# changelog

author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: huayadong <huayadong@kylinos.cn> - 1.1.6-0.4.gitfb4118d.13
changelog:
  - Type: bugfix
  - ID  : [BUG#264497]
  - SUG : NA
  - DESC: add patch8:linuxmint-mintlocale-fb4118d-fix-sensitive-flags.patch


author: Like <like@kylinos.cn> - 4.0.1-4.p01
changelog:
  - Type: cves
  - ID: CVE-2020-7921 CVE-2021-32036
  - SUG: restart
  - DESC: add Patch600 and Patch6001 fix CVE-2020-7921 and CVE-2021-32036


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.20070926-18
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Caolán McNamara <caolanm@redhat.com> - 3.0-22
changelog:
  - Related: rhbz#1604911 convert python2 to python3, verified
    that output th_en_US_v2.dat and th_en_US_v2.idx are identical
    before and after


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: likai01 <likai01@kylinos.cn> - 5.9-4.p01
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: baiguo <baiguo@kylinos.cn> - 5.9-3.p04
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is null


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: yuxiangyang <yuxiangyang4@huawei.com> - 1:1.16.1-2
changelog:
  - delete http_stub_status_module.This configuration creates a simple
    web page with basic status data,but it will affect cpu scale-out because
    it use atomic cas.


author: liyunqing <liyunqing@kylinos.cn> - 1:1.21.5-2.p03
changelog:
  - Type: bugfix
  - ID: [Bug#233152]
  - SUG: NA
  - DESC: Modify distribution to Kylin in 404.html,50x.html


author: Fyodor (fyodor(a)insecure.org)
changelog:
  - Removed changelog entries as SVN is a more authoritative source. Execute:
  - svn log --username guest --password "" https://svn.nmap.org/nmap/nmap.spec.in


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: lvfei <lvfei@kylonos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#337735]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: wangxiaomeng <wangxiaomeng@kylinos.com> - 2.1.1-18.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug#138766, backport upstream patch to solve crash on Hygon


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: juntao<songjuntao@kylinos.cn> - 8.2P1-0.p06
changelog:
  - use international algorithm standards as default config
  - fix keyscan host key
  - add the sm2 host key always ready


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p12
changelog:
  - Type:update
  - ID:TASK#184873
  - SUG:NA
  - DESC:fix ssh-agent core dump when ssh-add exec add library


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p15
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC: support sm3 hmac feature, add ssh change mode script, 
  	enable ssh login without password and fix algo show problem,
          update ssh finger print hash and fix memory leak


author: like <like@kylinos.cn> - 1:1.1.1f-4.p01
changelog:
  - Add kylin patch to fix CVE-2021-3449
  - Add modify the spec file , set sslarch=linux64-mips64el for mips64


author: Like <like@kylinos.cn> - 1:1.1.1f-4.p03
changelog:
  - Type:cves
  - ID:CVE-2021-3711 and CVE-2021-3712
  - SUG:NA
  - DESC:Fix the CVE-2021-3711 and CVE-2021-3712


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 1:1.1.1f-4.p10
changelog:
  - Type:cves
  - ID:CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286
  - SUG:NA
  - DESC:Fix CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286


author: shaoning <shaoning@kylinos.cn> - 1:1.1.1f-4.p11
changelog:
  - Type:cves
  - ID:CVE-2023-0464、CVE-2023-0466、CVE-2023-0465
  - SUG:NA
  - DESC:Fix CVE-2023-0464、CVE-2023-0466、CVE-2023-0465


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p17
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: huangwenhua <huangwenhua@kylinos.cn> - 20200203-1.p04
changelog:
  - Type: bugfix
  - ID: [Bug#69916]
  - SUG: NA
  - DESC: add patch:0002-add-eol-date.patch 
  	add eol-date for kylin-10.0.xml


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190504-1
changelog:
  - Update to v20190504 release
  - Resolves: rhbz#1699990 - Rebase to the latest upstream release
  - Resolves: rhbz#1689817 - virt-manager cannot detect operating system name
                             for rhel8.0.0 tree automatically
  - Resolves: rhbz#1703480 - rhel8.0.x is not detected as rhel8.0
  - Resolves: rhbz#1685364 - Add win2019 to libosinfo


author: Fabiano Fidêncio <fidencio@redhat.com> - 20191125-1
changelog:
  - Updated to v20191125 release
  - Resolves: rhbz#1780529 - Update to the latest upstream release
  - Add rhel8.2 & rhel7.8 entries
  - Remove upstream virtio-win / spice-guest-tools drivers


author: jiangping <jiangping@kylinos.cn> - 20200203-1.01
changelog:
  - Add osinfo-db-20200203-neokylin-and-kylin-release.patch 
  - Resolves: kylinbz#12970 - Add to v20200203 release for NeoKylin and Kylin


author: jiangping <jiangping@kylinos.cn> - 20200203-1.02
changelog:
  - Add osinfo-db-20200203-kylin-modify-autodetecting-entry.patch 
  - Resolves: kylinbz#12970 - modify autodetecting entry to v20200203


author: huangwenhua <huangwenhua@kylinos.cn> - 20200203-1.p05
changelog:
  - Type: bugfix
  - ID: [Bug#217996]
  - SUG: NA
  - DESC: add patch:0003-fixbug-virt-manager-min-memory.patch


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: zhangqiang <zhangqiang@kylinos.cn> - 5.6.0-8.p01
changelog:
  -Type:bugfix
  -ID:[任务#117911]
  -SUG:NA
  -DESC:fixup SIGSEGV crash & add kunpeng920 support & add hygon cpu support


author: wangwenfeng <wangwenfeng@kylinos.cn> - 4.1.3-12.p04
changelog:
  - Type:bugfix
  - ID:TASK#149556
  - SUG:NA
  - DESC:ensure culled instances are not accumulated in the total. from pcp-5.1.1


author: wangwenfeng <wangwenfeng@kylinos.cn> - 4.1.3-12.p05
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:TASK#154714
  - DESC:remove the modification of version p01, and fix the wrong output location


author: xuchenchen <xuchenchen@kylinos.cn> - 4.1.3-12.p06
changelog:
  - Type: Bugfix
  - ID: [TASK#161277]
  - SUG: NA
  - DESC:
  - 修复解析IPI0字段异常引起的coredump问题
  - add 0001-fix-analysis-proc-interrupts-name-error.patch


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: Shen Yangyang <shenyangyang4@huawei.com> - 4:5.28.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete provide of perl-macros that actually provided by openEuler-rpm-config


author: liutao <liutao1@kylinos.cn> - 4:5.28.3-3.p01
changelog:
  - Modify spec file for resolving compilation errors:
  -	add perl_new_kylin to replace perl_new in checking stage.


author: Paul Howarth <paul@city-fan.org> - 1.9-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Emmanuel Seyman <emmanuel@seyman.fr> - 6.05-1
changelog:
  - Update to 6.05
  - Add %license tag
  - Repllace calls to %{__perl} with /usr/bin/perl
  - Replace call to "make pure_install" with %{make_install}
  - Replace calls to make with %{make_build}


author: Paul Howarth <paul@city-fan.org> - 2.07-30
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Retain timestamp of Jcode/Nihongo.pod when patching


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2019-10872 CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p02
changelog:
  - Type: BUG fix 
  - ID: bug#142478
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel resolved conflicts


author: wangjia <wangjia55@huawei.com> - 42.2.4-1.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:disable the failed tests that caused by BEP to repair binary diffrence


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: yefei <yefei25@huawei.com> - 18.0-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:  add bash completion and repair python2 interpreter path


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: shixuantong <shixuantong@huawei.com> - 4.15.1-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-28.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118587]
  - SUG:NA
  - DESC:update and modify spec file,delete cron.daily of rpm


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: BruceGW<gyl93216@163.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: xuyujun <xuyujun@kylinos.cn> - 3.7.9-20.se.01
changelog:
  - add Python3-judge-python-file-run.patch
  - devel package add require libkysec-devel libsecurity1-devel
  - add buildrequire libsecurity1-devel


author: zhangchaorui <zhangchaorui@kylinos.cn> - 3.7.9-20.se.02
changelog:
  - Type:cves 
  - ID:CVE-2015-20107
  - SUG:NA
  - DESC:Fix CVE-2015-20107 and make test suite support upstream Expat >=2.4.5


author: likai01 <likai01@kylinos.cn> - 3.7.9-20.p04.se
changelog:
  - Type:cves
  - ID:CVE-2020-10735 CVE-2022-45061 CVE-2022-37454
  - SUG:NA
  - DESC:Fix CVE-2020-10735 CVE-2022-45061 CVE-2022-37454


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-20.p09.se
changelog:
  - Type:CVE
  - ID:CVE-2007-4559
  - SUG:NA
  - DESC:fix CVE-2007-4559
  -      fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: liuxiong <liuxiong@kylinos.cn> - 3.7.9-7.p02
changelog:
  - Type:cves
  - ID:CVE-2021-23336
  - SUG:NA
  - DESC:fix CVE-2021-23336 and revert fix a reference leak if a thread is not joined


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Anakin Zhang <benjamin93@163.com> - 4.15.1-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use user.digest_list to avoid duplicate processing of the digest lists


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-22
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: fix digest list plugin and reorder digest lists in RPM headers


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-23
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: avoid generating digest lists if they are already packaged


author: xiehongyu <xiehongyu@kylinos.cn> - 4.15.1-23.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-3421, CVE-2021-20271,CVE-2021-20266
  - SUG:NA
  - DESC:fix CVE-2021-3421, CVE-2021-20271,CVE-2021-20266.
         CVE-2021-3421补丁与CVE-2021-20271修复补丁相同.


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch10 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488
  -- add unbound pid dir to fix unbound.service faild


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - hw: usb: hcd-ohci: check for processed TD before retire
  - hw: ehci: check return value of 'usb_packet_map'
  - hw: usb: hcd-ohci: check len and frame_number variables
  - hw/net/e1000e: advance desc_offset in case of null descriptor


author: Kylin Software Co., Ltd <houyingle@kylinos.cn> - 4.1.0-31.p01
changelog:
  - temporarily close "make check V=1"
  - enable SPICE configuration and add "BuildRequires: spice-server-devel" for x86


author: Kylin Software Co., Ltd <weishaokun@kylinos.cn> - 4.1.0-32.p01
changelog:
  - change_cipher_name_from_sm4128_to_sm4.patch: change cipher_name when encrypt disk
  - support_sm4_encrytped_disk.patch: disk can be encrypted using sm4
  - insert_virtiofsd.patch: potential: privileged host device access from guest


author: Kylin Software Co., Ltd <wuqiang@kylinos.cn> -4.1.0-32.p03
changelog:
  - The function that QEMU parameter specifies that the processor frequency
  - add Phytium's CPU models: FT-2000+ and Tengyun-S2500


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-32.p05
changelog:
  - Type: bugfix
  - ID: [task#7405]
  - SUG: NA
  - DESC: support qemu network backend type 'user',support virt-v2v


author: lizhanchun <lizhanchun@kylinos.cn> - 4.1.0.32.p08
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: CVE vulnerability fixed:
  - CVE-2019-20175、CVE-2021-3546、CVE-2021-3682、CVE-2021-3713、
  - CVE-2021-3750、CVE-2021-4206、CVE-2021-4207、CVE-2022-1050


author: wangguochun <wangguochun@kylinos.cn> - 2:4.1.0-32.p09
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: CVE vulnerability fixed:
  - CVE-2021-3607 CVE-2021-3608 CVE-2020-13253 CVE-2021-20257 CVE-2022-35414 CVE-2020-14394
  - pvrdma-Ensure-correct-input-on-ring-init-CVE-2021-36.patch fix CVE-2021-3607
  - pvrdma-Fix-the-ring-init-error-flow-CVE-2021-3608.patch fix CVE-2021-3608
  - softmmu-Always-initialize-xlat-in-address_space_tran.patch fix CVE-2022-35414
  - hw-usb-hcd-xhci-Fix-unbounded-loop-in-xhci_ring_chai.patch fix CVE-2020-14394
  - hw-sd-sdcard-Do-not-allow-invalid-SD-card-sizes.patch fix CVE-2020-13253
  - hw-sd-sdcard-Do-not-switch-to-ReceivingData-if-addre.patch fix CVE-2020-13253
  - hw-sd-sdcard-Restrict-Class-6-commands-to-SCSD-cards.patch fix CVE-2020-13253
  - hw-sd-sdcard-Simplify-realize-a-bit.patch fix CVE-2020-13253
  - hw-sd-sdcard-Update-coding-style-to-make-checkpatch..patch fix CVE-2020-13253
  - e1000-fail-early-for-evil-descriptor.patch fix CVE-2021-20257 
  - e1000-fix-tx-re-entrancy-problem.patch fix CVE-2021-20257


author: lijunwei <lijunwei@kylinos.cn> -2:4.1.0-32.p10
changelog:
  - Type: update
  - ID:   [Task#121393]
  - SUG:  NA
  - DESC: CVE vulnerability fixed:
  - CVE-2021-20181、CVE-2021-3545、CVE-2021-3544、CVE-2021-3416
  - CVE-2021-3409、CVE-2021-3392、CVE-2021-20203、CVE-2020-35505
  - CVE-2020-35504、CVE-2020-17380、CVE-2020-15469
  - CVE-2020-13754、CVE-2021-3638


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-32.p11
changelog:
  - Type: Update
  - ID:   [TASK#132801]
  - SUG:  NA
  - DESC: fix CVE-2022-0216 CVE-2020-27821 CVE-2022-4144
  -	add Patch: 0001-Revert-qxl-add-migration-blocker-to-avoid-pre-save-a.patch 
  	to fix CVE-2022-4144 build error from GitLab commit dcc5fc2a3adb9ec4b196f82ebe4079bc88f3c91e


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-32.p12
changelog:
  - Type: bug
  - ID:   [TASK#132773]
  - SUG:  NA
  - DESC: Fix qemu-nbd child daemon connection process wont close stderr file
  -       add requirement of nettle >=3.6-5 for qemu-img


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-32.p13
changelog:
  - Type:Update
  - ID: [Task#142040]
  - SUG: NA
  - DESC: Synchronize patches in SP1 and SP3
  - 	add 125 patches, from patch 374 to 498
  -	add BuildRequires: krb5-devel, libssh-devel,glib2,mesa-libgbm-devel,spice-protocol,spice-server
  - 	addRequires: qemu-block-iscsi, qemu-block-curl, edk2-ovmf
  -	add package: block-rbd，block-ssh,block-iscsi, block-curl
  -	add configure parameters: enable-modules ,enable-libssh ,enable-tpm ,enable-opengl 
  - 	add the delete path for the install phase
  -	add files: vgabios-qxl.bin，block-rbd，block-ssh,block-iscsi, block-curl
  -  	fix compilation errors caused by G_SIZEOF_MEMBER


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-32.p14
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-32.p16
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-32.p17
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-60.p14
changelog:
  - Type:Update
  - ID: [Task#142040]
  - SUG: NA
  - DESC: Synchronize patches in SP1 and SP3
  - 	add 125 patches, from patch 368 to 423
  -	add BuildRequires: krb5-devel, libssh-devel,glib2,mesa-libgbm-devel,spice-protocol,spice-server
  - 	addRequires: qemu-block-iscsi, qemu-block-curl, edk2-ovmf
  -	add package: block-rbd，block-ssh,block-iscsi, block-curl
  -	add configure parameters: enable-modules ,enable-libssh ,enable-tpm ,enable-opengl 
  - 	add the delete path for the install phase
  -	add files: vgabios-qxl.bin，block-rbd，block-ssh,block-iscsi, block-curl
  -  	fix compilation errors caused by G_SIZEOF_MEMBER


author: wangguochun <wangguochun@kylinos.cn> - 4.1.0-60.p20
changelog:
  - Type: update
  - ID:   [Task#198750]
  - SUG:  NA
  - DESC: update qemu and merger v10-sp2 kylin server change to qemu-4.1.0-60.oe1
          merge change between qemu-4.1.0-60.oe1 qemu-4.1.0-66.oe1


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-60.p23
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-60.p24
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p04
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: lvying<lvying6@huawei.com> - 0.6.3-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix file descriptor leak in ras-report.c:setup_report_socket()


author: yueyuankun <yueyuankun@kylinos.cn> - 2.4-3.p02
changelog:
  - Type:bugfix
  - ID:TASK#217377
  - SUG:NA
  - Desc:fix(uefi-functions.sh):remove non-existent linuxefi module when creating grub-efi


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 6.2.7-1.p01
changelog:
  - Type:cves
  - Id:CVE-2022-36021 CVE-2022-24834 CVE-2023-28856
  - SUG:NA
  - DESC:回合低版本补丁CVE-2022-36021 CVE-2022-24834 CVE-2023-28856 and fix-building-error-of-malloc.patch
     Fix redis.spec and redis.service


author: wangjie<wangjie294@huawei.com> - 8.2006.0-2
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: liujilin<liujilin@kylinos.com> - 8.2006.0-2.p01
changelog:
  - modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - 解决journal日志重复刷入messages的问题


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: sunjin <sunjin@kylinos.cn> - 1.2.4kord-se.05
changelog:
  - Type:update
  - ID:[Bug#145066]
  - SUG:NA
  - DESC:security-switch版本拉齐
  -     【sp1sp2】只开selinux，grub里会多出kysec_3adm=0这个参数


author: Han Shuang <hanshuang@kylinos.cn> - 2.0-1.50.p02
changelog:
  - Add Cancel_etc_grub.d_00_header_superusers_password_pbkdf2.patch
  - modify etc_grub.d_00_header cancel superusers_password_pbkdf2 logout fn_harden_grub2 function


author: mengchaoming <mengchaoming@kylinos.cn> - 2.0-1.50.p03
changelog:
  - Type:bugfix
  - ID: NA
  - SUG: do not create allow file while the command does not exist
  - DESC:sync from 2.0-1.75 patch:do-not-create-allow-file-while-the-command-does-not-.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-64.se.09
changelog:
  - Add patch fix-add-group-sss_cache-error.patch 
  - Add patch fix-failed-to-flush-sssd-cache.patch 
    Fix cannot boot up after switch to custom selinux and then to stirct.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-64.se.12
changelog:
  - Add patch fix-login-stuck-targeted-ukmcs.patch
    Fix the system stucked in strict and custom when logining.


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-64.se.20
changelog:
  - Upgrade container-selinux.tgz from 2.73 to 2.138
  - Add patch update-container-selinux.patch to fix compile error caused by container-selinux upgrade.


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-64.se.21
changelog:
  - Type:update
  - ID:[TASK#111522]
  - SUG:NA
  - DESC: 111522 sp1和sp2合入只开selinux下不能su和sudo的策略补丁。
  - add Patch67: selinux-policy-sudosu-auditd.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-64.se.22
changelog:
  - Type:update
  - ID:[BUG#142876][BUG#143100][BUG#143037][BUG#143019][BUG#142898]
  - SUG:NA
  - DESC: 142876 除root外用户不可以启停服务。
  - add Patch68: selinux-policy-forbid-systemctl.patch
  - DESC: 解决semodule插入模块权限问题;打开日志工具失败问题;fdisk打不开;halt重启无法打开;用户家目录无法查看问题
  - add Patch69: semodule-log-fdisk-halt-secadm-home.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-64.se.23
changelog:
  - Type:update
  - ID:[BUG#145475][BUG#143067]
  - SUG:NA
  - DESC: 145475:开启三元非root用户创建保护箱失败;143067:审计用户无法打开日志查看器
  - add Patch70: selinux-policy-SXF-log-box.patch


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-64.se.24
changelog:
  - Type:update
  - ID:[任务#120597]
  - SUG:NA
  - add:
    Patch81: backport-Add-file-context-for-.config-Yubico.patch
    Patch82: backport-Change-transitions-for-.config-Yubico.patch
  - DESC: 120597 修复漏洞CVE-2020-24612


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-64.se.25
changelog:
  - Type:update
  - ID:[BUG#159377]
  - SUG:NA
  - DESC: 159377 开启selinux后无法更改主机名,yum update audit/sudo失败
  - add Patch90: selinux-policy-hostname.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-64.se.26
changelog:
  - Type:update
  - ID:[BUG#205131]
  - SUG:NA
  - DESC: 205131 【selinux】开启selinux后，停止DNS服务时存在报错信息
  - add Patch91: selinux-policy-DNS-service.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-64.se.27
changelog:
  - Type:fixbug
  - ID:[BUG#209238]
  - SUG:NA
  - DESC: 由于libsemanage包的改动，需要重新rebuild包，无内容改动，版本号+1.
  - [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常


author: Ondrej Vasik <ovasik@redhat.com> - 2.13.1-1
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    in default Fedora)
  - require systemd-rpm-macros instead of systemd


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.13.7.p03
changelog:
  - Type:bugfix
  - ID:BUG#220276
  - SUG:NA
  - DESC: Add Patch4: 0001-optimization-obtain-hostname-slow-when-login.patch
          Optimization obtain hostname, Avoid long login times caused by obtaining the host name during SSH login


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-2.se.03
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch:backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-2.se.04
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-2.se.05
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: fix CVE-2013-4235
  -     add patch(from cve):shadow-backport-CVE-2013-4235.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: wangdi <wangdi@kylinos.cn> - 0.20.0-2.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: lingsheng <lingsheng1@h-partners.com> - 6.04-14
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: openEuler Buildteam <buildteam@openeuler.org> - 243-27
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add elevator= kernel command line parameter and don't enable bfq
         by default


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: Guo Jianxing <guojianxing@kylinoscn> - 243.31.se.p02
changelog:
  - import changes from 17.se.4
  -- add patch9014:systemd-243-kylin-init5-hang.patch
  -- Modify ctrl+alt+F2 switch to init5 stuck problem
  -- Patch9013: 0002-Change-the-NTP-server.patch
  -- Change NTP server.
  -- urnal: fix selinux denied error for systemctl when lsm stacking is enable
  -- change to kylin


author: mengchaoming<mengchaoming@kylinos.cn>243-31.se.p03
changelog:
  -add patch9015:systemd-243-kylin-init1-add-check-console-tty1.patch
  -fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p07
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p10
changelog:
  - Type:bugfix
  - ID:rhbz#1970945
  - SUG:NA
  - DESC: Fix Systemd memory corruption (rhbz#1970945)
          Fix bunch of memory management bugs uncovered by dfuzzer and UBSAN (rhbz#2047373)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p12
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          fix mips64el build
          Remove gnu-efi check when in loongarch64 and mips64
          support systemd-detect-virt for Loongarch64


author: huangwenhua <huangwenhuag@kylinos.cn> - 243-31.se.p14
changelog:
  - Type:bugfix
  - ID:[TASK#172942]
  - SUG:NA
  - DESC: add patch 0001-fix-soft-link-missing.patch
          fix soft link missing


author: Shen Zhongwei <shenzhongwei@kylinos.cn> - 243-31.se.p15
changelog:
  - Type:bugfix
  - ID:[TASK#171982]
  - SUG:NA
  - DESC: add patch 0002-rc-local-order-after-network-online.target.patch
          fix rc-local service start failed


author: yinyongkang <yinyongkang@kylinos.cn> - 243-31.se.p17
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch100719: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p18
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SBUG:NA
  - DESC: add patch10720: 0001-backport-donot-open-cdrom-use-exclusive-mode.patch
          fix eject cdrom issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p19
changelog:
  - Type:bugfix
  - ID:[TASK#205426]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p21
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: Shi Jingying <shijingying@kylinos.cn> - 1.10.1-5.p01
changelog:
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error
  - add patch 102: tigervnc-1.10.1-kylin-xstart1.patch
  - the autokill parameter cannot creat port


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: cenhuilin<cenhuilin@kylinos.cn> - 2020a-8.p02
changelog:
  - Type:bugfix
  - ID:task#154455
  - SUG:NA
  - DESC:The northern edge of Chihuahua changes to US rules.
  -      Most of Mexico will no longer observe DST.
  -      Treat 1931 changes in Mexico as DST.


author: wangshuo <wangshuo@kylinos.cn> - 2020a-8.p03
changelog:
  - Type:bugfix
  - ID:[TASK#196761]
  - SUG:NA
  - DESC:Add Patch9010, Kazakhstan unifies on UTC+5 beginning 2024-03-01


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.5-1
changelog:
  - update to 1.3.5
  - update upstream location
  - include SO version in files list to avoid unexpected bumps
  - use modern macros
  - drop obsolete comments


author: mengchaoming<mengchaoming@kylinos.cn>-p13
changelog:
  -add patch11: ukui-greeter-kylin-Solve-bug49330-translation.patch
  -添加的定时器有问题,去掉,使用原有定时器;pam传上来的message,greeter进行翻译;


author: huayadong<huayadong@kylinos.cn>-p14
changelog:
  - add ukui-greeter-kylin-fix-bug-can-not-count-down-normally-after-entering-wrong-password-three-times.patch


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch21 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p25
changelog:
  - Type: bugfix
  - ID  : [Bug#128021]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-1.2.1-kylin-Prevent-failure-to-connect-to-xserver.patch
          修复因无法连接xserver而出现的登录界面键盘输入后闪屏问题.


author: huayadong<huayadong@kylinos.cn> -p26
changelog:
  - Type:bugfix
  - ID  :[Bug#137537]
  - SUG :NA
  - DESC:add patch24:ukui-greeter-1.2.1-kylin-prompt-for-password-expiration.patch


author: huayadong<huayadong@kylinos.cn> -p27
changelog:
  - Type:bugfix
  - ID  :[Bug#158569]
  - SUG :NA
  - DESC:add patch25:ukui-greeter-1.2.1-kylin-Add-login-status-detection-function-for-users-with-the-same-UID.patch
         为具有相同UID的用户添加登录状态检测功能，在用户列表合并显示相同UID用户


author: huayadong<huayadong@kylinos.cn> -p28
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch26:ukui-greeter-1.2.1-kylin-fix-crash-with-the-same-uid-user.patch


author: huayadong<huayadong@kylinos.cn> -p29
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch27:ukui-greeter-1.2.1-kylin-fix-the-problem-that-the-users-avatar-of-the-same-uid-is-not-centered.patch


author: huayadong<huayadong@kylinos.cn> -p30
changelog:
  - Type:bugfix
  - ID  :[Bug#164455]
  - SUG :NA
  - DESC:add patch28:ukui-greeter-1.2.1-kylin-increase-name-label-height.patch


author: huayadong<huayadong@kylinos.cn> -p31
changelog:
  - Type:bugfix
  - ID  :[Bug#167602]
  - SUG :NA
  - DESC:add patch29:ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch


author: huayadong<huayadong@kylinos.cn> -p32
changelog:
  - Type: bugfix
  - ID  : [Bug#161924]
  - SUG : NA
  - DESC: add patch14 ukui-greeter-1.2.1-kylin-fix-kyreplace3.0-4-lightdm-unable-to-start.patch


author: houhongxun<houhongxun@kylinos.cn> -p33
changelog:
  -Type:bugfix
  -ID:[BUG#194488]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-locked-user-on-login-window.patch
        don't show locked user on login window


author: huayadong <huayadong@kylinos.cn> -p34
changelog:
  - Type:bugfix
  - ID:[BUG#196489]
  - SUG:NA
  - DESC:add patch:0001-ukui-greeter-1.2.1-kylin-remove-xhost.patch


author: guoce <guoce@kylinos.cn> - 0.3.62-1s2.p02
changelog:
  - add patch: ukui-screensaver-0.3.62-fix-chandao-12928.patch
  - modify system time display coordinates


author: gaohaobo <gaohaobo@kylinos.cn> - 0.3.62-1s2.p04
changelog:
  - add patch: 0002-change-default-picture-folder-to-adjust-control-center-p12.patch  change the default srceensaver lookup directory to adjust kylin-control-center after p12.


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-17
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: xiehongyu <xiehongyu@kylinos.cn> - 2:8.2-20.p01
changelog:
  - add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-21.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-22.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no,
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> -2:8.2-26.p01
changelog:
  - add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: wanglixing <wanglixing@kylinos.cn> - 2:8.2-28.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: sunjialin <sunjialin@kylinos.cn> - 2:8.2-34.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: likai01 <likai01@kylinos.cn> - 2:8.2-50.po1
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p03.01.se.01
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: lizhanchun <lizhanchun@kylinos.cn> 2.2.1-2.p15
changelog:
  - Type:	update
  - ID:	BUG#114583
  - SUG:	NA
  - DESC:	KYLIN-add-default-device-on-aarch64-when-inst-vm.patch 
  -		add default device on aarch64 when inst vm.


author: wangdi <wangdi@kylinos.cn> - 2.2.1-2.p16
changelog:
  - Type: update
  - ID:   BUG#129269
  - SUG:  NA
  - DESC: KYLIN-fix-virt-install-error-message-zh_CN-translation.patch 
  -               fix redundant characters in virt-install error message zh_CN translation.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p17
changelog:
  - Type: update
  - ID:   [TASK#159711]
  - SUG:  NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add kylin-virt-manager-2.2.1-4-fix-bug-68049-translation-of-tchinese.patch
  -       Add 0001-Set-minimum-memory-2048M-for-virt-install.patch
  -	Add 0001-Bug-119136-set-default-memory-2048.patch
  -	Add 0001-BUG-102438-Modify-is_loongarch64-to-is_loongarch.patch
  -	Add 0001-add-translations-for-zh_CN.patch
  -	Add 0001-temporarily-modify-version-V10-to-version-10.0.patch
  -	Delete duplicate machine types.
  -	Add mips64 loongarch support


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p18
changelog:
  - Type: update
  - ID:   [BUG#199984] [BUG#200170]
  - SUG:  NA
  - DESC: KYLIN-fix-virt-manager-error-message-zh_CN-translation.patch
  -               Fixed the issue that the virt-manager interface preference menu was displayed in English


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p19
changelog:
  - Type: update
  - ID:   TASK#187051
  - SUG:  NA
  - DESC: Add 0001-add-Chinese-traditional-translation-HK.po.patch
  -               add traditional Chinese translations for the HK versions.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p21
changelog:
  - Type: update
  - ID:   TASK#187713
  - SUG:  NA
  - DESC: add 0001-fix-cockpit-reboot-error-issue.patch
  -               fix-cockpit-reboot-error-issue.


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: yue yuankun <yueyuankun@kylinos.cn> - 2.30-1.p01
changelog:
  - Add patch:xkeyboard-config-2.30-kylin-fixbug-54226.patch
  - remove unknown character and modify some po


author: zhanzhimin<zhanzhimin@huawei.com> - 1.20.8-2
changelog:
  - Type:CVE
  - Id:CVE-2020-14346,CVE-2020-14361,CVE-2020-14362
  - SUG:NA
  - DESC:fix CVE-2020-14346,CVE-2020-14361,CVE-2020-14362


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-3.p02
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p06
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p07
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}17
changelog:
  - Type:bugfix
  - ID  :[bug#181281]
  - SUG :add patch 0001-fix-ghost-backup-oday.patch
  - DESC:fix ghost backup oday


author: HouHongxun <houhongxun@kylinos.cn> - 4.0.12kord1p18
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation-for-desktop-file.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}19
changelog:
  - Type: update
  - ID: [TASK#185224]
  - SUG: NA
  - DESC: add 0001-add-zh_HK-translate.patch 0001-add-zh_HK-qss-file.patch
          0001_backup_store_hk_png.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}21
changelog:
  - Type: buffix
  - ID: [BUG#215689]
  - SUG: NA
  - DESC: add 0001_add_ok_images.patch 0001-add-ok_btn-hk-translate.patch


