# changelog

author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.33.0-19
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: GuoCe <guoce@kylinos.cn> - 2.66.8-13.p01
changelog:
  - Type: task
  - ID: 186407
  - SUG: NA
  - DESC: Add patch7001 to support zh_HK
          Add BuildRequires: dbus-daemon


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.66.8-13.p02
changelog:
  - Type: cve fix
  - ID: NA
  - SUG: NA
  - DESC: add backport-CVE-2024-52533.patch backport-CVE-2024-34397.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.66.8-13.p04
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-12.p08
changelog:
  - Type: bugfix
  - ID: [BUG#191919]
  - SUG: NA
  - DESC:skip p07,Remove wrong country_name in locatedata.


author: Xu Jin <jinxu@kylinos.cn> - 2.28-12.p10
changelog:
  - Type:CVE
  - ID:[TASK#184397]
  - SUG:NA
  - DESC:fix CVE-2022-23219 CVE-2021-3999 CVE-2022-23218 CVE-2023-0687


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-12.p12
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:Fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: panzhe <panzhe@kylinos.cn> - 2.28-12.p15
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC: fix pthread_once hangs when init routine throws an exception


author: panzhe <panzhe@kylinos.cn> - 2.28-12.p16
changelog:
  - Type: update
  - ID: [BUG#343449]
  - SUG:  NA
  - DESC: Fix missing lib after glibc update , and resolve the file conflict issue of /usr/lib64/libnss_nis.so


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p05
changelog:
  - Type:cves
  - ID:CVE-2025-32988,CVE-2025-32990,CVE-2025-6395
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: tenglei <tenglei@kylinos.cn> - 1.31.0-9.p03
changelog:
  - Type:update
  - ID:[task#455995]
  - SUG:NA
  - DESC:rebuild due to changes in dependent version, skip version p02


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p08.se.07
changelog:
  - Type:update
  - ID:bug#195608
  - SUG:NA
  - DESC: add kylin-read-nv-with-policy-authorization.patch
  	    kylin-add-kylin_tpm.mod.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p08.se.08
changelog:
  - Type:update
  - ID:bug#195608
  - SUG:NA
  - DESC: add kylin-modify-an-exception-intercept-that-a-file-does-not-exist.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 1:2.04-37.p09.se.08
changelog:
  - Type:update
  - ID:Task#164035
  - SUG:NA
  - DESC: Replace BOOTLOONGARCH*.efi when installing grub2-efi-loongarch64, fix the issue of missing initrd parameter in /proc/cmdline


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p09.se.09
changelog:
  - Type:update
  - ID:Task#202455
  - SUG:NA
  - DESC: add kylin-measurefiles.mod-unblock-the-file-that-does-not-exist.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p10.se.11
changelog:
  - Type:bugfix
  - ID:BUG#218407
  - SUG:trusted boot
  - DESC: add  kylin-example-modify-the-path-of-the-configuration-file.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p10.se.12
changelog:
  - Type:bugfix
  - ID:BUG#220240
  - SUG:trusted boot
  - DESC: add kylin-complete-log-writing-when-bimabase-integrity-is-abnormal.patch


author: liuyang <liuyang01@kylinos.cn> - 1:2.04-37.p12.se.12
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p12.se.13
changelog:
  - Type:bugfix
  - ID:BUG#242437
  - SUG:trusted boot
  - DESC: add modification-in-kylin-trust-measure-mod-for-http-boot-failure-issue.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p13.se.14
changelog:
  - Type:update
  - ID:task#374821
  - SUG:NA
  - DESC:add bugfix-tpcm-Fixed-the-problem-of-inconsistent-parame.patch


author: andy <liuyang01@kylinos.cn> - 1:2.04-37.p14.se.15
changelog:
  - Type:CVE
  - ID:task#441494
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125
  - SUG:NA
  - DESC:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125


author: yujingbo <yujingbo@kylinos.cn> - 1:2.04-37.p16.se.15
changelog:
  - Type:TASK
  - ID:task#462916
  - SUG:NA
  - DESC:Modify grub-boot-success.service and grub-boot-success.timer file permission to 644


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.04-37.p17.se.15
changelog:
  - Type:TASK
  - ID:TASK#546471
  - SUG:NA
  - DESC:Support ZhaoXin KH-50000 CPU:
         	- i386: Check for cpuid family when flush cache only on VIA CPUs
         	- i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: houhongxun <houhongxun@kylinos.cn> 2.24.32-11.p02
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix media volume control applet tooltip position


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p06
changelog:
  - Type:bugfix
  - ID:[Bug#171872]
  - SUG:NA
  - DESC:add patch6:hardinfo-0.6.1-kylin-add-the-name-YMTC-for-oui-id-a428b7.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p07
changelog:
  - Type:bugfix
  - ID:[Bug#177860]
  - SUG:NA
  - DESC:add patch7:hardinfo-0.6.1-kylin-fix-ft2000-cpu-no-speed.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.1-1.p08
changelog:
  - Type:bugfix
  - ID:[BUG#182817]
  - SUG:NA
  - DESC:add patch8, retrieve the motherboard info for arm and loongarch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p09
changelog:
  - Type:bugfix
  - ID:[TASK#178533]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p10
changelog:
  - Type:bugfix
  - ID:[BUG#197180]
  - SUG:NA
  - DESC:add patch10,0001-fix-pci-info-showing-wrong-link-width.patch
         fix that pci info showed wrong current link width


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch11,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p12
changelog:
  - Type:bugfix
  - ID:[BUG#199256]
  - SUG:NA
  - DESC:add patch12,hardinfo-0.6.1-kylin-hide-Firmware.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p13
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-hardinfo-add-traditional-chinese-translation.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#208197]
  - SUG : NA
  - DESC: add patch14:hardinfo-0.6.1-kylin-fix-sensors-driver-unknow.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#225214]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-fix-temperature-label-display-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch16:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#245937][BUG#245949]
  - SUG : NA
  - DESC: add patch17:hardinfo-0.6.1-kylin-change-int-to-long-int-in-memory_usage.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gongxingliang <gongxingliang@kylinos.cn> - 1.14.5-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove compile options (-fallow-argument-mismatch -fallow-invalid-boz) to fix compilation failure


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: yanglu <yanglu72@h-partners.com> - 2.4.43-28
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.43-28.p02
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: merge 2.4.43-26.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: lifeifei <lifeifei@kylinos.cn> - 62.1-7.p01
changelog:
  - Type: bugfix
  - ID: [task#186415]
  - SUG: NA
  - DESC: Synchronizing upstream community changes:delete taboo words and redundant files


author: openEuler Buildteam <buildteam@openeuler.org> - 10.01-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:execute udevadm settle when network starts and network fork to start dhcp process


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: lifeifei<lifeifei@kylinos.cn> - 10.04-4.p02
changelog:
  - Type:bugfix
  - ID:[task#170327]
  - SUG:NA
  - DESC: Synchronizing upstream community changes:Initscripts no looger care about rc.local


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: jiangjixiang <jiangjixiang@kylinos.cn> - 1.8.18-19.p01
changelog:
  - Type:sync
  - ID: task 186413
  - SUG:NA
  - DESC: synchronize loongarch's patch from 1.8.18-15.p02
      sync Patch6028 to solve the problem of malloc invalid next size (unsorted) when typecode=2 size too small
      sync Patch6029 to solve sel list  timestamp and add CST


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
          2.Default parameter updates for x86
          3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
          4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.452.b09-1.p01
changelog:
  - Type: update
  - ID:   [TASK#466871]
  - SUG:  NA
  - DESC: openjdk-1.8.0.452 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support
          fix date errors in changelog


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC:	1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
  	3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
          2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
          4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.27.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#459119]
  - SUG:  NA
  - DESC: openjdk-11.0.27.6 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support
  	obsoletes java-11-openjdk-static-libs* which are nolonger used


author: litenglong <litenglong@kylinos.cn>-5.3.0-1.p02
changelog:
  - Type:Requirement
  - ID:[REQ#34645]
  - SUG:NA
  - DMSC:jemalloc optimize for spec2017
         jemalloc-optimize-for-spec2017-base-v530.patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p35.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.2-1.p35.07
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387985][BUG#387025]
  - SUG:NA
  - DESC: mv autostart to libkylin-activation
          fix kms ui miss deactivate button


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: update
  - ID:[BUG#190233]
  - SUG:NA
  - DESC: 修复hub禁用启用不即时生效的问题
  -       add patch: kysec-daemon-fix-hub-not-work-at-once.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.12
changelog:
  - Type: bufix
  - ID: [BUG#191987]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#195434]
  - SUG:NA
  - DESC: 修复strict模式下，kysec-wlinit失败的问题
  -	  add patch: kysec-daemon-fix-strict-mode-kysec-wlinit-failed.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: bufix
  - ID: [TASK#179971 BUG#193846]
  - SUG:NA
  - DESC: 同步桌面流量管控普通用户可以配置策略问题
  -         add patch: kysec-daemon-fix-netflow-ordinary-user-can-config-policy.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#205354]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -         add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [任务#165225][任务#165240][任务#165232][任务#178765][任务#178762][任务#165245]
  -     [BUG#204409][BUG#204640][BUG#204601]
  - SUG:NA
  - DESC: 添加软件包黑白名单kdk接口[任务#165225]
  -	  add patch: kysec-daemon-add-bwlist-kdk-interface.patch
  -	添加应用执行控制kdk接口[任务#165240]
  -	  add patch: kysec-daemon-add-pblk-kdk-interface.patch
  -	添加软件防卸载kdk接口,修改spec文件,pkglist.xml放在kysec-utils
  -	包中安装[任务#165232]
  -	  add patch: kysec-daemon-add-pkglist-kdk-interface.patch
  -	数据库修改支持kdk和兼容性升级,同时修改spec文件，数据库操作
  -	  add patch: kysec-daemon-modify-db-for-kdk.patch
  -	添加内核模块防卸载kdk接口[任务#178765]
  -	  add patch: kysec-daemon-add-kmod-kdk-interface.patch
  -	添加进程防杀死kdk接口[任务#178762]
  -	  add patch: kysec-daemon-add-ppro-kdk-interface.patch
  -	添加文件保护kdk接口[任务#165245]
  -	  add patch: kysec-daemon-add-filepro-kdk-interface.patch
  -	修改spec文件中升级时数据库的操作,修复安装过程中报错的问题[BUG#204409]
  -       修改函数返回值,0代表成功[BUG#204640][BUG#204601]
  -         add patch: kysec-daemon-modify-function-return-value-0-success.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: bugfix
  - ID: [BUG#209909][BUG#210138][#210326]
  - SUG:NA
  - DESC: 修复sm套件取消授权失败的问题[BUG#209909]
  -	修复sm查询文件保护错误的问题[BUG#210138]
  -	修复切换模式时,会删除/etc/default/grub中关于静态度量的配置[BUG#210326]
  -	去掉切换none模式时audit=0的配置
  -	  add patch: kysec-daemon-fix-sm-cancel-authorization-fail-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#218009]
  - SUG:NA
  - DESC: 修复kdk接口导致kysec命令可以修改sm策略的问题[BUG#218009]
  -	  add patch: kysec-daemon-fix-kysec-can-modify-sm-policy-bug.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.20
changelog:
  - Type: bugfix
  - ID: [TASK#477203]
  - SUG:NA
  - DESC: 修复wlinit获取打标状态时卡住的问题
  -	  add patch: kysec-daemon-wlinit-handle-getting-relabel-status-error.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-exec-Fix-setting-locale-for-util-calls.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-dm-Fix-memory-leak-in-the-DM-plugin-and-DM-logging-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-fs-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-kbd-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-lvm-dbus-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-mdraid-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-swap-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-vdo-Do-not-use-g_memdup-in-bd_vdo_stats_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-Don-t-allow-suid-and-dev-set-on-fs-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.22-3.p02
changelog:
  - Type: bugfix
  - ID: [BUG#269451]
  - SUG: NA
  - DESC: add libhugetlbfs_privutils.so for libhugetlbfs test


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-13
changelog:
  - 修复切换总开关时pcr策略下发会清理其他策略问题
  - 增强tcm1 兼容性
  - 动态修改pcr时，不再重新加载模块，保证策略连贯性
  - 添加pcie tcm1卡支持
  - 配置pcr策略时，增加pcr设备异常提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p53
changelog:
  - Type: upadate
  - ID:[TASK#163840]
  - SUG:NA
  - DESC: add longmai and haitaifangyuan ukey driver support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p64
changelog:
  - Type: Task
  - ID:[TASK#188185]
  - SUG: NA
  - DESC: add debuginfo and delete useless code file
  - DESC: merge main branch to this


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p65
changelog:
  - Type: bugfix
  - ID:[BUG#211902][BUG#212682]
  - SUG: NA
  - DESC: gather together kms cmd
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p69
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p74
changelog:
  - Type:update
  - ID:[TASK#464361]
  - SUG:NA
  - DESC:add check product type
         fix dmidecode return NULL


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p75
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387899][BUG#387025]
  - SUG:NA
  - DESC: hwid not use bios uuid
          vm client not use disk


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p02
changelog:
  - Type:cves
  - Id:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p03
changelog:
  - Type:cves
  - Id:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p06
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaihuiying <eaglegai@163.com> - 0.9.4-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: gaoyukun <gaoyukun@kylinos.cn> - 4.16.0-3.p01
changelog:
  - Type:compile
  - ID:TASK#414527
  - SUG:NA
  - DESC:Add 'BuildRequires gtk-doc',repair compilation failure.


author: Yu Peng <yupeng@kylinos.cn> - 1.30-3.p01
changelog:
  - Type:bugfix
  - ID:[Task#456739]
  - SUG:NA
  - DESC:sync community patches:
         backport-libteamdctl-validate-the-bus-name-before-using-it.patch


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: lifei <lifei@kylinos.cn> - 6.2.0-16.p07
changelog:
  - Type: update
  - ID: [TASK#159711]
  - SUG: NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add LoongArch CPU host-model support, depends on X86 and ARM CPU.
  - 	Add Kylin add libvirt-6.2.0 loongarch64 support
  - 	Modify spec, add loongarch64 support
      	   loongarch64 define: qemu_kvm_arches, with_storage_zfs 0
      	   add loongarch LOADERS define
      	   add loongson libvirt-6.0.0 configure command as comment, for backup


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-16.p11
changelog:
  - Type: update
  - ID:   [TASK:184101]
  - SUG:  NA
  - DESC: Resolve compatibility issues caused by the libtasn1 package upgrade.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-16.p12
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - nwfilter: fix crash when counting number of network filters (CVE-2022-0897)
  - qemu: Add missing lock in qemuProcessHandleMonitorEOF (CVE-2021-3975)


author: lijunwei <lijunwei@kylinos.cn> - 6.2.0-16.p13
changelog:
  - Type: update
  - ID:   [Task:185640]
  - SUG:  NA
  - DESC: Add support Phytium cpu TengYun-S5000c in SP4


author: lijunwei <lijunwei@kylinos.cn> - 6.2.0-21.p14
changelog:
  - Type: update
  - ID:   [Task:192206]
  - SUG:  NA
  - DESC: Rebase libvirt for  keep up with OE 20.03 SP4
          Revert build without dtrace
          Patch0055: fix nwfilter translation error; 
  	Patch0056: add domblklist info for vhost disk of SPDK
  	Patch0057: fix loongarch build error


author: weishaokun <weishaokun@kylinos.cn> - 6.2.0-21.p16
changelog:
  - Type: update
  - ID:   [TASK#215600]
  - SUG:  NA
  - DESC: fix hygon bug that can not support model AMD-Rome and AMD-Rome


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-21.p17
changelog:
  - Type: bugfix
  - ID:   [BUG#249689]
  - SUG:  NA
  - DESC: Fix the translation problem of libvirtd.policy's prompts.


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1.7.0-11.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.10-43.p04
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.9.10-43.p08
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794、CVE-2025-49796、CVE-2025-6170
  - SUG:NA
  - DESC: fix CVE-2025-49794、CVE-2025-49796、CVE-2025-6170


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.4.lns8
changelog:
  - [loongarch][assembler] Remove useless .mdebug.abilp64 section
  - [loongarch][assembler] Use '.section .bss' instead of '.bss' and fix 'harf' typo
  - [loongarch][assembler] Support inline asm 'z' extra code
  - [loongarch][assembler] Remove .module and fp related .set directives to align with GAS
  - [loongarch][codegen] Fix optimization error of signext
  - [loongarch][codegen] Support the read_register intrinsic
  - [loongarch][codegen] Sign extend the imm operand of lu12i.w according to the ISA
  - [loongarch][codegen] Refine vector registers and instructions definition
  - [loongarch][codegen] Update vector builtins to keep it consistent with GCC
  - [loongarch][codegen] Do not set cttz to legal for vector since lacking of instructions
  - [loongarch][disassembler] Fix offset decoding error of the B and BL instructions
  - [loongarch][NFC] Use llvm8 style inline license header


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.5.lns8
changelog:
  - [test][NFC] Add missing file llvm/test/MC/LoongArch/lit.local.cfg
  - Fix vector xor node merging error in debug mode
  - Add test cases for the vext2xv.* instruction and format LoongArchTargetTransformInfo.cpp files
  - [llvm] Code cleanup for lowerFCOPYSIGN and add test case
  - Optimizing scalar logic operations
  - [NFC] Fix typo XLP32 to LPX32
  - Optimize tail call
  - Fix the memory address in the atomic operation contains dirty data
  - Optimize redundant sign extension instructions
  - Fix atomic operation address calculation error
  - Add a missing imm0 to i8/i16 atomic instructions
  - [sancov][sanitizer-common] Correct sanitizer coverage point
  - [test] Simplify the regression test for the recent signext optimization bug fix


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.6.lns8
changelog:
  - [loongarch] Optimize add and abs to [x]vadda.* on vector values
  - [loongarch] Optimize immediate loading and mul-to-add-sub transformation
  - [loongarch] Optimize scalar and vector logic operations
  - [loongarch] Optimize vector data shuffling and 8x8 matrix operations
  - [loongarch] Check immediate range for branch instructions in assembler
    and fix the bug of decoding branch target in disassembler
  - [ObjectYAML] Add LoongArch support
  - [Backport][SCEV][LSR] Prevent using undefined value in binops


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.7.lns8
changelog:
  - [loongarch] Support la.tls.* macro assembly
  - [loongarch] CodeGen optimization
  - [mips] Add loongson3a CPU ISA support
  - [mips] Fix several backend bugs


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.8.lns8
changelog:
  - Adjust FP to equal to SP on function entry on loongarch
  - LoongArch codegen optimization
  - Remove the workaround for loongson3 llsc erratum on loongarch


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.10.lns8
changelog:
  - [LoongArch] Support la264 and la364
  - [LoongArch] Add LoongArch support for xray
  - [Mips] Implement sge/sgeu/sgt/sgtu pseudo instructions and .cplocal directive
  - [LoongArch] Delete emitEndOfAsmFile implementation
  - [LoongArch] Add new vector interface according to the latest tool chain
  - [LoongArch] Support parsing non-native value type reigster for inlineasm constraint and float/double for GPR
  - [LoongArch] Cleanup free copy nodes which cause fatal error in LiveRangeCalc::findReachingDefs
  - [LoongArch] Fix the bug that LoongArchISD::SHF Cannot select in some cases
  - [LoongArch] Fix the issue in Lowering pipeline about XVILVH and XVILVL
  - [LoongArch] Set minimum function alignment to 4-bytes
  - [LoongArch] Implement mayBeEmittedAsTailCall for tail call optimization
  - [LoongArch] Use 64 bits absolute address when loading local symbol
  - [LoongArch] Use a new operand type 'amem' instead of 'mem' for am* instructio
  - [LoongArch] Do load/store+ADDI peephole opt in PostprocessISelDAG
  - [LoongArch] Fix the wrong destination register definition of the jirl instruction


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.12.lns8
changelog:
  - [LoongArch] Improve codegen for atomic ops
  - [LoongArch] Support finer-grained DBAR hints for LA664+
  - [LoongArch] Support .reloc and .half directives


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 8:2.03.09-15.p01
changelog:
  - Type: updates
  - ID: [Task#186442]
  - SUG: NA
  - DESC: Sync 2.03.09-12.p05 source rpm patches:
  	p01:0018-LD_LIBRARY_PATH-add-extra-dir.patch
  	p03:1000-use-4k-sector-size-when-any-dev-is-4k.patch
  	p04:lvmlockd: add suport for loongarch64


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-15.p03
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group
          because sp4-ha occupies p02,so p03 is used.


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylin.cn> - 1.16.1-4.p01
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.16.1-4.p04.01
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix window minimize animation to wrong direction


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p04
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: xiejing <xiejing@kylinos.cn> - 3:10.3.39-1.p05
changelog:
  - Type: bugfix
  - ID: BUG#216652
  - SUG: NA
  - DESC: Disable gssapi plugin by default to fix init function error


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p21
changelog:
  - Type: bugfix
  - ID:   [TASK#220038]
  - SUG:  NA
  - DESC: don't repeatedly reset desktop background which was used by caja


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p12
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-tranditional-chinese-translation.patch


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#205717]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-some-missing-translations-for-ca.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p14
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0001-fix-mate-indicators-memory-leaks.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p15
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0002-fix-mate-indicators-memory-leaks.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p16
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add Requires: mate-panel-libs >= 1.12.2-1kord37.p10.a.ky10


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#449341]
  - SUG : NA
  - DESC: add patch 0003-fix-mate-indicators-memory-leaks.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p05
changelog:
  -Type:bugfix
  -ID:[BUG#194507]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-system-monitor-menu-if-current-user-is-no.patch
        don't show system monitor when not logged in as root


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: peijiankang <peijiankang@kylinos.cn> - 20.1.4-3.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: sync from 20.1.4-1.p08
          Add Patch1001: 0001-meson-provide-a-default-configuration-to-build-vario.patch
          Add Patch1002: 0002-gallium-llvmpipe-pass-MCPU-mips64r2-to-LLVM-on-mips.patch
          Add Patch1003: 0003-gallivm-Return-true-from-arch_rounding_available-if-.patch
          Add Patch1004: 0004-gallivm-fix-coroutines-on-mips64-with-llvm-8.patch
          Add Patch1005: 0005-gallivm-add-more-optlevel-for-debug-purpose-on-mips6.patch
          Add Patch1006: 0006-disable-madd4-on-mips64.patch
          Add Patch1007: 0007-meson-add-mips-asm-flags.patch
          Add Patch1008: 0008-kmsro-Extend-to-include-loongson-drm-support.patch
          Add Patch1009: 0009-meson-add-loongarch64-build-support.patch
          Add Patch1010: 0010-gallivm-temporary-disable-coroutines-on-loongarch64-.patch
          Add Patch1011: 0011-gallivm-detect-loongarch-lsx-and-lasx-instruction-se.patch
          Add Patch1012: 0012-symbols-check-add-mips-platform-specific-symbols.patch
          Add Patch1013: 0013-gallivm-arit-use-LLVMBuildFPToUI-when-the-float-is-n.patch
          Add Patch1014: 0014-gallivm-disable-use-lp_build_round_arch-on-default.patch
          Add Patch1015: 0015-gallivm-add-more-optlevel-for-debuging-perpose-on-mi.patch
          Add Patch1016: 0016-gallivm-enable-lsx-and-lasx-on-loongarch-when-LLVM-e.patch
          Add Patch1017: 0017-llvmpipe-Fix-leak-of-CS-local-memory-with-0-threads.patch
          Add Patch1018: 0018-frontends-va-context-don-t-set-max_references-with-n.patch
          mv  to 2


author: pengfuyuan <pengfuyuan@kylinos.cn> - 20.1.4-3.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#208462]
  - SUG:  NA
  - DESC: Add -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: gongxingliang <gongxingliang@kylinos.cn> - 2.15.05-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:tranplat Patch6004: 0001-change-log-level.patch from nasm-2.15.03-7.p01


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: zhangchaorui <zhangchaorui@kylinos.cn> - 6.2-6.p01
changelog:
  - Add patch: ncurses-support-loongarch.patch
  - Modify config.sub/config.guess for supporting loongarch


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: liwenchong <liwenchong@kylinos.cn> - 1:2.5.1-6
changelog:
  - set use-gss-proxy to true in nfs.conf to be consistent with the
    description of 0003-nfs-utils-set-use-gss-proxy-1-to-enable-gss-proxy-by.patch


author: xiejing <xiejing@kylinos.cn> - 1:1.21.5-5.p01
changelog:
  - Type:update
  - ID:[Task#168411],[Bug#192329]
  - SUG:NA
  - DESC:Modify Kylin in index.html,404.html,50x.html


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:12.22.11-5.p04
changelog:
  - Type: cves
  - ID: NA
  - SUG: NA
  - DESC: Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix an error in CVE-2025-23085.2.fix conflicts between help and docs packages


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p07
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix conflicts between npm in 12.22.xx and nodejs in 12.19.0-1.0.1


author: lvfei <lvfei@kylinos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: houzhiwei<houzhiwei@kylinos.cn>- 3.54.0-10.p07
changelog:
  - Type:update
  - ID:TASK#其它
  - SUG:NA
  - DESC: Add PK11_Pub{Wrap, Unwrap}SymkeyWithMechanism r=mt,rrelyea Summary


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-13.p02
changelog:
  - Type:bugfix
  - ID:[TASK#446218]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: changtao <changtao@kylinos.cn> - 2.3.1-15.p01
changelog:
  - Type: complie
  - CVE: NA
  - SUG: NA
  - DESC:fix openjpeg2-help noarch package built differently on different architectures


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p16
changelog:
  - Type: bugfix
  - ID:[BUG#294265]
  - SUG:NA
  - DESC:fix login error after use the qingyun special config


author: mengchaoming<mengchaoming@kylinos.cn> -1:1.1.1f-31.p20
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream patch121->patch140
   null pointer dereference occurs when memory alloca
   Make DH check set some error bits in recently added 
   Fix integer overflow in evp EncryptDecryptUpdate
   Fix Coverity 1201763 uninitialised pointer read
   Fix Coverity 1498611 1498608 uninitialised read
   Fix coverity 1498607 uninitialised value
   Fix OBJ nid2obj doesn t always raise an  issue
   Set protocol in init client
   Fix a crash in ssl security cert chain
   Fix undefined behaviour in EC GROUP new from ecparam
   Fix a memory leak in ec key simple oct2priv
   Fix a crash in asn1 item embed new
   Fix leakage when the cacheline is 32 bytes in CBC MA
   Add test for empty supported groups extension
   Do not send an empty supported groups extension
   x509 use actual issuer name if a CA is used
   Fix a memory leak in crl set issuers
   ASN1 Reset the content dump flag after dumping
   Don t reset the packet pointer in ssl3 setup read bu
   bn produce correct sign for result of BN mod


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-31.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p23
changelog:
  - Type: update
  - ID: TASK#199873
  - SUG: NA
  - DESC: revert hygoncpp engine because of hygon gm not support openssl platform


author: anyunhao <anyunhao@kylinos.cn> - 1.5.2-6.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:sync from sp2 patch: 0001-pam-13.1-8-loacal-chinese.patch;
  - DESC:resolve "Account temporarily locked due to %d failed logins" chinese local

  - Type:bugfix
  - ID:26337
  - SUG:sync from sp2 patch:Linux-PAM-1.4.0-kylin-fix-bug26337.patch
  - DESC:NA

  - Type:bugfix
  - ID:19898
  - SUG:modify spec
  - DESC:Modify system-auth.pamd to add 'use_first_pass'


author: anyunhao <anyunhao@kylinos.cn> - 1.5.2-6.p02
changelog:
  - Type:bugfix
  - ID:bug#189847
  - SUG:modify patch;
  - DESC:modify Linux-PAM-1.4.0-kylin-fix-bug26337.patch to fix bug26337


author: wanghao <wanghao2@kylinos.cn> - 1.5.2-6.p02.se.02
changelog:
  - Type: update
  - ID:[BUG#199224]
  - SUG:NA
  - DESC: 修复相同UID用户登录时提示信息闪现的问题, 终端登录
  -	提示信息不准确, 在spec文件加入修改system-auth和
  -	password-auth文件的命令, 修改system-auth.pamd和
  -	password-auth.pamd源码文件
  -	  add patch: pam-fix-same-uid-tips-time-short.patch


author: gongxingliang <gongxingliang@kylinos.cn> - 1.5.2-6.p04.se.02
changelog:
  - Type:cves
  - ID:CVE-2024-22365 CVE-2024-10963
  - SUG:NA
  - DESC:add patch 2 to fix CVE-2024-22365,add 3 4 5 to fix CVE-2024-10963


author: xieyanlong <xieyanlong@kylinos.cn> - 115-3.p02
changelog:
  - Type: update
  - ID: TASK#175382
  - SUG: NA
  - DESC: Adapter to kylin without mandoc and fix CVE-2022-3560


author: songjuntao <songjuntao@kylinos.cn> - 115-3.p04
changelog:
  - Type: update
  - ID: TASK#186623
  - SUG: NA
  - DESC: fix use file tool identify file happen bad note description


author: jiangxingsong <jiangxingsong@kylinos.cn> - 115-3.p05
changelog:
  - Type: update
  - ID: TASK# 199710
  - SUG: NA
  - DESC: Fixed an error message when importing two subject system certificate signatures


author: ganjianqing <ganjianqing@kylinos.cn> - 115-3.p06
changelog:
  - Type: update
  - ID: BUG# 335047
  - SUG: NA
  - DESC: Fixed an error when export cert from NSS db
          Remove unused i option in authvar
  	fix Segamentation fault in cms_common


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p03
changelog:
  - Type:cves
  - ID:CVE-2024-8925、CVE-2024-8926、CVE-2024-8927、CVE-2024-9026
  - SUG:NA
  - DESC:fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-2756,CVE-2024-3096,CVE-2024-5458
  - SUG:NA
  - DESC:fix CVE-2024-2756,CVE-2024-3096,CVE-2024-5458


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p06
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p07
changelog:
  - Type:cves
  - ID:CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233
  - SUG:NA
  - DESC:fix CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: gaoyukun <gaoyukun@kylinos.cn> - 8.0.30-10.p02
changelog:
  - Type:rebuild
  - ID:[BUG#338391]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: zhangbowei<zhangbowei@kylinos.cn> - 1:0.10.1-10.p03
changelog:
  - Type:bugfix
  - ID:[Bug#374071]
  - SUG:NA
  - DESC:change exec path from /usr/bin to /usr/local/bin about podman-docker,change man file from docker to podman


author: weiyucheng<weiyucheng@kylinos.cn> - 1:0.10.1-10.p05
changelog:
  - Type:CVE
  - CVE: CVE-2025-58058
  - SUG:NA
  - DESC:fix CVE-2025-58058 and add containers-common version limit


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: huayadong <huayadong@kylinos.cn> - 0.90.0-11.p01
changelog:
  - Type: bugfix
  - ID:   [Task#356271]
  - SUG:  NA
  - DESC: add Obsoletes: poppler-qt-devel, Obsoletes:poppler-qt


author: houhongxun <houhongxun@kylinos.cn> - 0.90.0-11.p04
changelog:
  - Type: cves
  - ID: [Task#549531]
  - SUG: NA
  - DESC: fix CVE-2025-52885 CVE-2025-43903 CVE-2020-36024 CVE-2025-43718


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: lichenguang <lichenguang@kylinos.cn> - 0.90.0-6.p01
changelog:
  - Type:cves
  - ID:CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365
  - SUG:NA
  - DESC:fix CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p03
changelog:
  - Type: BUG fix 
  - ID: NA
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel 
          postgresql-test-rpm-macros resolved conflicts


author: tenglei <tenglei@kylinos.cn> - 10.5-23.p05
changelog:
  - Type: bug#214211
  - ID: NA
  - SUG: NA
  - DESC: Remove libpq.so* to avoid file conflict with libpq package on loongarch64


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1.3.8b-3.p01
changelog:
  - Type:cves
  - ID:CVE-2024-57392
  - SUG:NA
  - DESC:fix CVE-2024-57392,and solve the loongarch compilation issue


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: songliyang <songliyang@kylinos.cn> - 3.14.0-9.p01
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Obsoletes protobuf2-emacs to fix install conflict error


author: songliyang <songliyang@kylinos.cn> - 3.14.0-9.p02
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Completely obsoletes protobuf2* to fix install conflict error


author: shenyangyang <shenyangyang4@huawei.com> - 12.2-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add provides of pulseaudio-libs-devel(aarch-64) needed by libmikmod-devel


author: gongxingliang <gongxingliang@kylinos.cn> - 3.6.0-2.p02
changelog:
  - Type: compile
  - ID: NA 
  - SUG: NA
  - DESC: fix build error due to hdf5 upgrade(patch1 patch2 patch3)


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Miro Hrončok <mhroncok@redhat.com> - 18.1.0-2
changelog:
  - Subpackages python2-zmq, python2-zmq-test have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Jochen Breuer <jbreuer@suse.de> - 18.1.0-3
changelog:
  - Providing python-pyzmq, since some packages are still relying on that.
    See: https://bugzilla.redhat.com/show_bug.cgi?id=1789889


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39.se.01
changelog:
  - Type: bugfix
  - ID: [BUG#193772]
  - SUG: NA
  - DESC: From: @wanghao
          移植kysec执行控制检查补丁
          add patch: python3-7.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add Patch9007-9008, fix CVE-2007-4559
  -      Add Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41.se.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
       CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
         CVE-2025-4330 CVE-2025-4435


author: Feng Jiang <jiangfeng@kylinos.cn> -2:4.1.0-64.p02
changelog:
  - Type: update
  - ID:   [TASK#158763]
  - SUG:  NA
  - DESC: Add support for virtio-gpu hardware video acceleration.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p03
changelog:
  - Type: Update
  - ID: [TASK#174977][TASK#170640][TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791 CVE-2023-3180 CVE-2023-0664 and CVE-2023-2861
  - 	accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - 	pci: assert configuration access is within bounds(CVE-2020-13791)
  - 	io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p04
changelog:
  - Type:update
  - ID: [TASK#181011]
  - SUG: NA
  - DESC: Add Hygon patches about encryption
  -       The latest kernel already supports the implementation of the VCPU topology of the Hygon platform, so remove  KYLIN-change-the-apicid-bitmap-for-kernel-to-get-the-socketid.patch.
  -       Fix the compilation issue that the function(kvm_arch_cpu_check_are_resettable) was no defined on the LoongArch architecture.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p05
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  -       change "sbss" to "ssbs" to fix this error.


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.0-64.p06
changelog:
  - Type: update
  - ID:   [TASK#193495]
  - SUG:  NA
  - DESC: Merge Phytium' Patch to support S5000c host-model


author: weishaokun <weishaokun@kylinos.cn> - 2:4.1.0-64.p07
changelog:
  - Type: update
  - ID:   [BUG#210849]
  - SUG:  NA
  - DESC: fix hygon bug that can not save virtual machines


author: wangguochun <wangguochun@kylinos.cn> - 2:4.1.0-64.p08
changelog:
  - Type: Bug
  - ID: [BUG#186999]
  - SUG: NA
  - DESC: fix unkown virtio-net-nic speed，set speed 10000Mb/s


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p10
changelog:
  - Type: update
  - ID: [TASK#224909]
  - SUG: NA
  - DESC: Fixed some issues supported by CSV/CSV2/CSV3
  -       fix the problem of the number of encrypted virtual machines supported by Haiguang No. 2 and No. 3
  -       fix migration-related issues


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p12
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: lizhanchun <lizhanchun@kylinos.cn> - 2:4.1.10-64.p16
changelog:
  - Type: Update
  - ID:   [TASK#352451]
  - SUG:  NA
  - DESC: Supporting inter-series thermal migration in Pythium.


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.10-64.p19
changelog:
  - Type: Update
  - ID:   [TASK#422831]
  - SUG:  NA
  - DESC: fix CVE-2023-3019/disbale pvrdma(deprecated upstream) to fix CVE-2023-1544


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.10-64.p20
changelog:
  - Type: Bugfix
  - ID:   [BUG#385783]
  - SUG:  NA
  - DESC: Forbid repeated device_del to fix hot-unplug issue


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.10-64.p22
changelog:
  - Type: Bugfix
  - ID:   [BUG#415279]
  - SUG:  NA
  - DESC: Enable blockdev support for copying across storage block devices


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.10-64.p23
changelog:
  - Type: Bugfix
  - ID:   [BUG#418249]
  - SUG:  NA
  - DESC: Fix integer left shift error in qcow2_alloc_cluster_link_l2()


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.39.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#231575]
  - SUG: NA
  - DESC: Fix typo in server-linearstore summary
          backport Patch01 to fix loongarch file not found error


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p01
changelog:
  - add diff from 1:4.8.7-46, diff:
  - add qt-everywhere-opensource-src-4.8.7-neokylin-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-atomic-mips64el.patch
  - add qt-everywhere-opensource-src-4.8.7-qmake-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-mips64r2.patch
  - modified:  assistant.desktop designer.desktop linguist.desktop qdbusviewer.desktop
  - (1:4.8.7-46)ori uri: http://10.1.110.123/download/iso/Euler/openeuler_ARM64/openeuler-2020-03-13-01-32-06/Software/aarch64/SRPMS/Packages/qt-4.8.7-46.oe1.src.rpm
  - (1:4.8.7-46)modified: http://10.1.123.237/kojifiles/packages/qt/4.8.7/46.ky10/src/qt-4.8.7-46.ky10.src.rpm


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: huayadong <huayadong@kylinos.cn> - 1:4.8.7-47.p11
changelog:
  - Type: bugfix
  - ID:   [TASK#220326]
  - SUG:  NA
  - DESC: add patch45: fix-that-filediolog-cannot-use-input-methods.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 5.11.1-22.p01
changelog:
  - Type: compile
  - ID:   NA
  - SUG:  NA
  - DESC: sync from 5.11.1-16.p02
          add Patch1001: 0001-Support-loongarch64.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 5.11.1-22.p02
changelog:
  - Type: compile
  - ID:   NA
  - SUG:  NA
  - DESC: Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: gaoyukun <gaoyukun@kylinos.cn> - 5.11.1-23.p01
changelog:
  - Type: compile
  - ID:   NA
  - SUG:  NA
  - DESC: sync from 5.11.1-16.p02
          add Patch9000: 0001-Support-loongarch64.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.8-1.p04
changelog:
  - Type:update
  - ID:[TASK#158206]
  - SUG:NA
  - DESC:Add Patch004, fix poll() on per_cpu trace_pipe_raw blocks indefinitely
  -      See also https://github.com/mchehab/rasdaemon/commit/6986d818e6d2c846c001fc7211b5a4153e5ecd11
  -      Enable-memory-ce-pfa, enable-memory-failure for aarch64 configure


author: jiangjixiang <jiangjixiang@kylinos.cn> - 0.6.8-1.p06
changelog:
  - Type:update
  - ID:[TASK#186413]
  - SUG:NA
  - DESC: backport patch from OE2003-SP4
      1.wait for file access.
      2.Modify recording Hisilicon common error data in the rasdaemon.
      3.fix incomplete diskerror log.
      4.fix possible but unlikely file descriptor leak.
      5.fix ras-mc-ctl.service startup failed when selinux is on.
      6.Fix return value type issue of read/write function from unistd.h.
      7.adapt to kernel ftrace ring buffer change.
      8.ras-events:quit loop in read_ras_event when kbuf data is broken.


author: lifeifei <lifeifei@kylinos.cn>
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.
         2.Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.11-1.p01
changelog:
  - Type:update
  - ID:[Task#540289]
  - SUG:NA
  - DESC:Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: liwei <liwei@kylinos.cn> - 4.15.1-53.p01.se.01
changelog:
  - Type:update
  - ID:[TASK#176491]
  - SUG:NA
  - DESC:add sm software package anti uninstallation
    add patch: rpm-add-sm-software-package-anti-uninstallation.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-53.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#176493]
  - SUG:NA
  - DESC:保持rpm安装文件原安全标记
  -       add patch rpm-remainoldtag-kysec.patch
  -       add patch rpm-fix-install-pkg-bw.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-53.p01.se.03
changelog:
  - Type:update
  - ID:[TASK#192265]
  - SUG:NA
  - DESC:修复rpm包关于bwlist的状态判断不对的问题
  -       add patch rpm-add-check-pkg-bw-sdk-status.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-54.p01.se.04
changelog:
  - Type:bugfix
  - ID:[Bug#210692]
  - SUG:NA
  - DESC:【应用安装控制】同时开启安装黑白名单，安装仅配置黑名单的软件包时提示语错误
  -       add patch: rpm-update-bw-notification.patch


author: litianhao <litianhao@kylinos.cn> - 4.15.1-54.p01.se.05
changelog:
  - Type:bugfix
  - ID:[Task#197801]
  - SUG:NA
  - DESC: 软件防卸载补充中文翻译
  -       add patch: rpm-add-spro-i18n.patch


author: yueyuankun<yueyuankun@kylinos.cn> - 8.2006.0-7.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - DESC:solve the problem of duplicate logs in /var/log/messages after restarting the system


author: wangshuo <wangshuo@kylinos.cn> - 8.2006.0-7.p04
changelog:
  - Type:bugfix
  - ID:[BUG#345111]
  - SUG:NA
  - DESC:Backport upstream patch, core bugfix potential segfault on busy systems
  -      Adjust rsyslog-pgsql BuildRequires to reslove compliation issues on loongarch


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: sunjialin <sunjialin@kylinos.cn> - 4.11.12-32.p01
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify Requires:libldb & Skip export LDFLAGS & Rebuild for libcrypt.so.1 on loongarch


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - SUG:NA
  - DESC:fix smbd, don't log success as error
         fix require satisfied libldb version for samba-client


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: sunjin <sunjin@kylinos.cn> 1.1.0-03
changelog:
  - Type:update
  - ID:[TASK#171432][Bug#188190][Bug#185175][Bug#188318][Bug#189677][Bug#190040][Bug#190217]
  - SUG:NA
  - DESC: 安全加固包走流程入库集成build03
  -       【安全加固】“禁止SSH自动登录”的功能和加固名称都需要做修改
  -       【安全加固】建议对同个加固项仅提供仅扫描和扫描并加固中的一种模式
  -       【安全加固】加固项“禁用printer服务”应修改为“禁用cups服务”
  -       【安全加固】【交互命令】导入、删除模板成功时建议给出提示
  -       【安全加固】【非交互命令】自定义参数导入测试-关闭系统不必要的端口为1个端口时。安全加固失败，再次加固程序崩溃
  -       【安全加固】设计文档中，“删除与设备运行、维护等工作无关的账号”加固项未归属在麒麟安全模板中


author: sunjin <sunjin@kylinos.cn> 1.1.0-04
changelog:
  - Type:update
  - ID:[TASK#173466][Bug#191449][Bug#190916][Bug#190845][Bug#190224][Bug#186483][Bug#186482][Bug#159670][Bug#191438][Bug#191590][Bug#192066][Bug#192552]
  -    [Bug#192583][Bug#192520][Bug#192492][Bug#192486][Bug#191774][Bug#191748][Bug#191732][Bug#191453][Bug#191364][Bug#191216][Bug#190537][Bug#190220]
  - SUG:NA
  - DESC: 【安全加固】build04入库
  -       【安全加固】模板中“禁用cups服务”加固项的英文描述需要修改，将“printer”修改为“cups”
  -       【安全加固】【潜在威胁】不存在vnStatsvg软件包，无法正确判断加固项状态 [用例#722537]
  -       【安全加固】加固重要文件，加固报告中存在“etc/shadow”，应为绝对路径
  -       【安全加固】安全加固界面创建的模板通过命令行导出后，无法再使用命令行导
  -       【安全加固】eu-objdump组件包含在elfutils包中，检查可调试组件未对该包进行检查
  -       【安全加固】eu-readelf组件包含在elfutils包中，检查可调试组件未对该包进行检查
  -       【系统安全】建议删除sync/shutdown/halt账户
  -       【安全加固】开启三元后，secadm用户导出加固模板至root目录，提示“该路径不存在”
  -       【安全中心】【安全加固】【交互命令】执行security-reinforce命令-模板功能-导入/导出模板后按ctrl+D进入死循环“请输入导入文件路径 >该模板文件不存在”
  -       【安全加固】strict模式下，root用户/审计用户执行扫描加固时，提示“普通用户没有加固权限”
  -       【安全加固】【非交互命令】安全用户导出模板至/root目录，提示“导出目录路径不存在”
  -       【安全加固】【安全服务】motd文件信息不符合要求时，ssh成功登录后Banner项仍为无需加固 [用例#722597]
  -       【安全加固】【安全服务】设置ssh登录前警告信息不符合要求时，扫描结果依然为无需加固 [用例#722596]
  -       【安全加固】【安全服务】加固后，telnet登录后警告信息语法错误 [用例#722599]
  -       【安全加固】【安全服务】设置telnet登录前警告信息满足条件仍被加固，且信息添加方式为追加 [用例#722598]
  -       【安全加固】"设置telnet登录前警告Banner"加固成功后没有生成issue.net文件
  -       【安全加固】【系统审计】auditd服务disable后，开启审计机制加固项扫描结果为无需加固 [用例#722486]
  -       【安全加固】/etc/motd内容为空，默认模板中“设置telnet登录后警告Banner”后执行扫描，没有扫描出风险
  -       【安全加固】模板中“禁止SSH免密登录”加固项标识需要修改
  -       【安全加固】“禁止SSH免密登录”加固项分类错误
  -       【安全加固】【非交互命令】导入模板 导入的文件为Log文件，服务崩溃
  -       【安全加固】【系统设置】禁止系统自动登录为待加固状态，扫描结果依然为无需加固 [用例#722545]  
  -       【安全加固】“删除除root之外UID为0的用户”加固项名称与加固项功能不一致


author: sunjin <sunjin@kylinos.cn> 1.1.0-05
changelog:
  - Type:update
  - ID:[TASK#175465][Bug#193345][Bug#193311][Bug#193200][Bug#192522][Bug#190709][Bug#194823][Bug#192801][Bug#192782][Bug#193372]
  - SUG:NA
  - DESC: 【安全加固】build05入库
  -       【安全加固】【安全服务】禁用ident服务和禁用bootps服务，实际实现与加固项名称不一致 [用例#722580]
  -       【安全加固】禁用不必要的系统服务和xinetd服务加固小项前，需加上大项分类名称
  -       【安全加固】加固项“限制FTP用户上传的文件所具有的权限”在未安装vsftpd包的情况下提示“需手动加固”
  -       【系统功能】三权模式下/etc/mail/aliases和/etc/aliases禁用不必要的别名，两次加固还原，第二次还原失败
  -       【安全加固】【潜在威胁】还原后删除潜在危险文件，再次扫描还原失败 [用例#722566]
  -       【安全加固】【潜在威胁】安全报告中检查可调试组件扫描结果缺少组件名称 [用例#722528]
  -       【安全加固】【密码强度】仅删除/etc/pam.d/system-auth文件中的参数，“加强口令的密码算法”加固项的扫描结果为“待加固” [用例#722544]
  -       【安全加固】【交互命令】输入导入路径时无法退出该界面
  -       【安全加固】【非交互命令】未使用过安全加固时，-o参数导出安全报告没有提示信息


author: sunjin <sunjin@kylinos.cn> 1.1.0-06
changelog:
  - Type:update
  - ID:[TASK#177664][Bug#196937][Bug#196587][Bug#196503][Bug#195908][Bug#195903][Bug#195885][Bug#194823][Bug#190709][Bug#185466]
  - SUG:NA
  - DESC: 【安全加固】build06入库
  -       【安全加固】密码复杂度设置更严格时，扫描结果依然为待加固 [用例#722800]    
  -       【安全加固】system-auth和login.defs文件中sha512配置均被注释后，“加强口令密码算法”扫描结果为无需加固 [用例#722544]    
  -       【安全加固】限制/boot/efi/EFI/kylin/grub.cfg文件权限加固项名称与详情描述不符合规范 [用例#722786] 
  -       【安全加固】设置守护进程的umask值为0777，依然会被加固 [用例#722547]  
  -       【安全加固】“禁止/var/log日志文件全局可写”加固后文件权限为640，建议调整为644 [用例#722823]    
  -       【安全加固】【系统设置】“禁用ctrl+alt+del组合键”加固后状态为加固成功，实际tty界面重启生效 [用例#722610]      
  -       【安全加固】【潜在威胁】安全报告中检查可调试组件扫描结果缺少组件名称 [用例#722528]     
  -       【安全加固】【潜在威胁】还原后删除潜在危险文件，再次扫描还原失败 [用例#722566]       
  -       【安全加固】导出的安全报告格式没有对齐，显示不美观


author: sunjin <sunjin@kylinos.cn> 1.1.0-07
changelog:
  - Type:update
  - ID:[TASK#185079][Bug#198528][Bug#198451][Bug#197969][Bug#197361][Bug#197220][Bug#197195][Bug#196531][Bug#190226][Bug#184956][Bug#202688][Bug#201401]
  - SUG:NA
  - DESC: 【安全加固】build07入库
  -       【安全加固】设置账户锁定项进行加固后，还原失败，ssh密码验证失败
  -       【安全加固】安全报告中，禁止/var/log日志文件全局可读写描述信息未同步为可读写 [用例#732916]  
  -       【安全加固】设置守护进程的umask值该项进行加固后，再次扫描依然提示需要加固  
  -       【安全加固】系统环境满足无需加固，开启审计机制加固项仍显示待手动加固 [用例#722488]       
  -       【安全加固】限制日志文件权限设置更严格时，依然会被加固 [用例#722788]   
  -       【安全加固】限制FTP用户上传的文件所具有的权限更严格时，依然会被加固 [用例#722790]      
  -       【安全加固】限制重要目录或文件权限加固时，权限更严格依然会被加固 [用例#722786]     
  -       【安全加固】加固箱限制SSH服务可访问源，SP4服务器不支持此功能                
  -       【安全加固】无法导出安全报告明细
  -       【安全加固】检查不安全组件加固项详情描述中未添加组件名
  -       【安全加固】【系统设置】设置系统引导管理器密码扫描结果为等待加固，重启系统进入grub依然需要输入密码
  -       添加补丁security-reinforce-update-20231122.patch


author: sunjin <sunjin@kylinos.cn> 1.1.0-08
changelog:
  - Type:update
  - ID:[Bug#197220][Bug#203602][Bug#203676]
  - SUG:NA
  - DESC: 【安全加固】build08入库
  -       【安全加固】限制日志文件权限设置更严格时，依然会被加固 [用例#722788]
  -       【安全加固】【非交互命令】未使用过安全加固可导出安全报告 [用例#722452]  
  -       【安全加固】【系统审计】开启审计机制加固项还原失败，同时导致加固服务停止 [用例#722486]


author: sunjin <sunjin@kylinos.cn> 1.1.0-09
changelog:
  - Type:update
  - ID:[Bug#206108][Bug#203740][Bug#204318]
  - SUG:NA
  - DESC: 【安全加固】build09入库
  -       【安全加固】设置账户登录失败锁定功能加固逻辑错误 [用例#722810]                          
  -       【安全加固】当扫描过程存在对参数的判断时，参数值为空时扫描卡死
  -       【安全加固】禁用ctrl+alt+del组合键后在tty界面重启，系统会卡住


author: sunjin <sunjin@kylinos.cn> 1.1.0-10
changelog:
  - Type:update
  - ID:[Task#192717]
  - SUG:NA
  - DESC: 【安全加固】build10入库
  -       【安全加固】因tripwire软件包不再维护，去掉检查文件系统和磁盘完整性校验加固项


author: sunjin <sunjin@kylinos.cn> 1.1.0-12
changelog:
  - Type:update
  - ID:[Task#533611][Task#465523][BUG#396583]
  - SUG:NA
  - DESC: 【安全加固】银联poc测试，build12入库
  -	银联poc测试，修改checkpasswd逻辑
  -   合并其他分支的提交，修复了一些bug
  -   修复[BUG#396583]【银联poc】【sp4】【安全加固】【安全扫描】安全扫描过程中，点击右上角X号，关闭安全中心不操作弹框，扫描完成后再次扫描安全加固功能异常
  -   添加补丁security-reinforce-update-20250919.patch


author: songjuntao <songjuntao@kylinos.cn> - 15.6-9.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:open enable_sm status and add smx algorithm into db check allowlist function


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-9.p09
changelog:
  - Type:bugfix
  - ID:BUG#216408
  - SUG:secure boot
  - DESC:add BOOTLOONGARCH.EFI/BOOTLOONGARCH64.EFI for loongarch64


author: majianhan <majianhan@kylinos.cn> - 15.6-9.p12
changelog:
  - Type:CVE
  - ID:TASK#423385
  - SUG:NA
  - DESC: 1. Patch52 - Fix issue where second_stage was set to an empty
                       string in parse_load_option.
          2. Patch53 - Always clear SbatLevel when Secure Boot is diabled.
          3. Fix CVEs:
             CVE-2023-2650     CVE-2023-0465
             CVE-2024-0727     CVE-2023-3446
             CVE-2023-5678     CVE-2023-3817
             CVE-2023-0464     CVE-2018-0737
             CVE-2021-23840    CVE-2023-40546
             CVE-2023-40547    CVE-2023-40548
             CVE-2023-40549    CVE-2023-40550
             CVE-2023-40551


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: lijian <lijian2@kylinos.cn> - 1:1.1.0-9.p02
changelog:
  - Type:cves
  - ID:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC:fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: mengchaoming<mengchaoming@kylinos.cn> -2.2.2-15.p04
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream patch06->patch09
  -delete duplicate file sssd-example.conf
  -fix the sssd_be process coredump
  -sssctl/sssctl_domains.c: null dereference fixed
  -fix coredump in sssd.service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 233-6.p03
changelog:
  - Type:bugfix
  - ID:[BUG#385837]
  - SUG:NA
  - DESC: Fix crash issue. and Increase max PID and CPU constants


author: huyubiao <huyubiao@huawei.com> - 243-64
changelog:
  - add backport-pstore-fix-use-after-free.patch
        backport-udev-also-logs-file-permission.patch
        backport-core-Fix-setting-StatusUnitFormat-from-config-files.patch
        backport-udevadm-missing-initialization-of-descriptor.patch
        backport-udevadm-use-usec_add.patch
        backport-shared-install-fix-error-codes-returned-by-install_c.patch
        backport-udevadm-trigger-do-not-propagate-EACCES-and-ENODEV.patch
        backport-pstore-rework-memory-handling-for-dmesg.patch
        backport-udev-fix-memleak-caused-by-wrong-cleanup-function.patch
        backport-network-ndisc-do-not-drop-all-prefixes-when-a-prefix.patch
        backport-nspawn-fix-handling-of-console-help.patch
        backport-core-job-fix-breakage-of-ordering-dependencies-by-sy.patch
        backport-sd-device-enumerator-do-not-return-error-when-a-devi.patch
        backport-udev-ignore-ENOENT-when-chmod_and_chown-device-node.patch
        backport-udev-fix-error-code-in-the-log-message.patch
        backport-udev-do-not-append-newline-when-write-attributes.patch
        backport-udevd-wait-for-workers-to-finish-when-exiting.patch
        backport-verify-fix-segmentation-fault.patch
        backport-core-path-serialize-the-previous_exists-state.patch
        backport-core-path-fix-spurious-triggering-of-PathExists-on-r.patch
        backport-udevadm-ignore-EROFS-and-return-earlier.patch
        backport-udevd-don-t-use-monitor-after-manager_exit.patch
        backport-hibernate-resume-generator-wait-infinitely-for-the-r.patch
        backport-sd-event-refuse-running-default-event-loops-in-any-o.patch
        backport-time-util-deal-with-systems-where-userspace-has-64bi.patch
        backport-time-util-also-use-32bit-hack-on-EOVERFLOW.patch
        backport-test-condition-fix-group-check-condition.patch
        backport-udev-do-not-use-exact-match-of-file-permission.patch
        backport-network-udev-use-uint64_t-for-bit-rate.patch
        backport-unit-add-AF_ALG-to-systemd-networkd.service.patch
        backport-Fix-generator-name-in-hibernate-resume-generator-s-d.patch
        backport-udevadm-show-more-error-message-during-exporting-dat.patch


author: huyubiao <huyubiao@huawei.com> - 243-66
changelog:
  - add backport-journalctl-allow-running-vacuum-on-remote-journals-t.patch
        backport-systemctl-skip-non-existent-units-in-the-cat-verb.patch
        backport-journalctl-implement-facility-foo.patch
        backport-journalctl-show-duplicate-entries-if-they-are-from-t.patch
        backport-fix-journal-regression.patch
        backport-fs-util-when-calling-chase_symlinks-with-root-path-l.patch
        backport-test-add-test-for-the-non-resolving-of-chase_symlink.patch
        backport-fs-util-make-sure-we-output-normalized-paths-in-chas.patch
        backport-test-make-sure-chase_symlink-returns-normalized-path.patch
        backport-test-fix-rename_noreplace-test.patch
        backport-logind-check-PolicyKit-before-allowing-VT-switch.patch
        backport-errno-ETIMEDOUT-is-also-a-connection-error.patch
        backport-sd-bus-break-the-loop-in-bus_ensure_running-if-the-b.patch


author: huyubiao <huyubiao@huawei.com> - 243-67
changelog:
  - add backport-core-make-sure-we-don-t-get-confused-when-setting-TE.patch
        backport-mount-setup-change-the-system-mount-propagation-to-s.patch
        backport-core-transition-to-FINAL_SIGTERM-state-after-ExecSto.patch


author: hanjinpeng <hanjinpeng@kylinos.cn> - 243-67.p01
changelog:
  - Type: update
  - ID:   [TASK#186410]
  - SUG:  NA
  - DESC:  1. add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
              Change NTP server.
           2. add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
              Modify ctrl+alt+F2 switch to init5 stuck problem
           3. add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
              fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black,
              the cursor in the upper left corner flickers, and the graphical interface cannot be switched
           4. add patch10004: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch
              fix selinux denied error for systemctl when lsm stacking is enable
           5. add patch10010: 0001-Prevent-excessive-proc-1-mountinfo-reparsing.patch
              fix create pod container fail and systemd timeout (rhbz #1819868)
           6. add patch10020: vconsole-setup-downgrade-log-message-when-setting-font-fails.patch
              Fix log message error when setting font fails
           7. add patch20001: 0001-Kylin-add-systemd-243-loongarch64-support.patch
              add patch20002: 0002-Kylin-fix-ctrl-alt-F2-switch-to-init5-stuck-problem-.patch
              support loongarch64, Remove gnu-efi check in loongarch64


author: yinyongkang <yinyongkang@kylinos.cn> - 243-67.p02
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch10030: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 243-67.p04
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SUG:NA
  - DESC:add backport-donot-open-CD-rom-use-exclusive-mode.patch，for ejecjt button


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p05
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p06
changelog:
  - Type:bugfix
  - ID:[Bug#223633]
  - SUG:NA
  - DESC: Revert backport-udev-make-algorithm-that-selects-highest-priority-de.patch
          Revert patch to fix update device symlinks issue (similar #1942299)


author: wangshuo <wangshuo@kylinos.cn> - 243-67.p07
changelog:
  - Type:bugfix
  - ID:[TASK#329354]
  - SUG:NA
  - DESC:add patch rc-local-order-after-network-online.target.patch
         fix rc-local service start failed


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p09
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p10
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: lijian<lijian01@kylinos.cn> - 243-67.p11
changelog:
  - Type:update
  - ID:[TASK#455059]
  - SUG:NA
  - DESC: fix wrong suffix assignment on putting dead process.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p12
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: andy <liuyang01@kylinos.cn> - 243-67.p13
changelog:
  - Type:bugfix
  - ID:[TASK#541163]
  - SUG:NA
  - DESC: backport upstream patch: Avoid spurious realization of unit cgroups


author: hanjinpeng <hanjinpeng@kylinos.cn> - 1.10.1-8.p01
changelog:
  - Type: update
  - ID:   [TASK#186410]
  - SUG:  NA
  - DESC: add patch 101：remote link vncserver cannot show desktop, log message error
          add patch 102: fix the autokill parameter cannot creat port
          fix fcitx cannot be switched
          add patch2001: Improve vnc password complexity and dictionary checking  [TASK#14271]
          submission error , v10-sp2-updates rebuild
          add patch2002: add tigervnc-add-translation-for-hk.patch [TASK#185071]


author: bianxiuning <bianxiuning@kylinos.cn> - 5.0-5.p01
changelog:
  - Type:update
  - ID:[176526]
  - SUG:NA
  - DESC:
  -       1.add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch
  -	2.add 0001-bugfix-tpm-fix-policy-test-case-error.patch provided by HYGON


author: mengchaoming<mengchaoming@kylinos.cn> -5.0-5.p02
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream:remove rpath and runpath of exec files


author: zhangfan <zhangfan4@kylinos.cn> - 5.0-5.p04
changelog:
  - Type:update
  - ID:[TASK#374825]
  - SUG:NA
  - DESC: 1.添加TCM测试case
          2.修复test_tcm2_capability.sh测试case的错误


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-2.p01
changelog:
  - Type:update
  - ID:TASK#175727
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.9.0-5.p01
changelog:
  - Type: updates
  - ID: TASK#186442
  - SUG: NA
  - DESC: Sync 2.9.0-3.p02 patch: fix unsinicized issues of zh_HK and zh_CN


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: peijiankang <peijiankang@kylinos.cn> - 0.3.62-1s2.p26
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add ukui-screensaver-add-translations-for-hk-and-tw.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p28
changelog:
  - Type: bugfix
  - ID  : [BUG#520853]
  - SUG : NA
  - DESC: add Patch36:ukui-screensaver-0.3.62-fix-VirtualKeyboard-no-underline.patch


author: yanglu<yanglu72@h-partners.com> - 1.11.0-6
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: liudingyao <liudingyao@kylinos.com> - 2.3.7-3.p01
changelog:
  - Type:update
  - ID:[TASK#408427]
  - SUG:NA
  - DESC:Change h1 to p01 to resolve the repository version issue


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.08
changelog:
  - Type:update
  - ID:[BUG#198326/199312]
  - SUG:NA
  - add Patch0016: usbguard-log.patch
  - DESC: 198326 【USBGuard】首次开启USB设备管控后，状态依然显示为关闭
  - DESC: 199312 【USBGuard】USB设备管控事件通知功能可以同时打开多个


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.09
changelog:
  - Type:update
  - ID:[BUG#184790/199308]
  - SUG:NA
  - add Patch0017: usbguard-dmsw.patch
  - DESC: 184790 【usbguard】终端执行usbguard-control命令不会出现usbguard守护进程，需要在开始菜单中手动启用
  - DESC: 198326 【USBGuard】首次开启USB设备管控后，状态依然显示为关闭
  - DESC: 199308 【USBGuard】事件通知功能，审计和普通用户无法打开


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.10
changelog:
  - Type:update
  - ID:[BUG#204530/204681/205580]
  - SUG:NA
  - add Patch0018: usbguard-interface.patch
  - DESC: 204530 【安全SDK】首次执行授权失败
  - DESC: 204681 【安全SDK】某一条设备管控策略查询返回值错误
  - DESC: 205580 【usbguard】使用yum install命令安装完usbguard-applet-qt包后，开始菜单没有usbguard的启动项


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.11
changelog:
  - Type:update
  - ID:[BUG#204261/205225/205580/206385]
  - SUG:NA
  - add Patch0019: usbguard-pol.patch
  - DESC: 204261 【USBGuard】放行被拦截的usb设备，弹出再拔出设备后选择查看策略列表，程序崩溃
  - DESC: 205225 【USBGuard】存在同vid/pid设备时，修改策略时判断错误
  - DESC: 205580 【usbguard】使用yum install命令安装完usbguard-applet-qt包后，开始菜单没有usbguard的启动项
  - DESC: 206385 【安全SDK】通过设备信息删除不存在的设备管控策略，返回值为成功


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.12
changelog:
  - Type:update
  - ID:[BUG#184824/196529/210888]
  - SUG:NA
  - add Patch0020: usbguard-lines.patch
  - DESC: 184824 【usbguard】修改策略界面变化终端窗口大小后，提示语会变成多行显示
  - DESC: 196529 【usbguard】usbguard-control交互命令的终端窗口拉伸再缩小，交互命令的字符会出现错乱或者多行重复。
  - DESC: 210888 【USBGuard】事件通知弹框可以透过锁屏界面
  - 更改命令kylin_usbguard


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.13
changelog:
  - Type:update
  - ID:[BUG#211651/211652/211663/211667/211668/211698/211926/211928]
  - SUG:NA
  - add Patch0021: usbguard-modify-add-rule-func.patch
  - DESC: 211651 【安全SDK】查询不存在的设备管控策略，提示段错误
  - DESC: 211652 【安全SDK】某一条设备管控策略查询，提示段错误
  - DESC: 211663 【SP4-B11】【loongarch】【安全SDK】整条设备管控策略添加同一个设备的放行、拦截、禁止，策略同时存在
  - DESC: 211667 【SP4-B11】【loongarch】【安全SDK】整条设备管控策略添加-放行不生
  - DESC: 211668 【SP4-B11】【loongarch】【安全SDK】整条设备管控策略添加-禁止策略不生效
  - DESC: 211698 【SP4-B11】【安全SDK】整条设备管控策略添加-拦截不生效
  - add Patch0022: usbguard-crash.patch
  - DESC: 211926 【SP4-B12】【USBGuard】导入格式正确的设备策略报错
  - DESC: 211928 【SP4-B12】【USBGuard】添加放行设备策略时，输入部分内容后点击左箭头回车报错


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.14
changelog:
  - Type:update
  - ID:[BUG#210875]
  - SUG:NA
  - add Patch0023:usbguard-addrule.patch
  - DESC: 210875 【USBGuard】已接入系统的设备策略不显示名称/序列号/接口信息


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.15
changelog:
  - Type:update
  - ID:[BUG#210875]
  - SUG:NA
  - add Patch0024:     usbguard-intf-err.patch
  - DESC: 210875 【USBGuard】已接入系统的设备策略不显示名称/序列号/接口信息


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.16
changelog:
  - Type:update
  - ID:[任务#533115]
  - SUG:NA
  - add Patch0025:     usbguard-hid.patch
  - DESC: 533115 [GF-法文-版本集成]服务器版usbguard的适配:首次安装管控默认关闭;默认放行键鼠和hub设备


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 0.7.2-7.se.17
changelog:
  - Type:update
  - ID:[BUG#421057]
  - SUG:NA
  - add Patch0026:     usbguard-restore.patch
  - DESC:421057[722-法文服务器安全]关闭usbguad管控总开关,被拦截的u盘依然无法使用,需要重启系统才能使用u盘


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-13.p01
changelog:
  - Type:updates
  - ID:[TASK#186460]
  - SUG:NA
  - DESC:sync community patches
         backport-column-segmentation-fault-on-invalid-unicode-input-passed-to-s-option.patch
         backport-su-offer-usernames-rather-than-files.patch
         backport-Fix-memory-leaks-in-the-chcpu.patch
         backport-logger-fix-prio-prefix-doesnot-use-priority-default.patch
         backport-mcookie-fix-infinite-loop-when-use-f.patch
         backport-logger-realloc-buffer-when-header-size-changed.patch
         backport-logger-fix-size-use-for-stdin.patch
         backport-vipw-flush-stdout-before-getting-answer.patch
         backport-chfn-Make-readline-prompt-for-each-field-on-a-separate-line.patch
         backport-chfn-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-chsh-fflush-stdout-before-reading-from-stdin.patch
         backport-login-Restore-tty-size-after-calling-vhangup.patch
         backport-lsblk-fix-endless-loop-if-device-specified-more-than-once.patch
         backport-libblkid-avoid-buffer-overflow-in-ocfs-superblock-parsing.patch
         backport-libblkid-use-checksum-for-jmicron.patch
         backport-libblkid-cleanup-indentation.patch
         backport-libblkid-fix-jmicron-checksum-and-LE-to-CPU.patch
         backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch
         backport-prlimit-fix-optional-arguments-parsing.patch
         modify-rescuemode-chinese-error.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-14.p01
changelog:
  - Type:bugfix
  - ID:[BUG#213337]
  - SUG:NA
  - DESC: sync community, fix the problem of abnormal display of model name


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-14.p02
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-14.p04
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-14.p05
changelog:
  - Type:bugfix
  - ID:[TASK#497341]
  - SUG:NA
  - DESC:add patch:backport-libfdisk-dos-fix-default-partition-start.patch
         backport-tests-sfdisk-fill-correctly-gaps-if-default-start-re.patch
         backport-libfdisk-fix-last-free-sector-detection-if-partition.patch
         fix default partition offset creates overlapping partitions


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-15
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-21
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: xiejing <xiejing@kylinos.cn> - 2:9.0-22.p01
changelog:
  - Type: NA
  - ID: [Task#186447]
  - SUG: NA
  - DESC: 1)移植敏感词修改和zh_HK繁体字支持的补丁
  -	2)移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-22.p02
changelog:
  - Type:cves
  - ID:CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: houhongxun <houhongxun@kylinos.cn> - 0.28.2-14.p01
changelog:
  - Type:bugfix
  - ID  :[Bug#203586]
  - SUG :NA
  - DESC:add Patch6:0001-vte-swallow-hyperlink-control-sequence-and-make-it-n.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.28.2-14.p02
changelog:
  - Type:bugfix
  - ID  :[TASK#532381]
  - SUG :NA
  - DESC:add Patch7: 0002-vte-fix-max-bytes-mate-terminal.patch


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: Like<like@kylinos.cn> - 1.51.06-2.p01
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: Reference  1.51.06-1.p01 modify, splits sub packages client,c++,client++,apps


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.51.06-2.p04
changelog:
  - Type:cves
  - Id:TASK#480193
  - SUG:NA
  - DESC:backport CVE-2024-8176 patch and sync v11 modify to remove duplicate man file in xml-rpc-c-apps packages


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Zhenneng Li <lizhenneng@kylinos.cn> - 19.1.0-2.p02
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: peijiankang <peijiankang@kylinos.cn> - 1.20.8-23.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: sync from 1.20.8-19.p02
          Add ljmcore driver support
  	modify generic-hardened-ld to kylin/kylin-hardened-ld
  	fix alignment error
  	add multi gl support
  	add sietium driver support
  	add inno and x100 support


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-23.p03
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-23.p05
changelog:
  - Type: CVE
  - ID:   [TASK#453291]
  - SUG:  NA
  - DESC: fix CVE-2024-31080, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083


author: lichenguang <lichenguang@kylinos.cn> - 0.2.35-9.p02
changelog:
  - Type:cves
  - ID: CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177
  - SUG:NA
  - DESC: fix CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177


