.p02
changelog:
  - Add patch13 to add translations for zh_CN
  - Add patch14 to temporarily modify version V10 to version 10.0


author: wangqiang <wangqiang1@kylinos.cn>- 2.2.1-4.p07
changelog:
  - Type: bugfix
  - ID: [BUG#68049]
  - SUG: NA
  - DESC: Add Patch23, fix the traditional chinese translation in desktop file.


author: lifei <lifei@kylinos.cn> - 2.2.1-4.p08
changelog:
  - Type: bugfix
  - ID:   [BUG#199855]
  - SUG:  NA
  - DESC: KYLIN-fix-virt-manager-error-message-zh_CN-translation.patch
  -               Fixed the issue that the virt-manager interface preference menu was displayed in English.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2.2.1-4.p09
changelog:
  - Type: Update
  - ID:   [TASK#464014]
  - SUG:  NA
  - DESC: Sync kylin patches from virt-manager-2.2.1-2.p22 to update version.


author: houhongxun <houhongxun@kylinos.cn> - 0.28.2-14.p01
changelog:
  - Type:bugfix
  - ID  :[Bug#203586]
  - SUG :NA
  - DESC:add Patch6:0001-vte-swallow-hyperlink-control-sequence-and-make-it-n.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.28.2-14.p02
changelog:
  - Type:bugfix
  - ID  :[TASK#532381]
  - SUG :NA
  - DESC:add Patch7: 0002-vte-fix-max-bytes-mate-terminal.patch


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:3.6.14-12
changelog:
  - Delete /usr/share/man/man1/wireshark.* in wireshark package because wireshark-help package also contains this files


author: houhongxun <houhongxun@kylinos.cn> - 2.24-6.p04
changelog:
  - Type: bugfix
  - ID:   [BUG#264389]
  - SUG:  NA
  - DESC: fix sensitive words, and remove unused translations


author: zhanzhimin<zhanzhimin@huawei.com> - 1.20.8-2
changelog:
  - Type:CVE
  - Id:CVE-2020-14346,CVE-2020-14361,CVE-2020-14362
  - SUG:NA
  - DESC:fix CVE-2020-14346,CVE-2020-14361,CVE-2020-14362


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-3.p02
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p06
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p07
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p09
changelog:
  - Type: CVE
  - ID:   [TASK#453291]
  - SUG:  NA
  - DESC: fix CVE-2024-31080, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p10
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p11
changelog:
  +- Type: CVE
  +- ID:   [TASK#593649]
  +- SUG:  NA
  +- DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p11
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p12
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p14
changelog:
  - Type: CVE
  - ID:   [BUG#552387]
  - SUG:  NA
  - DESC: fix tigervnc-server test failed (revert CVE-2023-5574 patch)


author: cuilei <cuilei@kylinos.cn> - 4.0.11.1.0.9kord1{?ns_dist}03
changelog:
  - Bug 3770:fix-delete-backup-page-banner-pic-layout.patch
  - Bug 3771:fix-data-inc-backup-error.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}17
changelog:
  - Type:bugfix
  - ID  :[bug#181281]
  - SUG :add patch 0001-fix-ghost-backup-oday.patch
  - DESC:fix ghost backup oday


author: HouHongxun <houhongxun@kylinos.cn> - 4.0.12kord1p18
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation-for-desktop-file.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}19
changelog:
  - Type: update
  - ID: [TASK#185224]
  - SUG: NA
  - DESC: add 0001-add-zh_HK-translate.patch 0001-add-zh_HK-qss-file.patch
          0001_backup_store_hk_png.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}21
changelog:
  - Type: buffix
  - ID: [BUG#215689]
  - SUG: NA
  - DESC: add 0001_add_ok_images.patch 0001-add-ok_btn-hk-translate.patch


author: sunliqiang <sunliqiang@kylinos.cn> - 3.4.10-8.1.p02
changelog:
  - Type: bugfix
  - ID: [bug#443527]
  - SUG: NA
  - DESC: Repair status failed after stopping the service and change ant repository to offline


author: lichenguang <lichenguang@kylinos.cn> - 0.2.35-9.p02
changelog:
  - Type:cves
  - ID: CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177
  - SUG:NA
  - DESC: fix CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177


