# changelog

author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.48.v2101
changelog:
  - third update changelog for upcoming 4.19.90-25.48.v2101 (Zhengyuan Liu)
  - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (Andrew Scull) [task:157172, task:468147]
  - second update changelog for upcoming 4.19.90-25.48.v2101 (Zhengyuan Liu)
  - net: core: use helper skb_ensure_writable in more places (Heiner Kallweit) [task:99622]
  - update changelog for upcoming 4.19.90-25.48.v2101 (Zhengyuan Liu)
  - Mucse: rnp: never use err_handler avoid os crash when aer error recover (Dong Yibo) [task:447054, task:451478]
  - tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima) [task:440603] {CVE-2022-49597}
  - txgbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - ngbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer) [task:162162, task:458745]
  - dm: fix mempool NULL pointer race when completing IO (Jiazi Li) [task:169357, task:458745]
  - xfs: fix freeing speculative preallocations for preallocated files (Christoph Hellwig) [task:449979]
  - xfs: update fork seq counter on data fork changes (Brian Foster) [task:449979]
  - ext4: introduce new metadata buffer read helpers (zhangyi (F)) [task:442948]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Baokun Li) [task:449973]
  - ext4: avoid potential data overflow in next_linear_group (Kemeng Shi) [task:449973]
  - ext4: use locality group preallocation for small closed files (Jan Kara) [task:449973]
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara) [task:449973]
  - ext4: discard preallocations before releasing group lock (Jan Kara) [task:449973]
  - ext4: fix dead loop in ext4_mb_new_blocks (Ye Bin) [task:449973]
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li) [task:449973]
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Baokun Li) [task:449973]
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Baokun Li) [task:449973]
  - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (Ojaswin Mujoo) [task:449973]
  - ext4: mballoc: Remove useless setting of ac_criteria (Ritesh Harjani) [task:449973]
  - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated (Kemeng Shi) [task:449973]
  - ext4: Stop searching if PA doesn't satisfy non-extent file (Ojaswin Mujoo) [task:449973]
  - ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code related to freeing PAs (Ojaswin Mujoo) [task:449973]
  - ext4: Convert pa->pa_inode_list and pa->pa_obj_lock into a union (Ojaswin Mujoo) [task:449973]
  - ext4: limit the length of per-inode prealloc list (brookxu) [task:449973]
  - OPENEULER: ext4: Stop trying writing pages if no free blocks generated (Zhihao Cheng) [task:184981]
  - ext4: reorganize if statement of ext4_mb_release_context() (brookxu) [task:449973]
  - ext4: add mb_debug logging when there are lost chunks (brookxu) [task:449973]
  - ext4: mballoc: add blocks to PA list under same spinlock after allocating blocks (Ritesh Harjani) [task:449973]
  - ext4: use built-in RCU list checking in mballoc (Madhuparna Bhowmik) [task:449973]
  - ext4: Abstract out overlap fix/check logic in ext4_mb_normalize_request() (Ojaswin Mujoo) [task:449973]
  - ext4: Move overlap assert logic into a separate function (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code in ext4_mb_normalize_request() and ext4_mb_use_preallocated() (Ojaswin Mujoo) [task:449973]
  - ext4: avoid unnecessary pointer dereference in ext4_mb_normalize_request (Kemeng Shi) [task:449973]
  - ext4: Add allocation criteria 1.5 (CR1_5) (Ojaswin Mujoo) [task:449973]
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) [task:166857]
  - ext4: Add per CR extent scanned counter (Ojaswin Mujoo) [task:449973]
  - ext4: Abstract out logic to search average fragment list (Ojaswin Mujoo) [task:449973]
  - ext4: fixup possible uninitialized variable access in ext4_mb_choose_next_group_cr1() (Jan Kara) [task:449973]
  - ext4: use is_power_of_2 helper in ext4_mb_regular_allocator (Kemeng Shi) [task:449973]
  - ext4: Avoid scanning smaller extents in BG during CR1 (Ojaswin Mujoo) [task:449973]
  - ext4: Add counter to track successful allocation of goal length (Ojaswin Mujoo) [task:449973]
  - ext4: Convert mballoc cr (criteria) to enum (Ojaswin Mujoo) [task:449973]
  - ext4: use buckets for cr 1 block scan instead of rbtree (Jan Kara) [task:449973]
  - ext4: fix sparse warnings (Theodore Ts'o) [task:449973]
  - ext4: add proc files to monitor new structures (Harshad Shirwadkar) [task:449973]
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara) [task:449973]
  - ext4: mballoc: add more mb_debug() msgs (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_show_ac() (Ritesh Harjani) [task:449973]
  - ext4: improve cr 0 / cr 1 group scanning (Harshad Shirwadkar) [task:449973]
  - ext4: add ability to return parsed options from parse_options (Harshad Shirwadkar) [task:449973]
  - ext4: add MB_NUM_ORDERS macro (Harshad Shirwadkar) [task:449973]
  - ext4: optimize the implementation of ext4_mb_good_group() (brookxu) [task:449973]
  - ext4: add prefetch_block_bitmaps mount option (Theodore Ts'o) [task:449973, addresses-google-bug:159488342]
  - ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu) [task:442948]
  - ext4: add prefetching for block allocation bitmaps (Alex Zhuravlev) [task:449973]
  - ext4: use common helpers in all places reading metadata buffers (zhangyi (F)) [task:442948]
  - ext4: add mballoc stats proc file (Harshad Shirwadkar) [task:449973]
  - ext4: drop s_mb_bal_lock and convert protected fields to atomic (Harshad Shirwadkar) [task:449973]
  - ext4: skip non-loaded groups at cr=0/1 when scanning for good groups (Alex Zhuravlev) [task:449973]
  - ext4: mballoc: use lock for checking free blocks while retrying (Ritesh Harjani) [task:449973]
  - ext4: mballoc: introduce pcpu seqcnt for freeing PA to improve ENOSPC handling (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_discard_preallocations() (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_good_group() (Ritesh Harjani) [task:449973]
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - iommu/amd: Fix potential @entry null deref (Joao Martins) [task:457728]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit) [task:457728]
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long) [task:457161]
  - clocksource: Avoid accidental unstable marking of clocksources (Waiman Long) [task:457161]
  - clocksource: Retry clock read if long delays detected (Paul E. McKenney) [task:158827]
  - x86/fpu: Allow multiple bits in clearcpuid= parameter (Arvind Sankar) [task:158034]
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [task:387977] {CVE-2024-47747}
  - NFS: Further optimisations for 'ls -l' (Trond Myklebust) [task:438543, task:442990]
  - NFS: Support larger readdir buffers (Trond Myklebust) [task:438543, task:442990]
  - NFS: Remove unnecessary kmap in nfs_readdir_xdr_to_array() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up nfs_readdir_page_filler() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up directory array handling (Trond Myklebust) [task:438543, task:442990]
  - nfs: pass the correct prototype to read_cache_page (Christoph Hellwig) [task:438543, task:442990]
  - NFS: Clean up readdir struct nfs_cache_array (Trond Myklebust) [task:438543, task:442990]
  - nfs: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) [task:438543, task:442990]
  - NFS: Ensure contents of struct nfs_open_dir_context are consistent (Trond Myklebust) [task:438543, task:442990]
  - NFS: Use the 64-bit server readdir cookies when possible (Trond Myklebust) [task:438543, task:442990]
  - nfs: optimise readdir cache page invalidation (Dai Ngo) [task:438543, task:442990]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:461961] {CVE-2025-37823}
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426435] {CVE-2025-21639}
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426436] {CVE-2025-21638}
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao) [task:421039] {CVE-2024-50051}
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [task:459941] {CVE-2025-22021}
  - net/rose: prevent integer overflows in rose_setsockopt() (Nikita Zhandarovich) [task:441317] {CVE-2025-21711}
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski) [task:440770] {CVE-2025-21768}
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [task:429487] {CVE-2024-56759}
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov) [task:427427] {CVE-2024-57938}
  - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima) [task:440800] {CVE-2022-49599}
  - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet) [task:440800]
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping) [task:442582] {CVE-2025-21835}
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can) [task:421029] {CVE-2024-52332}
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo) [task:420523] {CVE-2024-56780}
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin) [task:440548] {CVE-2022-49241}
  - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() (Yang Yingliang) [task:440548]
  - ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima) [task:440687] {CVE-2022-49603}
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong) [task:450130]
  - xfs: allow inode inactivation during a ro mount log recovery (Darrick J. Wong) [task:450130]
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (Haoxiang Li) [task:444124] {CVE-2025-21844}
  - cifs: fix potential memory leaks in session setup (Paulo Alcantara) [task:448797] {CVE-2023-53008}
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [task:426323] {CVE-2024-57929}
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima) [task:440707] {CVE-2022-49579}
  - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima) [task:441283] {CVE-2022-49630}
  - netfilter: nf_tables: fix crash when nf_trace is enabled (Florian Westphal) [task:440633]
  - netfilter: nf_tables: avoid skb access on nf_stolen (Florian Westphal) [task:440633] {CVE-2022-49622}
  - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso) [task:440633]
  - LoongArch: Set hugetlb mmap base address aligned with pmd size (Bibo Mao) [task:450281, task:464599] {CVE-2025-21949}
  - regulator: check that dummy regulator has been probed before using it (Christian Eggers) [task:452500, task:464599] {CVE-2025-22008}
  - regulator: workaround self-referent regulators (Michał Mirosław) [task:158034, task:464599]
  - regulator: avoid resolve_supply() infinite recursion (Michał Mirosław) [task:158034, task:464599]
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Saurabh Sengar) [task:450275, task:464599] {CVE-2025-21976}
  - fbdev: Introduce devm_register_framebuffer() (Thomas Weißschuh) [task:450275, task:464599]
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li) [task:444125] {CVE-2025-21848}
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin) [task:440416] {CVE-2022-49188}
  - remoteproc: qcom_q6v5_mss: Extract mba/mpss from memory-region (Sibi Sankar) [task:440416]
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data (Baokun Li) [task:439963] {CVE-2022-49414}
  - xfs: fix chown leaking delalloc quota blocks when fssetxattr fails (Darrick J. Wong) [task:450133]
  - xfs: always return -ENOSPC on project quota reservation failure (Eric Sandeen) [task:450133]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458685] {CVE-2025-37838}
  - blkcg: Add during the process to ensure data synchronization between CPUs. (cuitao) [task:404161, task:455283]
  - blkcg: handle dying request_queue when associating a blkg (Dennis Zhou) [task:404161, task:455283]
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia) [task:444123] {CVE-2025-21862}
  - net: hns3: don't auto enable misc vector (Jian Shen) [task:426325] {CVE-2025-21651}
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn (Omid Ehtemam-Haghighi) [task:412171] {CVE-2024-56703}
  - netlink: prevent potential spectre v1 gadgets (Eric Dumazet) [task:447831] {CVE-2023-53000}
  - scsi: qla2xxx: Fix scheduling while atomic (Quinn Tran) [task:149541]
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Lareine Khawaly) [task:448836] {CVE-2022-49749}
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro (Andy Shevchenko) [task:448836]
  - math64: New DIV_S64_ROUND_CLOSEST helper (Chunyan Zhang) [task:448836]
  - units: Add SI metric prefix definitions (Andy Shevchenko) [task:448836]
  - include/linux/units.h: add helpers for kelvin to/from Celsius conversion (Akinobu Mita) [task:448836]
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Ma Wupeng) [task:450240] {CVE-2025-21931}
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [task:450278] {CVE-2025-21956}
  - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() (Duoming Zhou) [task:440567] {CVE-2022-49309}
  - staging: rtl8723bs: replace _cancel_timer with del_timer_sync (Ross Schmidt) [task:440567]
  - staging: rtl8723bs: replace __inline by inline (Rasmus Villemoes) [task:440567]
  - memcg: fix soft lockup in the OOM process (Chen Ridong) [task:440777] {CVE-2024-57977}
  - mmc: core: use sysfs_emit() instead of sprintf() (Sergey Shtylyov) [task:440609] {CVE-2022-49267}
  - net: asix: add proper error handling of usb read errors (Pavel Skripkin) [task:440657] {CVE-2022-49226}
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (Ma Ke) [task:450263] {CVE-2025-21941}
  - drm/amd/display: Check for invalid input params when building scaling params (Michael Strauss) [task:450263]
  - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (Hans de Goede) [task:440567]
  - net: remove two BUG() from skb_checksum_help() (Eric Dumazet) [task:441332] {CVE-2022-49497}
  - net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register (Miaoqian Lin) [task:441333] {CVE-2022-49342}
  - net: bgmac: support MDIO described in DT (Rafał Miłecki) [task:441333]
  - x86/configs: Align default configuration options based on CentOS and openEuler (zhangguopeng) [task:451547]
  - proc/mounts: Fix kabi broken (Zhang Xiaoxu) [task:451547]
  - proc/mounts: add cursor (Miklos Szeredi) [task:451547]
  - list: introduce list_for_each_continue() (Pavel Begunkov) [task:451547]
  - clk: qcom: clk-rcg2: Fix compile error for implicit declaration of macro ‘RCG_D_OFFSET’ (lihao01) [task:454819]
  - SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu) [task:441633]
  - SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu) [task:441633]
  - NFSv4: Fix second deadlock in nfs4_evict_inode() (Trond Myklebust) [task:441633]
  - NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() (Trond Myklebust) [task:441633]
  - nvme-fc: fix racing controller reset and create association (James Smart) [task:395841]
  - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt context (James Smart) [task:395841]
  - nvme-fc: do not wait in vain when unloading module (Daniel Wagner) [task:395841] {CVE-2024-26846}
  - nvme-fc: fix module unloads while lports still pending (James Smart) [task:442948]
  - nvme-fc: remove nvme_fc_terminate_io() (James Smart) [task:395841]
  - nvme-fc: eliminate terminate_io use by nvme_fc_error_recovery (James Smart) [task:395841]
  - nvme-fc: track error_recovery while connecting (James Smart) [task:395841]
  - nvme-fc: fix io timeout to abort I/O (James Smart) [task:395841]
  - nvme: wait until all completed request's complete fn is called (Ming Lei) [task:85444]
  - nvme-fc: convert assoc_active flag to bit op (James Smart) [task:395841]
  - nvme-fc: remove err_work work item (James Smart) [task:395841]
  - nvme_fc: add 'nvme_discovery' sysfs attribute to fc transport device (James Smart) [task:395841]
  - usb-storage: apply IGNORE_UAS for Realtek RTL9210 (dengjie03) [bug:332982]
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park) [task:164562]
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [task:410453] {CVE-2024-56581}
  - btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod (Dinghao Liu) [task:158034]
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) [task:448792] {CVE-2023-52996}
  - netfilter: allow exp not to be removed in nf_ct_find_expectation (Xin Long) [task:444898] {CVE-2023-52927}
  - mlxsw: spectrum: Guard against invalid local ports (Amit Cohen) [task:440543] {CVE-2022-49134}
  - mlxsw: spectrum: Protect driver from buggy firmware (Amit Cohen) [task:440543]
  - mlxsw: Verify the accessed index doesn't exceed the array length (Danielle Ratson) [task:440543]
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio) [task:440504] {CVE-2024-57981}
  - sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima) [task:440762] {CVE-2022-49641}
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [task:429543] {CVE-2024-53180}
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [task:450256] {CVE-2025-21926}
  - udp: rehash on disconnect (Willem de Bruijn) [task:450256]
  - net: ipv4: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:450256]
  - udp: add missing rehash callback to udplite (Alexey Kodanev) [task:450256]
  - net: udp: prefer listeners bound to an address (Peter Oskolkov) [task:450256]
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das) [task:440546] {CVE-2022-49189}
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov) [task:450271] {CVE-2025-21898}
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov) [task:450247] {CVE-2025-21904}
  - gpio: rcar: Use raw_spinlock to protect register access (Niklas Söderlund) [task:450255] {CVE-2025-21912}
  - gpio: rcar: Optimize GPIO pin state read on R-Car Gen3 (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Implement gpio_chip.get_multiple() (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Rework hardware features handling (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Cache gpiochip_get_data() return value (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: select General Output Register to set output states (Vladimir Zapolskiy) [task:450255]
  - gpio: rcar: reference device instead of platform device (Vladimir Zapolskiy) [task:450255]
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku) [task:450260] {CVE-2025-21914}
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [task:450261] {CVE-2025-21971}
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich) [task:450244] {CVE-2025-21910}
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov) [task:450218] {CVE-2025-21948}
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea) [task:450259] {CVE-2025-21917}
  - vlan: enforce underlying device type (Oscar Maes) [task:450262] {CVE-2025-21920}
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm) [task:450276] {CVE-2025-21957}
  - scsi: qla1280: use lower_32_bits and upper_32_bits instead of reinventing them (Christoph Hellwig) [task:450276]
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov) [task:450266] {CVE-2025-21909}
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li) [task:450268] {CVE-2025-21934}
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet) [task:450248] {CVE-2025-21925}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu) [task:450254] {CVE-2025-21928}
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li) [task:450246] {CVE-2025-21935}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [task:450787] {CVE-2025-21993}
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [task:451120] {CVE-2025-21996}
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [task:451118] {CVE-2025-22007}
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen) [task:450270] {CVE-2025-21922}
  - net: atm: fix use after free in lec_send() (Dan Carpenter) [task:451119] {CVE-2025-22004}
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [task:450269] {CVE-2025-21959}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang) [task:450269]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.49.v2101
changelog:
  - xfs: push the AIL in xlog_grant_head_wake (Dave Chinner) [task:507733]
  - update changelog for upcoming 4.19.90-25.49.v2101 (Zhengyuan Liu)
  - nfp: Fix memory leak in nfp_cpp_area_cache_add() (Jianglei Nie) [task:160493]
  - xen/balloon: fix cancelled balloon action (Juergen Gross) [task:160493]
  - xen/balloon: fix balloon kthread freezing (Juergen Gross) [task:160493]
  - xen/balloon: use a kernel thread instead a workqueue (Juergen Gross) [task:160493]
  - perf hist: Fix memory leak of a perf_hpp_fmt (Ian Rogers) [task:160493]
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke) [task:162162]
  - usbnet: sanity check for maxpacket (Oliver Neukum) [task:160493]
  - phy: mdio: fix memory leak (Pavel Skripkin)
  - isdn: mISDN: Fix sleeping function called from invalid context (Zheyu Ma) [task:160493]
  - ovl: fix warning in ovl_create_real() (Miklos Szeredi)
  - net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern) [task:164562]
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:440591]
  - net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila) [task:440591] {CVE-2024-57996}
  - net_sched: sch_sfq: handle bigger packets (Eric Dumazet) [task:440591]
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (GONG Ruiqi) [task:491959] {CVE-2025-38213}
  - net: hns3: fix incorrect components info of ethtool --reset command (Jie Wang) [bug:367889]
  - net: hns3: add support for triggering reset by ethtool (Yufeng Mo) [bug:367889]
  - net: hns3: add device version to replace pci revision (Guangbin Huang) [task:68842]
  - net/mlx5: Fix steering rules cleanup (Lama Kayal) [task:461036] {CVE-2023-53079}
  - driver core: add device probe log helper (Andrzej Hajda) [task:497119]
  - spec:Add Obsoletes version restrictions to kernel-headers (lihaofeng) [bug:358147]
  - selinux: Add boundary check in put_entry() (Xiu Jianfeng) [task:482227] {CVE-2022-50200}
  - nvme-rdma: destroy cm id before destroy qp to avoid use after free (Ruozhu Li)
  - nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (Chao Leng)
  - net/mlx5: Flag state up only after cmdif is ready (zhaochenguang) [task:464738]
  - scsi: iscsi: Fix conn use after free during resets (Mike Christie)
  - scsi: libiscsi: fix task hung when iscsid deamon exited (Wu Bo)
  - ocfs2: fix data corruption after conversion from inline format (Jan Kara) [task:160493]
  - igb: Fix use-after-free error during reset (Vinicius Costa Gomes) [task:158827]
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Teng Qi) [task:160493]
  - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [task:158827]
  - ALSA: pcm: oss: Fix negative period/buffer sizes (Takashi Iwai) [task:160493]
  - ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai) [task:158034]
  - qede: confirm skb is allocated before using (Jamie Bainbridge) [task:162162, task:482311]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [task:491897] {CVE-2025-38103}
  - HID: hyperv: Correctly access fields declared as __le16 (Michael Kelley) [task:491897]
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong) [task:489411]
  - ext4: avoid resizing to a partial cluster size (Kiselev, Oleg) [task:482027] {CVE-2022-50020}
  - perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map (Kim Phillips) [task:153627, task:464558]
  - xfs: fix an ABBA deadlock in xfs_rename (Darrick J. Wong) [task:57649]
  - xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename() (kaixuxia) [task:57649]
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet) [task:122626, task:460255]
  - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen) [task:122626, task:460255] {CVE-2022-49871}
  - regulator: Fix lockdep warning resolving supplies (Mark Brown) [task:467671, task:467705]
  - regulator: core: avoid regulator_resolve_supply() race condition (David Collins) [task:467671, task:467705]
  - md/raid5: fix oops during stripe resizing (Song Liu) [task:158034, task:477039]
  - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) [task:164562]
  - net: core: use helper skb_ensure_writable in more places (Heiner Kallweit) [task:466778]
  - perf python: Convert tracepoint.py example to python3 (Tanu M) [task:488387, task:481449]
  - perf tools: Support Python 3.8+ in Makefile (Sam Lunt) [task:481449]
  - perf script python: Add Python3 support to tests/attr.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to export-to-sqlite.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to export-to-postgresql.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to intel-pt-events.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to event_analyzing_sample.py (Tony Jones) [task:481449]
  - perf script python: add Python3 support to check-perf-trace.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to futex-contention.py (Tony Jones) [task:481449]
  - perf script python: Remove mixed indentation (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to syscall-counts-by-pid.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to syscall-counts.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to stat-cpi.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to stackcollapse.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to sctop.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to powerpc-hcalls.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to net_dropmonitor.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to mem-phys-addr.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to failed-syscalls-by-pid.py (Tony Jones) [task:481449]
  - perf script python: Add Python3 support to netdev-times.py (Tony Jones) [task:481449]
  - net: stmmac: fix notifier registration (Aaro Koskinen) [bug:370375]
  - stmmac: debugfs entry name is not be changed when udev rename device name. (Jiping Ma) [task:166857]
  - scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)
  - scsi: iscsi: Add helper functions to manage iscsi_cls_conn (Wenchao Hao) [task:122038]
  - scsi: iscsi: Fix HW conn removal use after free (Mike Christie) [task:482545] {CVE-2022-50031}
  - scsi: libiscsi: Teardown iscsi_cls_conn gracefully (Wenchao Hao) [task:122038]
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() (Lixiaokeng)
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin) [task:482165] {CVE-2022-50093}
  - virtio-gpu: fix a missing check to avoid NULL dereference (Xiaomeng Tong) [task:481883] {CVE-2022-50181}
  - perf: Fix pmu_filter_match() (Peter Zijlstra) [task:464493]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:459566]
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng) [task:459566] {CVE-2025-22025}
  - nfsd: make nfsd4_run_cb a bool return function (Jeff Layton) [task:459566]
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [task:459623] {CVE-2025-22079}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [task:482067] {CVE-2025-38058}
  - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [task:482265] {CVE-2025-38075}
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [task:482035] {CVE-2025-38078}
  - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet) [task:460118] {CVE-2022-49765}
  - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (Wang Hai) [task:157172]
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) [task:164562]
  - media: dvb-core: Fix use-after-free on race condition at dvb_frontend (Hyunwoo Kim) [task:478283] {CVE-2022-45885}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [task:466609] {CVE-2025-37970}
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi) [task:441315] {CVE-2025-21811}
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) [task:426431] {CVE-2024-57912}
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) [task:426437] {CVE-2024-57911}
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) [task:426324] {CVE-2024-57908}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [task:419633] {CVE-2024-56598}
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [task:387577] {CVE-2024-50143}
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces (Chao Yu) [task:375569] {CVE-2024-49859}
  - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing) [task:460238] {CVE-2022-49924}
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:460254] {CVE-2025-23161}
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [task:466236] {CVE-2025-37968}
  - mm/gup: Remove enfornced COW mechanism (Peter Xu) [task:446992]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:460146] {CVE-2025-37756}
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) [task:466581] {CVE-2025-37942}
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc (Zhang Lixu) [task:461023]
  - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (Reka Norman) [task:461023] {CVE-2023-53039}
  - devm-helpers: Add resource managed version of work init (Matti Vaittinen) [task:461023]
  - devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc (Matti Vaittinen) [task:461023]
  - workqueue: Add resource managed version of delayed work init (Matti Vaittinen) [task:461023]
  - net: usb: lan78xx: Limit packet length to skb->len (Szymon Heidrich) [task:461084] {CVE-2023-53068}
  - neigh: fix ARP retransmit timer guard (Hangbin Liu) [task:470107]
  - neigh: support smaller retrans_time settting (Hangbin Liu) [task:470107]
  - net: link_watch: prevent starvation when processing linkwatch wq (Yunsheng Lin) [task:470107]
  - net: ena: Fix error handling in ena_init() (Yuan Can) [task:460204] {CVE-2022-49813}
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing) [task:460177] {CVE-2022-49923}
  - NFC: nxp-nci: remove unnecessary labels (wengjianfeng) [task:460177]
  - xfs: fix leaked dealloc blocks accounting (Shida Zhang) [task:467725]
  - btrfs: do not clean up repair bio if submit fails (Josef Bacik) [task:440526] {CVE-2022-49168}
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi) [task:440497] {CVE-2025-21721}
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi) [task:440497]
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi) [task:440497]
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [task:387559] {CVE-2024-50229}
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao (AceLan)) [task:450748] {CVE-2025-21992}
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (Nikolay Aleksandrov) [task:461063] {CVE-2023-53103}
  - bonding: Fix memory leak when changing bond type to Ethernet (Ido Schimmel) [task:461063]
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change (Nikolay Aleksandrov) [task:461063]
  - net: fix a compilation (xiaolinkui) [task:468687]
  - uprobes: Reject the shared zeropage in uprobe_write_opcode() (Tong Tiangen) [task:448833] {CVE-2025-21881}
  - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [task:471773] {CVE-2025-37995}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [task:429513] {CVE-2024-56589}
  - ibmvnic: Don't reference skb after sending to VIOS (Nick Child) [task:444126] {CVE-2025-21855}
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:462564] {CVE-2025-37879}
  - 9pnet: allow making incomplete read requests (Sergey Alirzaev) [task:462564]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:462406] {CVE-2025-37836}
  - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing) [task:460168] {CVE-2022-49799}
  - btrfs: use latest_dev in btrfs_show_devname (Anand Jain) [task:330554] {CVE-2021-47599}
  - btrfs: don't traverse into the seed devices in show_devname (Anand Jain) [task:157172]
  - btrfs: convert latest_bdev type to btrfs_device and rename (Anand Jain) [task:330554] {CVE-2021-47599}
  - fs: relax assertions on failure to encode file handles (Amir Goldstein) [task:429490] {CVE-2024-57924}
  - ovl: don't use a temp buf for encoding real fh (Amir Goldstein) [task:149468]
  - ovl: make sure that real fid is 32bit aligned in memory (Amir Goldstein) [task:149468]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:462440] {CVE-2025-37857}
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [task:459937] {CVE-2025-22086}
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich) [task:448793] {CVE-2025-21877}
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [task:410153] {CVE-2024-56637}
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:469817] {CVE-2024-57974}
  - udp: Remove unused parameter (exact_dif) (Tim Beale) [task:441338]
  - net: ipv6: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:441338]
  - net: udp6: prefer listeners bound to an address (Peter Oskolkov) [task:441338]
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [task:466598] {CVE-2025-37927}
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips) [task:164562]
  - xenbus: Use kref to track req lifetime (Jason Andryuk) [task:466603] {CVE-2025-37949}
  - xenbus: req->err should be updated before req->state (Dongli Zhang) [task:155707]
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (Murad Masimov) [task:440505] {CVE-2025-21792}
  - ax25: rcu protect dev->ax25_ptr (Eric Dumazet) [task:440765] {CVE-2025-21812}
  - ax25: Use kernel universal linked list to implement ax25_dev_list (Duoming Zhou) [task:440765]
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo) [task:442589] {CVE-2024-58072}
  - rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) [task:166857]
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel) [task:442589]
  - rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) [task:166857]
  - rtlwifi: rtl_pci: Fix memory leak when hardware init fails (Larry Finger) [task:166857]
  - rtlwifi: Fix errors in spacing in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Fix problems with block comments in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Remove CamelCase variables from base code (Larry Finger) [task:442589]
  - xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong) [task:464914]
  - xfs: set aside allocation btree blocks from block reservation (Brian Foster) [task:464914]
  - xfs: introduce in-core global counter of allocbt blocks (Brian Foster) [task:464914]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) [task:442641] {CVE-2024-58083}
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang) [task:459932] {CVE-2025-23136}
  - fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu) [task:448819] {CVE-2022-49741}
  - video: fbdev: don't print error message on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: intelfb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: s3c-fb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - qibfs: fix _another_ leak (Al Viro) [task:466584] {CVE-2025-37983}
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Wentao Liang) [task:466615] {CVE-2025-37990}
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:466597] {CVE-2025-37982}
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:460149] {CVE-2025-37765}
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:462069] {CVE-2025-37800}
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:462069]
  - driver core: bus: implement bus_get/put() without the private pointer (Greg Kroah-Hartman) [task:462069]
  - driver core: add local subsys_get and subsys_put functions (Greg Kroah-Hartman) [task:462069]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman) [task:462069]
  - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback (Wesley Cheng) [task:440766] {CVE-2022-49398}
  - tty: serial: fsl_lpuart: fix race on RX DMA shutdown (Alexander Sverdlin) [task:461247] {CVE-2023-53094}
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:460201] {CVE-2025-23140}
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:460209] {CVE-2025-37781}
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:462560] {CVE-2025-37878}
  - scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu) [task:440479] {CVE-2022-49118}
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang) [task:419353]
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens) [task:419353] {CVE-2024-56770}
  - net: netem: use a list in addition to rbtree (Peter Oskolkov) [task:419353]
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann) [task:439944] {CVE-2025-21823}
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann) [task:439944]
  - batman-adv: ELP - use wifi tx bitrate as fallback (René Treffer) [task:439944]
  - list: fix a data-race around ep->rdllist (Kuniyuki Iwashima) [task:440750] {CVE-2022-49443}
  - list: introduce list_is_head() helper and re-use it in list.h (Andy Shevchenko) [task:440750]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:466413] {CVE-2025-37989}
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner) [task:448841] {CVE-2023-52935}
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:462569] {CVE-2025-37883}
  - f2fs: fix to do sanity check on node blkaddr in truncate_node() (Chao Yu) [task:416339] {CVE-2024-56692}
  - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() (Chao Yu) [task:440555] {CVE-2022-49380}
  - f2fs: do not count ENOENT for error case (Jaegeuk Kim) [task:439941]
  - f2fs: avoid infinite loop to flush node pages (Jaegeuk Kim) [task:439941] {CVE-2022-49317}
  - f2fs: fix wrong condition check when failing metapage read (Jaegeuk Kim) [task:439941]
  - f2fs: avoid an infinite loop in f2fs_sync_dirty_inodes (Jaegeuk Kim) [task:439941]
  - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found (Weichao Guo) [task:439941]
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal) [task:440632] {CVE-2022-49120}
  - scsi: pm80xx: Fix command issue sizing (peter chang) [task:440632]
  - scsi: pm80xx: Squashed logging cleanup changes (peter chang) [task:440632]
  - btrfs: always report error in run_one_delayed_ref() (Qu Wenruo) [task:448850] {CVE-2022-49761}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:461022] {CVE-2025-37798}
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:461213] {CVE-2025-37757}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:461360] {CVE-2025-37797}
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:461966] {CVE-2025-37824}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia) [task:421045] {CVE-2024-53680}
  - f2fs: fix race in concurrent f2fs_stop_gc_thread (Long Li) [task:410149] {CVE-2024-53218}
  - f2fs: use spin_lock to avoid hang (Jaegeuk Kim) [task:440817] {CVE-2022-49169}
  - btrfs: do not double complete bio on errors during compressed reads (Josef Bacik) [task:440568] {CVE-2022-49167}
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana) [task:440409] {CVE-2025-21753}
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton) [task:441340]
  - net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton) [task:441340] {CVE-2022-49194}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [task:387641] {CVE-2024-50171}
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le) [task:434029] {CVE-2025-21702}
  - net_sched: sch_fifo: implement lockless __fifo_dump() (Eric Dumazet) [task:434029]
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer) [task:440550] {CVE-2025-21744}
  - netrom: check buffer length before accessing it (Ilya Shchipletsov) [task:425034] {CVE-2024-57802}
  - SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever) [task:439956] {CVE-2022-49065}
  - SUNRPC: Clean up request deferral tracepoints (Chuck Lever) [task:439956]
  - SUNRPC: Simplify defining common RPC trace events (Chuck Lever) [task:439956]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:460175] {CVE-2025-37749}
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) [task:460174] {CVE-2022-49845}
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:460161] {CVE-2025-37796}
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:460234] {CVE-2025-23163}
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:460144] {CVE-2025-23142}
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:460141] {CVE-2025-37789}
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [task:459581] {CVE-2025-22063}
  - atm: Fix NULL pointer dereference (Minjoong Kim) [task:459567] {CVE-2025-22018}
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [task:458462] {CVE-2025-38637}
  - f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim) [task:440776] {CVE-2022-49255}
  - ubifs: Fix to add refcount once page is set private (Zhihao Cheng) [task:439948] {CVE-2021-47635}
  - include/linux/pagemap.h: introduce attach/detach_page_private (Guoqing Jiang) [task:439948]
  - ext4: fix access to uninitialised lock in fc replay path (Luis Henriques (SUSE)) [task:376395] {CVE-2024-50014}
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov) [task:459565] {CVE-2025-22027}
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song) [task:461956] {CVE-2025-37807}
  - net: annotate races around sk->sk_bound_dev_if (Eric Dumazet) [task:439947] {CVE-2022-49420}
  - drm/scheduler: fix fence ref counting (Christian König) [task:460223] {CVE-2022-49829}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426896] {CVE-2025-21640}
  - clocksource: Skip watchdog check for large watchdog intervals (Jiri Wiesner) [task:431250]
  - clocksource: Print deviation in nanoseconds when a clocksource becomes unstable (Feng Tang) [task:431250]
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart) [task:441321]
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart) [task:441321]
  - netfilter: conntrack: revisit gc autotuning (Florian Westphal) [task:441321] {CVE-2022-49110}
  - netfilter: conntrack: collect all entries in one cycle (Florian Westphal) [task:160493]
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) [task:440692] {CVE-2022-49585}
  - tcp: disable TFO blackhole logic by default (Wei Wang) [task:440692]
  - net/tcp_fastopen: fix data races around tfo_active_disable_stamp (Eric Dumazet) [task:442948]
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima) [task:444121]
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima) [task:444121] {CVE-2025-21858}
  - geneve: move debug check after netdev unregister (Florian Westphal) [task:155707]


author: jinzhiguang <jinzhiguang@kylinos.cn> - 0.11.0-8.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-fix-non-trivial-designated-initializers.patch
  	0001-use-btf_dump__new_deprecated.patch


author: lijian1 <lijian1@kylinos.cn> - 0.11.0-8.p02
changelog:
  - Type: Bugfix
  - ID: TASK#218577
  - SUG: NA
  - DESC: fix percpu map without args, c07f23af3507e0b4971ec4343523d976a048b078,
          3f2b438c8b497129f952531375429b1a93e7620d,39f3996d17f88124acc0170b8659e0856555043a
          3fbe73909e009a6741faed1c444daffed478395e;add patch 0005 for so path;add 0006 for tcpdrop.bt.


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p12
changelog:
  - Add caja-1.12.7-Kylin-hide-three-option-in-trash.patch
  - Delete "Listview New Documents" "cut" "copy" in trash


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p13
changelog:
  - Add caja-1.12.7-Kylin-fix-bug-17932.patch
  - Resolve Changing the resolution will cause the desktop icons to not be adaptively arranged


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:bugfix
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p37
changelog:
  - Type: bugfix
  - ID:   [BUG#340468]
  - SUG:  NA
  - DESC: don't free memory that was not dynamically allocated


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p39
changelog:
  - Type: update
  - ID:   [TASK#500863]
  - SUG:  NA
  - DESC: fix nonremovable disks incorrectly placed under removable disks


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: lizhipeng <lizhipeng@kylinos.cn> - 1:12.2.8-8.p03.02
changelog:
  - Type: cves
  - ID:   [BUG#342916]
  - SUG:  NA
  - DESC: fix CVE-2020-12059 CVE-2020-25678 CVE-2021-3979 CVE-2023-43040


author: zhangyujing <zhangyujing1@huawei.com> - 6.8-2.1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:setcifsacl: fix adding ACE when owner sid in unexpected location
         cifs.upcall: fix a compiler warning


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liang yangang <liangyangang@kylinos.cn> - 196.3-1.01.p01
changelog:
  - add mips64el arch support,
  - add Requires for storaged to support lvm: libblockdev libblockdev-devel libudisks2 udisk2-lvm2


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Add search box to Services page rhbz#1657752
  - Connect to firewalld as superuser rhbz#1664158
  - Fix log filtering rhbz#1665421
  - Show error message for invalid IdM domain names rhbz#1659333
  - Changing passwords as root does not ask for current password rhbz#1666005


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - System: Enable/disable SMT rhbz#1678956
  - Logs: Add service filtering rhbz#1657756
  - Networking: Add custom firewall ports rhbz#1660400


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Networking: Add Firewall Zones configuration rhbz#1678473
  - Fix ssh login to unknown hosts rhbz#1701174
  - Fix login when ~/.bashrc prints to stdout rhbz#1716223
  - Much better On/Off buttons, also avoid text overlap rhbz#1677593


author: Martin Pitt <mpitt@redhat.com> - 196.1-1
changelog:
  - networkmanager: Show correct IPv6 route metric in dialog (rhbz#1719575)
  - networkmanager: Ensure that endianess is always set (rhbz#1728213)
  - Update translations (rhbz#1689977)


author: caiyinan <caiyinan@kylinos.cn> - 196.3-1.p06
changelog:
  - Type:bugfix
  - ID:[bug#186959]
  - SUG:NA
  - DESC:fix unlinked other OS branding file by excluding from packages


author: Lihx <lihaoxiang@kylinos.cn> - 8.32-1.p03
changelog:
  - update to 8.32 for kylin
  - Migrate patch p01 and p02 to version 8.32-1
  - Add color display.zhangqiang <zhangqiang@kylinos.cn>
  - disable check.ouyangkang <ouyangkang@kylinos.cn>


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: zhangqiang <zhangqiang@kylinos.cn> - 7.2.9-2.p03
changelog:
  -Type:bugfix
  -ID:[任务#126238]
  -SUG:NA
  -DESC:join the upstream patch for suppourt arm64 KASAN kernel debug


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: liyanan <liyanan32@huawei.com> - 2.1.27-11
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: hanhuijie <hanhuijie@kylinos.cn> - 1:1.12.16-16.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#116083]
  - SUG:NA
  - DESC: Add Patch:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: lijiaan <lijiaan@kylinos.cn> - 1.0.0.rc16-52.p01
changelog:
  - modify spec  after %build  add cp /usr/lib/rpm/kylin/confit.* ./autoconf
  - DESC: config.guess and config.sub ensure the software can be compiled and
    run correctly in a variety of different system env.


author: yanshuai <yanshuai01@kylinos.cn> - 1.0.0.rc16-52.p03
changelog:
  - Type: bugfix
  - ID: [BUG#302327]
  - SUG: NA
  - DESC: fix dmraid help info display incomplete problem'


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: sunjialin <sunjialin@kylinos.cn> -2.3.10.1-4.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Modify the patch number of dovecot-2.3.10.1-surpport-mips64el.patch,
         Patch number:6012 coincide, modify Patch6012 to Patch7000


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: wanghao<wanghao2@kylinox.cn> - 050-3.se.p04.07
changelog:
  - Type: update
  - ID: [Task#129149]
  - SUG:NA
  - DESC: 添加magic配置文件,修复执行控制白名单初始化时类型判断失败的问题
  -         add patch: dracut-050-add-magic-config-file.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-3.se.p05.07
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-3.se.p05.08
changelog:
  - Type:update
  - ID:[Task#195740]
  - SUG:NA
  - DESC:同步sp4补丁,
  -      [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  -      add dracut-fix-mount-home-failed.patch


author: Wenhua Huang <huangwenhua@kylinos.cn> - 050-3.se.p06.08
changelog:
  - Type:update
  - ID:[TASK#174208]
  - SUG:NA
  - DESC: nvme 安装盘系统在安装dracut-config-generic 软件包重新生成initramfs.img 系统重启失败
  -	add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0038-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0039-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0040-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: openEuler Buildteam <buildteam@openeuler.org> - 201908-8
changelog:
  - enable multiple threads compiling
  - Pass EXTRA_OPTFLAGS and EXTRA_OPTFLAGS options to make command
  - enable IPv6 for X86_64


author: Jinhua Cao <caojinhua1@huawei.com> - 202002-11
changelog:
  - BaseTools: fix ucs-2 lookup on python3.9
  - BaseTools: Work around array.array.tostring() removal in python3.9


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-7.p02
changelog:
  - Type:	Update
  - ID:	[TASK#138646]
  - SUG:	NA
  - Desc:	fix CVE-2022-4450 CVE-2023-0286 CVE-2023-0215 CVE-2023-0401
  	from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: yanjianqing <yanjianqing@kylinos.cn> - 202011-7.p04
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304
          from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: lijunwei <lijunwei@kylinos.cn> - 202011-7.p05
changelog:
  - Type: Update
  - ID:   [TASK#204641]
  - SUG:  NA
  - Desc: Add Patch0030~Patch0066 fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、
          CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、
          CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: cuiyudong <cuiyudong@kylinos.cn> - 202011-7.p05
changelog:
  - Type: Update
  - ID:   [TASK#204640]
  - SUG:  NA
  - Desc: fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、
          CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、
          CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、
          CVE-2023-45235


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-7.p07
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: lijunwei <lijunwei@kylinos.cn> - 202011-7.p08
changelog:
  - Type: Update
  - ID:   [TASK#388581]
  - SUG:  NA
  - DESC: Fix CVE-2024-38796/CVE-2023-45236/CVE-2023-45237


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-7.p07
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA 
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-7.p09
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: panxiaohe <panxh.life@foxmail.com> - 0.180-7
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: houzhiwei <houzhiwei@kylinos.cn> - 0.180-15.p04
changelog:
  - Type:[update]
  - ID:[TASK#414525]
  - SUG:NA
  - DESC:correctly fix libdebuginfod.so requirement，fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: zhangxiaolu <zhangxiaolu@kylinos.com> - 1:27.1-14.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: gaoyukun <gaoyukun@kylinos.com> - 1:27.1-15.p01
changelog:
  - type: bugfix 
  - ID: NA
  - DESC: add patch:kylin-change-translation-emacs.patch, add translate bug add modify spec and add config.guess and config.sub in build dir for compile.


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: xiehongyu <xiehongyu@kylin.cn> - 3.30.1-4.01
changelog:
  - Add evince-3.30.1-kylin-perfect-Internationalization.patch
  - Fixed BUG #12046, #11966, perfect Internationalization


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: openEuler Buildteam <buildteam@openeuler.org> - 0.26-19
changelog:
  - Type:cves
  - ID:CVE-2019-13109
  - SUG:NA
  - DESC:fix CVE-2019-13109
         fix ICC profile in PNG images


author: wangkerong <wangkerong@huawei.com> - 0.26-25
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: Yangdacheng <yangdacheng@kylinos.cn> - 4.0.2-9.p03
changelog:
  - Type: cves
  - ID: [TASK#333142]
  - SUG: NA
  - DESC: Fix CVE-2024-31578,CVE-2024-32230,CVE-2021-3566,CVE-2021-38291,CVE-2021-38114,CVE-2022-3109,CVE-2022-3341,CVE-2023-51794,CVE-2024-31578,CVE-2023-50010,CVE-2023-51793,CVE-2021-28429,CVE-2021-38171,CVE-2022-1475,CVE-2022-48434


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p05
changelog:
  - Type: cves
  - ID: [TASK#402117]
  - SUG: NA
  - DESC: Fix CVE-2024-35366,CVE-2024-35367,CVE-2024-35368,CVE-2024-36616,CVE-2024-36617,CVE-2024-36618


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p07
changelog:
  - Type: cves
  - ID: [TASK#480707]
  - SUG: NA
  - DESC: Fix CVE-2017-9994,CVE-2019-12730,CVE-2019-17542,CVE-2019-17539,CVE-2019-11339,CVE-2018-15822


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p08
changelog:
  - Type: cves
  - ID: [TASK#494103]
  - SUG: NA
  - DESC: Fix CVE-2020-22019,CVE-2020-22021,CVE-2020-22026,CVE-2020-22038,CVE-2020-22039,CVE-2020-22043,CVE-2020-22044


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p09
changelog:
  - Type: cves
  - ID: [TASK#500913]
  - SUG: NA
  - DESC: Fix CVE-2020-21697,CVE-2020-22020,CVE-2020-22037,CVE-2020-22051,CVE-2020-22054


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p10
changelog:
  - Type: cves
  - ID: [TASK#507127]
  - SUG: NA
  - DESC: Fix CVE-2020-21688,CVE-2020-22042,CVE-2025-22919,CVE-2025-22921


author: lvfei <lvfei@huawei.com> - 3.0.3.32900-7.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p05
changelog:
  - modify firefox-wayland.desktop add NoDisplay=true
  - modify firefox.js modify openeuler to kylinos
  - modify distribution.ini modify openeuler to kylinos


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p06
changelog:
  - modify firefox.js modify http://www.kylinos.cn to https://www.kylinos.cn
  - mofify firefox.js  browser.startup.homepage  http://www.kylinos.cn to file:///usr/share/doc/HTML/index.html
  - add patch:firefox-modify-firsturl-http-to-https.patch


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p09
changelog:
  -  Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967 CVE-2022-25235
    CVE-2022-25236 and CVE-2022-25315 CVE-2022-40674


author: wangwenfeng <wangwenfeng@kylinos.cn> - 79.0-4.p11
changelog:
  - Type:compile
  - ID:[TASK#148328]
  - SUG:NA
  - DESC:Make Firefox dependent on the Freetype package. add dependency.


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p14
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p18
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675      
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p19
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675      
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
          CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p21
changelog:
  - Type: cves
  - ID: CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch
  - SUG: restart
  - DESC: fix CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch


author: huayadong <huayadong@kylinos.cn> - 2.13.92-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#251085]
  - SUG : NA
  - DESC: add Patch9001:fontconfig-2.13.92-kylin-backport-Report-more-detailed-logs-instead-of-assertion.patch


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p02.ky10.x86_64 to correct stage


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: huanghaitao <huanghaitao8@huawei.com> - 3.0.15-19
changelog:
  - Make help package requires by freeradius

   Aug 21 2020 yuboyun <yuboyun@huawei.com> - 3.0.15-18
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: release +1 for rebuild


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p01
changelog:
  - Type: bugfix
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: Add sed -i '/^95$/d' /etc/uid_list,resolve the issue of installation failure after uninstallation.


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p02
changelog:
  - Type: bugfix、compile
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: solve compilation problems,  remove "


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39352
  - Fix CVE-2023-39353
  - Fix CVE-2023-39354
  - Fix CVE-2023-39356
  - Fix CVE-2023-40181
  - Fix CVE-2023-40186
  - Fix CVE-2023-40188
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40589


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: Shi Jingying <shijingying@kylinos.cn> - 7.3.0-20190804.35.p01
changelog:
  - modify gcc description
  - from This is compiler for arm64
  - to The gcc package contains the GNU Compiler Collection version 7.
    You'll need this package in order to compile C code.


author: lijian1 <lijian1@kylinos.cn> - 7.3.0-20190804.35.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify gcc.spec: Add file libstdc++fs.a to package libstdc++-static


author: Yu Peng <yupeng@kylinos.cn> - 7.3.0-20190804.35.p08
changelog:
  - Type:enhancement
  - ID:[Task#361285]
  - SUG:NA
  - DESC:Add -02 compilation option to optimize compilation speed.


author: <majian@kylinos.cn> - 9.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#186426]
  - SUG: NA
  - DESC: Init package for Kylin V10 sp4 and add Kylin patches.
  - [BUG#112827] fix replace manufacturer string from openEuler to KylinOS in version info.
  - [BUG#199946] fix gdb hangup crash issue when attach running process debug.


author: majian <majian@kylinos.cn> - 9.2-7.p02
changelog:
  - Type: bugfix
  - ID: [BUG#218056]
  - SUG: NA
  - DESC: Add 0002-Set-entry-point-when-text-segment-is.patch.


author: huayadong <huayadong@kylinos.cn> - 1:3.30.1-10.p01
changelog:
  - Type:	compile
  - ID: 	[TASK#75897]
  - SUG:	NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: compile
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch0:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p02
changelog:
  - Type: cve
  - ID:   [TASK#133075]
  - SUG:  NA
  - DESC: add patch1:gdm-3.38.2.1-kylin-use-autoptr-to-handle-errors-in-look-for-existing-users.patch
  	Fix CVE-2020-16125


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#160751]
  - SUG:  NA
  - DESC: add patch2:gdm-3.38.2.1-kylin-fix-fix-the-problem-of-failing-to-start.patch


author: huayadong <huayadong@kylinos.com> - 2.5.6-1.p01
changelog:
  - Type:bugfix
  - ID  :[bug#135451]
  - SUG :NA
  - DESC:add patch0: geoclue-2.5.6-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 9.52-20.p03
changelog:
  - Type:cves
  - ID:CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837 CVE-2023-52722
  - SUG:NA
  - DESC:fix CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837, CVE-2023-52722


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p04
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473
          rebuild for version problem


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: gaihuiying <gaihuiying1@huawei.com> - 2.23.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-11008
  - SUG:NA
  - DESC:fix CVE-2020-11008
         credential: detect unrepresentable values when parsin urls
         fsck: detect gitmodules URLs with embedded newlines


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: fandeyuan <fandeyuan@kylinos.cn> - 2.62.5-7.p01
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: litenglong <litenglong@kylinos.cn> - 2.62.5-4.p03
changelog:
  - Type:bugfix
  - ID:[BUG#329022]
  - SUG:NA
  - DESC:Fix race between D-Bus signal emission and unsubscription


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.62.5-7.p05
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: liqingqing_1229<liqingqing3@huawei.com> - 2.28-44
changelog:
  - fix bug 26100: correct locking and cancellation cleanup in syslog functions. 
  - origin bugzilla link is https://sourceware.org/bugzilla/show_bug.cgi?id=26100


author: zhaowei<zhaowei23@huawei.com> - 2.28-45
changelog:
  - fix bug 965941: fix build with libselinux >= 3.1 
  - origin bugzilla link is https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965941


author: Qingqing Li <liqingqing3@huawei.com> - 2.28-46
changelog:
  - fix handling of collating symbols in fnmatch.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?id=26620
  - fix SEM_STAT_ANY kernel argument pass.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?26637
  - fix i686 test-strftime3.c compile warning.


author: liusirui<liusirui@huawei.com> - 2.28-47
changelog:
  - Fix CVE-2020-27618, iconv accept redundant shift sequences in IBM1364 [BZ #26224]
    https://sourceware.org/bugzilla/show_bug.cgi?id=26224


author: Wang Shuo <wangshuo_1994@foxmail.com> - 2.28-48
changelog:
  - Fix CVE-2020-29573, Harden printf against non-normal long double values
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-29573
    https://sourceware.org/bugzilla/show_bug.cgi?id=26649


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-49
changelog:
  - Fix CVE-2020-29562, Fix incorrect UCS4 inner loop bounds (BZ#26923)
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29562
    https://sourceware.org/bugzilla/show_bug.cgi?id=26923


author: majian <majian@kylinos.cn> - 2.28-49.p09
changelog:
  - cves: CVE-2023-0687
  - ID: [TASK#141422]
  - SUG: NA
  - DESC: Fix CVE-2023-0687.
    https://gitee.com/src-openeuler/glibc/pulls/555


author: majian <majian*kylinos.cn> - 2.28-49.p10
changelog:
  - Type: bugfix
  - ID: [TASK#148359]
  - SUG: NA
  - DESC: move <lua> script in '%posttrans' and '%postun' from all-langpacks subpackage to common subpackage.


author: majian <majian@kylinos.cn> - 2.28-49.p13
changelog:
  - Type: update
  - ID: [TASK#200535]
  - SUG: NA
  - DESC: Patch60: Disable threads in Intel vm environment to avoid performance degradation.


author: <majian@kylinos.cn> - 2.28-49.p14
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-49.p16
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:Fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: panzhe <panzhe@kylinos.cn> - 2.28-49.p21
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC: fix pthread_once hangs when init routine throws an exception


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: mengchaoming<mengchaoming@kylinos.cn>- 3.30.1-2.p03
changelog:
  -add patch:gnome-calculator-3.30.1-kylin-fix-bug.patch
  -输入等于号等同于回车计算结果
  -进制转化的时候置灰不能输入的数字
  -单位转换的时候，对应的标签做相应的变化


author: huayadong <huayadong@kylinos.cn>- 3.30.1-2.p06
changelog:
  - add Patch:gnome-calculator-3.30.1-kylin-numlook-bug.patch
  - add Source1:gnome-calculator.tar.gz  --chengrui


author: peijiankang <peijiankang@kylinos.cn>- 3.30.1-2.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add gnome-calculator-update-translations-for-hk.patch


author: liujilin <liujilin@kylinos.cn> - 3.32.1-1.p03
changelog:
  - add patch3:  gnome-logs-3.32.1-kylin-rpm-to-install-logs.patch
  - add polkit policy.
  - change anacpnda logs to rpm logs.


author: liujilin <liujilin@kylinos.cn> - 3.32.1-1.p05
changelog:
  - add patch5:  gnome-logs-3.32.1-kylin-export-logs-display-error.patch
  - export install logs, log file will display error.


author: wanggang <wanggang@kylinos.cn> - 3.32.1-1.p06
changelog:
  - add Patch06:  gnome-logs-3.32.1-kylin-close-keyboard-shortcut.patch
  - close-keyboard-shortcut menu.


author: huayadong<huayadong@kylinos.cn> - 3.32.1-1.p08
changelog:
  - add patch0008:gnome-logs-3.32.1-kylin-fix-bug54920-VNC-is-connected-to-the-server-cannot-be-opened.patch
  - Patch0008:修复vnc连接到服务器日志工具打不开问题.patch


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: huayadong <huayadong@kylinos.cn> - 3.30.1-10.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#165420]
  - SUG:  NA
  - DESC: add Requires: llvm-libs >= 8.0.1-1.6.p01 only for loongarch64


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: wangqiang <wangqiang1@kylinos.cn> - 2.8-1.p01
changelog:
  - Type:enhancement
  - ID:[TASK#393475]
  - SUG:NA
  - DESC:Add configure option '--with-tcmalloc-pagesize=64' adopt to aarch64 with 64K pazgesize


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: hanzhijun <hanzhijun1@huawei.com> - 2.04-3
changelog:
  - Type:cves
  - Id:CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707
  - SUG:NA
  - DESC:fix CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707


author: shuihengcheng <shuihengcheng@kylinos.cn> - 2.04-5.se.01
changelog:
  - add KYLIN-add-bootargs-for-security.patch
  - add 0001-support-FT1500-and-FT2000-uboot.patch
  - add 0001-fix-x86-legacy-problems.patch


author: Han Shuang<hanshuang@kylinos.cn> - 2.04-5.se.01.p02
changelog:
  - modify grub2.spec fix yum update after grub no password 
  - add to /etc/grub.d/00_header  superusers password


author: Han Shuang<hanshuang@kylinos.cn> - 2.04-5.se.01.p03
changelog:
  - modify grub.patches add Patch0250: KYLIN-add-bootargs-for-security.patch Patch0251: 0001-support-FT1500-and-FT2000-uboot.patch Patch0252: 0001-fix-x86-legacy-problems.patch Patch0253: 0001-modify-10_linux.patch


author: Zhang Zeyang<zhangzeyang@kylinos.cn> - 2.04-5.se.01.p07
changelog:
  - Type:CVE
  - CVE:CVE-2021-3981 CVE-2020-27779 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233
  - SUG:NA
  - DESC:Fix CVE:CVE-2021-3981 CVE-2020-27779 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233


author: Like<like@kylinos.cn> - 2.04-5.se.01.p08
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - SUG:NA
  - DESC:Fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: Xiao Zai<xiaozai@kylinos.cn> - 2.04-5.se.01.p09
changelog:
  - Type:NA
  - ID:BUG#134276
  - SUG:NA
  - DESC: remove executable permission bit for grub-boot-indeterminate.service


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-5.se.01.p10
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: liuyang <liuyang01@kylinos.cn> - 2.04-5.se.01.p12
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: andy <liuyang01@kylinos.cn> - 2.04-5.se.01.p14
changelog:
  - Type:CVE
  - ID:task#381521
  - CVE:CVE-2022-2601 and CVE-2022-3775
  - SUG:NA
  - DESC:Fix for CVE-2022-2601 and CVE-2022-3775


author: andy <liuyang01@kylinos.cn> - 2.04-5.se.01.p15
changelog:
  - Type:CVE
  - ID:task#441494
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125
  - SUG:NA
  - DESC:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125


author: yujingbo <yujingbo@kylinos.cn> - 2.04-5.se.01.p17
changelog:
  - Type:TASK
  - ID:task#462916
  - SUG:NA
  - DESC:Modify grub-boot-success.service and grub-boot-success.timer file permission to 644


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: jiangping <jiangping@kylinos.cn> - 1.16.2-2.p02
changelog:
  - Type:bug
  - ID:87466
  - SUG:NA
  - DESC:fix yum update conflicting  with Obsoletes: gstreamer-help < 1.16.2-2


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: houhongxun <houhongxun@kylinos.cn> 2.24.32-11.p02
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix media volume control applet tooltip position


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: yueyuankun <yueyuankun@kylinos.cn> 1.40.2-7.p01
changelog:
  - Add patch01: gvfs-1.40.2-kylin-fixed-place-sidebar-safe-remove-issue.patch
  - coldplug not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel
  - Add Patch02, 解决“我的电脑”中“收藏夹”报错问题，解决U盘有时无法自动挂载的问题
  - Add Patch03, 解决U盘有时无法自动挂载的问题
  - Add Patch04, 解决窗口界面显示为“网络”


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.60
changelog:
  - add mips Patch56: hardinfo-0.5.1-kylin-scsi-permissions-issue.patch
  - add aarch64 Patch57: hardinfo-0.5.1-kylin-scsi-permissions-issue-and-cpu-info-incorrect.patch
  - add mips Patch58: hardinfo-0.5.1-kylin-mips-cpu-display.patch
  - add aarch64 Patch59: hardinfo-0.5.1-kylin-aarch64-cpu-info.patch
  - modify get_disk_info.sh add access control


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.61
changelog:
  -add arm patch60:hardinfo-0.5.1-kylin-arm-pci-no-identify.patch
  -add x86 patch61:hardinfo-0.5.1-kylin-x86-pci-no-identify.patch


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.63
changelog:
  -add patch68:hardinfo-0.5.1-kylin-user-resources-null.patch
  -add x86 patch66:hardinfo-0.5.1-kylin-x86_64-memtotal-not-incorrect.patch --liyunqing
  -add arm patch67:hardinfo-0.5.1-kylin-arm-memtotal-incorrect.patch  --liyunqing
  -add patch64:hardinfo-0.5.1-kylin-disk-name-incomplete.patch
  -add patch65:hardinfo-0.5.1-kylin-arm-device-name-incomplete.patch
  -post execute get_dist_info.sh
  -add patch63:hardinfo-0.5.1-kylin-arm-cpu-null.patch


author: liyunqing <liyunqing@kylinos.cn> - 0.5.1-10.64
changelog:
  - add patch69:hardinfo-0.5.1-kylin-x86-storage-vendor-incorrect.patch
  - add patch70:hardinfo-0.5.1-kylin-arm-storage-vendor-incorrect.patch


author: mengchaoming <mengchaoming@kylinos.cn>- 0.5.1-10.67
changelog:
  - add patch72: hardinfo-0.5.1-kylin-modify-boots-kernel-info.patch
  - add patch73: hardinfo-0.5.1-arm-kylin-modify-boots-kernel-info.patch


author: mengchaoming <mengchaoming@kylinos.cn>- 0.5.1-10.68
changelog:
  -add patch74:hardinfo-0.5.1-kylin-nvme-segmentfault-and-name-null.patch
  -add patch75:hardinfo-0.5.1-kylin-nvme-segmentfault-and-name-null-x86.patch
  -fix external bug5017


author: huayadong <huayadong@kylinos.cn>-0.5.1-10.70
changelog:
  - add Patch77: hardinfo-0.5.1-fix-bug-101193-bug-101305-x86.patch
  - add Patch78: hardinfo-0.5.1-fix-bug-101193-bug-101305-ARM.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.8.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: add 0002-modify-gb18030-encoding.patch
          sync from 2.8.1-4.p01


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gongxingliang <gongxingliang@kylinos.cn> - 1.14.5-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove compile options (-fallow-argument-mismatch -fallow-invalid-boz) to fix compilation failure


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: liuxiong <liuxiong@kylinos.cn> - 2.4.43-12.p01
changelog:
  - Add history patch
  - add a space between Server and Test in file index.html
  - Change index.html in SOURCES
  - change openEuler to Kylin
  - Change httpd.conf in SOURCES.
  - Hide httpd version.
  - Turn TraceEnable off.


author: liuxiong <liuxiong@kylinos.cn> - 2.4.43-12.p02
changelog:
  - Change index.html in SOURCES
  - change openEuler to Kylin
  - Change httpd.conf in SOURCES.
  - Hide httpd version.
  - Turn TraceEnable off.


author: xiehongyu <xiehongyu@kylinos.cn> - 2.4.43-12.p03
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: Like <like@kylinos.cn> - 2.4.43-12.p04
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 
         CVE-2022-28615  CVE-2022-31813


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: hanjinpeng <liutao1@kylinos.cn> - 2.4.43-20.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: zhangyulong <zhangyulong@kylinos.com> - 2.4.43-23.p02
changelog:
  - Type:TASK
  - ID:195905
  - SUG:NA
  - DESC:add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: yanglu <yanglu72@h-partners.com> - 2.4.43-28
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.43-28.p02
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: merge 2.4.43-26.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: yuboyun <yuboyun@huawei.com> - 2.4.43-3
changelog:
  - Type:cves
  - ID:CVE-2020-9490 CVE-2020-11984 CVE-2020-11993
  - SUG:restart
  - DESC:fix CVE-2020-9490CVE-2020-11984CVE-2020-11993


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-4.p01
changelog:
  - Type:bugfix
  - Id:[BUG#152353]
  - SUG:NA
  - DESC:modify enum ipvlan_mode with kernel and add support vlan l3s


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-4.p02
changelog:
  - Type:bugfix
  - ID:[task#167348]
  - SUG:NA
  - DESC:remove feature-iproute-limit-operation-ip-netns-del.patch


author: lixiang <lixiang172@huawei.com> - 0.9.4-14
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:Modify gen-version script and add changelog automatically


author: leizhongkai<leizhongkai@huawei.com> - 0.9.5-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:make `isula-build ctr-img images` display comfortably


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.332-b09.0
changelog:
  - deleted Support-Git-commit-ID-in-the-SOURCE-field-of-the-release.patch
  - deleted 8167014-jdeps-failed-with-Missing-message-warn-skippen-entry.patch
  - deleted fix-wrong-commitID-in-release-file.patch
  - deleted recreate-.java_pid-file-when-deleted-for-attach-mechanism.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8194154.patch
  - modified add-missing-test-case.patch
  - add fix-make-bugs-when-git-and-hg-not-exist.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.342-b07.0
changelog:
  - del 8168926.patch
  - del 8194154.patch
  - del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
  - del 8266187_Memory_leak_in_appendBootClassPath.patch
  - del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - del fix-make-bugs-when-git-and-hg-not-exist.patch
  - modified 7092821-java.security.Provider.getService-is-synchro.patch
  - modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch


author: fandeyuan <fandeyuan@kylinos.cn> - 1:1.8.0.312-b07.10.p01
changelog:
  - Type:bugfix
  - Id:[TASK#138430]
  - SUG:NA
  - DESC: add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.8.0.392-b08.2.p01
changelog:
  - Type: cves
  - ID: [TASK#183363]
  - SUG: NA
  - fix install fail caused by %pretrans reporting error 
  	add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
          2.Default parameter updates for x86
          3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
          4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.452.b09-1.p01
changelog:
  - Type: update
  - ID:   [TASK#466871]
  - SUG:  NA
  - DESC: openjdk-1.8.0.452 GA release with kylin support


author: aijm <aijiaming1@huawei.com> - 1:11.0.10.9-3
changelog:
  - add downgrade-the-symver-of-log2f-posix-spawn.patch
  - add 8254078-DataOutputStream-is-very-slow-post-disabling.patch
  - add 8217918-C2-XX-AggressiveUnboxing-is-broken.patch
  - add Fix-the-memcpy-symbol-issue-during-JDK11-x64-build.patch


author: linhaibing21 <linhaibing@huawei.com> - 1:11.0.12.7-0
changelog:
  - Update to 11.0.12+7 (GA)
  - delete 8207160-ClassReader-adjustMethodParams-can-potentially-return-null-if-the-args-list-is-empty.patch
  - delete 8217918-C2-XX-AggressiveUnboxing-is-broken.patch
  - delete 8223667-ASAN-build-broken.patch
  - delete 8264640.patch
  - other adaptations to 11.0.12


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC:	1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
  	3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
          2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
          4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.27.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#459119]
  - SUG:  NA
  - DESC: openjdk-11.0.27.6 GA release with kylin support


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: likai01 <likai01@kylinos.cn> 2.0.20-14.p03
changelog:
  - Type:cves
  - ID:CVE-2021-20269
  - SUG:NA
  - DESC:FIX CVE-2021-20269,modify kdump-lib-initramfs.sh under SOURCES directly


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.2-1.p33.07
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387985][BUG#390917]
  - SUG:NA
  - DESC: mv autostart to libkylin-activation
          fix kms ui miss deactivate button
          fix kms ui deactivate set autoactivated=0


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.20kord-se.01
changelog:
  - adapt package whlist process in R serial
  - use dpkg -L query packages in U serial
  - allow set label when 3adm is enabled if user is root and process label is kysoft


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3.se.04
changelog:
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: KYLIN-kylin-security-daemon-fix-sql-inject-by-retrieve.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.05
changelog:
  - Type: update
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复kysec-sync-notify中的sub_3960函数存在命令注入漏洞
  -         add patch: kylin-security-daemon-fix-fix-notify-get-file-type.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.06
changelog:
  - Type: bugfix 
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kylin-security-daemon-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#147906]
  - SUG:NA
  - DESC: 修复文件保护无法添加含有特殊字符文件名的文件
  -         add patch: kylin-security-daemon-fix-fpro-not-add-special-character-file-name-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题 
  -         add patch: kylin-security-daemon-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#154600]
  - SUG:NA
  - DESC: 修复设置模块防卸载是提示kmod_whlist不存在的错误
  -         add patch: kylin-security-daemon-fix-kmod-set-protect-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kylin-security-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.12
changelog:
  - Type: update 
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kylin-security-daemon-fix-parse-pyc-file-error-in-sp2-version.patch


author: yangyan<yangyan@kylinos.cn> -0.1.0-5
changelog:
  - Type:bugfix and task
  - ID:all
  - SUG:Na
  - DESC: The modifications made in the past week have been combined into a patch file


author: yangyan <yangyan@kylinos.cn> -0.1.0-6
changelog:
  - Type:task
  - ID:210047 & 210036
  - SUG:Na
  - DESC: Added archive profile judgment and removed patch_info field check


author: yangyan <yangyan@kylinos.cn> -0.1.0-7
changelog:
  - Type:BUG&Task
  - ID:all
  - SUG:NA
  - DESC:The modifications made in the past week have been combined into a patch file


author: caoshuhao <caoshuhao@kylinos.cn> - 1.0.10kord-se.06
changelog:
  - Add patch 0001-change-version-1.0.10.patch
    This patch only updated the tool's version to 1.0.10 from 1.0.7.


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.09
changelog:
  - Type: update
  - ID: [Task#104022]
  - SUG:NA
  - DESC: 修复kysec_get和kysec_set通过rpm查询命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-rpm-query-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#138162]
  - SUG:NA
  - DESC: dnf和dnf-3添加kysoft的执行标记
  -         add patch: kysec-utils-exectl-dnf-add-kysoft-label.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#127829]
  - SUG:NA
  - DESC: 修复模块标签是unknown是可以insmod的bug
  -       修复sh执行脚本，无法执行修改后还原的脚本
  -       修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kysec-utils-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.12
changelog:
  - Type: bugfix 
  - ID: [BUG#128013]
  - SUG:NA
  - DESC: 从audadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-audadm-list.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.13
changelog:
  - Type: bugfix 
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题
  -         add patch: kysec-utils-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.14
changelog:
  - Type: update
  - ID: [TASK#122582]
  - SUG:NA
  - DESC: 修复arm平台编译错误的问题
  -         add patch: kysec-utils-fix-arm-build-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.15
changelog:
  - Type: update
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kysec-uitls-fix-parse-pyc-file-error-in-sp2-version.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: Xiaole He <hexiaole@kylinos.cn> - 2.2-1
changelog:
  - Initial build of libabigail package using source code from git revision
  - 1f51b9e85dc42dc71caf7fe79436d64c6a3d03f3 (Bug 29829 - dwarf-reader: Allow DIEs to be in a lexical block)


author: Xiaole He <hexiaole@kylinos.cn> - 2.2-2
changelog:
  - Initial build of libabigail package using source code from git revision
  - 24a219d905ad61710d2a04a1a5e94bb15d3687dd (fix comparing array subrange DIEs)


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: Kou Wenqi <kouwenqi@kylinos.cn> - 5.3.28-37.p01
changelog:
  - Rebuild for Kylin
  - Add BuildRequires:  java       >= 1:1.6.0
  - Add BuildRequires:  java-devel <  1:1.11.0
  - Add BuildRequires:  java       <  1:1.11.0


author: wuxiaolei <wuxiaolei@kylinos.cn> - 1.9.0rc1-1.p03
changelog:
  - Type:compile
  - ID:[TASK#455845]
  - SUG:NA
  - DESC:Add Obsoletes: libfabric-help <= 1.6.1 to handle legacy package conflicts


author: hy <eulerstoragemt@huawei.com> - 1:1.39.8-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Remove Java bingdings, zz-packages-zfs command and rhsrvany.exe from mingw32-srvany.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 1:1.40.2-9.p04
changelog:
  - Type: bugfix
  - ID: [task#77405]
  - SUG: NA
  - DESC: add rhsrvany.exe to run Windows guests first boot scripts.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 1:1.40.2-9.p05
changelog:
  - Type: update
  - ID:   [TASK#132491]
  - SUG:  NA
  - DESC: add patches to make libguestfs support detecting kylin os in /etc/os-release and converting neokylin os and kylin os.
  -       Note: the real modified codes must be in supermin.d-x86.tar.gz in /usr/lib64/guestfs/supermin.d/daemon.tar.gz!


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p58
changelog:
  - Type: update
  - ID:[TASK#176779]
  - SUG:NA
  - DESC: add auto activation for kms privatization and fix bug 199947
  - DESC: cancel read hardinfo from khwid and five m extension


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.08
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.15
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387899][BUG#387025]
  - SUG:NA
  - DESC: hwid not use bios uuid
          vm client not use disk


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: fuanan <fuanan3@huawei.com> - 1.12.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Fix:memory leaks
         Fix:lr_fastestmirror_prepare:Resource leaks
         Fix:lr_get_curl_handle:Check curl_easy handle before use
         lr_get_curl_handle:Strict check of curl_easy_setopt return code
         Remove "may be used uninitialized" compiler warnings


author: peijiankang <peijiankang@kylinos.cn> - 2.50.5-2.p01
changelog:
  - Type: update
  - ID:   [Task#171031]
  - SUG:  NA
  - DESC: add loongarch support patch in vendor libc (sync from  2.50.5-1.p01)


author: wanghao <wanghao2@kylinos.cn> - 1.0-8kord.se.01
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: gaoyusong<gaoyusong1@huawei.com> - 3.1-1.se.01
changelog:
  - Patch1: libselinux-20200318.patch
  - Patch2: add-selinux_restorecon.patch
  - Patch3: libselinux-20200326.patch
  - Patch4: libselinux-20200427.patch


author: caoshuhao<caoshuhao@kylinos.com> - 3.1-1.se.04
changelog:
  - Add patch: libselinux-fix-ston-wrong.patch
  - Author: Meng Dehui
  - Resume USER_AVC checks

  - Remove patch: libselinux-20200326.patch
  - Author: Jiang Xingsong
  - Fix user_avc wrong: Audit cannot be controlled by policy.


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1-1.se.02
changelog:
  - Type:update
  - ID:[任务#195739]同步libsemanage的补丁到sp2-libsemanage
  - SUG:NA
  - DESC:
  - [BUG#209238]【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  - add patch: libsemanage-homedircon.patch
  - desc:secadm和auditadm不存在,genhomedircon生成adm_home_t的定义。


author: xingxing <xingxing9@h-partners.com> - 0.7.14-5
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p02
changelog:
  - Type:cves
  - Id:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p03
changelog:
  - Type:cves
  - Id:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p06
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: gaoyukun <gaoyukun@kylinos.cn> - 4.16.0-3.p01
changelog:
  - Type:compile
  - ID:TASK#414527
  - SUG:NA
  - DESC:Add 'BuildRequires gtk-doc',repair compilation failure.


author: Yu Peng <yupeng@kylinos.cn> - 1.30-1.p01
changelog:
  - Type:bugfix
  - ID:[Task#456739]
  - SUG:NA
  - DESC:sync community patches:
         backport-libteamdctl-validate-the-bus-name-before-using-it.patch


author: wangye <wangye70@huawei.com> - 4.1.0-2
changelog:
  - Type:cves
  - ID:CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524
  - SUG:NA
  - DESC: fix CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:compile
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: wanfeng <wanfeng@kylinos.cn> - 1.2.6-2.p01
changelog:
  - Type:BUGFIX
  - ID:Task#145401
  - SUG:NA
  - DESC:add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
         add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
         fix oom bug


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-13.p02
changelog:
  - Type: bugfix
  - ID: [task#77405]
  - SUG: NA
  - DESC: open with_esx to support libguestfs use v2v from VMware ESXi


author: lizhanchun <lizhanchun@kylinos.cn> - 6.2.0-13.p03
changelog:
  - Type:update
  - ID:[TASK#107738]
  - SUG:NA
  - DESC:
  - add phytium support host-model on aarch64
  - Kunpeng-920 skip virQEMUCapsInitCPUModel() for host-model functional.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-13.p05
changelog:
  - Type: bugfix
  - ID:   [BUG#216112]
  - SUG:  NA
  - DESC: fix failing to start vm without device-mapper support


author: lilong <lilong@kylinos.cn> - 6.2.0-13.p06
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: Cai Yinan <caiyinan@kylinos.cn> - 1.7.0-10.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: fuanan <fuanan3@h-partners.com> - 2.9.10-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.10-43.p03
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.9.10-43.p07
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794、CVE-2025-49796、CVE-2025-6170
  - SUG:NA
  - DESC: fix CVE-2025-49794、CVE-2025-49796、CVE-2025-6170


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-5.p05
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group


author: andy <liuyang01@kylinos.cn> - 8:2.03.09-5.p07
changelog:
  - Type: bugfix
  - ID: [TASK#515465]
  - SUG: NA
  - DESC: revert commit of fix VERSION issue when packaging


author: huayadong <huayadong@kylin.cn> - 1.16.1-4
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.16.1-4.p04
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix window minimize animation to wrong direction


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p01
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p21
changelog:
  - Type: bugfix
  - ID:   [TASK#220038]
  - SUG:  NA
  - DESC: don't repeatedly reset desktop background which was used by caja


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p12
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-tranditional-chinese-translation.patch


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#205717]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-some-missing-translations-for-ca.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p14
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0001-fix-mate-indicators-memory-leaks.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p15
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0002-fix-mate-indicators-memory-leaks.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p16
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add Requires: mate-panel-libs >= 1.12.2-1kord37.p10.a.ky10


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#449341]
  - SUG : NA
  - DESC: add patch 0003-fix-mate-indicators-memory-leaks.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p05
changelog:
  -Type:bugfix
  -ID:[BUG#194507]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-system-monitor-menu-if-current-user-is-no.patch
        don't show system monitor when not logged in as root


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: jianghong <jianghong@kylinos.cn> 1.12.1-1kord30~rc3
changelog:
  - mate-power-manager (1.12.1-1kord30~rc3) juniper; urgency=medium
  - power mode selection for longson computer.


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn> - 1.16.1-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus, add  Requires: kylin-menu


author: gaohaobo <gaohaobo@kylinos.cn> - 1.12.2-1kord13.p01
changelog:
  - add patch0 to  remove Hibernate&Suspend feature form  logout dialog ,cause we don't need it on server version


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch60 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: peijiankang <peijiankang@kylinos.cn>- 1.12.2-1kord13.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#194919]
  - SUG : NA
  - DESC: add Patch4 mate-session-manager-1.12.2-kylin-add-min-and-max-for-idle-delay.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.12.2-1kord13.p07
changelog:
  -Type:bugfix
  -ID:[BUG#203419]
  -SUG:NA
  -DESC:add patch 0001-mate-session-manager-add-missing-translations-for-zh.patch


author: douyan <douyan@kylinos.cn>- 1.12.2-1kord13.p08
changelog:
  -Type:bugfix
  -ID:[BUG#205945]
  -SUG:NA
  -DESC:add patch mate-session-manager-1.12.2-kylin-fix-autostart-process-no-quit-when-loggingout.patch


author: mengchaoming<mengchaoming@kylinos.cn> 1.24.0-1.p01
changelog:
  --add patch:mate-system-monitor-1.24.0-kylin-del-help.patch
  --add patch:mate-system-monitor-1.24.0-kylin-adjust-proc-spacing.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: Like <like@kylinos.cn> - 4.0.1-4.p01
changelog:
  - Type: cves
  - ID: CVE-2020-7921 CVE-2021-32036
  - SUG: restart
  - DESC: add Patch600 and Patch6001 fix CVE-2020-7921 and CVE-2021-32036


author: Yu Peng <yupeng@kylinos.cn> - 0.8.4-6.p09
changelog:
  - Type:bugfix
  - ID:[Task#453521]
  - SUG:NA
  - DESC:fix check_path errors with removed map.
         sync community patches:
         multipathd-fix-check_path-errors-with-removed-map.patch
         libmultipath-make-dm_get_map-status-return-codes-sym.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 0.8.4-6.p10
changelog:
  - Type:bugfix
  - ID:[Task#514047]
  - SUG:NA
  - DESC:libmultipath: check if user_friendly_name is in use


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: likai01 <likai01@kylinos.cn> - 5.9-4.p01
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: baiguo <baiguo@kylinos.cn> - 5.9-3.p04
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is null


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: liyunqing <liyunqing@kylinos.cn> - 1.18.22-4.p09.01
changelog:
  - Type:bugfix
  - ID:task#156283
  - SUG:NA
  - DESC: only display provider's name when country_code is none


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: yuxiangyang <yuxiangyang4@huawei.com> - 1:1.16.1-2
changelog:
  - delete http_stub_status_module.This configuration creates a simple
    web page with basic status data,but it will affect cpu scale-out because
    it use atomic cas.


author: liyunqing <liyunqing@kylinos.cn> - 1:1.21.5-2.p03
changelog:
  - Type: bugfix
  - ID: [Bug#233152]
  - SUG: NA
  - DESC: Modify distribution to Kylin in 404.html,50x.html


author: Fyodor (fyodor(a)insecure.org)
changelog:
  - Removed changelog entries as SVN is a more authoritative source. Execute:
  - svn log --username guest --password "" https://svn.nmap.org/nmap/nmap.spec.in


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:12.22.11-5.p04
changelog:
  - Type: cves
  - ID: NA
  - SUG: NA
  - DESC: Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix an error in CVE-2025-23085.2.fix conflicts between help and docs packages


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p07
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix conflicts between npm in 12.22.xx and nodejs in 12.19.0-1.0.1


author: lvfei <lvfei@kylinos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: houzhiwei<houzhiwei@kylinos.cn>- 3.54.0-10.p07
changelog:
  - Type:update
  - ID:TASK#其它
  - SUG:NA
  - DESC: Add PK11_Pub{Wrap, Unwrap}SymkeyWithMechanism r=mt,rrelyea Summary


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#337735]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1.el8
changelog:
  - Rebase to 11.0.5 (bz#1798285)
  - Resolves: bz#1798285
    ([ESXi][RHEL8.2.1]Rebase open-vm-tools to 11.0.5 for 8.2.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
changelog:
  - ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1811729]
  - ovt-Update-copyright-to-reflect-previous-change.patch [bz#1811729]
  - ovt-add-appinfo-plugin.patch [bz#1809751]
  - Resolves: bz#1809751
    ([ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch)
  - Resolves: bz#1811729
    ([ESXi][RHEL8.2.1]open-vm-tools coverity scan issue)


author: Mirosalv Rezanina <mrezanin@redhat.com> - 11.1.0-1.el8
changelog:
  - Rebase to 11.1.0 [bz#1806677]
  - Added open-vm-tools-sdmp package [bz#1833157)
  - Resolves: bz#1806677
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
  - Resolves: bz#1833157
    ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.0-2.el8
changelog:
  - Remove net-tools dependency [bz#1849459]
  - Resolves: bz#1849459
    ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.5-1.el8
changelog:
  - Rebase to 11.1.5 [bz#1870781]
  - Resolves: bz#1870781
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.5 for 8.4)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.2.0-1.el8
changelog:
  - Rebase to 11.2.0 [bz#1890831]
  - Resolves: bz#1890831
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.2.0 for 8.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.0-2.el8
changelog:
  - ovt-Fix-memory-leaks.patch [bz#1896804]
  - Resolves: bz#1896804
    ([ESXi][open-vm-tools] Coverity detected important defects in open-vm-tools-11.2.0 rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
changelog:
  - Rebase to 11.2.5 [bz#1916561]
  - Resolves: bz#1916561
    ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el8
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1935807]
  - Resolves: bz#1935807
    ([ESXi][RHEL-8.5][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.0.3-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: chenjianhu <chenjianhu@kylinos.cn> - 3.10.0-2.p01
changelog:
  - Type:compile
  - ID:[BUG#273633]
  - SUG:NA
  - DESC:Add --enable-locks flags for aarch64 compile,no using libitm-devel


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: wangxiaomeng <wangxiaomeng@kylinos.com> - 2.1.1-18.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug#138766, backport upstream patch to solve crash on Hygon


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: juntao<songjuntao@kylinos.cn> - 8.2P1-0.p06
changelog:
  - use international algorithm standards as default config
  - fix keyscan host key
  - add the sm2 host key always ready


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p12
changelog:
  - Type:update
  - ID:TASK#184873
  - SUG:NA
  - DESC:fix ssh-agent core dump when ssh-add exec add library


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p15
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC: support sm3 hmac feature, add ssh change mode script, 
  	enable ssh login without password and fix algo show problem,
          update ssh finger print hash and fix memory leak


author: like <like@kylinos.cn> - 1:1.1.1f-4.p01
changelog:
  - Add kylin patch to fix CVE-2021-3449
  - Add modify the spec file , set sslarch=linux64-mips64el for mips64


author: Like <like@kylinos.cn> - 1:1.1.1f-4.p03
changelog:
  - Type:cves
  - ID:CVE-2021-3711 and CVE-2021-3712
  - SUG:NA
  - DESC:Fix the CVE-2021-3711 and CVE-2021-3712


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 1:1.1.1f-4.p10
changelog:
  - Type:cves
  - ID:CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286
  - SUG:NA
  - DESC:Fix CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286


author: shaoning <shaoning@kylinos.cn> - 1:1.1.1f-4.p11
changelog:
  - Type:cves
  - ID:CVE-2023-0464、CVE-2023-0466、CVE-2023-0465
  - SUG:NA
  - DESC:Fix CVE-2023-0464、CVE-2023-0466、CVE-2023-0465


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p17
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: gongxingliang <gongxingliang@kylinos.cn> - 1.4.0-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-22365 CVE-2024-10963
  - SUG:NA
  - DESC:add patch 6001 to fix CVE-2024-22365,add patch 6002 6003 6004 6005 to fix CVE-2024-10963


author: zhangqiang <zhangqiang@kylinos.cn> - 5.6.0-8.p01
changelog:
  -Type:bugfix
  -ID:[任务#117911]
  -SUG:NA
  -DESC:fixup SIGSEGV crash & add kunpeng920 support & add hygon cpu support


author: wangwenfeng <wangwenfeng@kylinos.cn> - 4.1.3-12.p04
changelog:
  - Type:bugfix
  - ID:TASK#149556
  - SUG:NA
  - DESC:ensure culled instances are not accumulated in the total. from pcp-5.1.1


author: wangwenfeng <wangwenfeng@kylinos.cn> - 4.1.3-12.p05
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:TASK#154714
  - DESC:remove the modification of version p01, and fix the wrong output location


author: xuchenchen <xuchenchen@kylinos.cn> - 4.1.3-12.p06
changelog:
  - Type: Bugfix
  - ID: [TASK#161277]
  - SUG: NA
  - DESC:
  - 修复解析IPI0字段异常引起的coredump问题
  - add 0001-fix-analysis-proc-interrupts-name-error.patch


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: Shen Yangyang <shenyangyang4@huawei.com> - 4:5.28.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete provide of perl-macros that actually provided by openEuler-rpm-config


author: liutao <liutao1@kylinos.cn> - 4:5.28.3-3.p01
changelog:
  - Modify spec file for resolving compilation errors:
  -	add perl_new_kylin to replace perl_new in checking stage.


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p03
changelog:
  - Type:cves
  - ID:CVE-2024-8925、CVE-2024-8926、CVE-2024-8927、CVE-2024-9026
  - SUG:NA
  - DESC:fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-2756,CVE-2024-3096,CVE-2024-5458
  - SUG:NA
  - DESC:fix CVE-2024-2756,CVE-2024-3096,CVE-2024-5458


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p07
changelog:
  - Type:cves
  - ID:CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233
  - SUG:NA
  - DESC:fix CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: gaoyukun <gaoyukun@kylinos.cn> - 8.0.30-10.p02
changelog:
  - Type:rebuild
  - ID:[BUG#338391]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: zhangbowei<zhangbowei@kylinos.cn> - 1:0.10.1-10.p03
changelog:
  - Type:bugfix
  - ID:[Bug#374071]
  - SUG:NA
  - DESC:change exec path from /usr/bin to /usr/local/bin about podman-docker,change man file from docker to podman


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2019-10872 CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: Like <like@kylinos.cn> - 0.67.0-8.p01
changelog:
  - Type:CVE
  - Id:CVE-2022-37050,CVE-2022-37051
  - SUG:NA
  - DESC:add backport-CVE-2022-37051-CVE-2022-37050.patch


author: lichenguang <lichenguang@kylinos.cn> - 0.67.0-8.p03
changelog:
  - Type: cves
  - ID: CVE-2025-32364 CVE-2025-32365 CVE-2024-4141
  - SUG: NA
  - DESC: fix CVE-2025-32364 CVE-2025-32365 CVE-2024-4141


author: huayadong <huayadong@kylinos.cn> - 0.67.0-8.p04
changelog:
  - Type: cves
  - ID: [Task#460978]
  - SUG: NA
  - DESC: add Patch10008: poppler-0.67.0-kylin-backport-CVE-2024-6239.patch


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p02
changelog:
  - Type: BUG fix 
  - ID: bug#142478
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel resolved conflicts


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: duyiwei<duyiwei@kylinos.cn> - 1.3.2-3.p02
changelog:
  - Type:update
  - ID:[TASK#381839]
  - SUG:NA
  - DESC: rebuild for v10 sp1 due to protobuf upgrade to 3.12.3 in v10-sp1.1-updates


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: BruceGW<gyl93216@163.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: xuyujun <xuyujun@kylinos.cn> - 3.7.9-20.se.01
changelog:
  - add Python3-judge-python-file-run.patch
  - devel package add require libkysec-devel libsecurity1-devel
  - add buildrequire libsecurity1-devel


author: zhangchaorui <zhangchaorui@kylinos.cn> - 3.7.9-20.se.02
changelog:
  - Type:cves 
  - ID:CVE-2015-20107
  - SUG:NA
  - DESC:Fix CVE-2015-20107 and make test suite support upstream Expat >=2.4.5


author: likai01 <likai01@kylinos.cn> - 3.7.9-20.p04.se
changelog:
  - Type:cves
  - ID:CVE-2020-10735 CVE-2022-45061 CVE-2022-37454
  - SUG:NA
  - DESC:Fix CVE-2020-10735 CVE-2022-45061 CVE-2022-37454


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-20.p09.se
changelog:
  - Type:CVE
  - ID:CVE-2007-4559
  - SUG:NA
  - DESC:fix CVE-2007-4559
  -      fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-20.p10.se
changelog:
  - Type:CVE
  - ID:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: liuxiong <liuxiong@kylinos.cn> - 3.7.9-7.p02
changelog:
  - Type:cves
  - ID:CVE-2021-23336
  - SUG:NA
  - DESC:fix CVE-2021-23336 and revert fix a reference leak if a thread is not joined


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - hw: usb: hcd-ohci: check for processed TD before retire
  - hw: ehci: check return value of 'usb_packet_map'
  - hw: usb: hcd-ohci: check len and frame_number variables
  - hw/net/e1000e: advance desc_offset in case of null descriptor


author: Kylin Software Co., Ltd <houyingle@kylinos.cn> - 4.1.0-31.p01
changelog:
  - temporarily close "make check V=1"
  - enable SPICE configuration and add "BuildRequires: spice-server-devel" for x86


author: Kylin Software Co., Ltd <weishaokun@kylinos.cn> - 4.1.0-32.p01
changelog:
  - change_cipher_name_from_sm4128_to_sm4.patch: change cipher_name when encrypt disk
  - support_sm4_encrytped_disk.patch: disk can be encrypted using sm4
  - insert_virtiofsd.patch: potential: privileged host device access from guest


author: Kylin Software Co., Ltd <wuqiang@kylinos.cn> -4.1.0-32.p03
changelog:
  - The function that QEMU parameter specifies that the processor frequency
  - add Phytium's CPU models: FT-2000+ and Tengyun-S2500


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-32.p05
changelog:
  - Type: bugfix
  - ID: [task#7405]
  - SUG: NA
  - DESC: support qemu network backend type 'user',support virt-v2v


author: lizhanchun <lizhanchun@kylinos.cn> - 4.1.0.32.p08
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: CVE vulnerability fixed:
  - CVE-2019-20175、CVE-2021-3546、CVE-2021-3682、CVE-2021-3713、
  - CVE-2021-3750、CVE-2021-4206、CVE-2021-4207、CVE-2022-1050


author: wangguochun <wangguochun@kylinos.cn> - 2:4.1.0-32.p09
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: CVE vulnerability fixed:
  - CVE-2021-3607 CVE-2021-3608 CVE-2020-13253 CVE-2021-20257 CVE-2022-35414 CVE-2020-14394
  - pvrdma-Ensure-correct-input-on-ring-init-CVE-2021-36.patch fix CVE-2021-3607
  - pvrdma-Fix-the-ring-init-error-flow-CVE-2021-3608.patch fix CVE-2021-3608
  - softmmu-Always-initialize-xlat-in-address_space_tran.patch fix CVE-2022-35414
  - hw-usb-hcd-xhci-Fix-unbounded-loop-in-xhci_ring_chai.patch fix CVE-2020-14394
  - hw-sd-sdcard-Do-not-allow-invalid-SD-card-sizes.patch fix CVE-2020-13253
  - hw-sd-sdcard-Do-not-switch-to-ReceivingData-if-addre.patch fix CVE-2020-13253
  - hw-sd-sdcard-Restrict-Class-6-commands-to-SCSD-cards.patch fix CVE-2020-13253
  - hw-sd-sdcard-Simplify-realize-a-bit.patch fix CVE-2020-13253
  - hw-sd-sdcard-Update-coding-style-to-make-checkpatch..patch fix CVE-2020-13253
  - e1000-fail-early-for-evil-descriptor.patch fix CVE-2021-20257 
  - e1000-fix-tx-re-entrancy-problem.patch fix CVE-2021-20257


author: lijunwei <lijunwei@kylinos.cn> -2:4.1.0-32.p10
changelog:
  - Type: update
  - ID:   [Task#121393]
  - SUG:  NA
  - DESC: CVE vulnerability fixed:
  - CVE-2021-20181、CVE-2021-3545、CVE-2021-3544、CVE-2021-3416
  - CVE-2021-3409、CVE-2021-3392、CVE-2021-20203、CVE-2020-35505
  - CVE-2020-35504、CVE-2020-17380、CVE-2020-15469
  - CVE-2020-13754、CVE-2021-3638


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-32.p11
changelog:
  - Type: Update
  - ID:   [TASK#132801]
  - SUG:  NA
  - DESC: fix CVE-2022-0216 CVE-2020-27821 CVE-2022-4144
  -	add Patch: 0001-Revert-qxl-add-migration-blocker-to-avoid-pre-save-a.patch 
  	to fix CVE-2022-4144 build error from GitLab commit dcc5fc2a3adb9ec4b196f82ebe4079bc88f3c91e


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-32.p12
changelog:
  - Type: bug
  - ID:   [TASK#132773]
  - SUG:  NA
  - DESC: Fix qemu-nbd child daemon connection process wont close stderr file
  -       add requirement of nettle >=3.6-5 for qemu-img


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-32.p13
changelog:
  - Type:Update
  - ID: [Task#142040]
  - SUG: NA
  - DESC: Synchronize patches in SP1 and SP3
  - 	add 125 patches, from patch 374 to 498
  -	add BuildRequires: krb5-devel, libssh-devel,glib2,mesa-libgbm-devel,spice-protocol,spice-server
  - 	addRequires: qemu-block-iscsi, qemu-block-curl, edk2-ovmf
  -	add package: block-rbd，block-ssh,block-iscsi, block-curl
  -	add configure parameters: enable-modules ,enable-libssh ,enable-tpm ,enable-opengl 
  - 	add the delete path for the install phase
  -	add files: vgabios-qxl.bin，block-rbd，block-ssh,block-iscsi, block-curl
  -  	fix compilation errors caused by G_SIZEOF_MEMBER


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-32.p14
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-32.p16
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-32.p17
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-60.p14
changelog:
  - Type:Update
  - ID: [Task#142040]
  - SUG: NA
  - DESC: Synchronize patches in SP1 and SP3
  - 	add 125 patches, from patch 368 to 423
  -	add BuildRequires: krb5-devel, libssh-devel,glib2,mesa-libgbm-devel,spice-protocol,spice-server
  - 	addRequires: qemu-block-iscsi, qemu-block-curl, edk2-ovmf
  -	add package: block-rbd，block-ssh,block-iscsi, block-curl
  -	add configure parameters: enable-modules ,enable-libssh ,enable-tpm ,enable-opengl 
  - 	add the delete path for the install phase
  -	add files: vgabios-qxl.bin，block-rbd，block-ssh,block-iscsi, block-curl
  -  	fix compilation errors caused by G_SIZEOF_MEMBER


author: wangguochun <wangguochun@kylinos.cn> - 4.1.0-60.p20
changelog:
  - Type: update
  - ID:   [Task#198750]
  - SUG:  NA
  - DESC: update qemu and merger v10-sp2 kylin server change to qemu-4.1.0-60.oe1
          merge change between qemu-4.1.0-60.oe1 qemu-4.1.0-66.oe1


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-60.p23
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-60.p24
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-60.p28
changelog:
  - Type: Bugfix
  - ID:   [BUG#385783]
  - SUG:  NA
  - DESC: Forbid repeated device_del to fix hot-unplug issue


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p04
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: lvying<lvying6@huawei.com> - 0.6.3-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix file descriptor leak in ras-report.c:setup_report_socket()


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 6.2.7-1.p01
changelog:
  - Type:cves
  - Id:CVE-2022-36021 CVE-2022-24834 CVE-2023-28856
  - SUG:NA
  - DESC:回合低版本补丁CVE-2022-36021 CVE-2022-24834 CVE-2023-28856 and fix-building-error-of-malloc.patch
     Fix redis.spec and redis.service


author: gaoyukun <gaoyukun@kylinos.cn> - 6.2.7-1.p03
changelog:
  - Type:cves
  - Id:CVE-2023-45145,CVE-2024-31228,CVE-2024-31449
  - SUG:NA
  - DESC:Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449


author: lifeifei <lifeifei@kylinos.cn>
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.
         2.Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: Anakin Zhang <benjamin93@163.com> - 4.15.1-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use user.digest_list to avoid duplicate processing of the digest lists


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-22
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: fix digest list plugin and reorder digest lists in RPM headers


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-23
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: avoid generating digest lists if they are already packaged


author: shixuantong <shixuantong@huawei.com> - 4.15.1-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-28.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118587]
  - SUG:NA
  - DESC:update and modify spec file,delete cron.daily of rpm


author: wangjie<wangjie294@huawei.com> - 8.2006.0-2
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: liujilin<liujilin@kylinos.com> - 8.2006.0-2.p01
changelog:
  - modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - 解决journal日志重复刷入messages的问题


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: lijian1<lijian1@kylinos.cn> - 1.51.0-6.p01
changelog:
  - Type: cves
  - ID: [TASK#393895]
  - SUG:  NA
  - DESC:  Fix CVE-2024-24577, CVE-2022-36113, CVE-2022-36114, fix kernel copy panic.


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: chxssg <chxssg@qq.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-9
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-2.se.03
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch:backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-2.se.04
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-2.se.05
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: fix CVE-2013-4235
  -     add patch(from cve):shadow-backport-CVE-2013-4235.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangdi <wangdi@kylinos.cn> - 0.20.0-2.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: lingsheng <lingsheng1@h-partners.com> - 6.04-14
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 233-6.p01
changelog:
  - Type:bugfix
  - ID:[BUG#385837]
  - SUG:NA
  - DESC: Fix crash issue. and Increase max PID and CPU constants


author: openEuler Buildteam <buildteam@openeuler.org> - 243-27
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add elevator= kernel command line parameter and don't enable bfq
         by default


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: Guo Jianxing <guojianxing@kylinoscn> - 243.31.se.p02
changelog:
  - import changes from 17.se.4
  -- add patch9014:systemd-243-kylin-init5-hang.patch
  -- Modify ctrl+alt+F2 switch to init5 stuck problem
  -- Patch9013: 0002-Change-the-NTP-server.patch
  -- Change NTP server.
  -- urnal: fix selinux denied error for systemctl when lsm stacking is enable
  -- change to kylin


author: mengchaoming<mengchaoming@kylinos.cn>243-31.se.p03
changelog:
  -add patch9015:systemd-243-kylin-init1-add-check-console-tty1.patch
  -fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p07
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p10
changelog:
  - Type:bugfix
  - ID:rhbz#1970945
  - SUG:NA
  - DESC: Fix Systemd memory corruption (rhbz#1970945)
          Fix bunch of memory management bugs uncovered by dfuzzer and UBSAN (rhbz#2047373)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p12
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          fix mips64el build
          Remove gnu-efi check when in loongarch64 and mips64
          support systemd-detect-virt for Loongarch64


author: huangwenhua <huangwenhuag@kylinos.cn> - 243-31.se.p14
changelog:
  - Type:bugfix
  - ID:[TASK#172942]
  - SUG:NA
  - DESC: add patch 0001-fix-soft-link-missing.patch
          fix soft link missing


author: Shen Zhongwei <shenzhongwei@kylinos.cn> - 243-31.se.p15
changelog:
  - Type:bugfix
  - ID:[TASK#171982]
  - SUG:NA
  - DESC: add patch 0002-rc-local-order-after-network-online.target.patch
          fix rc-local service start failed


author: yinyongkang <yinyongkang@kylinos.cn> - 243-31.se.p17
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch100719: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p18
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SBUG:NA
  - DESC: add patch10720: 0001-backport-donot-open-cdrom-use-exclusive-mode.patch
          fix eject cdrom issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p19
changelog:
  - Type:bugfix
  - ID:[TASK#205426]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p21
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p22
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p20
changelog:
  - Type:cve
  - ID:CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC: Fix CVE-2023-50387 and CVE-2023-50868


author: lijian <lijian01@kylinos.cn> - 243-31.se.p24
changelog:
  - Type:update
  - ID:[TASK#455059]
  - SUG:NA
  - DESC: fix wrong suffix assignment on putting dead process


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p25
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: Shi Jingying <shijingying@kylinos.cn> - 1.10.1-5.p01
changelog:
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error
  - add patch 102: tigervnc-1.10.1-kylin-xstart1.patch
  - the autokill parameter cannot creat port


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.5-1
changelog:
  - update to 1.3.5
  - update upstream location
  - include SO version in files list to avoid unexpected bumps
  - use modern macros
  - drop obsolete comments


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: guoce <guoce@kylinos.cn> - 0.3.62-1s2.p02
changelog:
  - add patch: ukui-screensaver-0.3.62-fix-chandao-12928.patch
  - modify system time display coordinates


author: gaohaobo <gaohaobo@kylinos.cn> - 0.3.62-1s2.p04
changelog:
  - add patch: 0002-change-default-picture-folder-to-adjust-control-center-p12.patch  change the default srceensaver lookup directory to adjust kylin-control-center after p12.


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch10 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488
  -- add unbound pid dir to fix unbound.service faild


author: Like <like@kylinos.cn> - 1.11.0-2.p06
changelog:
  - Type:cves
  - CVE:CVE-2024-8508 CVE-2024-33655
  - SUG:NA
  - DESC:add patch 15,16 fix CVE-2024-8508 CVE-2024-33655


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-10.p09
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-10.p11
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-10.p12
changelog:
  - Type:bugfix
  - ID:[TASK#497341]
  - SUG:NA
  - DESC:add patch:backport-libfdisk-dos-fix-default-partition-start.patch
         backport-tests-sfdisk-fill-correctly-gaps-if-default-start-re.patch
         backport-libfdisk-fix-last-free-sector-detection-if-partition.patch
         fix default partition offset creates overlapping partitions


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-17
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: xiehongyu <xiehongyu@kylinos.cn> - 2:8.2-20.p01
changelog:
  - add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-21.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-22.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no,
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> -2:8.2-26.p01
changelog:
  - add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: wanglixing <wanglixing@kylinos.cn> - 2:8.2-28.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: sunjialin <sunjialin@kylinos.cn> - 2:8.2-34.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: likai01 <likai01@kylinos.cn> - 2:8.2-50.po1
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p03.01.se.01
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: Zhenneng Li <lizhenneng@kylinos.cn> - 19.1.0-2.p02
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: zhanzhimin<zhanzhimin@huawei.com> - 1.20.8-2
changelog:
  - Type:CVE
  - Id:CVE-2020-14346,CVE-2020-14361,CVE-2020-14362
  - SUG:NA
  - DESC:fix CVE-2020-14346,CVE-2020-14361,CVE-2020-14362


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-3.p02
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p06
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p07
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-3.p09
changelog:
  - Type: CVE
  - ID:   [TASK#453291]
  - SUG:  NA
  - DESC: fix CVE-2024-31080, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083


author: lichenguang <lichenguang@kylinos.cn> - 0.2.35-9.p02
changelog:
  - Type:cves
  - ID: CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177
  - SUG:NA
  - DESC: fix CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177


