# changelog

author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.41.v2207
changelog:
  - Revert "bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode" (yangfeng) [task:345763, task:351327]
  - ocfs2: fix unexpected zeroing of virtual disk (Chi Zhiling) [task:335993]
  - udp_tunnel: add the ability to hard-code IANA VXLAN (Jakub Kicinski) [task:334943]
  - net: fix kabi broken in struct net_device (taowei) [task:334943]
  - net: fix kabi broken in struct udp_tunnel_info (taowei) [task:334943]
  - udp_tunnel: add central NIC RX port offload infrastructure (Jakub Kicinski) [task:334943]
  - RDMA/hns: Fix UAF for cq async event (Chengchang Tang) [task:330520] {CVE-2024-38545}
  - RDMA/hns: Delete unnecessary callback functions for cq (Yixian Liu) [task:344307]
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [task:345741] {CVE-2024-41035}
  - USB: core: add endpoint-blacklist quirk (Johan Hovold) [task:345741] {CVE-2024-41035}
  - usb: core: config: using bit mask instead of individual bits (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - usb: core: config: fix validation of wMaxPacketValue entries (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 (Alan Stern) [task:345741] {CVE-2024-41035}
  - ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [task:330288] {CVE-2024-38588}
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) [task:330288]
  - RDMA/hns: Fix deadlock on SRQ async events. (Chengchang Tang) [task:344307] {CVE-2024-38591}
  - net/sched: fix kabi change in struct Qdisc (Zhengchao Shao) [task:217588] {CVE-2024-27010, CVE-2024-27010}
  - net/sched: Fix mirred deadlock on device recursion (Eric Dumazet) [task:217588] {CVE-2024-27010}
  - drm/vc4: hdmi: Unregister codec device on unbind (Maxime Ripard) [task:344615] {CVE-2022-48852}
  - tcp: Fix listen() regression in 4.19.270 (Kuniyuki Iwashima) [task:166857, bug:253275]
  - net: fix kabi broken in struct dst_ops (taowei) [task:200581]
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell) [task:200581] {CVE-2023-52340}
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: add a route cache full diagnostic message (Peter Oskolkov) [task:200581] {CVE-2023-52340}
  - net: fix kabi broken in struct netns_ipv6 (taowei) [task:200581]
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [task:330544] {CVE-2024-38538}
  - scsi: lpfc: Move initialization of phba->poll_list earlier to avoid crash (Ewan D. Milne) [task:167824, bug:239957]
  - bpf, sockmap: Do not ignore orig_len parameter (Eric Dumazet) [task:218786]
  - bpf, sockmap: Fix double bpf_prog_put on error case in map_link (John Fastabend) [task:218786]
  - bpf, sockmap: Attach map progs to psock early for feature probes (John Fastabend) [task:218786]
  - net, sockmap: Don't call bpf_prog_put() on NULL pointer (Alex Dewar) [task:218786]
  - bpf, sockmap: Allow skipping sk_skb parser program (John Fastabend) [task:218786]
  - bpf, sockmap: Check skb_verdict and skb_parser programs explicitly (John Fastabend) [task:218786]
  - net_sched: walk through all child classes in tc_bind_tclass() (Cong Wang) [task:218825]
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [task:346955] {CVE-2024-42228}
  - RDMA/restrack: Fix potential invalid address access (Wenchao Hao) [task:345671] {CVE-2024-42080}
  - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (John Garry) [task:346675] {CVE-2022-48792}
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel) [task:341503]
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel) [task:341503] {CVE-2023-52887}
  - can: j1939: extend UAPI to notify about RX status (Oleksij Rempel) [task:341503]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Oleksij Rempel) [task:341503]
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [task:345299] {CVE-2024-39494}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - smb: client: fix potential UAF in cifs_stats_proc_write() (Paulo Alcantara) [task:221999] {CVE-2024-35868}
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara) [task:221987] {CVE-2024-35865}
  - smb: client: fix potential UAF in is_valid_oplock_break() (Paulo Alcantara) [task:327836] {CVE-2024-35863}
  - scsi: pm8001: Fix use-after-free for aborted TMF sas_task (John Garry) [task:346413] {CVE-2022-48791}
  - scsi: pm80xx: Fix TMF task completion race condition (Igor Pylypiv) [task:346413] {CVE-2022-48791}
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Jose E. Marchesi) [task:345369] {CVE-2024-42161}
  - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (Andrii Nakryiko) [task:345369]
  - mmc: davinci: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:347147] {CVE-2024-39484}
  - mmc: davinci_mmc: Convert to platform remove callback returning void (Yangtao Li) [task:347147]
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [task:347055] {CVE-2024-42115}
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [task:347059] {CVE-2024-42223}
  - ext4: do not create EA inode under buffer lock (Jan Kara) [task:347085] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Jan Kara) [task:347085]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Li Zhong) [task:347085]
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani) [task:166857]
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [task:347093] {CVE-2024-42090}
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) [task:347095] {CVE-2022-48834}
  - usb: usbtmc: Fix memory leak in usbtmc_ioctl_request (Guido Kiener) [task:347095]
  - usb: usbtmc: Add ioctl for generic requests on control (Guido Kiener) [task:347095]
  - xfs: add bounds checking to xlog_recover_process_data (lei lu) [task:347089] {CVE-2024-41014}
  - kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [task:347091] {CVE-2024-39480}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima) [task:347115] {CVE-2024-41041}
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF (Saurav Kashyap) [task:347117] {CVE-2022-48823}
  - scsi: qedf: Modify flush routine to handle all I/Os and TMF (Shyam Sundar) [task:347117]
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [task:347123] {CVE-2024-41015}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [task:347125] {CVE-2024-42105}
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [task:347131] {CVE-2024-41097}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [task:347135] {CVE-2024-40961}
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [task:346963] {CVE-2024-42145}
  - mm: avoid overflows in dirty throttling logic (Jan Kara) [task:346909] {CVE-2024-42131}
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [task:346915] {CVE-2024-42232}
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [task:344619] {CVE-2024-42148}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [task:345121] {CVE-2024-39506}
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [task:344571] {CVE-2024-42087}
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [task:344449] {CVE-2024-40902}
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [task:345297] {CVE-2024-42143}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [task:345307] {CVE-2024-39488}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [task:345309] {CVE-2024-41072}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [task:345313] {CVE-2024-40959}
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [task:345315] {CVE-2024-39489}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [task:345317] {CVE-2024-40912}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [task:345415] {CVE-2024-42236}
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [task:345669] {CVE-2024-41059}
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [task:345679] {CVE-2024-42086}
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [task:345675] {CVE-2024-39509}
  - net: hns3: fix kernel crash problem in concurrent scenario (Yonglong Liu) [task:345677] {CVE-2024-39507}
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345695] {CVE-2024-40987}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [task:345697] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [task:345703] {CVE-2024-42154}
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [task:345711] {CVE-2024-42076}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [task:345717] {CVE-2024-42094}
  - jfs: don't walk off the end of ealist (lei lu) [task:345721] {CVE-2024-41017}
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Ian Ray) [task:345787] {CVE-2024-42253}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [task:346897] {CVE-2024-41095}
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [task:345765] {CVE-2024-42104}
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Martin KaFai Lau) [task:345763] {CVE-2024-42063}
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [task:345779] {CVE-2024-42101}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju) [task:345789] {CVE-2024-40984}
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [task:345799] {CVE-2024-42124}
  - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (Saurav Kashyap) [task:345799]
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345729] {CVE-2024-40988}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [task:345321] {CVE-2024-42106}
  - ax25: Fix refcount imbalance on inbound connections (Lars Kellogg-Stedman) [task:346363] {CVE-2024-40910}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [task:346361] {CVE-2024-39493}
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [task:346375] {CVE-2024-42089}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [task:346377] {CVE-2024-41098}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [task:346373] {CVE-2024-40904}
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [task:345287] {CVE-2024-40943}
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [task:346395] {CVE-2024-42157}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [task:346387] {CVE-2024-40960}
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [task:346391] {CVE-2024-40932}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [task:346417] {CVE-2024-40941}
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao) [task:346665] {CVE-2024-41005}
  - net: make sure napi_list is safe for RCU traversal (Jakub Kicinski) [task:346665]
  - ata: libata-core: Fix double free on error (Niklas Cassel) [task:346673] {CVE-2024-41087}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [task:346393] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski) [task:346393]
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [task:346905] {CVE-2024-41089}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (Alexander Stein) [task:346895] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (Carlos Song) [task:346895]
  - i2c: imx-lpi2c: use bulk clk API (Peng Fan) [task:346895]
  - tipc: fix kernel panic when enabling bearer (Tung Nguyen) [task:346901] {CVE-2022-48865}
  - tipc: fix NULL pointer dereference in tipc_disc_rcv() (Tuong Lien) [task:346901]
  - tipc: add reference counter to bearer (Tuong Lien) [task:346901]
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [task:346925] {CVE-2024-40981}
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [task:346937] {CVE-2024-42153}
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [task:346943] {CVE-2024-39475}
  - drm/vc4: Fix deadlock on DSI device attach error (Padmanabha Srinivasaiah) [task:346939] {CVE-2022-48826}
  - drm/vc4: dsi: Only register our component once a DSI device is attached (Maxime Ripard) [task:346939]
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [task:346961] {CVE-2024-42119}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) [task:346949] {CVE-2024-42102}
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [task:346967] {CVE-2024-42224}
  - ocfs2: fix DIO failure due to insufficient transaction credits (Jan Kara) [task:346985] {CVE-2024-42077}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Sagi Grimberg) [task:346989] {CVE-2024-42152}
  - nvmet: update AEN list and array at one place (Daniel Wagner) [task:346989]
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [task:346993] {CVE-2024-40942}
  - ftruncate: pass a signed offset (Arnd Bergmann) [task:346997] {CVE-2024-42084}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [task:347011] {CVE-2024-39499}
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [task:347013] {CVE-2024-41044}
  - ppp: ensure minimum packet size in ppp_write() (Eric Dumazet) [task:160493]
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [task:347023] {CVE-2024-41068}
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [task:347025] {CVE-2024-40978}
  - mISDN: Fix memory leak in dsp_pipeline_build() (Alexey Khoroshilov) [task:347035] {CVE-2022-48863}
  - mISDN: Remove obsolete PIPELINE_DEBUG debugging information (Zhen Lei) [task:347035]
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [task:347041] {CVE-2024-42097}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [task:347027] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle)) [task:347027]
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle)) [task:347027]
  - net: relax socket state check at accept time. (Paolo Abeni) [task:341253] {CVE-2024-36484}
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park)
  - nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() (Trond Myklebust) [task:334950]
  - nfsd: minor 4.1 callback cleanup (Trond Myklebust) [task:334950]
  - Bluetooth: Fix slab-out-of-bounds Read in hci_le_ext_adv_report_evt (luoxuanqiang) [task:218812]
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) [task:337725] {CVE-2023-52885}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [task:222101] {CVE-2023-52752}
  - crypto: af_alg - get rid of alg_memory_allocated (Eric Dumazet) [task:341427] {CVE-2022-48781}
  - PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner) [bug:243223]
  - fanotify: Avoid softlockups when reading many events (Jan Kara) [task:340889]
  - epoll: be better about file lifetimes (Linus Torvalds) [task:330566] {CVE-2024-38580}
  - xfs: fix inode allocation block res calculation precedence (Brian Foster) [task:334329]
  - i2c: acpi: Unbind mux adapters before delete (Hamish Martin) [task:332220] {CVE-2024-39362}
  - i2c: add fwnode APIs (Russell King (Oracle)) [task:332220]
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) [task:330358] {CVE-2022-48734}
  - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana) [task:158034]
  - btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana) [task:158034]
  - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang) [task:330358] {CVE-2022-48734}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain) [task:330496] {CVE-2024-38607}
  - ALSA: Fix deadlocks with kctl removals at disconnection (Takashi Iwai) [task:330474] {CVE-2024-38600}
  - btrfs: fix deadlock between quota disable and qgroup rescan worker (Shin'ichiro Kawasaki) [task:330358] {CVE-2022-48734}
  - btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move ulist allocation out of transaction in quota enable (David Sterba) [task:330358] {CVE-2022-48734}
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Niklas Neronin) [task:223058] {CVE-2023-52781}
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [task:330558] {CVE-2024-36270}
  - netfilter: use in_dev_for_each_ifa_rcu (Florian Westphal) [task:330558]
  - net: inetdevice: provide replacement iterators for in_ifaddr walk (Florian Westphal) [task:330558]
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:330538] {CVE-2024-38611}
  - ax25: Fix reference count leak issue of net_device (Duoming Zhou) [task:330518] {CVE-2024-38554}
  - perf report: Fix memory leaks around perf_tip() (Ian Rogers) [task:225610] {CVE-2021-47543}
  - net: fec: remove .ndo_poll_controller to avoid deadlocks (Wei Fang) [task:330300]
  - wifi: cfg80211: check A-MSDU format more carefully (Johannes Berg) [task:223115] {CVE-2024-35937}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [task:330570] {CVE-2024-38632}
  - ax25: Fix reference count leak issues of ax25_dev (Duoming Zhou) [task:330575] {CVE-2024-38602}
  - ax25: merge repeat codes in ax25_dev_device_down() (Lu Wei) [task:330575] {CVE-2024-38602}
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (Jakub Kicinski) [task:330488] {CVE-2024-38597}
  - ptp: fix code indentation issues (Carlos Llamas) [task:222085]
  - ptp: Fix possible memory leak in ptp_clock_register() (Yang Yingliang) [task:222085] {CVE-2021-47455}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [task:330565] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg) [task:330565]
  - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) [task:223056] {CVE-2021-47351}
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [task:330286] {CVE-2024-38601}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330280] {CVE-2024-38560}
  - kunit: Fix kthread reference (Mickaël Salaün) [task:330287] {CVE-2024-38561}
  - ACPI: CPPC: Fix access width used for PCC registers (Vanshidhar Konda) [task:223069]
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Jarred White) [task:223069]
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Jarred White) [task:223069] {CVE-2024-35995}
  - ACPI: CPPC: Drop redundant local variable from cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: fix some coding style issues (Xiaofei Tan) [task:223069]
  - ACPI: CPPC: Fix up I/O port access in cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: Implement support for SystemIO registers (Steven Noonan) [task:223069]
  - ACPI: CPPC: initialise vaddr pointers to NULL (Ionela Voinescu) [task:223069]
  - drm: vc4: Fix possible null pointer dereference (Aleksandr Mishin) [task:330526] {CVE-2024-38546}
  - mmc: sdhci-msm: pervent access to suspended controller (Mantas Pucka) [task:224217] {CVE-2024-36029}
  - mmc: sdhci-msm: add Inline Crypto Engine support (Eric Biggers) [task:224217]
  - mmc: sdhci-msm: Mark sdhci_msm_cqe_disable static (Stephen Boyd) [task:224217]
  - mmc: sdhci-msm: Add CQHCI support for sdhci-msm (Ritesh Harjani) [task:224217]
  - mmc: sdhci-msm: Use OPP API to set clk/perf state (Rajendra Nayak) [task:224217]
  - mmc: sdhci-msm: Re-initialize DLL if MCLK is gated dynamically (Veerabhadrarao Badiganti) [task:224217]
  - xfs: cap longest free extent to maximum allocatable (Dave Chinner) [task:328072]
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [task:330506] {CVE-2024-38583}
  - net: annotate data-race in neigh_output() (Eric Dumazet) [task:205566]
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (Wanpeng Li) [task:330470] {CVE-2022-48765}
  - KVM: LAPIC: Write 0 to TMICT should also cancel vmx-preemption timer (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Advancing the timer expiration on guest initiated write (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Also cancel preemption timer when disarm LAPIC timer (Wanpeng Li) [task:330470]
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [task:330504] {CVE-2024-38578}
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [task:330492] {CVE-2024-38589}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [task:330359] {CVE-2024-38558}
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [task:330486] {CVE-2024-38613}
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [task:332240] {CVE-2024-37078}
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (Chengfeng Ye) [task:216643] {CVE-2021-47211}
  - OPENEULER: tcp/dccp: Add another way to allocate local ports in connect() (xiaolinkui) [task:336487]
  - nfp: flower: fix cb_ident duplicate in indirect block register (John Hurley) [task:240857]
  - flow_offload: fix block stats (John Hurley) [task:240857]
  - flow_offload: add statistics retrieval infrastructure and use it (Pablo Neira Ayuso) [bug:240857]
  - net_sched: fold tcf_block_cb_call() into tc_setup_cb_call() (Cong Wang) [bug:240857]
  - net/sched: Remove egdev mechanism (Oz Shlomo) [bug:240857]
  - nfp: flower: remove TC egdev offloads (John Hurley) [bug:240857]
  - nfp: flower: offload tunnel decap rules via indirect TC blocks (John Hurley) [bug:240857]
  - nfp: flower: increase scope of netdev checking functions (John Hurley) [bug:240857]
  - nfp: flower: allow non repr netdev offload (John Hurley) [bug:240857]
  - nfp: flower: include geneve as supported offload tunnel type (John Hurley) [bug:240857]
  - nfp: flower: use geneve and vxlan helpers (John Hurley) [bug:240857]
  - nfp: flower: use the common netdev notifier (Jakub Kicinski) [bug:240857]
  - nfp: register a notifier handler in a central location for the device (Jakub Kicinski) [bug:240857]
  - nfp: flower: use stats array instead of storing stats per flow (Pieter Jansen van Vuuren) [bug:240857]
  - nfp: flower: use rhashtable for flow caching (Pieter Jansen van Vuuren) [bug:240857]
  - Revert "kbuild: do not create orphan built-in.a or obj-y objects" (taowei) [bug:240857]
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [task:223092] {CVE-2023-52796}
  - ipvlan: properly track tx_errors (Eric Dumazet) [task:223092]
  - net: add DEV_STATS_READ() helper (Eric Dumazet) [task:223092]
  - macsec: use DEV_STATS_INC() (Eric Dumazet) [task:223092]
  - macsec: Fix traffic counters/statistics (Clayton Yager) [task:223092]
  - macsec: avoid use-after-free in macsec_handle_frame() (Eric Dumazet) [task:158034]
  - net: fix kabi broken in struct net_device_stats (taowei) [task:204908]
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) [task:204908]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Jan Kara) [task:226534]
  - tipc: fix kernel warning when sending SYN message (Tung Nguyen) [task:225562] {CVE-2023-52700}
  - tipc: fix implicit-connect for SYN+ (Xin Long) [task:225562]
  - io_uring: fix Fix compilation issues caused by backport (Jackie Liu)
  - io_uring: drop any code related to SCM_RIGHTS (Jens Axboe) [task:225582] {CVE-2023-52656}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.42.v2207
changelog:
  - sched/fair: fix x86_64_defconfig build errors (liwanwu) [task:350325]
  - drm/msm: another fix for the headless Adreno GPU (Dmitry Baryshkov) [task:351463] {CVE-2023-52911}
  - drm/msm: Make .remove and .shutdown HW shutdown consistent (Javier Martinez Canillas) [task:351463]
  - drm/msm: Fix wrong size calculation (Xianting Tian) [task:160493]
  - drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov) [task:158827]
  - drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor) [task:158034]
  - drm/msm: add shutdown support for display platform_driver (Krishna Manikandan) [task:157172]
  - drm/msm: fix leaks if initialization fails (Pavel Machek) [task:157172]
  - drm/msm: Set dma maximum segment size for mdss (Sean Paul) [task:155707]
  - sched/core: Further clarify sched_class::set_next_task() (Peter Zijlstra) [task:101857]
  - sched: Fix pick_next_task() vs 'change' pattern race (Peter Zijlstra) [task:101857]
  - sched: Rework pick_next_task() slow-path (Peter Zijlstra) [task:101857]
  - sched: Allow put_prev_task() to drop rq->lock (Peter Zijlstra) [task:101857]
  - sched/fair: Expose newidle_balance() (Peter Zijlstra) [task:101857]
  - sched: Add task_struct pointer to sched_class::set_curr_task (Peter Zijlstra) [task:101857]
  - sched: Rework CPU hotplug task selection (Peter Zijlstra) [task:101857]
  - sched/{rt,deadline}: Fix set_next_task vs pick_next_task (Peter Zijlstra) [task:101857]
  - sched/core: Introduce set_next_task() helper for better code readability (Muchun Song) [task:101857]
  - sched/fair: Fix imbalance overflow (Vincent Guittot) [task:333737]
  - sched/fair: Cleanup newidle_balance (Vincent Guittot) [task:333737]
  - sched/fair: Remove sysctl_sched_migration_cost condition (Vincent Guittot) [task:333737]
  - sched/fair: Wait before decaying max_newidle_lb_cost (Vincent Guittot) [task:333737]
  - sched/fair: Skip update_blocked_averages if we are defering load balance (Vincent Guittot) [task:333737]
  - sched/fair: Account update_blocked_averages in newidle_balance cost (Vincent Guittot) [task:333737]
  - sched/fair: Check for idle core in wake_affine (Julia Lawall) [task:333737]
  - sched/fair: Ensure tasks spreading in LLC during LB (Vincent Guittot) [task:333737]
  - sched/fair: Fix condition of avg_load calculation (Tao Zhou) [task:333737]
  - sched/fair: Fix statistics for find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair : Improve update_sd_pick_busiest for spare capacity case (Vincent Guittot) [task:333737]
  - sched/fair: Fix find_idlest_group() to handle CPU affinity (Vincent Guittot) [task:333737]
  - sched/fair: Fix rework of find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Rework find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Optimize find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Use load instead of runnable load in wakeup path (Vincent Guittot) [task:333737]
  - sched/fair: Use utilization to select misfit task (Vincent Guittot) [task:333737]
  - sched/fair: Spread out tasks evenly when not overloaded (Vincent Guittot) [task:333737]
  - sched/fair: Use load instead of runnable load in load_balance() (Vincent Guittot) [task:333737]
  - sched/fair: Use rq->nr_running when balancing load (Vincent Guittot) [task:333737]
  - sched/fair: Rework load_balance() (Vincent Guittot) [task:333737]
  - sched/fair: Remove meaningless imbalance calculation (Vincent Guittot) [task:333737]
  - sched/fair: Rename sg_lb_stats::sum_nr_running to sum_h_nr_running (Vincent Guittot) [task:333737]
  - sched/fair: Clean up asym packing (Vincent Guittot) [task:333737]
  - sched/fair: Rename weighted_cpuload() to cpu_runnable_load() (Dietmar Eggemann) [task:333737]
  - sched/fair: Replace source_load() & target_load() with weighted_cpuload() (Dietmar Eggemann) [task:333737]
  - sched/fair: Remove sgs->sum_weighted_load (Dietmar Eggemann) [task:333737]
  - sched/fair: Fix rounding bug for asym packing (Vincent Guittot) [task:333737]
  - sched/fair: Add lsub_positive() and use it consistently (Patrick Bellasi) [task:333737]
  - sched/fair: Clean-up update_sg_lb_stats parameters (Quentin Perret) [task:333737]
  - sched/fair: Change 'prefer_sibling' type to bool (Valentin Schneider) [task:333737]
  - sched/fair: Wrap rq->rd->overload accesses with READ/WRITE_ONCE() (Valentin Schneider) [task:333737]
  - sched/fair: Add 'group_misfit_task' load-balance type (Morten Rasmussen) [task:101857]
  - spi: fix kabi breakage in struct spi_controller (lifangxu) [task:221921]
  - spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown) [task:221921] {CVE-2021-47469}
  - mm/vmscan: Fix hard LOCKUP in function isolate_lru_pages (liuye) [task:334682]
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)
  - fix some compilation warnings (Jiangshan Yi) [task:357223]
  - fix some dtb compile warnings (zhouyuhang) [task:328882, task:329382]
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [task:358101] {CVE-2024-44988}
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [task:347103] {CVE-2024-39467}
  - drm/msm/dpu: fix compile error (Lu Yao) [task:359017]
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [task:352017] {CVE-2024-43892}
  - mm: memcontrol: fix cannot alloc the maximum memcg ID (Muchun Song) [task:183219]
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [task:352627] {CVE-2024-43853}
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [task:357933] {CVE-2024-44944}
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [task:358107] {CVE-2024-44995}
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb) [task:347161] {CVE-2024-40982}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [task:358119] {CVE-2024-44947}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [task:351225] {CVE-2024-42259}
  - Input: MT - limit max slots (Tetsuo Handa) [task:357851] {CVE-2024-45008}
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [task:358105] {CVE-2024-44946}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [task:357971] {CVE-2024-44982}
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [task:357955] {CVE-2024-44969}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [task:357895] {CVE-2024-44965}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [task:357925] {CVE-2024-44987}
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [task:357805] {CVE-2024-44998}
  - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel) [task:351523] {CVE-2022-48875}
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [task:357771] {CVE-2024-44948}
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [task:357799] {CVE-2024-44960}
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) [task:357803]
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) [task:357803] {CVE-2023-52915}
  - ibmvnic: Add tx check to prevent skb leak (Nick Child) [task:345709] {CVE-2024-41066}
  - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Li Qiang) [task:357923]
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook) [task:357223]
  - net/mlx5: Add a blank line after declarations (Wenpeng Liang) [task:357223]
  - ext4: remove the special buffer dirty handling in do_journal_get_write_access (Shida Zhang) [task:345663]
  - ext4: fix a potential assertion failure due to improperly dirtied buffer (Shida Zhang) [task:345663]
  - ext4: hoist ext4_block_write_begin and replace the __block_write_begin (Shida Zhang) [task:345663]
  - ext4: persist the new uptodate buffers in ext4_journalled_zero_new_buffers (Shida Zhang) [task:345663]
  - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (Srinivasan Shanmugam) [task:352661] {CVE-2024-43903}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [task:352181] {CVE-2024-43907}
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [task:347039] {CVE-2024-42096}
  - NFSD: Fix ia_size underflow (Chuck Lever) [task:347049] {CVE-2022-48828}
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC (Chao Yu) [task:352651] {CVE-2024-44942}
  - null_blk: fix validation of block size (Andreas Hindborg) [task:347007] {CVE-2024-41077}
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg) [task:352217]
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [task:352217] {CVE-2024-43841}
  - virt_wifi: fix error on connect (Matteo Croce) [task:352217]
  - virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen) [task:352217]
  - virt_wifi: implement ndo_get_iflink (Taehee Yoo) [task:352217]
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Dave Jiang) [task:346975] {CVE-2024-42110}
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (Breno Leitao) [task:347145] {CVE-2024-39508}
  - USB: serial: mos7840: fix crash on resume (Dmitry Smirnov) [task:347175] {CVE-2024-42244}
  - fpga: region: fix compilation error for commit 7dd30f1e070 (limiao) [task:354605]
  - add change boot vga device support (Shixiong Ou) [task:347429]
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kenton Groombridge) [task:346919] {CVE-2024-41071}
  - s390/pkey: Wipe copies of clear-key structures on failure (Holger Dengler) [task:345319] {CVE-2024-42156}
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Andrea Mayer) [task:347171] {CVE-2024-39490}
  - fbdev: ls2k500sfb fix default video memory size. (Chong Qiao) [task:353249]
  - acpi: mcfg quirk: Increased multi-chip support for the 3C6000, now capable of supporting up to eight chips. (zhenghaowei) [task:353249]
  - irqchip: irq-loongson-pch-msi: Use pch_msi_priv[0] as the default value (zhangtianyang) [task:353249]
  - fbdev: ls2k500sfb update var info according to resolution. (Chong Qiao) [task:353249]
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [task:346931] {CVE-2024-41012}
  - btrfs: get rid of warning on transaction commit when using flushoncommit (Filipe Manana) [task:351471] {CVE-2022-48920}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [task:352015] {CVE-2024-42296}
  - f2fs: fix to consider multiple device for readonly check (Chao Yu) [task:352015]
  - PHYTIUM: drm/phytium: Add driver version information (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add PWM backlight control for pe220x eDP (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Change the drm driver name for pe220x (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add dc patch for BMC (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Modify driver to adapt to ARM and X86_64 compiles (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the hdcp timer irq (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the AUX reply error interrupt (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Adjust log printing level (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Replace default EFI fb0 with DC FB (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Fixed dp codec id (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Get edid audio capability (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Cursor hot support negative numbers (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Enable gamma features (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Add capability of tile mode (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Sync patches from 4.19.y-dev oss branch (Wang Yinfeng) [task:346055]
  - HYGON: mm: Fix kabi breakage of pv_ops (hanliyang) [task:332685]
  - netlink: convert nlk->flags to atomic flags (Eric Dumazet) [task:345975]
  - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) [task:345975]
  - net: netlink: rename NETLINK_DUMP_STRICT_CHK -> NETLINK_GET_STRICT_CHK (Jakub Kicinski) [task:345975]
  - tools headers uapi: Update linux/netlink.h header copy (Arnaldo Carvalho de Melo) [task:345975]
  - security/kysec: Converges 3adm Control in Kysec Component (chengang) [task:168278]
  - security/kysec: open some audit log in kysec softmode (penghuaihe) [bug:177929]
  - security/kysec: adjust devctl kern log level (penghuaihe) [task:150714]
  - security/kysec: fix performance degradation bug caused by mutex (penghuaihe) [bug:163729]
  - CDC-NCM: avoid overflow in sanity checking (Oliver Neukum) [task:351493] {CVE-2022-48938}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [task:347077] {CVE-2024-41063}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann) [task:347029] {CVE-2024-42246}
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [task:344573] {CVE-2024-40995}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (Daniil Dulov) [task:345323] {CVE-2024-42082}
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [task:354889] {CVE-2024-42286}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [task:346667] {CVE-2024-42070}
  - Revert "loop: Remove sector_t truncation checks" (Ben Hutchings)
  - kylin/gmjstcm: fix compilation warning (Li Jun) [task:352591]
  - PHYTIUM: drm/phytium: save vram by dma (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: skip less than 640x480 mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: adjust e2000 phy parameters (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: disable pixel clock before dc reset (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: support for linux-5.10.0 (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Remove reset before close pixel clock (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Read EDID when getting mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Add E2000 Display Engine support (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: update phytium x100 dc driver before support e2000 (oushixiong) [task:110384]
  - ASoC: hdmi-codec: Add an op to set callback function for plug event (Cheng-Yi Chiang) [task:110384]
  - security/selinux: Fixed crash caused by selinux (mengdehui) [bug:258979]
  - md/dm-raid: don't call md_reap_sync_thread() directly (Yu Kuai) [task:221813] {CVE-2024-35808}
  - md: fix kabi broken in struct mddev (zhouyuhang) [task:183151]
  - OPENEULER: md: use interruptible apis in idle/frozen_sync_thread (Yu Kuai) [task:183151]
  - md: refactor idle/frozen_sync_thread() to fix deadlock (Yu Kuai) [task:183151]
  - md: add a mutex to synchronize idle and frozen in action_store() (Yu Kuai) [task:183151]
  - md: wake up 'resync_wait' at last in md_reap_sync_thread() (Yu Kuai) [task:183151]
  - md: refactor action_store() for 'idle' and 'frozen' (Yu Kuai) [task:183151]
  - md-cluster/raid10: call update_size in md_reap_sync_thread (Guoqing Jiang) [task:128226]
  - crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [task:346415] {CVE-2024-42229}
  - crypto: ecdh - explicitly zeroize private_key (Joachim Vandersmissen) [task:345795] {CVE-2024-42098}
  - gpio: fix compile error (zhouyuhang) [task:347327]
  - nvme: avoid double free special payload (Chunguang Xu) [task:347137] {CVE-2024-41073}
  - ASoC: topology: Fix references to freed memory (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - ila: block BH in ila_output() (Eric Dumazet) [task:346669] {CVE-2024-41081}
  - serial: imx: Introduce timeout when waiting on transmitter empty (Esben Haabendal) [task:345715] {CVE-2024-40967}
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [task:352275] {CVE-2024-44940}
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [task:352227] {CVE-2024-42313}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [task:352211] {CVE-2024-42301}
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [task:345303]
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [task:345303] {CVE-2024-39501}
  - security/selinux: Fix box compile errors when stack disabled (chengang) [task:338969]
  - ipvs: properly dereference pe in ip_vs_add_service (Chen Hanxiao) [task:352245] {CVE-2024-42322}
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [task:347001] {CVE-2024-41034}
  - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave) [task:210332] {CVE-2024-26689}
  - kvm: s390: Reject memory region operations for ucontrol VMs (Christoph Schlameuss) [task:352663] {CVE-2024-43819}
  - closures: Change BUG_ON() to WARN_ON() (Kent Overstreet) [task:345719] {CVE-2024-42252}
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [task:351447] {CVE-2024-43867}
  - Bluetooth: Fix usage of __hci_cmd_sync_status (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: L2CAP: Fix deadlock (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err (Marcel Ziswiler) [task:346425]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Min Li) [task:346425]
  - Bluetooth: hci_sync: Fix not processing all entries on cmd_sync_work (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: Add helper for serialized HCI command execution (Marcel Holtmann) [task:346425]
  - Bluetooth: Add support hdev to allocate private data (Tedd Ho-Jeong An) [task:346425]
  - bluetooth/l2cap: sync sock recv cb and release (Edward Adam Davis) [task:346425] {CVE-2024-41062}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Marc Kleine-Budde) [task:223130] {CVE-2023-52878}
  - btrfs: fix use-after-free after failure to create a snapshot (Filipe Manana) [task:330299] {CVE-2022-48733}
  - media: mediatek: vcodec: Handle invalid decoder vsi (Irui Wang) [task:352191] {CVE-2024-43831}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [task:352671] {CVE-2024-43890}
  - fpga: region: add owner module and take its refcount (Marco Pagani) [task:330557] {CVE-2024-35247}
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [task:352639] {CVE-2024-42297}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [task:352649] {CVE-2024-42305}
  - s390/pkey: Wipe copies of protected- and secure-keys (Holger Dengler) [task:346923] {CVE-2024-42155}
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [task:352643] {CVE-2024-42288}
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [task:352637] {CVE-2024-43839}
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [task:345785] {CVE-2024-42092}
  - Revert "drm/vc4: hdmi: Unregister codec device on unbind" (李豪杰) [task:344615, task:351057]
  - ext4: make sure the first directory block is not a hole (Baokun Li) [task:352077] {CVE-2024-42304}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [task:352297] {CVE-2024-42284}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [task:352209] {CVE-2024-43830}
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [task:352215] {CVE-2024-43856}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [task:352237] {CVE-2024-42281}
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [task:352265] {CVE-2024-42308}
  - drm/amd/display: Set flip pending for pipe split (Wesley Chalmers) [task:352265]
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [task:352277] {CVE-2024-42310}
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [task:352289] {CVE-2024-43893}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [task:352293] {CVE-2024-42309}
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [task:352165] {CVE-2024-42280}
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [task:352173] {CVE-2024-43914}
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [task:352185] {CVE-2024-43884}
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [task:352285] {CVE-2024-42271}
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Niklas Neronin) [task:346971] {CVE-2024-42226}
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [task:352177] {CVE-2024-43860}
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng) [task:352177]
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan) [task:352177]
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [task:352283] {CVE-2024-42289}
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [task:352271] {CVE-2024-42311}
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis) [task:352249] {CVE-2024-44939}
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [task:347167] {CVE-2024-41020}
  - file: Factor files_lookup_fd_locked out of fcheck_files (Eric W. Biederman) [task:347167]
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [task:352669] {CVE-2024-42285}
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [task:352291] {CVE-2024-42295}
  - net: ax25: Fix a compilation error (xiaolinkui) [task:351959]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [task:352127] {CVE-2024-42292}
  - jfs: Fix shift-out-of-bounds in dbDiscardAG (Pei Li) [task:352157] {CVE-2024-44938}
  - fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King) [task:158034]
  - ALSA: hda: Do not unset preset when cleaning up codec (Cezary Rojewski) [task:222115] {CVE-2023-52736}
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (George Stark) [task:345699] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (George Stark) [task:345699] {CVE-2024-42129}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [task:351435] {CVE-2024-43882}
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [task:351227] {CVE-2024-43879}
  - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister (Vladimir Oltean) [task:346697]
  - net: dsa: mv88e6xxx: don't use devres for mdiobus (Vladimir Oltean) [task:346697] {CVE-2022-48818}
  - net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de) [task:351441] {CVE-2022-48910}
  - ipv6/addrconf: use a boolean to choose between UNREGISTER/DOWN (Florent Fourcot) [task:351441]
  - ipv6/addrconf: call addrconf_ifdown with consistent values (Florent Fourcot) [task:351441]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [task:346411] {CVE-2024-40953}
  - io_uring: add a schedule point in io_add_buffers() (Eric Dumazet) [task:351479] {CVE-2022-48937}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [task:351501] {CVE-2024-43861}
  - drm/amd/display: Check pipe offset before setting vblank (Alex Hung) [task:345701] {CVE-2024-42120}
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [task:351331] {CVE-2024-43871}
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko) [task:351331]
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [task:351507] {CVE-2024-43883}
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [task:346959] {CVE-2024-41060}
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [task:347127] {CVE-2024-39495}
  - ixgbe: fix pci device refcount leak (Yang Yingliang) [task:351021] {CVE-2022-48896}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Miri Korenblit) [task:346187] {CVE-2024-40929}
  - net/sched: initialize noop_qdisc owner (Johannes Berg) [task:217588]
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches) [task:344437] {CVE-2024-40901}
  - f2fs: Add inline to f2fs_build_fault_attr() stub (Nathan Chancellor) [task:346823] {CVE-2024-42160}
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Chao Yu) [task:346823] {CVE-2024-42160}
  - MIPS: Octeron: remove source file executable bit (Dominique Martinet) [task:347107]
  - MIPS: Octeon: Add PCIe link status check (Songyang Li) [task:347107] {CVE-2024-40968}
  - nvme-fabrics: use reserved tag for reg read/write command (Chunguang Xu) [task:345283] {CVE-2024-41082}
  - ibmvnic: don't release napi in __ibmvnic_open() (Sukadev Bhattiprolu) [task:346945] {CVE-2022-48811}
  - ibmvnic: avoid calling napi_disable() twice (Lijun Pan) [task:158827]
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [task:345791] {CVE-2024-40980}
  - powerpc/vnic: Extend "failover pending" window (Sukadev Bhattiprolu) [task:346945]
  - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Miaoqian Lin) [task:347101] {CVE-2022-48856}
  - RDMA/mlx5: Add check for srq max_sge attribute (Patrisious Haddad) [task:349733] {CVE-2024-40990}
  - KVM: x86/mmu: make apf token non-zero to fix bug (Liang Zhang) [task:351445] {CVE-2022-48943}
  - mmc: sdhci: Add sd host v4 mode (Chunyan Zhang) [task:350907]
  - mmc: sdhci: Add version V4 definition (Chunyan Zhang) [task:350907]
  - mmc: sdhci: Let a vendor driver supply and update ADMA descriptor size (Veerabhadrarao Badiganti) [task:350907]
  - mmc: sdhci: Add ADMA2 64-bit addressing support for V4 mode (Chunyan Zhang) [task:350907]
  - mmc: sdhci: add adma_table_cnt member to struct sdhci_host (Jisheng Zhang) [task:350907]


author: jinzhiguang <jinzhiguang@kylinos.cn> - 0.11.0-8.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-fix-non-trivial-designated-initializers.patch
  	0001-use-btf_dump__new_deprecated.patch


author: lijian1 <lijian1@kylinos.cn> - 0.11.0-8.p02
changelog:
  - Type: Bugfix
  - ID: TASK#218577
  - SUG: NA
  - DESC: fix percpu map without args, c07f23af3507e0b4971ec4343523d976a048b078,
          3f2b438c8b497129f952531375429b1a93e7620d,39f3996d17f88124acc0170b8659e0856555043a
          3fbe73909e009a6741faed1c444daffed478395e;add patch 0005 for so path;add 0006 for tcpdrop.bt.


author: HouHongxun <houhongxun@kylinos.cn>-3.12.2-8.p06
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation.patch


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-1.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add caja-extensions-add-translation-for-hk.patch


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: wangqiang <wangqiang1@kylinos.cn> - 10.0.1-4.p01
changelog:
  - Type:BUGFIX
  - ID:[bug#172007]
  - SUG:NA
  - DESC:Add compile option -DCLANG_LINK_CLANG_DYLIB=ON, -DBUILD_SHARED_LIBS=OFF


author: caiyinan <caiyinan@kylinos.cn> - 196.3-1.p06
changelog:
  - Type:bugfix
  - ID:[bug#186959]
  - SUG:NA
  - DESC:fix unlinked other OS branding file by excluding from packages


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: zhaoqingyou<zhaoqingyou@kylinos.com> - 1:1.12.16-19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#85132]
  - SUG:NA
  - DESC: Add Patch7000:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p01
changelog:
  - Type:updated
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  Modify to get the value of the kernel and BuildRequires:kernel-core


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p02
changelog:
  - Type:bugfix
  - ID:[BUG#121835]
  - SUG:NA
  - DESC:
  - add patch kylin-0001-support-dpdk-cross-compile-in-x86-platform.patch
  1) The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on all x86 platforms.
  2) Due to kylin-rpm-config updating, the patch changes python interpreter version to python3.
  3) Openvswitch service starts stably after dpdk is repaired.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p03
changelog:
  - Type:bugfix
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  - 1.The igb_uio.ko and rte_kni.ko modules generated by dpdk reuquire the same kernel version to be compiled and installed, otherwise it cannot be loaded correctly.
    2.The kernel version will be continuously updated. It will be troublesome to rebuild dpdk while kernel updating. Therefore, it is best to decoule dpdk from kernel.
    3.DKMS (Dynamic kernel module system) can automatically compile modules after kernel changes and adpat to the new kenrel. So igb_uio and rte_kni in dpdk can be handed over to DKMS for management, and dpdk.spec is modified according to DKMS specification to generate dpdk-igb-uio and dpdk-rte-kni binary packages.


author: ningjin <ningjin@kylinos.cn> - 19.11-15.p04
changelog:
  - Type:bugfix
  - ID:[BUG#132923]
  - SUG:NA
  - DESC:
  - add patch kylin-0002-support-dpdk-cross-compile-in-hygon-platform.patch
  The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on hygon platforms，reduce dpdk compiling cpu instruction set to corei7.corei7 is the minimum instruction set supported by dpdk.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p05
changelog:
  - Type:task
  - ID:[TASK#118976]
  - SUG:NA
  - DESC:
  - Since there is no ko module in the main rpm package, delete /usr/sbin/depmod from post.


author: wangjiawei <wangjiawei@kylinos.cn> - 19.11-15.p08
changelog:
  - Type:task
  - ID:[TASK#206722]
  - SUG:NA
  - DESC:
  - add dependency of rte-kni and igb-uio on dpdk-devel
  - fix CVE-2021-3839 CVE-2022-0669


author: panxiaohe <panxiaohe@huawei.com> - 050-5
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec设置relabel脚本
  -         add patch: dracut-kylin-add-relabel-scripts.patch
  -       将kysec_sync_notify改为kysec_sync_daemon
  -         add patch: dracut-change-kysec-sync-notify-to-kysec-sync-daemon.patch
  -       将3adm的enable改为和桌面一致
  -         add patch: dracut-change-3adm_enable-to-be-same-as-desktop.patch
  -       更改数据库文件属主
  -         add patch: dracut-change-chown-db.patch
  -       修复加载31-32policy
  -         add patch: dracut-fix-load-policy-31-or-32.patch
  -       添加kysec_tpm配置，grub未配置时，将配置文件中的状态写入内核
  -         add patch: dracut-add-kysec-tpm-status.patch
  -       将kylin-security.conf改名为kysec.conf
  -         add patch: dracut-change-libsecurity1-config-file-name.patch
  -       修改字体
  -         add patch: dracut-change-font.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.02
changelog:
  - Type:update
  - ID:[Task#81148]
  - SUG:NA
  - DESC: 从数据库中读取relabel_status，如果是0，修改数据库中的值为1
  -         add patch: dracut-set-relabel_status-1-after-read-relabel_status.patch
  - Type:update
  - ID:[Task#81149]
  - SUG:NA
  - DESC: 将dracut.conf中安全相关的配置移动到modules.d/98relable/security.conf中
  -         add patch: dracut-move-dracut.conf-security-configure-to-98relable-security.conf.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.03
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: dracut-fix-modify-or-del-audit-log-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.04
changelog:
  - Type: bugfix
  - ID:[Bug#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.04
changelog:
  - Type: bugfix
  - ID:[Bug#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: dracut-fix-whlist-init-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.05
changelog:
  - Type: update
  - ID:[任务#157794]
  - SUG:NA
  - DESC: 将修改audit.log的权限恢复至开源状态
  -         add patch: dracut-050-restore-file-permission-settings.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.06
changelog:
  - Type: update
  - ID:[任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: dracut-050-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#188380][BUG#192256]
  - SUG:NA
  - DESC: 修复selinux策略为targeted时切换strict模式失败的问题[BUG#188380]
  -	  add patch: dracut-050-fix-selinux-targeted-change-strict-error.patch
  -	解决auditadm用户无法查看/var/log/目录下的文件的问题[BUG#192256]
  -	  add patch: dracut-050-fix-auditadm-read-var-log-file-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.07.02
changelog:
  - Type: update
  - ID:[任务#189429]
  - SUG:NA
  - DESC: 删除关闭三员时密码过期时间的设置
  -	  add patch: dracut-050-del-user-passwd-validity-period-set.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-5.se.07.02.p01
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-5.se.07.02.p02
changelog:
  - Type:bugfix
  - ID:[BUG#209238]
  - SUG:NA
  - DESC:  自定义分区安装系统后,切换安全模式后重启打标过程home var 分区无法挂载
           add dracut-fix-mount-home-failed.patch
           dracut-add-os-partition-judge-in-kyseclabel-script.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 050-5.se.07.02.p03
changelog:
  - Type:update
  - ID:[TASK#174208]
  - SUG:NA
  - DESC: nvme 安装盘系统在安装dracut-config-generic 软件包重新生成initramfs.img 系统重启失败
  -	  add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: weishaokun<weishaokun@kylinos.cn> - 202002-8.p02
changelog:
  - Type: update
  - ID:   84913
  - SUG:  NA
  - DESC: KYLIN, ArmVirtPkg, add Kylin-Support-virtual-AHCI-and-NVMe-drives.patch


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202002-8.p05
changelog:
  - Type: Update
  - ID:   [TASK#138646]
  - SUG:  NA
  - Desc: fix CVE-2022-4450 CVE-2023-0286 CVE-2023-0215 CVE-2023-0401
          from src-openeuler/edk2 openEuler-20.03-LTS-SP3 branch.


author: yanjianqing <yanjianqing@kylinos.cn> - 202002-8.p07
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304 
          from src-openeuler/edk2 openEuler-20.03-LTS-SP3 branch.


author: wangguochun <wangguochun@kylinos.cn> - 202011-11.p07
changelog:
  - Type Update
  - ID: [TASK#204644]
  - SUG: NA
  - DESC: fix CVE-2023-0464/CVE-2023-0465/CVE-2023-0466/CVE-2023-2650/CVE-2023-3446/CVE-2023-3817
  -           CVE-2024-0727/CVE-2022-36763/CVE-2022-36764/CVE-2022-36765
  -           CVE-2023-45229/CVE-2023-45230/CVE-2023-45231/CVE-2023-45232/CVE-2023-45233/CVE-2023-45234/CVE-2023-45235


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-11.p09
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: panxiaohe <panxh.life@foxmail.com> - 0.180-7
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: zhangxiaolu <zhangxiaolu@kylinos.com> - 1:27.1-14.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j8 V=1 VERBOSE=1 instead of make for building bootstrap


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: lvfei <lvfei@kylinos.cn>-1.1.2-4-p05
changelog:
  - Type: update
  - ID: [TASK#187103]
  - SUG: modify source2
  - DESC: add  0001-add-zh_HK-translate.patch


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: peijiankang <peijiankang@kylinos.cn> - 0.2.3-8.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#204834]
  - SUG:  NA
  - DESC: add fcitx-chewing-add-translations-for-hk.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.4.10-6.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#204834]
  - SUG:  NA
  - DESC: add fcitx-configtool-add-translations-of-hk.patch


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: peijiankang <peijiankang@kylinos.cn> - 4.2.9.1.p06
changelog:
  - Type: bugfix
  - ID:   [BUG#204834]
  - SUG:  NA
  - DESC: add fcitx-update-translations-for-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.2.9.1.p07
changelog:
  - Type: bugfix
  - ID:   [BUG#215529]
  - SUG:  NA
  - DESC: add 0001-fcitx-correct-some-traditional-chinese-translations.patch


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: lvfei <lvfei@kylios.cn> - 79.0-7.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:Patch700:            0001-kylin-modify-the-first-url.patch
  -           0001-kylin-firefox-modify-firstrunURL.patch
  -            0001-firefox-modify-newtabel-top-site.patch
  -            firefox-modify-firsturl-http-to-https.patch
  -            0001-modify-taiwan-to-taiwansheng.patch
  - modify firefox desktop 
  - modify firefox.js
  - DESC: fix chandao bug add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p02
changelog:
  - type bug fix
  - ID bug 114400 
  - add patch:Patch705:     0001-fix-chandao-bug-114400.patch
  - DESC: fix chandao bug 114400  add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p03
changelog:
  - type bug fix
  - ID bug 129652
  - add patch:Patch705:     0001-defaultSearchEngine-baidu-bug129652.patch
  - DESC: fix chandao bug 129652  add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p04
changelog:
  - type cve fix
  - ID NA
  - add Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315
  - DESC: cve fix


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p10
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: lipengyu <lipengyu@kylinos.cn> - 79.0-7.p16
changelog:
  - Type: bugfix
  - ID: [BUG#231659]
  - SUG: NA
  - DESC:Change the default search engine in Firefox to Baidu


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: huayadong <huayadong@kylinos.cn> - 2.13.92-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#251085]
  - SUG : NA
  - DESC: add Patch9001:fontconfig-2.13.92-kylin-backport-Report-more-detailed-logs-instead-of-assertion.patch


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39352
  - Fix CVE-2023-39353
  - Fix CVE-2023-39354
  - Fix CVE-2023-39356
  - Fix CVE-2023-40181
  - Fix CVE-2023-40186
  - Fix CVE-2023-40188
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40589


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20210628.41
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: <majian@kylinos.cn> - 9.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#186426]
  - SUG: NA
  - DESC: Init package for Kylin V10 sp4 and add Kylin patches.
  - [BUG#112827] fix replace manufacturer string from openEuler to KylinOS in version info.
  - [BUG#199946] fix gdb hangup crash issue when attach running process debug.


author: majian <majian@kylinos.cn> - 9.2-7.p02
changelog:
  - Type: bugfix
  - ID: [BUG#218056]
  - SUG: NA
  - DESC: Add 0002-Set-entry-point-when-text-segment-is.patch.


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fandeyuan <fandeyuan@kylinos.cn> - 2.66.8-12.p03
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.66.8-12.p04
changelog:
  - Type: cve fix
  - ID: NA
  - SUG: NA
  - DESC: add backport-glocalfilemonitor-Avoid-file-monitor-destruction-from-event-thread.patch
   backport-CVE-2024-34397.patch backport-gdbusconnection-Allow-name-owners-to-have-the-syntax-of-a-well-known-name.patch


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p01
changelog:
  - Type:	compile
  - ID:	[TASK#74801]
  - SUG: 	NA
  - DESC:	remove gcc_secure BuildRequires from spec & add BuildFlags="-O2 -g -fPIC"


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p02
changelog:
  - Type:	update & bugfix
  - ID:	[TASK#74132]
  - SUG: 	NA
  - DESC:	Added kylin patch merged from glibc-2.28-49.p02 of v10sp2


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p04
changelog:
  - Type:	bugfix
  - ID:	[bug#119200]
  - SUG: 	NA
  - DESC:	Provide compatibility support for linking against libpthread_nonshared.a


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p05
changelog:
  - Type:	update
  - ID:	[TASK#101352]
  - SUG: 	NA
  - DESC:	Add Give-a-chance-to-reload-gl_path-when-dlopen patch


author: Zhenneng Li <lizhenneng@kylinos.cn> - 2.28-88-p06
changelog:
  - Type:	update
  - ID:  	[TASK#105748]
  - SUG: 	NA
  - DESC: Delete 9001-kylin-glibc-add-mesa_func-in-midr-way.patch


author: majian <majian@kylinos.cn> - 2.28-28-88-p07
changelog:
  - cves: CVE-2023-0687
  - ID: [TASK#141422]
  - SUG: NA
  - DESC: Fix CVE-2023-0687.
          https://gitee.com/src-openeuler/glibc/pulls/555


author: majian <majian@kylinos.cn> - 2.28-88-p09
changelog:
  - Type:	update
  - ID:  	[TASK#165761]
  - SUG: 	NA
  - DESC: Add Kylin_fix_localesdata_countryname_v10sp3.patch .


author: <majian@kylinos.cn> - 2.28-88.p14
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813 .


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-88.p14
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: pengxu <pengxu@kylinos.cn> - 2.28-88.p16
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC:  fix pthread_once hangs when init routine throws an exception


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: peijiankang <peijiankang@kylinos.cn>- 3.30.1-2.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add gnome-calculator-update-translations-for-hk.patch


author: houhongxun <houhongxun@kylinos.cn> - 3.30.2-2.p02
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-gnome-disk-utility-add-some-missing-traditional-chin.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.30.0-3.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#195945]
  - SUG:  NA
  - DESC: add 0001-update-gnome-font-viewer-zh_HK-translations.patch


author: anyunhao <anyunhao@kylinos.cn> - 3.6.14-11.p01
changelog:
  - Type:update
  - ID:[Task#186398]
  - SUG:NA
  - DESC:Update to 3.6.14-11 and sync sp3 changes
  - add patch add_support_generate_sm2_certificate.patch and add_support_sm4.patch


author: anyunhao <anyunhao@kylinos.cn> - 3.6.14-11.p02
changelog:
  - Type:CVE fix
  - ID:[Task#202568]
  - SUG:NA
  - DESC:fix CVE-2024-0553
  - add patch backport-CVE-2024-0553-rsa-psk-minimize-branching-after-decryption.patch


author: anyunhao<anyunhao@kylinos.cn> - 3.6.14-7.p02
changelog:
  - Type:update
  - ID:[Task#85463]
  - SUG:NA
  - DESC:split package gnutls-utils,reduce main package installation dependencies


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.p01
changelog:
  - Type:bugfix/update
  - ID:task#74110
  - SUG:NA
  - DESC:Add Patch0356,Patch0357,Patch0358
  -      Add support for uboot
  -      Add Grub2 password


author: xieyuxing<xieyuxing@kylinos.cn> - 2.04-21.se.01.p04
changelog:
  - Type:update
  - ID:task#81649 121848,123751,88712
  - SUG:NA
  - DESC:Add and modify Kyee measure mod
  -      Add tpcm patches provided by haiguang


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p05
changelog:
  - Type:update
  - ID:task#96116
  - SUG:NA
  - DESC:backport PATCH0368, support BPI01002 and phy-addr BIOS
         backport PATCH0369, loongArch64 add FDT support
         add PATCH0370, loongArch64 fix undeclared errors


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p06
changelog:
  - Type:update
  - ID:bug#127107
  - SUG:NA
  - DESC:add PATCH0371, loongArch64 solve "out of memory" during PXE installation


author: kangyu<kangyu@kylinos.cn> - 2.04-21.se.01.p07
changelog:
  - Type:update
  - ID:bug#128022
  - SUG:NA
  - DESC:Remove the not find kyee prompt
         add press y to enter the system


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.01.p08
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for grub-boot-indeterminate.service


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.03.p08
changelog:
  - Type:NA
  - ID:bug#144461
  - SUG:NA
  - DESC: measurefile.mod failed to load after x86qcow start message was displayed


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.03.p09
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.04.p09
changelog:
  - Type:bugfix
  - ID:task#148830
  - SUG:NA
  - DESC: Troubleshoot the nested virtualization installation exception


author: liuyang <liuyang01@kylinos.cn> - 2.04-21.se.04.p18
changelog:
  - Type:CVE
  - ID:task#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p01
changelog:
  - Type:bugfix
  - ID:[Task#199901]
  - SUG:NA
  - DESC:Sync SP2 patches,fix gstreamer1-plugins-good-gtk no provides(element-gtksink)


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p02
changelog:
  - Type:bugfix
  - ID:[BUG#216576]
  - SUG:NA
  - DESC:change gstreamer1-devel-docs to gstreamer1-help,fix update error.


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: panzhe <panzhe@kylinos.cn> - 1.40.2-8.p01
changelog:
  - Type:bugfix/compile
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that coldplug does not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel 
  - Add Patch02, Fixed "Favorites" error in "My Computer".
  - Add Patch03, Solve the problem that usb flash drive sometimes fails to mount automatically.
  - Add Patch04, Solve the problem that the window displays "Network".


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p01
changelog:
  - Type:bugfix
  - ID:[Bug#114844]
  - SUG:NA
  - DESC:add patch1:hardinfo-kylin-fix-vendor-unknown-bug.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p02
changelog:
  - Type:bugfix
  - ID:[Bug#127017][Bug#127010]
  - SUG:NA
  - DESC:add patch2:hardinfo-0.6.1-kylin-solve-segment-error-and-survival-reporting-problems.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p03
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch3:hardinfo-0.6.1-kylin-change-x11-vendor.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p04
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch4:hardinfo-0.6.1-kylin-fix-the-segment-error-when-executing-hardinfo-without-display.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p05
changelog:
  - Type:bugfix
  - ID:[Bug#140774]
  - SUG:NA
  - DESC:add patch5:hardinfo-0.6.1-kylin-fix-core-file-appears-in-the-report-generation-function.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p06
changelog:
  - Type:bugfix
  - ID:[Bug#171872]
  - SUG:NA
  - DESC:add patch6:hardinfo-0.6.1-kylin-add-the-name-YMTC-for-oui-id-a428b7.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p07
changelog:
  - Type:bugfix
  - ID:[Bug#177860]
  - SUG:NA
  - DESC:add patch7:hardinfo-0.6.1-kylin-fix-ft2000-cpu-no-speed.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.1-1.p08
changelog:
  - Type:bugfix
  - ID:[BUG#182817]
  - SUG:NA
  - DESC:add patch8, retrieve the motherboard info for arm and loongarch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p09
changelog:
  - Type:bugfix
  - ID:[TASK#178533]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p10
changelog:
  - Type:bugfix
  - ID:[BUG#197180]
  - SUG:NA
  - DESC:add patch10,0001-fix-pci-info-showing-wrong-link-width.patch
         fix that pci info showed wrong current link width


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch11,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p12
changelog:
  - Type:bugfix
  - ID:[BUG#199256]
  - SUG:NA
  - DESC:add patch12,hardinfo-0.6.1-kylin-hide-Firmware.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p13
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-hardinfo-add-traditional-chinese-translation.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#208197]
  - SUG : NA
  - DESC: add patch14:hardinfo-0.6.1-kylin-fix-sensors-driver-unknow.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#225214]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-fix-temperature-label-display-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch16:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#245937][BUG#245949]
  - SUG : NA
  - DESC: add patch17:hardinfo-0.6.1-kylin-change-int-to-long-int-in-memory_usage.patch


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-9.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p02
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, change country and organization to kylin


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p03
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, according to the requirements , only  change country to CN


author: shaoning <shaoning@kylinos.cn> - 2.4.43-13.p04
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix  CVE-2022-23934(CVE编号有误，应为CVE-2022-23943) CVE-2022-22720 CVE-2022-31813


author: shaoning <shaoning@kylinos.cn> - 2.4.43-13.p05
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22721 CVE-2022-26377 CVE-2022-28330 CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 CVE-2022-30556


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: hanjinpeng <liutao1@kylinos.cn> - 2.4.43-20.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: zhangyulong <zhangyulong@kylinos.com> - 2.4.43-23.p02
changelog:
  - Type:TASK
  - ID:195905
  - SUG:NA
  - DESC:add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.10-11
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: fixed a bug that occurs when starting a container in host mode


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.10-15.p03
changelog:
  - Type:bugfix
  - ID:[BUG#194818]
  - SUG:NA
  - DESC:seccomp_default.json delete archMap
  -      merge architecture support, modify x86, arm, longarch synchronously (x86 and arm skip p01, p02)


author: peijiankang <peijiankang@kylinos.cn> - 1.7.1-8.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#195945]
  - SUG:  NA
  - DESC: add 0001-add-im-chooser-zh_HK-translations.patch


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.312-b07.2
changelog:
  - add 8273111-Default-timezone-should-return-zone-ID-if-locatiome-is-valid-but-not-canonicalization-on-linux.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.8.0.392-b08.2.p01
changelog:
  - Type: cves
  - ID: [TASK#183363]
  - SUG: NA
  - fix install fail caused by %pretrans reporting error 
  	add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.01
changelog:
  - Type: update
  - ID: #75532
  - SUG: NA
  - DESC: 移植kysec补丁
  -         add patch: kmod-27-kylin-security.patch
  -       添加kysec检查
  -         add patch: kmod-27-add-kysec-kmod-check.patch
  -       使用kysec检查函数
  -         add patch: kmod-27-using-kysec-check-kmod-func.patch


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.02
changelog:
  - Type: bugfix
  - ID: [BUG#157423]
  - SUG: NA
  - DESC: 修复当kmod关闭时，insmod插入模块异常的问题
  -         add patch: kmod-27-fix-insmod-abnormal-when-close-kmod.patch


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#165082]
  - SUG: NA
  - DESC: 修复当修改内核模块文件后，仍可以insmod成功的问题
  -         add patch: kmod-27-fix-insmod-success-when-modify-ko-file-after.patch


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: Bin Hu <hubin73@huawei.com> -1:0.9.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix segment fault and hotpatch compilation problem when using openEuler 22.03 LTS kernel


author: Bin Hu <hubin73@huawei.com> -1:0.9.5-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch-build: do not copy linux scripts when building OOT module hotpatch


author: Tang Bin <tangbin_yewu@cmss.chinamobile.com> -1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:livepatch-patch-hook: fix kpatch-build error which do not support ftrace


author: Bin Hu <hubin73@huawei.com> -1:0.9.5-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lookup: skip finding local symbols for object with no local symbols


author: wangjiang <wangjiang37@h-partners.com> - 1:2020.0.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix backport-Fix-hist_nearend.patch
         backport-functions-with-not-loaded-autoloaded-functions.patch
         backport-Fix-interactive-restricted-shell-behavior.patch


author: wangyuhang <wangyuhang27@huawei.com> - 2:1.0.8-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:due to the upstream community no longer maintaining the previous version,
         we have rolled back to the stable branch and switched to an active code repository.
         new upstream release and update version to 1.0.8


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: yangyan<yangyan@kylinos.cn> -0.1.0-5
changelog:
  - Type:bugfix and task
  - ID:all
  - SUG:Na
  - DESC: The modifications made in the past week have been combined into a patch file


author: yangyan <yangyan@kylinos.cn> -0.1.0-6
changelog:
  - Type:task
  - ID:210047 & 210036
  - SUG:Na
  - DESC: Added archive profile judgment and removed patch_info field check


author: yangyan <yangyan@kylinos.cn> -0.1.0-7
changelog:
  - Type:BUG&Task
  - ID:all
  - SUG:NA
  - DESC:The modifications made in the past week have been combined into a patch file


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户获取进程防杀死信息失败的问题
  -	  add patch: kysec-common-fix-secadm-ppro-get-pid-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.08
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-common-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.09
changelog:
  - Type: update
  - ID:[任务#189436]
  - SUG:NA
  - DESC: 修改解压xz文件的方式,提高解析文件类型的速度,修改spec文件，添加xz依赖
  -	  add patch: kysec-common-modify-decompress-xz-file.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.10
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截
  -	了pid的查询,获取的pid会是kysec_get进程的pid的问题
  -	  add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.03
changelog:
  - 修改kmod白名单
  -   add patch: kysec-daemon-modify-kmod-whlist.patch
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: kysec-daemon-fix-sql-inject-by-retrieve.patch
  - 添加enable_tpm编译宏
  -   add patch: kysec-daemon-add-enable-tpm-budil-macro.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#118414]
  - SUG:NA
  - DESC: 清空内核模块防卸载白名单，保留sm4_generic
  -         add patch: kysec-daemon-kmod-whlist-keep-sm4_generic.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.06
changelog:
  - Type: update
  - ID: [TASK#84294]
  - SUG:NA
  - DESC: 修复whlist_update_by_deb接口存在命令注入漏洞
  -         add patch: kysec-daemon-fix-popen-injection-command-leak.patch
  - Type: bugfix 
  - ID: [BUG#122953]
  - SUG:NA
  - DESC: 解决在龙芯机器上安全中心获取内核防卸载名单失败的问题 
  -         add patch: kysec-daemon-fix-ksc-defender-load-kmod-whlist-error.patch
  - Type: bugfix 
  - ID: [BUG#122688]BUG#122673]BUG#122671]BUG#122646]BUG#122644]
  - SUG:NA
  - DESC: 修复操作whlist数据库的SQL注入的问题
  -         add patch: kysec-daemon-fix-sql-inject-by-operate-whlist-database.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.07
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC:   kysec命令行改造，将security-switch模块设置逻辑下移到服务
  -         add patch: kysec-daemon-add-security-switch-module.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.08
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的服务接口
  -         add patch: kysec-daemon-add-chpolicy.patch
  - Type: bugfix
  - ID: [Bug#122953]
  - SUG:NA
  - DESC: 修复添加内核防卸载时，Qstring导致的乱码的问题
  -         add patch: kysec-daemon-fix-add-kmod-protect-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.09
changelog:
  - Type: bugfix
  - ID: [Bug#131435][Bug#131574]
  - SUG:NA
  - DESC: 修复security-switch加固后切换strict模式失败的问题
  -       修复strict模式下，切换selinux模式为permissive失败的问题
  -         add patch: kysec-daemon-fix-kysec-command-bug.patch
  - Type:update
  - ID: NA
  - SUG:NA
  - DESC: 将kysec-module的dbus通信移植到kysec-daemon
  -         add patch: kysec-daemon-modify-dbus-module-to-daemon.patch
  - Type: bugfix
  - ID: [bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.10
changelog:
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-daemon-fix-failed-to-remove-exectl.patch
  - Type: update 
  - ID: []
  - SUG:NA
  - DESC: netctl添加pkg path的dbus接口
  -         add patch: kysec-daemon-netctl-add-pkg-path-dbus-interface.patch 
  - Type: bugfix
  - ID: [Bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kysec-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.3-36.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151059]
  - SUG:NA
  - DESC: 切换selinux的permissive及enforcing模式实时生效
  -         add patch: kysec-daemon-fix-selinux-status-changenow.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663][BUG#206934]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题[BUG#205663]
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch
  -	修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题[BUG#206934]
  -	  add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.3-36.se.21
changelog:
  - Type: bugfix
  - ID: [BUG#220612]
  - SUG:NA
  - DESC: 【kysec】kysec状态关闭再打开后，重启系统后可以修改或删除受保护文件.
  -	  add patch:  kysec-daemon-fix-readonly-tag-loss-error.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.02
changelog:
  - netctl自动添加联网程序，并设置为拦截
  -   add patch: kysec-syc-daemon-netctl-auto-add-xml.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -          add patch: kysec-sync-daemon-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.04
changelog:
  - Type: bugfix 
  - ID:[bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题
  -       修复网络控制自动探测时程序不是rpm或者dpkg安装，导致包名不正确的问题
  -           add patch: kysec-sync-daemon-fix-netctl-auto-add-pkg-is-not-rpm-install.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.05
changelog:
  - Type: update
  - ID:[]
  - SUG:NA
  - DESC: 修改netctl自动探测，对于不是rpm包安装的,pkg填写全路径
  -         add patch: kysec-sync-daemon-modify-netctl-auto-add-whlist.patch
  - Type: bugfix
  - ID:[bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-sync-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#205537]
  - SUG:NA
  - DESC: 删除对devctl_auto_add_record.desktop文件的安装
  -	  add patch: kysec-sync-daemon-del-devctl-auto-add-record-desktop-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#75532]
  - SUG:NA
  - DESC: 修改getstatus查看kysec信息显示，去除devctl和tpm_status
  -         add patch: kysec-utils-modify-getstatus-info.patch
  - Type: update
  - ID:[TASK#81148]
  - SUG:NA
  - DESC: 当kysec_status或者exectl的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: kysec-utils-change-relabel_status-to-0.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#112677]
  - SUG:NA
  - DESC: 依据服务器部门提供的netctl白名单列表，修改网络控制xml文件
  -         add patch: kysec-utils-netctl-modify-xml-file.patch
  - Type: bugfix
  - ID:[BUG#106538]
  - SUG:NA
  - DESC: 修改kysec_check_exec()函数，解决sh执行脚本的问题
  -         add patch: kysec-utils-modify-kysec_check_exec-function.patch
  - Type: bugfix
  - ID:[BUG#118587]
  - SUG:NA
  - DESC: 修复当模块的标签是unknown是仍然可以insmod的问题
  -         add patch: kysec-utils-fix-insmod-seccuess-when-module-label-unknown.patch
  - Type: bugfix
  - ID:[BUG#122963]
  - SUG:NA
  - DESC: netctl为龙芯的机器添加龙芯浏览器白名单
  -         add patch: kysec-utils-netctl-xml-add-lbrowser-for-loongarch64.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 给安全加固程序加上kysoft标记，因为安全加固程序需要给配置文件打白名单，需要kysoft标记，否则没有权限
  -       add patch: kysec-utils-add-kysoft-label-to-security-reinforce.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.07
changelog:
  - Type: update
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-utils-fix-fortify.patch
  - Type: bugfix
  - ID:[Bug#121813]
  - SUG:NA
  - DESC: 在secadm_list列表中加入semodule程序，修复三权模式下，secadm用户安装，卸载策略模块失败的问题 
  -         add patch: kysec-utils-add-semodule-to-secadm_list.patch
  - Type: bugfix
  - ID:[Bug#122812]
  - SUG:NA
  - DESC: 修复sh执行可执行程序失败的问题，libkysecwhlist.so调用失败
  -         add patch: kysec-utils-fix-sh-execute-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.08
changelog:
  - Type: update
  - ID:[Task#90053]
  - SUG:NA
  - DESC: 修改kysec相关命令
  -         add patch: kysec-utils-modify-kysec-command.patch
  - Type: bugfix
  - ID:[Bug#128959][Bug#128809]
  - SUG:NA
  - DESC: sh执行没有标记的脚本，度量成功后，允许执行并打上verified的标记
  -         add patch: kysec-utils-fix-sh-execute-set-label.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.09
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的库接口
  -         add patch: kysec-utils-add-chpolicy.patch
  - Type: update
  - ID:[Task#90053][Bug#131756]
  - SUG:NA
  - DESC: 优化部分kysec相关命令, 解决软件包标签获取命令执行报错的问题
  -         add patch: kysec-utils-kysec-command-optimize-and-fix-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.10
changelog:
  - Type: update
  - ID:[Task#90053][Bug#128917][Bug#131796][Bug#131599][Bug#131594]
  - SUG:NA
  - DESC: 优化部分kysec相关命令
  -       修复进程开启情况下，设置防杀死标签，不生效，下次打开的进程才生效的问题
  -       修复kysec_set设置应用程序联网管控失败的问题
  -       修复strict模式下关闭kysec后root用户执行setenforce 0提示权限不够的问题
  -       修复strict模式下关闭kysec后secadm和auditadm用户仍存在的问题
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: kysec-utils-fix-kysec-command-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.11
changelog:
  - Type: update
  - ID: NA
  - SUG:NA
  - DESC: kysec检查接口还原p标记检查，先做hash值检查，再检查p标记
  -         add patch: kysec-utils-kysec-check-lib-restore-parent-label-check.patch
  - Type: bugfix
  - ID: [bug#135468]
  - SUG:NA
  - DESC: 修复kysec组件命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-command-inject-bug.patch
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-utils-fix-failed-to-remove-exectl.patch
  - Type: bugfix
  - ID: [Bug#138094]
  - SUG:NA
  - DESC: 旧版本接口兼容
  -         add patch: kysec-utils-add-old-version-interface-compatible.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.12
changelog:
  - Type: bugfix
  - ID: [BUG#140008]
  - SUG:NA
  - DESC: setstatus设置disable提示重启生效
  -         add patch: kysec-utils-setstaus-disable-prompt-reboot.patch
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-utils-fix-not-set-status-when-close-3adm.patch
  - Type: bugfix
  - ID: [BUG#142102]
  - SUG:NA
  - DESC: 修复非secadm用户不可查看当前安全状态的问题
  -         add patch: kysec-utils-delete-security-switch-from-secadm-list.patch
  - Type: update
  - ID: [TASK#113906]
  - SUG:NA
  - DESC: 从auditadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-auditadm-list.patch
  - Type: update
  - ID: [TASK#113152]
  - SUG:NA
  - DESC: 命令行注入分析及解决
  -         add patch: kysec-utils-command-line-injection.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#143767][BUG#143772][BUG#143803]
  - SUG:NA
  - DESC: 修复kysec_get module打印的帮助信息提示无效的参数
  -       修复kysec_set module(exectl\kmod\fpro\ppro)显示的不是子模块帮助信息
  -       修复kysec_set kmod -v allow -n nbd.ko.xz后有两个防卸载模块的问题
  -         add patch: kysec-utils-fix-kysec-command-prompt-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: kysec-utils-fix-security-switch-disable-after-force-reboot-bug.patch
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-utils-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#164394]
  - SUG:NA
  - DESC: 修复当kysec关闭时不能通过软件包获取3adm的标记的问题
  -         add patch: kysec-utils-fix-can-not-get-3adm-label-when-kysec-disable-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#165082]
  - SUG:NA
  - DESC: 修复当修改内核模块文件后，仍可以insmod成功的问题
  -         add patch: kysec-utils-fix-insmod-success-when-modify-ko-file-after.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 3.3.6-33.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151006]
  - SUG:NA
  - DESC: 修复关机过程调用initramfs内进程无执行权限的问题
  -         add patch: kysec-utils-fix-initramfs-exec-denied-halt.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-utils-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.22
changelog:
  - Type: bugfix
  - ID: [BUG#190352]
  - SUG:NA
  - DESC: 修复kysec设置disable后，提示重启生效的问题
  -	  add patch: kysec-utils-fix-kysec-set-disable-tips-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.23
changelog:
  - Type: update
  - ID: [任务#180316]
  - SUG:NA
  - DESC: 将load_policy命令加入到secadm_list文件中
  -	  add patch: kysec-utils-load_policy-add-secadm_list-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.24
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: kysec-utils-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.25
changelog:
  - Type: bugfix
  - ID: [BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-utils-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.26
changelog:
  - Type: bugfix
  - ID: [BUG#206934]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.27
changelog:
  - Type: bugfix
  - ID: [BUG#215075]
  - SUG:NA
  - DESC: 【授权管控】【S2500】系统安全切换至strict或者default模式后，切换tty后未显示授权管控提示语句
  -	  add patch: kysec-utils-fix-unetdns-service-start-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.28
changelog:
  - Type: bugfix
  - ID: [BUG#218250]
  - SUG:NA
  - DESC:  【52.36】【访问控制】【白名单访问控制】kysec配置-进程保护标签列表查看
  -         回退由国防bug引入的改动.
  -	  add patch: kysec-utils-fix-ppro-get-not-running-process-info.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.29
changelog:
  - Type: bugfix
  - ID: [BUG#220613]
  - SUG:NA
  - DESC: 【kysec】insmod被篡改的内核模块，没有产生拒绝日志.
  -     add patch: kysec-utils-fix-no-kysec-deny-logs-when-insmod-hash-not-verified-ko.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: xuhe <xuhe@kylinos.cn> - 5.3.28-36.p01
changelog:
  - Rebuild for Kylin
  - Add BuildRequires:  java       >= 1:1.6.0
  - Add BuildRequires:  java-devel <  1:1.11.0
  - Add BuildRequires:  java       <  1:1.11.0


author: zhengxiaoxiao <zhengxiaoxiao@huawei.com> - 1.9.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport-Fix-the-behavior-for-child-process.patch
             backport-Clear-AESWRAP-scratch-area-immediately-after-use.patch


author: xuhe <xuhe@kylinos.cn> - 1.2.0-4.p02
changelog:
  - Type: bugfix
  - ID: [BUG#186959]
  - SUG: NA
  - DESC: Remove redundancy symbol link /usr/lib64/fipscheck/libkcapi.so.1.hmac,
  -       since system might boot failed due to wrong symbol link,
  -       or applications might start failed due to wrong symbol link.


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p58
changelog:
  - Type: update
  - ID:[TASK#176779]
  - SUG:NA
  - DESC: add auto activation for kms privatization and fix bug 199947
  - DESC: cancel read hardinfo from khwid and five m extension


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.08
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 加入回文和相似性检查
  -         add patch: libpwquality-add-palindrome-similar-option.patch
  -       恢复pwquality.conf的默认配置
  -         add patch: libpwquality-restore-pwquality.conf-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.02
changelog:
  - Type:update
  - ID: [Task#91807]
  - SUG:NA
  - DESC: 恢复pwqprivate.h的默认配置
  -         add patch: libpwquality-restore-pwqprivate.h-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.03
changelog:
  - Type: Bugfix
  - ID: [Bug#118364]
  - SUG:NA
  - DESC: 回文检查配置项默认打开
  -         add patch: libpwquality-set-palindrome-default-on.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.50.5-2.p01
changelog:
  - Type: update
  - ID:   [Task#171031]
  - SUG:  NA
  - DESC: add loongarch support patch in vendor libc (sync from  2.50.5-1.p01)


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.06
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.07
changelog:
  - Type:update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: libsecurity1-netctl-set-off.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1-4-se.01
changelog:
  - Type:update
  - ID:[Task#]
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.1-4-se.03
changelog:
  - Type:update
  - ID:[BUG#157746] 
  - SUG:NA
  - add Patch6: libselinux-keep-getpeercon-errorno.patch
  - DESC: 157746 【虚拟化】libvirtd服务报错，virt-manager虚拟机管理器连接失败
    keep errorno value of function getsockopt before function security_lsm_is_enable change it.


author: hanhuijie <hanhuijie@qq.com> - 3.1-3.se.01
changelog:
  - Type:update
  - ID:[Task#76391]
  - SUG:NA
  - DESC:
  - 增加libsemanage补丁
  -         add patch: libsemanage-20200319.patch
  -       增加文件当前包含的作用户操作的模板


author: hanhuijie <hanhuijie@qq.com> - 3.1-3.se.02
changelog:
  - Type:update
  - ID:[任务#195740] 同步libsemanage的补丁到sp1 sp2 sp3 / sp3-libsemanage
  - SUG:NA
  - DESC:
  - 同步[BUG#209238]【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  - add patch: libsemanage-homedircon.patch
  - desc:secadm和auditadm不存在,genhomedircon生成adm_home_t的定义。


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:compile
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: wanfeng <wanfeng@kylinos.cn> - 1.2.6-2.p01
changelog:
  - Type:BUGFIX
  - ID:Task#145401
  - SUG:NA
  - DESC:add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
         add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
         fix oom bug


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: lizhanchun <lizhanchun@kylinos.cn> - 6.2.0-16.p11
changelog:
  - Type:	update
  - ID:	NA
  - SUG:	NA
  - DESC: Backport from libvirt-6.6.0. 
  -		Use g_autoptr() on pointers and remove the unneeded 'cleanup' label.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p12
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: backport from 7.1.0, fix CVE-2021-3975
  -       0001-qemu-Fix-potential-crash-during-driver-cleanup.patch


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p16
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: Backport: libvirt daemon finish all threads before exiting.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p18
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: Backport: virnetdaemon: Wait for "daemon-stop" thread to finish before quitting 
  - revert Backport: virnetdaemon: Wait for "daemon-stop" thread to finish before quitting
  - no optimization


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p19
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: clean all old nwfilter before apply new nwfilter when start libvirtd


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p20
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: remote_daemon: Set shutdown callbacks only after init is done


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p21
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: fix double free of cfg->firmwares when use qemu firmware metadata file


author: lilong <lilong@kylinos.cn> - 6.2.0-16.p23
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p25
changelog:
  - Type: Update
  - ID:   [BUG#244925]
  - SUG:  NA
  - DESC: fix: virtlockd/virtlogd service failed when reload service


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-16.p26
changelog:
  - Type: bugfix
  - ID:   [BUG#249689]
  - SUG:  NA
  - DESC: Fix the translation problem of libvirtd.policy's prompts.


author: Cai Yinan <caiyinan@kylinos.cn> - 1.7.0-10.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: hexiaole <hexiaole@kylinos.cn> - 8:2.03.09-12.p01
changelog:
  - Type:compile
  - ID:[任务#74797]
  - SUG:NA
  - DESC:Patch18:0018-LD_LIBRARY_PATH-add-extra-dir.patch:add patch to resolve running-time error of test/unit/unit-test: error while loading shared libraries: libdevmapper-event.so.1.02: cannot open shared object file: No such file or directory


author: Xiaole He <hexiaole@kylinos.cn> - 8:2.03.09-12.p02
changelog:
  - Type:task
  - ID:[任务#116460]
  - SUG:NA
  - DESC:add Patch19-23 for supporting intel vroc raid(vitual raid on cpu)


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-12.p07
changelog:
  - Type: bugfix
  - ID: [任务#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group
          because sp4-ha occupies p06,so p07 is used.


author: liyue <liyue01@kylinos.cn> -2.1.36-2.p01
changelog:
  - Type:NA
  - ID:TASK#168978
  - SUG:NA
  - DESC:add patch:0001-mailman-2.1.36-kylin-remove-sensitive-character.patch


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylin.cn> - 1.16.1-4.p01
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p01
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p12
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-tranditional-chinese-translation.patch


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#205717]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-some-missing-translations-for-ca.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p05
changelog:
  -Type:bugfix
  -ID:[BUG#194507]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-system-monitor-menu-if-current-user-is-no.patch
        don't show system monitor when not logged in as root


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0.1-p02
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: mate-polkit-update-translations-for-hk.patch


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn> - 1.16.1-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus, add  Requires: kylin-menu


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: peijiankang <peijiankang@kylinos.cn>- 1.12.2-1kord13.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#194919]
  - SUG : NA
  - DESC: add Patch4 mate-session-manager-1.12.2-kylin-add-min-and-max-for-idle-delay.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.12.2-1kord13.p07
changelog:
  -Type:bugfix
  -ID:[BUG#203419]
  -SUG:NA
  -DESC:add patch 0001-mate-session-manager-add-missing-translations-for-zh.patch


author: douyan <douyan@kylinos.cn>- 1.12.2-1kord13.p08
changelog:
  -Type:bugfix
  -ID:[BUG#205945]
  -SUG:NA
  -DESC:add patch mate-session-manager-1.12.2-kylin-fix-autostart-process-no-quit-when-loggingout.patch


author: peijiankang <peijiankang@kylinos.cn> - p04
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add mate-settings-daemon-update-translations-for-hk-and-tw.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: HouHongxun <houhongxun@kylinos.cn>1.12.1-1kord1k7.p06
changelog:
  - Type: update
  - ID: [TASK#187123]
  - SUG: NA
  - DESC: add 0001-mate-terminal-add-some-missing-traditional-chinese-t.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.5.1-1.p02
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-missing-trad-chinese-trans-for-desktop-file.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.5.1-1.p03
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-user-admin-add-missing-trad-chinese-translation.patch


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: Like <like@kylinos.cn> - 4.0.1-4.p01
changelog:
  - Type: cves
  - ID: CVE-2020-7921 CVE-2021-32036
  - SUG: restart
  - DESC: add Patch600 and Patch6001 fix CVE-2020-7921 and CVE-2021-32036


author: yinyongkang <yinyongkang@kylinos.cn> - 0.8.4-18.p02
changelog:
  - Type: bugfix
  - ID: [TASK#176871]
  - SUG: NA
  - DESC: Add 0042-libmultipath-fix-checker-detection-for-nvme-devices.patch


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 0.8.4-18.p03
changelog:
  - Type: update
  - ID: [TASK#190984]
  - SUG: NA
  - DESC: Backport oe -19 and -20 patches:
          -fix build failure caused by new compliation parametes
          -fix multipath -u not recognize multipath devices


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: wangshuo <wangshuo@kylinos.cn> - 5.9-4.p03
changelog:
  - Type:bugfix
  - ID:[Bug#154748]
  - SUG:NA
  - DESC:Delete useless so file, see also:
  -        https://gitee.com/src-openeuler/net-snmp/commit/50d96cd21868c4b37f4629f34f37dfbd3be37592
  -      To fix bug, the LoongArch platform must use the newly compiled so library file.


author: baiguo <baiguo@kylinos.cn> - 5.9-4.p04
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is null


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: liyunqing<liyunqing@kylinos.cn>--1.18.22-4.p10
changelog:
  - Type:BUG
  - ID:[BUG#135567、BUG#53964]
  - SUG:NA
  - DESC:sync patch from loongarch, fix bug135567 and bug53964 for loongarch64 only


author: guojunding <guojunding@kylinos.cn> --1.18.22-4.p13
changelog:
  - Type: Bugfix
  - ID: [bug#203222]
  - SUG: NA
  - DESC: Supplemented with traditional Chinese translations


author: guojunding <guojunding@kylinos.cn> --1.18.22-4.p14
changelog:
  - Type: Bugfix
  - ID: [bug#204845]
  - SUG: NA
  - DESC: The network connection interface is converted to traditional Chinese


author: guojunding <guojunding@kylinos.cn> --1.18.22-4.p16
changelog:
  - Type: Bugfix
  - ID: [bug#205181]
  - SUG: NA
  - DESC: Traditional translation of the networkmanager icon


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: lvfei <lvfei@kylonos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#337735]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p02
changelog:
  - Type: update
  - ID: [Task#67548]
  - SUG: NA
  - DSEC: support national cryptographic standard algorithm feature


author: anyunhao <anyunhao@kylinos.cn> - 1:1.1.1f-15.p03
changelog:
  - Type: update
  - ID: [TASK#85463]
  - SUG: NA
  - DSEC: split package openssl-perl,reduce main package installation dependencies


author: wangshuo <wangshuo@kylinos.cn> - 1:1.1.1f-15.p04
changelog:
  - Type: update
  - ID: [TASK#78310]
  - SUG: NA
  - DESC: Add Patch85, Kylin add openssl loongarch64 support
  -       Modify spec, Kylin modify configure command for build on loongarch64


author: Xu Xiangyu <xuxiangyu@hygon.cn> - 1:1.1.1f-15.p05
changelog:
  - Type: update
  - ID: [Task#84503]
  - SUG: NA
  - DSEC: add hygoncpp engine and speed test for openssl support hygon cipher coprocessor hardware


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p06
changelog:
  - Type:cves
  - ID:CVE-2022-2097, CVE-2022-2068, CVE-2022-1292
  - SUG:NA
  - DESC:Fix CVE-2022-2097, CVE-2022-2068 and CVE-2022-1292


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p07
changelog:
  - Type:cves
  - ID:CVE-2022-4450, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286
  - SUG:NA
  - DESC:Fix CVE-2022-4450, CVE-2022-4304, CVE-2023-0215 and CVE-2023-0286


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p09
changelog:
  - Type:cves
  - ID:CVE-2023-0464, CVE-2023-0465, CVE-2023-0466
  - SUG:NA
  - DESC: Fix CVE-2023-0464, CVE-2023-0465 and CVE-2023-0466


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p12
changelog:
  - Type: update
  - ID: [TASK#167670]
  - SUG: NA
  - DSEC: add Patch108, add TLCP support
  -       add Patch109, add GDCA gm cert verification support
  -       add Patch110, add sm2 encryptedkey(password) support
  -       add Patch111, bugfix null-pointer in ec_pmeth
  -       add Patch112, add comment for ec_pkey_meth
  -       add Patch113, update certs for TLCP testcases
  -       add Patch114, set TLCP interface version


author: bianxiuning <bianxiuning@kylinos.cn> - 1:1.1.1f-15.p14
changelog:
  - Type: update
  - ID: [TASK#172146]
  - SUG: NA
  - DESC: add Patch117, add zhao-xin gmi suport for sm3 sm4 and random


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id, 
  	and optimize the return code, optimize dgst keyform for PEM,
  	support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: ningjin <ningjin@kylinos.cn> -2.12.0-16.p08
changelog:
  - Type:bug
  - ID:[BUG#245059]
  - SUG:NA
  - DESC:openvswitch-ipsec adapt python3 ,fix start and stop failed


author: ningjin <ningjin@kylinos.cn> -2.12.0-16.p09
changelog:
  - Tyep:bug
  - ID:[BUG#252777]
  - SUG:NA
  - DESC:add /usr/local/share/openvswitch before start openvswitch-ipsec


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: mengchaoming <mengchaoming@kylinos.com> - 1.4.0-8.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:sync from sp2 patch: 0001-pam-13.1-8-loacal-chinese.patch;
  - DESC:resolve "Account temporarily locked due to %d failed logins" chinese local


  - Type:bugfix
  - ID:38353
  - SUG:sync from sp2 patch:0001-fix-chandao-bug-38353.patch
  - DESC:NA

  - Type:bugfix
  - ID:26337
  - SUG:sync from sp2 patch:Linux-PAM-1.4.0-kylin-fix-bug26337.patch
  - DESC:NA

  - Type:bugfix
  - ID:19898
  - SUG:modify spec
  - DESC:Modify system-auth.pamd to add 'use_first_pass'


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: pam-login-check-same-uid.patch


author: xieyuxing <xieyuxing@kylinos.com> - 1.4.0-8.p02
changelog:
  - Type:bugfix
  - ID:121657
  - SUG:NA
  - DESC:add patch KYLIN-add-sm3-hash-function-for-passwd-cmd.patch


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.02
changelog:
  - Type: bugfix
  - ID:[BUG#136126]
  - SUG:NA
  - DESC: 对于相同的uid的两个账户，允许uid和username匹配的账户登录
  -       add patch: pam-fix-right-uid-not-login-bug.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 1.4.0-8.p03.se.03
changelog:
  - Type:update
  - ID:[Task#133684]
  - SUG:NA
  - DESC: 提供状态检查接口
          add patch:pam-get-chkuid-state.patch


author: anyunhao<anyunhao@kylinos.cn> - 1.4.0-8.p04.se05
changelog:
  - Type:update
  - ID:[Bug#189847]
  - SUG:NA
  - DESC: add patch: 0001-Kylin-fix-bug163994-and-bug26337.patch


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.4.0-8.p04.se06
changelog:
  - Type:update
  - ID:[Bug#203691]
  - SUG:NA
  - DESC: 使用开源sm3算法
          delete patch: KYLIN-add-sm3-hash-function-for-passwd-cmd.patch


author: liyue <liyue01@kylinos.cn> - 1.4.0-8.p05.se06
changelog:
  - Type:update
  - ID:[Task#185449]
  - SUG:NA
  - DESC:   add patch: pam-1.4.0-kylin-modify-zh-HK-po.patch


author: wanghao <wanghao2@kylinos.cn> - 0.80-9.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  -         add patch: passwd-0.80-add-security-check.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.1.3-13.p07
changelog:
  - Type: Bugfix
  - ID: [TASK#161277]
  - SUG: NA
  - DESC:
  - 修复解析IPI0字段异常引起的coredump问题
  - add 0001-fix-analysis-proc-interrupts-name-error.patch


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: wanghao<wanghao2@kylinos.cn> - 4:5.28.3-7.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec执行控制检查
  -         add patch: perl-5.28.3-add-kysec-exectl-check.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 4:5.28.3-7.se.01.p04
changelog:
  - Type:bugfix
  - ID:Bug#190774
  - SUG:NA
  - DESC:fix-perl-libs-re.so-undefined-symbol-error
  - Synchronize with Loongarch64 version, Skip 5.28.3-7.se.01.p03 version


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: houhongxun <houhongxun@kylinos.cn> - 1.16.2-1.6.p03
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-pluma-add-some-missing-traditional-chinese-translati.patch


author: xuhe <xuhe@kylinos.cn> - 0.9.5-2.p01
changelog:
  - Rebuild for Kylin
  - Migrates patch from v10sp2 to v10sp3 to fix default theme on FT-1500A platform


author: mengchaoming<mengchaoming@kylinos.cn> -3.1-7.p01
changelog:
  -Type:bugfix
  -ID:14829
  -SUG: Language Sinicization
  -DESC:sp2 patch to sp3:0001-Kylin-policycoreutils-2.8-14.2-kylin-fix-bug-14829.patch


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p02
changelog:
  - Type: BUG fix 
  - ID: bug#142478
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel resolved conflicts


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: Yu Peng <yupeng@kylinos.cn> - 13.0-4.p02
changelog:
  - Type: Update
  - ID  : [Task#187031]
  - SUG : NA
  - DESC: Traditional Chinese translations for the HK versions
          Add Kylin-add-translations-for-HK.patch.


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Use gdbm_count for dbm_length if possible
         Don't override PYTHONPATH which is already set by the user


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: wanghao<wanghao2@huawei.com> - 3.7.9-18.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#104619]
  - SUG:NA
  - DESC: python3添加kysec检查
  -         add patch: Python3-judge-python-file-run.patch


author: wanghao<wanghao2@huawei.com> - 3.7.9-18.se.03
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python3加-c或者-m参数时kysec无法管控的问题
  -         add patch: python3-fix-parameter-c-or-m-kysec-exectl.patch


author: xiaozai<xiaozai@kylinos.cn> - 3.7.9-18.se.04.p01
changelog:
  - Type:CVE
  - CVE:CVE-2020-10735 CVE-2022-37454, CV-2022-45061
  - SUG:NA
  - DESC:fix CVE-2020-10735 CVE-2022-37454, CV-2022-45061


author: wanghao<wanghao2@kylinos.cn> - 3.7.9-18.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python3-parameter-c-add-exectl-status-check.patch


author: GuoCe <guoce@kylinos.cn> - 3.7.9-18.se.05.p04
changelog:
  - Type:CVE
  - ID:[TASK#165452]
  - SUG:NA
  - DESC:fix CVE-2021-4189,CVE-2022-0391
         support loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39.se.01
changelog:
  - Type: bugfix
  - ID: [BUG#193772]
  - SUG: NA
  - DESC: From: @wanghao
          移植kysec执行控制检查补丁
          add patch: python3-7.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add Patch9007-9008, fix CVE-2007-4559
  -      Add Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangguochun <wangguochun@kylinos.cn>
changelog:
  - Type:updated
  - ID:[任务#74236]
  - SUG:NA
  - DESC:
  - add patch 0001-KYLIN-0001-KYLIN-VIRTIO-GPU-Optimization-2.patch
  1) This patch aims to further improve the 3D performance of virtiogpu
  2) The changes include:
          a.When qemu received VIRTIO_GPU_ CMD_ SUBMIT_3D command, if the command length does not exceed the size of an IOV, the data in the IOV will no longer be copied to the buf, but directly point the *buf to the IOV, so as to reduce the data replication overhead during command execution
          b.By analyzing the 3D command, the screen area refreshed in this frame is obtained, so that when outputting the screen picture in each frame, there is no need to obtain the screen area to be refreshed by comparing the data difference between the previous and subsequent frames, so as to reduce the CPU overhead. In addition, when calling glreadpixels to obtain the frame cache picture, the obtained screen area can also be used to reduce the amount of frame cache picture data that glreadpixels needs to copy, further reducing the GPU overhead of glreadpixels
          c. Change the initial timing call time of virtio_gpu_virgl_fence_poll command to 1US to ensure that the execution of 3D command can be fed back in time
  3) by this patch,the 3D performance of virtiogpu can be improved by about 10%
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix-3.patch
  1) the processing steps of function egl_fb_read are adjusted.
  2) the new process is more reasonable,and can solve the programe of
  system crash when entering the commandline display(by ctrl+alt+F1)
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Bug-Fix-FOR-KYLIN-SERV.patch
  1) The previous virtio GPU optimizations were based on the desktop version of kylin system, when applied to the server version of Kirin system, there will be problems that the screen refresh is not timely and the output screen size cannot be changed.
  2) The reason for the above problems lies in the difference between the desktop graphics processing mechanism of the server version and the desktop version: each refresh of the desktop version is the whole desktop, so one of the optimization measures is to analyze and obtain the actual refresh area from the 3D command; The refresh operation of the server version is to directly send the actual refresh area to virtio GPU, so it needs to be handled differently.so in egl-headless, when egl_scanout_flush find that the flush area is not the whole desktop,it will call change_update_rect to update rect area.
  3) In addition, this bugfix also fixes an error in scanout operation, which will lead to the inconsistency between the screen area recorded by virtio GPU and the actual screen area, resulting in the problem of the screen size presented by the client


author: weishaokun <weishaokun@kylinos.cn>
changelog:
  - Type:updated
  - ID:[BUG#121211]
  - SUG:NA
  - DESC:Edk2 must be used when creating virtual machines. add ifarch aarch64 Requires: edk2-aarch64; add ifarch x86_64 Requires: edk2-ovmf.


author: lijunwei <lijunwei@kylinos.cn> -2:4.1.0-63.p05
changelog:
  - Type:update
  - ID:[BUG#132317]
  - SUG:NA
  - DESC:Enable fdt And add BuildRequires libfdt-devel to fix ifarch x86_64 can not start vm with virtio-gpu


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p12
changelog:
  - Type:bug
  - ID:[BUG#135672]
  - SUG:NA
  - DESC: Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28)


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p13
changelog:
  - Type:	bug
  - ID:	[BUG#143805]
  - SUG:	NA
  - DESC: Bugfix. When the virtual machine is restarted repeatedly, it may cause qemu-kvm crash.


author: weishaokun <weishaokun@kylinos.cn> -2:4.1.0-63.p14
changelog:
  - Type:bug
  - ID:[BUG#132317]
  - SUG:NA
  - DESC:Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -2:4.1.0-63.p16
changelog:
  - Type:Update
  - ID:[TASK#116597]
  - SUG:NA
  - DESC:to fix CVE-2021-3507 CVE-2021-20257 CVE-2020-13253 CVE-2021-3607 CVE-2021-3608, add openeuler qemu-4.1.0-70 version patches.
  - softmmu: Always initialize xlat in address_space_translate_for_iotlb (CVE-2022-35414)
  - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p17
changelog:
  - Type: Update
  - ID:   [TASK#132801]
  - SUG:  NA
  - DESC: fix CVE-2022-0216 CVE-2022-4144
  -       add Patch: 0001-Revert-qxl-add-migration-blocker-to-avoid-pre-save-a.patch
          to fix CVE-2022-4144 build error from GitLab commit dcc5fc2a3adb9ec4b196f82ebe4079bc88f3c91e


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-63.p18
changelog:
  - Type: bug
  - ID:   [TASK#132773]
  - SUG:  NA
  - DESC: Fix qemu-nbd child daemon connection process wont close stderr file


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p19
changelog:
  - Type: cve
  - ID:   CVE-2022-1050
  - SUG:  NA
  - DESC:	hw/pvrdma: Protect against buggy or malicious guest driver (CVE-2022-1050)


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p23
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p25
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-63.p27
changelog:
  - Type: Update
  - ID: [TASK#180246]
  - SUG: NA
  - DESC: 
  - Apply patches to fix CVE-2022-3872
  - Disable virtfs to fix CVE-2023-1386


author: lizhanchun <lizhanchun@kylinos.cn> - 2:4.1.0-63.p29
changelog:
  - Type: Update
  - ID: [TASK#180246]
  - SUG: NA
  - DESC: fix CVE-2022-36648 CVE-2018-18438 CVE-2023-0330
  - Disable (deprecated upstream) pvrdma to fix CVE-2023-1544


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p30
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.
  -	enable virtfs, undo the CVE-2023-1544


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-63.p34
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p36
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: liwenchong <liwenchong@kylinos.cn> - 4.9.2-4.p02
changelog:
  - Type:bugfix
  - ID:BUG#131963
  - SUG:NA
  - DESC:fix bug#131963 rebuild in tag v10-sp3;
  -      add llvm version differentit for make error.


author: wangqiang <wangqiang1@kylinos.cn> - 4.9.2-4.p03
changelog:
  -Type:UPDATE
  -ID:NA
  -SUG:NA
  -DESC:Rebuild for clang base library change, add patch5 fix ld error on clang-10


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p01
changelog:
  - add diff from 1:4.8.7-46, diff:
  - add qt-everywhere-opensource-src-4.8.7-neokylin-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-atomic-mips64el.patch
  - add qt-everywhere-opensource-src-4.8.7-qmake-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-mips64r2.patch
  - modified:  assistant.desktop designer.desktop linguist.desktop qdbusviewer.desktop
  - (1:4.8.7-46)ori uri: http://10.1.110.123/download/iso/Euler/openeuler_ARM64/openeuler-2020-03-13-01-32-06/Software/aarch64/SRPMS/Packages/qt-4.8.7-46.oe1.src.rpm
  - (1:4.8.7-46)modified: http://10.1.123.237/kojifiles/packages/qt/4.8.7/46.ky10/src/qt-4.8.7-46.ky10.src.rpm


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: huayadong <huayadong@kylinos.cn> - 1:4.8.7-47.p11
changelog:
  - Type: bugfix
  - ID:   [TASK#220326]
  - SUG:  NA
  - DESC: add patch45: fix-that-filediolog-cannot-use-input-methods.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 6.2.7-1.p01
changelog:
  - Type:cves
  - Id:CVE-2022-36021 CVE-2022-24834 CVE-2023-28856
  - SUG:NA
  - DESC:回合低版本补丁CVE-2022-36021 CVE-2022-24834 CVE-2023-28856 and fix-building-error-of-malloc.patch
     Fix redis.spec and redis.service


author: zhangzhou <zhangzhou@kylinos.cn> - 4.15.1-37.p01.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#164925]
  - SUG:NA
  - DESC: 保持rpm安装文件原安全标记
  -       add patch rpm-remainoldtag-kysec.patch


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-37.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118520]
  - SUG:NA
  - DESC: Remove rpm daily scheduled tasks,and add loongarch support


author: wanfeng <wanfeng@kylinos.cn> - 4.15.1-37.p02.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#118520]
  - SUG:NA
  - DESC: Fix install of block and character FIFO special files
  -       add patches backport-Fix-install-of-block-and-character-special-files-219.patch
  -                   backport-Use-fd-based-ops-for-metadata-in-FA_TOUCH-mode-too-w.patch
  -                   backport-Add-a-test-for-special-device-node-installation.patch


author: yueyuankun<yueyuankun@kylinos.cn> - 8.2006.0-7.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - DESC:solve the problem of duplicate logs in /var/log/messages after restarting the system


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.04
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220608.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.05
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220615.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[TASK#97459]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0707）
  -	修正上一个版本遗留的bug，包括密码有效期对root生效，普通用户也有操作模板权限等
  -       添加补丁security-reinforce-update-20220707.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.07
changelog:
  - Type:update
  - ID:[TASK#90956]
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug,包括加固与还原项数不一致的bug，适配新版kysec的接口等
  -       添加补丁security-reinforce-update-20220713.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.08
changelog:
  - Type:update
  - ID:[TASK#100149]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0721）
  -	修正上一个版本遗留的bug,包括密码期限还原失效，gsetting加固未生效，其权限用户无法操作模板等bug
  -       添加补丁security-reinforce-update-20220721.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.09
changelog:
  - Type:update
  - ID:[TASK#99843][Bug#134347][Bug#134228][Bug#130320][Bug#119204][Bug#132763]
  - SUG:NA
  - DESC: 安全加固命令行功能优化
  -       修复security-reinforce 帮助手册与实际不符的问题
  -       修复还原操作，界面与命令行上次操作结果内容不一致的问题
  -       修复单字母用户名的用户不适用口令更改最小间隔天数策略的问题
  -       修复加固后的完成加固项数与还原后的上次加固项数不一致的问题
  -       修复选择模板后返回时提示无效的选项请重新选择的问题
  -       添加补丁security-reinforce-update-20220811.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.10
changelog:
  - Type:update
  - ID:[TASK#105459][Bug#135048][Bug#134148][Bug#133979][Bug#135646][Bug#129410]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0818）
  -       【安全加固】【终端命令】default模式root用户只能扫描无法加固
  -       【安全加固】【终端命令】三级项范围与全部项一样
  -       【安全加固】【终端命令】扫描过程中是用快捷键ctrl+d，扫描继续且异常
  -       【安全加固】【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       【安全加固】【系统设置】安全加固后系统ctrl+alt+del组合键未禁用
  -       添加补丁security-reinforce-update-20220818.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.11
changelog:
  - Type:update
  - ID:[TASK#108128][Bug#136311][Bug#136809][Bug#135646][Bug#136207]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0907）
  -       调整阻止root通过telnet登录的加固方法
  -       【安全加固】【终端命令】多个用户开启终端命令，其中一个进行扫描\加固\还原时，其他用户终端会同步输出
  -       【安全加固】【终端命令】命令行选择模板后无提示信息并且模板菜单连续出现两次
  -       【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       调试 strict模式下，cvs服务未禁用加固项加固失败
  -       修改vsftp禁止root登录的加固方法，将配置文件/etc/ftpusers修改为/etc/vsftpd/ftpuser
  -       将用到vector的类在每次扫描前进行情况操作，放置获取的是之前扫描的数据
  -       修复日志文件非全局可写加固测试，日志文件权限都为600时依旧需要加固的bug
  -       psacct判断服务修改与grub判断修改 
  -       安全加固sp1\sp2\sp3同源改造
  -       添加补丁security-reinforce-update-20220906.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.12
changelog:
  - Type:update
  - ID:[Bug#122949][Bug#129235]
  - SUG:NA
  - DESC:
  -     【安全加固】【密码强度】密码复杂度策略检测--加固后需要四种字符类型可以修改成功
  -     【安全加固】【密码强度】密码复杂度策略安全加固后未恢复最佳策略
  -      同步主机加固安全bug，将硬盘所有分区修改为根分区使用率的扫描
  -      同步主机加固安全bug，修复最小口令长度加固无效bug
  -      同步修复v10问题
  -      添加补丁security-reinforce-update-20221009.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.13
changelog:
  - Type:update
  - ID:[TASK#119587][Bug#146522][Bug#146702]
  - SUG:NA
  - DESC:去掉安全加固子项-应用联网控制
  -     【安全加固】环境进行过多次安全加固，切换成普通用户，无法进行安全加固
  -     【安全加固】【系统审计】检查是否记录用户对设备的操作加固报告显示异常
  -      添加补丁security-reinforce-update-20221103.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[TASK#97459]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0707）
  -   修正上一个版本遗留的bug，包括密码有效期对root生效，普通用户也有操作模板权限等
  -       添加补丁security-reinforce-update-20220707.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.08
changelog:
  - Type:update
  - ID:[TASK#100149]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0721）
  -   修正上一个版本遗留的bug,包括密码期限还原失效，gsetting加固未生效，其权限用户无法操作模板等bug
  -       添加补丁security-reinforce-update-20220721.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.14
changelog:
  - Type:update
  - ID:[TASK#124465][Bug#150309][Bug#150305][Bug#141728][Bug#146729][Bug#144179][Bug#158573]
  - SUG:NA
  - DESC: 安全加固优化包入库（238和239）
  -     【安全加固】应用防护控制功能加固项，加固状态显示异常
  -     【安全加固】【系统安全】关闭ppro，一键加固后，显示应用防护控制功能开启
  -     【安全加固】一键加固后未重启系统，即刻进行一键还原，界面提示语错误
  -     【安全加固】【系统设置】定时自动屏幕锁定加固失败 
  -     【安全加固】【系统设置】strict模式和custom模式系统ctrl+alt+del组合键禁用，加固失败
  -     【uid唯一性检验】安全加固项中没有“uid唯一性检验”项
  -      完善vsftpd的禁用root加固项扫描方法，修复禁用不必要别名加固重启还原不生效的问题
  -      同步修复南瑞继保问题
  -      添加补丁security-reinforce-update-20230223.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.15
changelog:
  - Type:update
  - ID:[Bug#160433]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -      【sp3】【uid唯一性检验】多个普通用户uid相同，加固后未禁用
  -       根据安全加固需要策略版本需升至selinux-policy-3.14.2-76.se.19.ky10.noarch版本
  -       添加补丁security-reinforce-update-20230303.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.15
changelog:
  - Type:update
  - ID:[Bug#160433]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -      【sp3】【uid唯一性检验】多个普通用户uid相同，加固后未禁用
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本
  -       添加补丁security-reinforce-update-20230303.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.16
changelog:
  - Type:update
  - ID:[Bug#162226]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -       [uid控制]多个用户uid相同，加固后登录提示信息不一致
  -       添加补丁security-reinforce-update-20230328.patch
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.17
changelog:
  - Type:update
  - ID:[Bug#173908]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -       【安全加固】【系统审计】 psacct已安装.psacct服务未开启，进行加固扫描，扫描结果错误修改
  -       添加补丁security-reinforce-update-20230001.patch
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.18
changelog:
  - Type:update
  - ID:[Bug#178224][Bug#176859][Bug#180898]
  - SUG:NA
  - DESC: security-reinforce入库se18版本
  -       【安全加固】【系统设置】“PAM认证模块禁止wheel组之外的用户su为root”加固成功后wheel组用户su为root失败预期成功
  -       【安全加固】【安全服务】系统存在rootkit感染项手动加固后再加固预期显示"无需加固"实际显示"待手动加固"
  -       添加security-reinforce-update-20231018.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.18
changelog:
  - Type:update
  - ID:[TASK#178224][Bug#176859][Bug#180898]
  - SUG:NA
  - DESC: security-reinforce入库se18版本
  -       【安全加固】【系统设置】“PAM认证模块禁止wheel组之外的用户su为root”加固成功后wheel组用户su为root失败预期成功
  -       【安全加固】【安全服务】系统存在rootkit感染项手动加固后再加固预期显示"无需加固"实际显示"待手动加固"
  -       添加security-reinforce-update-20231018.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.19
changelog:
  - Type:update
  - ID:[Bug#199669][Bug#199515]
  - SUG:NA
  - DESC: 【V10SPX科技与评测项目】【4.19】【安全加固】存在两项账户锁定项还原失败
  -       【V10SPX科技与评测项目】【内核版本5.15】【安全加固】root执行security-reinforce -f提示"请输入正确的正确的指令security-reinforce", 多了一个“正确的“
  -       添加security-reinforce-update-20231101.patch


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.05
changelog:
  - 修复安全切换之后，grub.cfg的中文变英文的bug
  -   add patch: security-switch-fix-bug-of-Chinese-to-English-in-grub.cfg.patch 
  - 开启三权分立时，不允许非root用户修改主机名
  - 开启三权分立时，允许用户断开、链接网络
  -   add patch: security-switch-allow-user-connection-network-and-no-hostname.patch
  - 开启三权分立时，允许secadm打开防火墙应用配置
  -   add patch: security-switch-firewall-configuration.patch
  - 执行 security_switch --get 时不写 /etc/security_custom.conf 文件
  - 修改 /etc/security_custom.conf 文件权限为0644 --spec文件
  -   add patch: security-switch-not-write-custom-mode-when-get-security.patch
  - 不允许同时启用selinux和apparmor
  -   add patch: security-switch-not-allow-enable-selinux-and-apparmor.patc
  - 解决普通用户可以通过开始菜单右键选择卸载系统应用
  -   add patch: security-switch-polkit-for-kylin-uninstaller.patch
  - 添加切换失败后回滚操作
  -   add patch: security-switch-add-retroversion-when-switch-failed.patch
  - security-switch取消能切换到同时开启selinux和apparmor的限制
  -   add patch: security-switch-allow-enable-selinux-and-appa.patch
  - Bug：#71255
  - 关闭安全后写状态值到状态文件中
  -   add patch: security-switch-echo-0-into-status-after-disable-kysec.patch
  - Bug:  #93603
  - 未开启三元时，安全中心修改密码有效期时不修改root、secadm、audadm密码过期时间；
  - 开启三元时需根据系统配置，设置三元用户密码过期时间；
  - 关闭三元时，设置三元用户密码不过期
  -   add patch: security-switch-set-sp_warn-and-sp_max-when-change-adm3.patch
  - Bug:  #93603
  - 修改密码过期时间前先检查用户是否存在
  -   add patch: security-switch-check-user-when-chage_spwd.patch
  - 同步桌面补丁到：1.2.7-21kylin


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.06
changelog:
  - 添加kysec_tpm配置
  -   add patch: security-switch-add-kysec-tpm.patch
  - 修改tpm获取状态的函数
  - 删除kysec-auth的检查
  -   add patch: security-switch-fix-tpm-getstatus-and-del-kysec-auth.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.09
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:彻底删除auto-resetpw选项
  -      添加补丁security-switch-delete-auto-resetpw-completely.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#145103]
  - SUG:NA
  - DESC: 关闭kysec后,不重启机器的情况下，在root用户下使用security-switch切换strict模式，保证kysec-daemon的启动用户是secadm
  -         add patch: security-switch-fix-not-reboot-set-strict-when-kysec-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: security-switch-fix-security-switch-disable-after-force-reboot-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#147592]
  - SUG:NA
  - DESC: 解决切换模式失败后，无法再次切换的问题
  -       add patch: security-switch-fix-can-not-excute-after-switch-failed.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#157825]
  - SUG:NA
  - DESC: 【安全模式】切换default模式后，概率性报核心已转储提示
  -       add patch: security-switch-add-client-thread-wait.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: security-switch-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: security-switch-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题，
  -	已合并secadm输错三次密码后仍可以切换状态的补丁
  -	  add patch: security-switch-fix-secadm-set-passwd-error-still-switch-mode.patch


author: anyunhao<anyunhao@kylinos.cn> - 3.3.20-4-p02
changelog:
  - TYPE:update
  - ID:[Task#187032]
  - SUG:NA
  - DESC:add patch 0001-Added-Hong-Kong-translation-support.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-10.se.01
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch
  -       添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch
  -       useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch
  -       off状态,-u参数默认getpwuid; on状态,-u使用uid_used
  -          add patch: shadow-chkuid-off-oflg-pwuid.patch
  -         add patch: shadow-get-chkuid-state.patch


author: mengchaogming<mengchaoming@kylinos.cn>-- 2:4.8.1-10.se.01.p01
changelog:
  - Type:update
  - ID:[Task#198754]
  - SUG:NA
  - DESC:支持香港繁体中文
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.02.p01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.03.p01
changelog:
  - Type: bugfix 
  - ID: [BUG#136126]
  - SUG:NA
  - DESC: useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-5.se.04.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: off状态,-u参数默认getpwuid; on状态,-u使用uid_used
          add patch: shadow-chkuid-off-oflg-pwuid.patch
          add patch: shadow-get-chkuid-state.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-5.se.06.p01
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch:backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-5.se.07.p01
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.10-4.p03
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add shared-mime-info-add-translation-for-hk.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: wangdi <wangdi@kylinos.cn> - 0.20.0-2.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: XiaoZai<xiaozai@kylinos.cn> - 1.6-1.p01
changelog:
  - Type:bugfix
  - ID:BUG#186959
  - SUG:NA
  - DESC: move file "pax.1.gz" from package "star" to package "star-help"


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: yangmingtai <yangmingtai@huawei.com> - 243-52
changelog:
  - fix some issue: 1.fix set blkio.bfq.weight 
                    2.udevadm fix --tag-match
                    3.fix check of Listen* arguments


author: caiyinan <caiyinan@kylinos.cn> - 243-55.p01
changelog:
  -- add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
     Change NTP server.
  -- add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
     Modify ctrl+alt+F2 switch to init5 stuck problem
  -- add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
     fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: wanghao <wanghao2@kylinos.cn> - 243-55.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 修复了当LSM堆叠启用时systemctl的selinux拒绝错误
  -         add patch: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p02.se.01
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p04.se.01
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          Remove gnu-efi check in loongarch64


author: yinyongkang <yinyongkang@kylinos.cn> - 243-55.p08.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch10030: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 243-55.p09.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SUG:NA
  - DESC:add backport-donot-open-CD-rom-use-exclusive-mode.patch，for ejecjt button


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p10.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p11.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#223633]
  - SUG:NA
  - DESC: Revert backport-udev-make-algorithm-that-selects-highest-priority-de.patch
          Revert patch to fix update device symlinks issue (similar #1942299)


author: wangshuo <wangshuo@kylinos.cn> - 243-55.p12.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#329354]
  - SUG:NA
  - DESC:add patch rc-local-order-after-network-online.target.patch
         fix rc-local service start failed


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p14.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-1.p01
changelog:
  - Type:update
  - ID:84598
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: lixiaoyong <lixiaoyong@kylinos.cn> - 2.1.5-3.p02
changelog:
  - Type:bugfix
  - ID:[BUG#212538]
  - SUG:NA
  - DESC:add patch 0002-translate-tracker-help-output-from-English-to-Chinese-HK.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: peijiankang <peijiankang@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add ukui-screensaver-add-translations-for-hk-and-tw.patch


author: yanglu<yanglu72@h-partners.com> - 1.11.0-6
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: Like <like@kylinos.cn> - 1.11.0-4.p02
changelog:
  - Type:cves
  - CVE:CVE-2022-3204 CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch 6,7 fix CVE-2022-3204,CVE-2023-50387,CVE-2023-50868,CVE-2024-1488


author: xiaozai <xiaozai@kylinos.cn> - 0.8.0-7.p01
changelog:
  - Type:bugfix
  - ID:BUG#177274
  - SUG:NA
  - DESC: add patch 0008-reset-parser-fields-on-unserialize.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-10.p09
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-10.p11
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p05
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p03
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p06
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-10.p10
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-10.p11
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


