# changelog

author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.57.v2207
changelog:
  - OPENEULER: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: icrypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Only wake up when ctx->more is zero (Herbert Xu) [task:622625]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.58.v2207
changelog:
  - MAILLIST: esp: Force skb_cow_data() on RX when the skb is non-linear (Hyunwoo Kim) [task:626683]
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [task:623091] {CVE-2026-31668}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.59.v2207
changelog:
  - MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:629903] {CVE-2026-46300}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.60.v2207
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Guopeng Zhang) [task:630943]
  - crypto: af_alg - Fix request acceptance condition in af_alg_tsgl_sendmsg (chengang) [task:629353]
  - crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek) [task:629353]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.62.v2207
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}
  - Revert "net/sched: act_pedit: check static offsets a priori" (luoxuanqiang)
  - Revert "net/sched: act_pedit: free pedit keys on bail from offset check" (luoxuanqiang)
  - Revert "net/sched: fix pedit partial COW leading to page cache corruption" (luoxuanqiang)
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}
  - net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [task:642737]
  - net/sched: act_pedit: check static offsets a priori (Pedro Tammela) [task:642737]
  - net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni) [task:162162]
  - net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni) [task:162162]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.63.v2207
changelog:
  - fix KABI change in eth_parse_header (YANGANG) [task:623005]
  - bonding: Fix kabi change in struct header_ops (Wang Yan) [task:623005]
  - bonding: prevent potential infinite loop in bond_header_parse() (Eric Dumazet) [task:623005]
  - bonding: fix type confusion in bond_setup_by_slave() (Jiayuan Chen) [task:623005]
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:634641]
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [task:634641] {CVE-2026-43503}
  - Revert "MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers" (Yun Lu) [task:634641]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.64.v2207
changelog:
  - KVM: x86: Fix shadow paging UAF from stale child pages (Jackie Liu) [task:649409] {CVE-2026-53359}
  - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Sebastian Andrzej Siewior) [task:633141]
  - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Ji'an Zhou) [task:633141]
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [task:633141]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [task:633141] {CVE-2026-43499}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.65.v2207
changelog:
  - seventhly update changelog for upcoming 4.19.90-52.65.v2207 (Zhengyuan Liu)
  - xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [task:657877] {CVE-2026-64600}
  - sixthly update changelog for upcoming 4.19.90-52.65.v2207 (Zhengyuan Liu)
  - Revert "scsi: lpfc: rport port swap discovery issue." (Zheng Tan) [task:656057]
  - Revert "scsi: lpfc: Rework remote port ref counting and node freeing" (Zheng Tan) [task:656057]
  - Revert "scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers" (Zheng Tan) [task:656057]
  - Revert "scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock" (Zheng Tan) [task:656057]
  - Revert "scsi: lpfc: Fix link down processing to address NULL pointer dereference" (Zheng Tan) [task:656057]
  - fifthly update changelog for upcoming 4.19.90-52.65.v2207 (Zhengyuan Liu)
  - Revert "sched/core: add __schedule() BUG_ON" (liwanwu) [task:652715]
  - fourthly update changelog for upcoming 4.19.90-52.65.v2207 (Zhengyuan Liu)
  - lib/nmi_backtrace: guard watchdog_thresh access with CONFIG_LOCKUP_DETECTOR (Qingshuang Fu) [task:652053, task:654623]
  - Revert "ASoC: soc-compress: Reposition and add pcm_mutex" (喻军) [task:654657] {CVE-2023-53866}
  - thirdly update changelog for upcoming 4.19.90-52.65.v2207 (Zhengyuan Liu)
  - team: fix header_ops type confusion with non-Ethernet ports (Jiayuan Chen) [task:623005] {CVE-2026-31502}
  - net: team: rename team to team_core for linking (Hangbin Liu) [task:623005]
  - ASoC: soc-compress: Reposition and add pcm_mutex (강신형) [task:570231] {CVE-2023-53866}
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim) [task:613769] {CVE-2026-23458}
  - netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal) [task:530227] {CVE-2025-39764}
  - netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [task:613769]
  - HID: core: Mitigate potential OOB by removing bogus memset() (Lee Jones) [task:624663] {CVE-2026-43048}
  - HID: core: Add printk_ratelimited variants to hid_warn() etc (Vicki Pfau) [task:624663]
  - xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [task:635893] {CVE-2026-46193}
  - net: ipv6: stop checking crypto_ahash_alignmask (Eric Biggers) [task:635893]
  - net: ipv4: stop checking crypto_ahash_alignmask (Eric Biggers) [task:635893]
  - ipv6: Use ipv6_authlen for len (yangxingwu) [task:635893]
  - netfilter: nf_log: validate MAC header was set before dumping it (Xiang Mei) [task:645495] {CVE-2026-52942}
  - sctp: diag: reject stale associations in dump_one path (Zhao Zhang) [task:645383] {CVE-2026-52917}
  - sctp: Hold sock lock while iterating over address list (Stefan Wiehler) [task:645383]
  - sctp: hold endpoint before calling cb in sctp_transport_lookup_process (Xin Long) [task:645383]
  - net: Use nlmsg_unicast() instead of netlink_unicast() (Yajun Deng) [task:645383]
  - thermal: core: Fix thermal zone governor cleanup issues (Rafael J. Wysocki) [task:635081] {CVE-2026-46021}
  - netrom: fix double-free in nr_route_frame() (Jeongjun Park) [task:593783] {CVE-2026-23098}
  - io-wq: check that the predecessor is hashed in io_wq_remove_pending() (Nicholas Carlini) [task:639739] {CVE-2026-46274}
  - sched/core: add __schedule() BUG_ON (liwanwu) [task:617571]
  - ipvs: clear the svc scheduler ptr early on edit (Julian Anastasov) [task:646245] {CVE-2026-53270}
  - sctp: purge outqueue on stale COOKIE-ECHO handling (Xin Long) [task:645419] {CVE-2026-52924}
  - netfilter: xt_policy: fix strict mode inbound policy matching (Jiexun Wang) [task:645409] {CVE-2026-52920}
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [task:635917] {CVE-2026-46209}
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [task:624605] {CVE-2026-31786}
  - dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [task:639721] {CVE-2026-46294}
  - apparmor: validate DFA start states are in bounds in unpack_pdb (Massimiliano Pellizzer) [task:606243] {CVE-2026-23269}
  - slip: bound decode() reads against the compressed packet length (Weiming Shi) [task:636341] {CVE-2026-45843}
  - atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey) [task:624649] {CVE-2026-43050}
  - libceph: Fix slab-out-of-bounds access in auth message processing (Raphael Zimmer) [task:635827] {CVE-2026-46119}
  - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (Raphael Zimmer) [task:635055] {CVE-2026-46024}
  - isofs: validate Rock Ridge CE continuation extent against volume size (Michael Bommarito) [task:639729] {CVE-2026-46303}
  - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (Chaitanya Kulkarni) [task:639705] {CVE-2026-46304}
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" (Guenter Roeck) [task:636309] {CVE-2026-45914}
  - wifi: b43: enforce bounds check on firmware key index in b43_rx() (Tristan Madani) [task:635947] {CVE-2026-46122}
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Maoyi Xie) [task:635945] {CVE-2026-46120}
  - dm: clear cloned request bio pointer when last clone bio completes (Michael Liang) [task:626309] {CVE-2026-43278}
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [task:635925] {CVE-2026-46178}
  - wifi: b43legacy: enforce bounds check on firmware key index in RX path (Tristan Madani) [task:635911] {CVE-2026-46163}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (Jinliang Zheng) [task:638101] {CVE-2026-46259}
  - pstore/ram: fix buffer overflow in persistent_ram_save_old() (Sai Ritvik Tanksalkar) [task:638091] {CVE-2026-46253}
  - MIPS: Work around LLVM bug when gp is used as global register variable (Yao Zi) [task:638077] {CVE-2026-46250}
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Greg Kroah-Hartman) [task:635875] {CVE-2026-46149}
  - RDMA/rxe: Reject unknown opcodes before ICRC processing (Michael Bommarito) [task:635873] {CVE-2026-46133}
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin) [task:636377] {CVE-2026-46043}
  - io_uring/poll: serialize poll linked timer start with poll removal (Jens Axboe) [task:614479] {CVE-2023-3389}
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Yi Liu) [task:636373] {CVE-2026-45856}
  - ALSA: mixer: oss: Add card disconnect checkpoints (Takashi Iwai) [task:626435] {CVE-2026-43126}
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (Mehul Rao) [task:627867] {CVE-2026-43437}
  - ALSA: pcm: fix wait_time calculations (Oswald Buddenhagen) [task:627867]
  - ipmi: Add limits to event and receive message requests (Corey Minyard) [task:635825] {CVE-2026-46177}
  - net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu) [task:636331] {CVE-2026-46102}
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey) [task:636303] {CVE-2026-46056}
  - crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu) [task:636363] {CVE-2026-46033}
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [task:636021] {CVE-2026-46189}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (Ben Morris) [task:635971] {CVE-2026-46227}
  - Input: uinput - fix circular locking dependency with ff-core (Mikhail Gavrilov) [task:623195] {CVE-2026-31667}
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (Hangbin Liu) [task:636347] {CVE-2026-45970}
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (Jiayuan Chen) [task:626195] {CVE-2026-43139}
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [task:623183] {CVE-2026-31685}
  - md/raid5: validate payload size before accessing journal metadata (Junrui Luo) [task:635039] {CVE-2026-46070}
  - net/rds: handle zerocopy send cleanup before the message is queued (Nan Li) [task:633147] {CVE-2026-43502}
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [task:627995] {CVE-2026-43304}
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Herbert Xu) [task:632493] {CVE-2026-43493}
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov) [task:609583] {CVE-2026-23336}
  - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() (Yongpeng Yang) [task:624669] {CVE-2026-31715}
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman) [task:627827] {CVE-2026-43466}
  - rnbd-srv: Zero the rsp buffer before using it (Md Haris Iqbal) [task:626345] {CVE-2026-43184}
  - block/rnbd: server: main functionality (Jack Wang) [task:626345]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [task:626329] {CVE-2026-43190}
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim) [task:627667] {CVE-2026-43450}
  - dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [task:626307] {CVE-2026-43071}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (Darrick J. Wong) [task:626303] {CVE-2026-43158}
  - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (Sunday Clement) [task:626301] {CVE-2026-43206}
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [task:527565] {CVE-2025-38724}
  - drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu) [task:627973] {CVE-2026-43370}
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes Möller) [task:626495] {CVE-2026-43062}
  - Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails (Luiz Augusto von Dentz) [task:626495]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull) [task:627999] {CVE-2026-43452}
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer) [task:627903] {CVE-2026-43407}
  - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (Goldwyn Rodrigues) [task:626261] {CVE-2026-43117}
  - atm: fore200e: fix use-after-free in tasklets during device removal (Duoming Zhou) [task:626469] {CVE-2026-43203}
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (Ziyi Guo) [task:626467] {CVE-2026-43180}
  - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [task:626445] {CVE-2026-43075}
  - ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [task:626445]
  - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() (Dmitry Antipov) [task:626445]
  - ocfs2: add suballoc slot check in ocfs2_validate_inode_block() (Dmitry Antipov) [task:626445]
  - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim) [task:627877] {CVE-2026-43449}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Vahagn Vardanian) [task:626431] {CVE-2026-43233}
  - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch) [task:626415] {CVE-2026-43226}
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi) [task:440428] {CVE-2025-21722}
  - Squashfs: check return result of sb_min_blocksize (Phillip Lougher) [task:505975] {CVE-2025-38415}
  - f2fs: fix to do sanity check on curseg->alloc_type (Chao Yu) [task:440616] {CVE-2022-49170}
  - f2fs: fix to avoid out-of-boundary access in dnode page (Chao Yu) [task:525257] {CVE-2025-38677}
  - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk (void0red) [task:531463] {CVE-2022-50300}
  - net: consume xmit errors of GSO frames (Jakub Kicinski) [task:626407] {CVE-2026-43194}
  - net/rds: Clear reconnect pending bit (Håkon Bugge) [task:626165] {CVE-2026-43230}
  - fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [task:567351] {CVE-2025-40271}
  - xfrm: Wait for RCU readers during policy netns exit (Steffen Klassert) [task:626171] {CVE-2026-43091}
  - arm64/debug: Fix false hardlockup during NMI backtrace on HiSilicon (Zhou Yuhang) [bug:426027]
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [task:626515] {CVE-2026-43093}
  - HID: roccat: fix use-after-free in roccat_report_event (Benoît Sevens) [task:626471] {CVE-2026-43111}
  - xfs: delete attr leaf freemap entries when empty (Darrick J. Wong) [task:626143] {CVE-2026-43187}
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Benoît Sevens) [task:624527] {CVE-2026-43051}
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [task:624561] {CVE-2026-43037}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li) [task:624671] {CVE-2026-31759}
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel) [task:624621] {CVE-2026-31778}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (Oleh Konko) [task:624607] {CVE-2026-31773}
  - HID: multitouch: Check to ensure report responses match the request (Lee Jones) [task:624627] {CVE-2026-43047}
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [task:624687] {CVE-2026-43028}
  - Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong) [task:624585] {CVE-2026-43020}
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang) [task:624689] {CVE-2026-43027}
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich) [task:624681] {CVE-2026-43040}
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai) [task:624483] {CVE-2026-31776}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet) [task:624441] {CVE-2026-43038}
  - ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike) [task:622895] {CVE-2026-31447}
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [task:622739] {CVE-2026-31586}
  - ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [task:623131] {CVE-2026-31581}
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [task:623127] {CVE-2026-31673}
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [task:623111] {CVE-2026-31588}
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang) [task:623073] {CVE-2026-31680}
  - bcache: fix uninitialized closure object (Mingzhe Zou) [task:623065]
  - bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [task:623065] {CVE-2026-31580}
  - net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [task:623283] {CVE-2026-31504}
  - media: em28xx: fix use-after-free in em28xx_v4l2_open() (Abhishek Kumar) [task:623275] {CVE-2026-31583}
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko) [task:623271] {CVE-2026-31662}
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei) [task:623249] {CVE-2026-31674}
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [task:623239] {CVE-2026-31449}
  - ext4: prevent partial update of the extents path (Baokun Li) [task:623239]
  - ext4: refactor ext4_ext_rm_idx() to index 'path' (Baokun Li) [task:623239]
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY (Tejas Bharambe) [task:622671] {CVE-2026-31597}
  - net: stmmac: fix integer underflow in chain mode (Tyllis Xu) [task:623017] {CVE-2026-31649}
  - ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [task:622997] {CVE-2026-31602}
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write (Joseph Qi) [task:622737] {CVE-2026-31598}
  - fs/ocfs2: fix comments mentioning i_mutex (hongnanli) [task:622737]
  - bridge: br_nd_send: linearize skb before parsing ND options (Yang Yang) [task:622565] {CVE-2026-31682}
  - nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny) [task:613207] {CVE-2026-31399}
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes Möller) [task:614617] {CVE-2026-31393}
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Möller) [task:614715] {CVE-2026-23457}
  - net: macb: fix use-after-free access to PTP clock (Fedor Pchelkin) [task:614691] {CVE-2026-31396}
  - media: dvb-net: fix OOB access in ULE extension header tables (Ariel Silver) [task:614553] {CVE-2026-31405}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu) [task:614531] {CVE-2026-23456}
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [task:614517] {CVE-2026-23455}
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (Massimiliano Pellizzer) [task:611571] {CVE-2026-23407}
  - apparmor: add a valid state flags check (John Johansen) [task:611571]
  - apparmor: fix side-effect bug in match_char() macro usage (Massimiliano Pellizzer) [task:611403] {CVE-2026-23406}
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [task:597221]
  - macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [task:597221] {CVE-2026-23209}
  - nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi) [task:609589] {CVE-2026-23397}
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso) [task:609483] {CVE-2026-23391}
  - Squashfs: check metadata block offset is within range (Phillip Lougher) [task:609487] {CVE-2026-23388}
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo) [task:609105] {CVE-2026-23318}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [task:596717] {CVE-2026-23193}
  - wifi: iwlwifi: fix 22000 series SMEM parsing (Johannes Berg) [task:626465] {CVE-2026-43172}
  - wifi: iwlwifi: allow IWL_FW_CHECK() with just a string (Johannes Berg) [task:626465]
  - wifi: iwlwifi: add some FW misbehaviour check infrastructure (Johannes Berg) [task:626465]
  - wifi: iwlwifi: debug: fix crash in __iwl_err() (Johannes Berg) [task:626465]
  - iwlwifi: allow rate-limited error messages (Johannes Berg) [task:626465]
  - openvswitch: vport: fix self-deadlock on release of tunnel ports (Ilya Maximets) [task:622901]
  - openvswitch: defer tunnel netdev_put to RCU release (Yang Yang) [task:622901] {CVE-2026-31678}
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do) [task:623171] {CVE-2026-31665}
  - wifi: ath5k: do not access array OOB (Jiri Slaby (SUSE)) [task:639699] {CVE-2026-46307}
  - iommu/amd: move wait_on_sem() out of spinlock (Ankit Soni) [task:626367] {CVE-2026-43253}
  - xen/privcmd: fix double free via VMA splitting (Juergen Gross) [task:624717] {CVE-2026-31787}
  - fbcon: Avoid OOB font access if console rotation fails (Thomas Zimmermann) [task:635889] {CVE-2026-46191}
  - sched: fix compilation errors caused by the rqlock record (liwanwu) [task:645243]
  - ext4: always drain queued discard work in ext4_mb_release() (Theodore Ts'o) [task:636875]
  - ext4: convert sbi->s_mb_free_pending to atomic_t (Baokun Li) [task:636875]
  - ext4: make running and commit transaction have their own freed_data_list (Jinke Han) [task:636875]
  - ext4: flush background discard kwork when retry allocation (Wang Jianchao) [task:636875]
  - ext4: shrink race window in ext4_should_retry_alloc() (Eric Whitney) [task:636875]
  - ext4: get discard out of jbd2 commit kthread contex (Wang Jianchao) [task:636875]
  - ext4: remove the repeated comment of ext4_trim_all_free (Wang Jianchao) [task:636875]
  - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (Weiming Shi) [task:635413] {CVE-2026-45839}
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Eric Dumazet) [task:638075] {CVE-2026-46266}
  - crypto: af_alg - Fix regression on empty requests (Herbert Xu) [task:642503]
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Yasuaki Torimaru) [task:624513] {CVE-2026-31780}
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption (Yucheng Lu) [task:622681] {CVE-2026-31675}
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Deepanshu Kartikey) [task:624641] {CVE-2026-43052}
  - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger (Takashi Iwai) [task:635877] {CVE-2026-46157}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (Cássio Gabriel) [task:635373] {CVE-2026-46090}
  - ALSA: aloop: Rename all jiffies timer specific functions (Timo Wischer) [task:635373]
  - ALSA: aloop: Use callback functions for timer specific implementations (Timo Wischer) [task:635373]
  - ALSA: aloop: Support return of error code for timer start and stop (Timo Wischer) [task:635373]
  - kabi: Use KABI_EXTEND to fix kabi break in struct file_lock (Zhao Mengmeng) [task:627261]
  - secondly update changelog for upcoming 4.19.90-52.65.v2207 (Zhengyuan Liu)
  - bonding: add slave_foo printk macros (Jarod Wilson) [task:593609]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Pablo Neira Ayuso) [task:626475] {CVE-2026-43116}
  - bpf: Avoid storing modifier to info->btf_id (Martin KaFai Lau) [bug:580497]
  - cpupower: fix TSC MHz calculation (He Rongguang) [bug:585843]
  - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) [task:166857]
  - net: add a sysctl interface for SO_REUSEPORT socket option setting (zhulei) [task:639891]
  - kabi: fix kabi break caused by addition in struct file_lock (Zhao Mengmeng) [task:627261]
  - ceph: avoid use-after-free in ceph_fl_release_lock() (Xiubo Li) [task:627261]
  - ceph: check if file lock exists before sending unlock request (Yan, Zheng) [task:627261]
  - ceph: switch to vfs_inode_has_locks() to fix file lock bug (Xiubo Li) [task:627261]
  - filelock: new helper: vfs_inode_has_locks (Jeff Layton) [task:627261]
  - ceph: return -EIO if read/write against filp that lost file locks (Yan, Zheng) [task:627261]
  - sched: add stack record for rq lock (Wanwu Li) [task:569877]
  - SUNRPC/cache: don't allow invalid entries to be flushed (J. Bruce Fields) [bug:582829]
  - SUNRPC/cache: Allow garbage collection of invalid cache entries (Trond Myklebust) [bug:582829]
  - xfs: fix TOCTOU race in xfs_log_force_umount IOERROR check (Chi Zhiling) [task:584559, task:536191]
  - waive CVE-2025-38085 security fix via kernel parameter (liuye) [task:634893]
  - OPENEULER: genirq: Increase the number of IRQ descriptors (Kunkun Jiang) [task:632897]
  - wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou) [task:626371] {CVE-2026-43110}
  - isofs: validate block number from NFS file handle in isofs_export_iget (Michael Bommarito) [task:635849] {CVE-2026-46124}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira) [task:624589] {CVE-2026-31758}
  - USB: usbtmc: prevent kernel-usb-infoleak (Edward Adam Davis) [task:624589]
  - usb: usbtmc: Add ioctl for vendor specific write (Guido Kiener) [task:624589]
  - tcp: Add memory barrier to tcp_push() (Salvatore Dipietro) [task:613823]
  - tcp: tcp_wfree() refactoring (Eric Dumazet) [task:613823]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso) [task:626421] {CVE-2026-43060}
  - drm/ast: PowerOn and SetOn DP when commit (Shixiong Ou) [bug:490675]
  - RDMA/umad: Reject negative data_len in ib_umad_write (YunJe Shin) [task:606433] {CVE-2026-23243}
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (Cen Zhang) [task:623217] {CVE-2026-31500}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [task:622523] {CVE-2026-31607}
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - netfilter: nf_conntrack_expect: use expect->helper (Pablo Neira Ayuso) [task:616139] {CVE-2026-31414}
  - i2c: i801: Fix block process call transactions (Jean Delvare) [bug:552725]
  - i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit) [bug:552725]
  - i2c: i801: Add support for Intel Alder Lake PCH-M (Jarkko Nikula) [bug:552725]
  - i2c: i801: Bring back Block Process Call support for certain platforms (Jarkko Nikula) [bug:552725]
  - i2c: i801: Use iTCO version 6 in Cannon Lake PCH and beyond (Mika Westerberg) [bug:552725]
  - i2c: i801: Add Block Write-Block Read Process Call support (Alexander Sverdlin) [bug:552725]
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang) [task:622889] {CVE-2026-31663}
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu) [task:622889]
  - xen/privcmd: unregister xenstore notifier on module exit (GuoHan Zhao) [task:622715]
  - xen/privcmd: restrict usage in unprivileged domU (Juergen Gross) [task:622715] {CVE-2026-31788}
  - f2fs: fix out-of-bounds access in sysfs attribute read/write (Yongpeng Yang) [task:600181] {CVE-2026-23235}
  - f2fs: fix to avoid UAF in f2fs_write_end_io() (Chao Yu) [task:600273] {CVE-2026-23234}
  - Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz) [task:613213] {CVE-2026-23462}
  - ALSA: aloop: Fix racy access at PCM trigger (Takashi Iwai) [task:597107] {CVE-2026-23191}
  - ALSA: aloop: Introduce a function to get if access is interleaved mode (Chancel Liu) [task:597107]
  - ALSA: aloop: Add control element for getting the access mode (Ivan Orlov) [task:597107]
  - ALSA: aloop: Add support for the non-interleaved access mode (Ivan Orlov) [task:597107]
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [task:623139] {CVE-2026-31532}
  - drivers: base: Free devm resources when unregistering a device (David Gow) [task:540545] {CVE-2023-53596}
  - ext4: no need to verify new add extent block (yangerkun) [task:613187]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Zicheng Qu) [task:613155]
  - sched/fair: Prevent unlimited runtime on throttled group (Vincent Guittot) [task:613155]
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim) [task:614475] {CVE-2026-31408}
  - md: fix soft lockup in status_resync (Yu Kuai) [task:540081] {CVE-2023-53620}
  - md: don't update recovery_cp when curr_resync is ACTIVE (Hou Tao) [task:540081]
  - md: Ensure resync is reported after it starts (Logan Gunthorpe) [task:540081]
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync (Logan Gunthorpe) [task:540081]
  - media: mceusb: Use new usb_control_msg_*() routines (Alan Stern) [task:482237] {CVE-2022-49937}
  - USB: correct API of usb_control_msg_send/recv (Oliver Neukum) [task:482237]
  - USB: core: message.c: use usb_control_msg_send() in a few places (Greg Kroah-Hartman) [task:482237]
  - USB: add usb_control_msg_send() and usb_control_msg_recv() (Greg Kroah-Hartman) [task:482237]
  - USB: move snd_usb_pipe_sanity_check into the USB core (Greg Kroah-Hartman) [task:482237]
  - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (Li Zetao) [task:149541]
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [task:593609] {CVE-2026-23099}
  - bonding: combine netlink and console error messages (Jonathan Toppins) [task:593609]
  - MAINTAINERS: remove inactive maintainers (Haofeng.Li) [task:636057]
  - MAILLIST: net/rds: reset op_nents when zerocopy page pin fails (Allison Henderson) [task:632491]
  - update changelog for upcoming 4.19.90-52.65.v2207 (Zhengyuan Liu)
  - sched/fair: Add ancestors of unthrottled undecayed cfs_rq (Michal Koutný) [task:620621]
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (Zecheng Li) [task:625243]
  - sched/fair: Ensure that the CFS parent is added after unthrottling (Rik van Riel) [task:625243]
  - scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi) [task:540087, task:149541] {CVE-2022-50493}
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [task:626683] {CVE-2026-43284}
  - Revert "MAILLIST: esp: Force skb_cow_data() on RX when the skb is non-linear" (Jackie Liu)
  - Revert "KVM: VMX: Fix crash due to uninitialized current_vmcs" (张浩) [task:567629]
  - arm64: set __exception_irq_entry with __irq_entry as a default (Youngmin Nam) [task:578141] {CVE-2023-54322}
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Takashi Iwai) [task:567349] {CVE-2025-40269}
  - ALSA: usb-audio: Replace s/frame/packet/ where appropriate (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Fix packet size calculation (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Improve frames size computation (Alexander Tsoy) [task:567349]
  - lsm: Fix uncleaned security domain in inode init (mengdehui) [task:624405]
  - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) [task:540523] {CVE-2023-53641}
  - KVM: VMX: Fix crash due to uninitialized current_vmcs (Alexandru Matei) [task:567629] {CVE-2023-53756}
  - security/lsm: Fix crash empty inode security field (mengdehui) [task:616919]
  - uio_hv_generic: Fix another memory leak in error handling paths (Christophe JAILLET) [task:546609]
  - uio_hv_generic: Fix a memory leak in error handling paths (Christophe JAILLET) [task:546609]
  - scsi: storvsc: Fix a race in sub-channel creation that can cause panic (Dexuan Cui) [task:546609]
  - uio_hv_generic: set callbacks on open (Stephen Hemminger) [task:546609]
  - uio_hv_generic: Let userspace take care of interrupt mask (Naman Jain) [task:546609] {CVE-2025-40048}
  - uio_hv_generic: defer opening vmbus until first use (Stephen Hemminger) [task:546609]
  - vmbus: fix subchannel removal (Dexuan Cui) [task:546609]
  - vmbus: split ring buffer allocation from open (Stephen Hemminger) [task:546609]
  - vmbus: pass channel to hv_process_channel_removal (Stephen Hemminger) [task:546609]
  - hv_uio_generic: map ringbuffer phys addr (Stephen Hemminger) [task:546609]
  - KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace (Sean Christopherson) [task:461068] {CVE-2022-49932}
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden) [task:533597]
  - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) [task:533597] {CVE-2023-53446}
  - PCI/ASPM: Remove unused lists from struct pcie_link_state (Frederick Lawler) [task:533597]
  - xfrm: state: fix out-of-bounds read during lookup (Florian Westphal) [task:440697] {CVE-2024-57982}
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [task:554177] {CVE-2025-40149}
  - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala) [task:554177]
  - net/tls: Device offload to use lowest netdevice in chain (Tariq Toukan) [task:554177]
  - net: netdevice: Add operation ndo_sk_get_lower_dev (Tariq Toukan) [task:554177]
  - ext4: fix kabi error due to IMA readcount (liubaolin) [task:606289]
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein) [task:606289]
  - locks: eliminate false positive conflicts for write lease (Amir Goldstein) [task:606289]
  - locks: Use inode_is_open_for_write (Nikolay Borisov) [task:606289]
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin) [task:577961] {CVE-2022-50829}
  - ath9k: Fix regression with Atheros 9271 (Mark O'Donovan) [task:577961]
  - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (Qiujun Huang) [task:577961]
  - sched/fair: Prevent dead task groups from regaining cfs_rq's (Mathias Krause) [task:600509]
  - sched/fair: Correctly insert cfs_rq's to list on unthrottle (Odin Ugedal) [task:600509]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Anil Gurumurthy) [task:600165] {CVE-2025-71238}
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Manish Rangankar) [task:600165]
  - scsi: qla2xxx: Fix sparse warning for dport_data (Nilesh Javali) [task:600165]
  - scsi: qla2xxx: Add a new v2 dport diagnostic feature (Bikash Hazarika) [task:600165]
  - scsi: qla2xxx: Add support for mailbox passthru (Bikash Hazarika) [task:536567, task:600165]
  - scsi: qla2xxx: edif: Add extraction of auth_els from the wire (Quinn Tran) [task:149541, task:600165]
  - scsi: qla2xxx: edif: Add send, receive, and accept for auth_els (Quinn Tran) [task:149541, task:600165]
  - scsi: qla2xxx: Add heartbeat check (Quinn Tran) [task:149541, task:600165]
  - scsi: qla2xxx: edif: Add start + stop bsgs (Quinn Tran) [task:149541, task:600165]
  - net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [task:597119] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Eric Dumazet) [task:597119]
  - fix kabi issue for "clocksource: Reduce clocksource-skew threshold" (Wang Yan) [task:618319]
  - OPENEULER: PCI: Fix AB-BA deadlock between aer_isr() and device_shutdown() (Ziming Du) [task:612083]
  - PCI: Fix pci_slot_trylock() error handling (Jinhui Guo) [task:612081]
  - fs: move file_start_write() into direct_splice_actor() (Amir Goldstein) [task:604191, task:607439]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Thomas Gleixner) [task:608211]
  - clocksource: Set cs_watchdog_read() checks based on .uncertainty_margin (Paul E. McKenney) [task:608211]
  - clocksource: Reduce clocksource-skew threshold (Paul E. McKenney) [task:608211]
  - xfs: check buffer pin state after locking in delwri_submit (Dave Chinner) [task:602811]
  - vga: ignore gpu which support SRIOV to use as boot_vga. (Lu Yao) [task:603255]
  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe) [task:606387] {CVE-2026-23253}
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [task:606589] {CVE-2026-23274}
  - tcp: add a fast path in tcp_delack_timer() (Eric Dumazet) [task:603877]
  - tcp: add a fast path in tcp_write_timer() (Eric Dumazet) [task:603877]
  - tcp: annotate data-races around icsk->icsk_pending (Eric Dumazet) [task:603877]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [task:535605] {CVE-2025-39883}
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin) [task:569275] {CVE-2022-50630}
  - tls: separate no-async decryption request handling from async (Sabrina Dubroca) [task:525255] {CVE-2024-58240}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [task:596501] {CVE-2026-23216}
  - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd (Jedrzej Jagielski) [task:547735]
  - ixgbevf: fix mailbox API compatibility by negotiating supported features (Jedrzej Jagielski) [task:547735] {CVE-2025-40104}
  - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation (Jedrzej Jagielski) [task:514421]
  - ixgbevf: fix getting link speed data for E610 devices (Jedrzej Jagielski) [task:547735]
  - ixgbe: downgrade logging of unsupported VF API version to debug (Jacob Keller) [task:547735]
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (Jacob Keller) [task:547735]
  - ixgbevf: Add support for new mailbox communication between PF and VF (Radoslaw Tyl) [task:547735]
  - ixgbevf: Mailbox improvements (Radoslaw Tyl) [task:547735]
  - ixgbevf: Add legacy suffix to old API mailbox functions (Radoslaw Tyl) [task:547735]
  - ixgbevf: Improve error handling in mailbox (Radoslaw Tyl) [task:547735]
  - ixgbevf: Rename MSGTYPE to SUCCESS and FAILURE (Radoslaw Tyl) [task:547735]
  - net/ixgbevf: make array api static const, makes object smaller (Colin Ian King) [task:547735]
  - arm64: fpsimd: Always set TIF_FOREIGN_FPSTATE on task state flush (Dave Martin) [task:150352, task:616369]
  - firmware: arm_sdei: Fix sleep from invalid context BUG (Pierre Gondois) [task:576557] {CVE-2023-54160}
  - hfsplus: Verify inode mode when loading from disk (Tetsuo Handa) [task:589047] {CVE-2025-68767}
  - x86/apic: Don't disable x2APIC if locked (Daniel Sneddon) [task:576759] {CVE-2022-50720}
  - f2fs: invalidate dentry cache on failed whiteout creation (Deepanshu Kartikey) [task:590061] {CVE-2025-71069}
  - udf: Detect system inodes linked into directory hierarchy (Jan Kara) [task:544663] {CVE-2023-53695}
  - udf: Preserve link count of system files (Jan Kara) [task:544663]
  - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) [task:540523] {CVE-2023-53667}
  - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero (Lee Jones) [task:540523]
  - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang) [task:531891] {CVE-2022-50267}
  - locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin) [task:162162]
  - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Fedor Pchelkin) [task:569909] {CVE-2023-53802}
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai) [task:543043]
  - block, bfq: fix uaf for accessing waker_bfqq after splitting (Yu Kuai) [task:543043] {CVE-2024-49854}
  - block, bfq: make shared queues inherit wakers (Paolo Valente) [task:162162, task:543043]
  - block, bfq: make waker-queue detection more robust (Paolo Valente) [task:162162, task:543043]
  - block, bfq: move update of waker and woken list to queue freeing (Paolo Valente) [task:150547, task:543043]
  - block, bfq: replace mechanism for evaluating I/O intensity (Paolo Valente) [task:162162, task:543043]
  - block, bfq: increase time window for waker detection (Paolo Valente) [task:162162, task:543043]
  - block, bfq: reset last_completed_rq_bfqq if the pointed queue is freed (Paolo Valente) [task:150547, task:543043]
  - block, bfq: detect wakers and unconditionally inject their I/O (Paolo Valente) [task:150547, task:543043]
  - block, bfq: reset inject limit when think-time state changes (Paolo Valente) [task:150547, task:543043]
  - block, bfq: tune service injection basing on request service times (Paolo Valente) [task:150547, task:543043]
  - block, bfq: split function bfq_better_to_idle (Paolo Valente) [task:150547, task:543043]
  - block, bfq: consider also ioprio classes in symmetry detection (Paolo Valente) [task:150547, task:543043]
  - virtgpu: don't reset on shutdown (Michael S. Tsirkin) [task:482143]
  - virtio: break and reset virtio devices on device_shutdown() (Michael S. Tsirkin) [task:482143] {CVE-2025-38064}
  - virtio: introduce config op to synchronize vring callbacks (Jason Wang) [task:482143]
  - md/raid10: fix memleak of md thread (Yu Kuai) [task:578087] {CVE-2023-54294}
  - Revert "scsi: qla2xxx: Fix buffer overrun" (Nilesh Javali) [task:536567, bug:510163]
  - ring-buffer: Do not swap cpu_buffer during resize process (Chen Lin) [task:161887]
  - sched: add lightweight tracing for rq lock (liwanwu) [task:569877]
  - sched/core: Extend struct rq (Bing Huang) [task:569877]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.66.v2207
changelog:
  - update changelog for upcoming 4.19.90-52.66.v2207 (Zhengyuan Liu)
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (Jun Yang) [task:662509] {CVE-2026-64564}
  - x86/tsc: Defer marking TSC unstable to a worker (Thomas Gleixner) [task:657515]
  - x86/smpboot: Make TSC synchronization function call based (Thomas Gleixner) [task:657515]
  - xfs: take the ILOCK when readdir inspects directory mapping data (Darrick J. Wong) [task:649905]
  - xfs: namecheck directory entry names before listing them (Darrick J. Wong) [task:649905]
  - xfs: check directory name validity (Darrick J. Wong) [task:649905]
  - xfs: add agfl_reserve mount option to enable AGFL fixup reserve (zhangshida) [task:640037]
  - OPENEULER: xfs: reserve free space for repeated AGFL fixups (Jackie Liu) [task:640037]
  - Revert "OPENEULER: iomap: add support to track dirty state of sub pages" (Jackie Liu) [task:652881]
  - fs: Fix page_mkwrite off-by-one errors (Andreas Gruenbacher)
  - iomap: avoid avoid truncating 64-bit offset to 32 bits (Marco Nelissen) [task:652881]
  - iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release (Christoph Hellwig) [task:652881]
  - iomap: Fix possible overflow condition in iomap_write_delalloc_scan (Ritesh Harjani (IBM)) [task:652881]
  - xfs: drop write error injection is unfixable, remove it (Dave Chinner) [task:652881]
  - xfs: use iomap_valid method to detect stale cached iomaps (Dave Chinner) [task:652881]
  - iomap: write iomap validity checks (Dave Chinner) [task:652881]
  - xfs: xfs_bmap_punch_delalloc_range() should take a byte range (Dave Chinner) [task:652881]
  - iomap: buffered write failure should not truncate the page cache (Dave Chinner) [task:652881]
  - xfs,iomap: move delalloc punching to iomap (Dave Chinner) [task:652881]
  - xfs: use byte ranges for write cleanup ranges (Dave Chinner) [task:652881]
  - xfs: punching delalloc extents on write failure is racy (Dave Chinner) [task:652881]
  - xfs: write page faults in iomap are not buffered writes (Dave Chinner) [task:652881]
  - iomap: Fix overflow in iomap_page_mkwrite (Andreas Gruenbacher) [task:652881]


author: jinzhiguang <jinzhiguang@kylinos.cn> - 0.11.0-8.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-fix-non-trivial-designated-initializers.patch
  	0001-use-btf_dump__new_deprecated.patch


author: lijian1 <lijian1@kylinos.cn> - 0.11.0-8.p02
changelog:
  - Type: Bugfix
  - ID: TASK#218577
  - SUG: NA
  - DESC: fix percpu map without args, c07f23af3507e0b4971ec4343523d976a048b078,
          3f2b438c8b497129f952531375429b1a93e7620d,39f3996d17f88124acc0170b8659e0856555043a
          3fbe73909e009a6741faed1c444daffed478395e;add patch 0005 for so path;add 0006 for tcpdrop.bt.


author: HouHongxun <houhongxun@kylinos.cn>-3.12.2-8.p06
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation.patch


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lijian <lijian2@kylinos.cn> - 1:1.31.1-35
changelog:
  - Type:cves
  - ID:CVE-2026-38754
  - SUG:NA
  - DESC:re-fix CVE-2026-38754, clear stale IFS state on expansion error


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p37
changelog:
  - Type: bugfix
  - ID:   [BUG#340468]
  - SUG:  NA
  - DESC: don't free memory that was not dynamically allocated


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p39
changelog:
  - Type: update
  - ID:   [TASK#500863]
  - SUG:  NA
  - DESC: fix nonremovable disks incorrectly placed under removable disks


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-1.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add caja-extensions-add-translation-for-hk.patch


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-Add-missing-position-handling-to-mount-parameters-gi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-cifs-utils-fix-probabilistic-compiling-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-mount.cifs-fix-max-buffer-size-when-parsing-snapshot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-mount.cifs-fix-crash-when-mount-point-does-not-exist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-cifs.upcall-fix-regression-in-kerberos-mount.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-cifs.upcall-remove-getpwuid-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangqiang <wangqiang1@kylinos.cn> - 10.0.1-4.p01
changelog:
  - Type:BUGFIX
  - ID:[bug#172007]
  - SUG:NA
  - DESC:Add compile option -DCLANG_LINK_CLANG_DYLIB=ON, -DBUILD_SHARED_LIBS=OFF


author: caiyinan <caiyinan@kylinos.cn> - 196.3-1.p06
changelog:
  - Type:bugfix
  - ID:[bug#186959]
  - SUG:NA
  - DESC:fix unlinked other OS branding file by excluding from packages


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: Lihx <lihaoxiang@kylinos.cn> - 8.32-1.p03
changelog:
  - update to 8.32 for kylin
  - Migrate patch p01 and p02 to version 8.32-1
  - Add color display.zhangqiang <zhangqiang@kylinos.cn>
  - disable check.ouyangkang <ouyangkang@kylinos.cn>


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: gaoyukun <gaoyukun@kylinos.cn> - 7.71.1-43.p01
changelog:
  - Type:bugfix
  - ID:TASK#414527
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers', resolve test1592,507,534 failure.


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-47
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-50
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: zhaoqingyou<zhaoqingyou@kylinos.com> - 1:1.12.16-19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#85132]
  - SUG:NA
  - DESC: Add Patch7000:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: lijiaan <lijiaan@kylinos.cn> - 1.0.0.rc16-52.p01
changelog:
  - modify spec  after %build  add cp /usr/lib/rpm/kylin/confit.* ./autoconf
  - DESC: config.guess and config.sub ensure the software can be compiled and
    run correctly in a variety of different system env.


author: yanshuai <yanshuai01@kylinos.cn> - 1.0.0.rc16-52.p03
changelog:
  - Type: bugfix
  - ID: [BUG#302327]
  - SUG: NA
  - DESC: fix dmraid help info display incomplete problem'


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.82-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.82-19
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.82-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
    Fix bounds checking in check_ia
    Fix SEGV in Dbus code
    More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.82-21
changelog:
  - Type:CVE
  - CVE:CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix buffer overflow in struct bigname (CVE-2026-2291)
         Fix NSEC bitmap parsing infinite loop (CVE-2026-4890)
         Verify rdlen field in RRSIG packets (CVE-2026-4891)
         Fix buffer overflow in helper with large CLIDs (CVE-2026-4892)
         Fix broken client subnet validation (CVE-2026-4893)


author: wanglixing <wanglixing@kylinos.cn> -1.0.0.rc3-205.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix connect container failed when reading partially written state.json content


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-223.p02.03
changelog:
  - Type:cves
  - ID:CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
  - SUG:NA
  - DESC:upgrade to 1.0.0.rc3-223.p02
         fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.0.0.rc3-103.p04
changelog:
  - Type: bugfix
  - ID:   [bug#210840]
  - SUG:  NA
  - DESC: update golang.org/x/sys/unix and fix bug#210840


author: wangshuo <wangshuo@kylinos.cn> - 1.0.0.rc3-103.p05
changelog:
  - Type:CVE-2024-21626
  - ID:[TASK#198073]
  - SUG:NA
  - DESC:add patch 0120-runc-fix-CVE-2024-21626-without-close_range.patch, fix RootDir fd leaks


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport from openEuler
         support loongarch64 and mips64el


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport missing rlimit mapping patch to fix runc error on mips


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: wangchen<wangchen137@huawei.com> - 1.8.17-7
changelog:
  - Fix Md5 hash does not match for two different runs.
    Fix Incorrect label name in case regeneration of HTML without regeneration of dot files.


author: lipengyu <lipengyu@kylinos.cn> - 1:1.8.17-8.p01
changelog:
  - Type:update
  - ID:[BUG#337307]
  - SUG:NA
  - DESC:add Obsoletes:doxygen-latex to fix update test failed


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p01
changelog:
  - Type:updated
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  Modify to get the value of the kernel and BuildRequires:kernel-core


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p02
changelog:
  - Type:bugfix
  - ID:[BUG#121835]
  - SUG:NA
  - DESC:
  - add patch kylin-0001-support-dpdk-cross-compile-in-x86-platform.patch
  1) The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on all x86 platforms.
  2) Due to kylin-rpm-config updating, the patch changes python interpreter version to python3.
  3) Openvswitch service starts stably after dpdk is repaired.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p03
changelog:
  - Type:bugfix
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  - 1.The igb_uio.ko and rte_kni.ko modules generated by dpdk reuquire the same kernel version to be compiled and installed, otherwise it cannot be loaded correctly.
    2.The kernel version will be continuously updated. It will be troublesome to rebuild dpdk while kernel updating. Therefore, it is best to decoule dpdk from kernel.
    3.DKMS (Dynamic kernel module system) can automatically compile modules after kernel changes and adpat to the new kenrel. So igb_uio and rte_kni in dpdk can be handed over to DKMS for management, and dpdk.spec is modified according to DKMS specification to generate dpdk-igb-uio and dpdk-rte-kni binary packages.


author: ningjin <ningjin@kylinos.cn> - 19.11-15.p04
changelog:
  - Type:bugfix
  - ID:[BUG#132923]
  - SUG:NA
  - DESC:
  - add patch kylin-0002-support-dpdk-cross-compile-in-hygon-platform.patch
  The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on hygon platforms，reduce dpdk compiling cpu instruction set to corei7.corei7 is the minimum instruction set supported by dpdk.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p05
changelog:
  - Type:task
  - ID:[TASK#118976]
  - SUG:NA
  - DESC:
  - Since there is no ko module in the main rpm package, delete /usr/sbin/depmod from post.


author: wangjiawei <wangjiawei@kylinos.cn> - 19.11-15.p08
changelog:
  - Type:task
  - ID:[TASK#206722]
  - SUG:NA
  - DESC:
  - add dependency of rte-kni and igb-uio on dpdk-devel
  - fix CVE-2021-3839 CVE-2022-0669


author: panxiaohe <panxiaohe@huawei.com> - 050-5
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec设置relabel脚本
  -         add patch: dracut-kylin-add-relabel-scripts.patch
  -       将kysec_sync_notify改为kysec_sync_daemon
  -         add patch: dracut-change-kysec-sync-notify-to-kysec-sync-daemon.patch
  -       将3adm的enable改为和桌面一致
  -         add patch: dracut-change-3adm_enable-to-be-same-as-desktop.patch
  -       更改数据库文件属主
  -         add patch: dracut-change-chown-db.patch
  -       修复加载31-32policy
  -         add patch: dracut-fix-load-policy-31-or-32.patch
  -       添加kysec_tpm配置，grub未配置时，将配置文件中的状态写入内核
  -         add patch: dracut-add-kysec-tpm-status.patch
  -       将kylin-security.conf改名为kysec.conf
  -         add patch: dracut-change-libsecurity1-config-file-name.patch
  -       修改字体
  -         add patch: dracut-change-font.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.02
changelog:
  - Type:update
  - ID:[Task#81148]
  - SUG:NA
  - DESC: 从数据库中读取relabel_status，如果是0，修改数据库中的值为1
  -         add patch: dracut-set-relabel_status-1-after-read-relabel_status.patch
  - Type:update
  - ID:[Task#81149]
  - SUG:NA
  - DESC: 将dracut.conf中安全相关的配置移动到modules.d/98relable/security.conf中
  -         add patch: dracut-move-dracut.conf-security-configure-to-98relable-security.conf.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.03
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: dracut-fix-modify-or-del-audit-log-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.04
changelog:
  - Type: bugfix
  - ID:[Bug#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.04
changelog:
  - Type: bugfix
  - ID:[Bug#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: dracut-fix-whlist-init-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.05
changelog:
  - Type: update
  - ID:[任务#157794]
  - SUG:NA
  - DESC: 将修改audit.log的权限恢复至开源状态
  -         add patch: dracut-050-restore-file-permission-settings.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.06
changelog:
  - Type: update
  - ID:[任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: dracut-050-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#188380][BUG#192256]
  - SUG:NA
  - DESC: 修复selinux策略为targeted时切换strict模式失败的问题[BUG#188380]
  -	  add patch: dracut-050-fix-selinux-targeted-change-strict-error.patch
  -	解决auditadm用户无法查看/var/log/目录下的文件的问题[BUG#192256]
  -	  add patch: dracut-050-fix-auditadm-read-var-log-file-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.07.02
changelog:
  - Type: update
  - ID:[任务#189429]
  - SUG:NA
  - DESC: 删除关闭三员时密码过期时间的设置
  -	  add patch: dracut-050-del-user-passwd-validity-period-set.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-5.se.07.02.p01
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-5.se.07.02.p02
changelog:
  - Type:bugfix
  - ID:[BUG#209238]
  - SUG:NA
  - DESC:  自定义分区安装系统后,切换安全模式后重启打标过程home var 分区无法挂载
           add dracut-fix-mount-home-failed.patch
           dracut-add-os-partition-judge-in-kyseclabel-script.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 050-5.se.07.02.p03
changelog:
  - Type:update
  - ID:[TASK#174208]
  - SUG:NA
  - DESC: nvme 安装盘系统在安装dracut-config-generic 软件包重新生成initramfs.img 系统重启失败
  -	  add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: weishaokun<weishaokun@kylinos.cn> - 202002-8.p02
changelog:
  - Type: update
  - ID:   84913
  - SUG:  NA
  - DESC: KYLIN, ArmVirtPkg, add Kylin-Support-virtual-AHCI-and-NVMe-drives.patch


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202002-8.p05
changelog:
  - Type: Update
  - ID:   [TASK#138646]
  - SUG:  NA
  - Desc: fix CVE-2022-4450 CVE-2023-0286 CVE-2023-0215 CVE-2023-0401
          from src-openeuler/edk2 openEuler-20.03-LTS-SP3 branch.


author: yanjianqing <yanjianqing@kylinos.cn> - 202002-8.p07
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304 
          from src-openeuler/edk2 openEuler-20.03-LTS-SP3 branch.


author: wangguochun <wangguochun@kylinos.cn> - 202011-11.p07
changelog:
  - Type Update
  - ID: [TASK#204644]
  - SUG: NA
  - DESC: fix CVE-2023-0464/CVE-2023-0465/CVE-2023-0466/CVE-2023-2650/CVE-2023-3446/CVE-2023-3817
  -           CVE-2024-0727/CVE-2022-36763/CVE-2022-36764/CVE-2022-36765
  -           CVE-2023-45229/CVE-2023-45230/CVE-2023-45231/CVE-2023-45232/CVE-2023-45233/CVE-2023-45234/CVE-2023-45235


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-11.p09
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: lijunwei <lijunwei@kylinos.cn> - 202011-11.p10
changelog:
  - Type: Update
  - ID:   [TASK#388581]
  - SUG:  NA
  - DESC: Fix CVE-2024-38796/CVE-2023-45236/CVE-2023-45237


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p11
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p16
changelog:
  - Type: cves
  - ID:   CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419
  - SUG:  NA
  - DESC: Fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,
  	CVE-2025-68160,CVE-2025-69418,CVE-2025-69419


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p20
changelog:
  - Types: cves
  - ID:    [BUG#535347]
  - SUG:   NA
  - DECS:  Fix CVE-2022-1292 CVE-2022-2068 CVE-2026-7383 CVE-2026-34180 CVE-2026-45447


author: panxiaohe <panxh.life@foxmail.com> - 0.180-7
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: houzhiwei <houzhiwei@kylinos.cn> - 0.180-15.p04
changelog:
  - Type:[update]
  - ID:[TASK#414525]
  - SUG:NA
  - DESC:correctly fix libdebuginfod.so requirement，fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: zhangxiaolu <zhangxiaolu@kylinos.com> - 1:27.1-14.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: gaoyukun <gaoyukun@kylinos.com> - 1:27.1-15.p01
changelog:
  - type: bugfix 
  - ID: NA
  - DESC: add patch:kylin-change-translation-emacs.patch, add translate bug add modify spec and add config.guess and config.sub in build dir for compile.


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j8 V=1 VERBOSE=1 instead of make for building bootstrap


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: hanguanqiang <hanguanqiang@kylinos.cn> - 21.3.3-7.p02
changelog:
  - Type: CVE
  - ID:   Bug#524979
  - SUG:  NA
  - DESC: Fix CVE-2025-48038,CVE-2025-48039,CVE-2025-48040,CVE-2025-48041
  -       p02 only for SP2, not for others


author: hanguanqiang <hanguanqiang@kylinos.cn> - 21.3.3-7.p03
changelog:
  - Type: CVE
  - ID:   Bug#524887
  - SUG:  NA
  - DESC: Fix CVE-2025-48038,CVE-2025-48039,CVE-2025-48040,CVE-2025-48041
  -       adjust configure.in for new autoconf in sp4
  -       p03 for SP3 SP4, not for SP2


author: lvfei <lvfei@kylinos.cn>-1.1.2-4-p05
changelog:
  - Type: update
  - ID: [TASK#187103]
  - SUG: modify source2
  - DESC: add  0001-add-zh_HK-translate.patch


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: peijiankang <peijiankang@kylinos.cn> - 0.2.3-8.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#204834]
  - SUG:  NA
  - DESC: add fcitx-chewing-add-translations-for-hk.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.4.10-6.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#204834]
  - SUG:  NA
  - DESC: add fcitx-configtool-add-translations-of-hk.patch


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: peijiankang <peijiankang@kylinos.cn> - 4.2.9.1.p06
changelog:
  - Type: bugfix
  - ID:   [BUG#204834]
  - SUG:  NA
  - DESC: add fcitx-update-translations-for-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.2.9.1.p07
changelog:
  - Type: bugfix
  - ID:   [BUG#215529]
  - SUG:  NA
  - DESC: add 0001-fcitx-correct-some-traditional-chinese-translations.patch


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: Yangdacheng <yangdacheng@kylinos.cn> - 4.0.2-9.p03
changelog:
  - Type: cves
  - ID: [TASK#333142]
  - SUG: NA
  - DESC: Fix CVE-2024-31578,CVE-2024-32230,CVE-2021-3566,CVE-2021-38291,CVE-2021-38114,CVE-2022-3109,CVE-2022-3341,CVE-2023-51794,CVE-2024-31578,CVE-2023-50010,CVE-2023-51793,CVE-2021-28429,CVE-2021-38171,CVE-2022-1475,CVE-2022-48434


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p05
changelog:
  - Type: cves
  - ID: [TASK#402117]
  - SUG: NA
  - DESC: Fix CVE-2024-35366,CVE-2024-35367,CVE-2024-35368,CVE-2024-36616,CVE-2024-36617,CVE-2024-36618


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p07
changelog:
  - Type: cves
  - ID: [TASK#480707]
  - SUG: NA
  - DESC: Fix CVE-2017-9994,CVE-2019-12730,CVE-2019-17542,CVE-2019-17539,CVE-2019-11339,CVE-2018-15822


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p08
changelog:
  - Type: cves
  - ID: [TASK#494103]
  - SUG: NA
  - DESC: Fix CVE-2020-22019,CVE-2020-22021,CVE-2020-22026,CVE-2020-22038,CVE-2020-22039,CVE-2020-22043,CVE-2020-22044


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p09
changelog:
  - Type: cves
  - ID: [TASK#500913]
  - SUG: NA
  - DESC: Fix CVE-2020-21697,CVE-2020-22020,CVE-2020-22037,CVE-2020-22051,CVE-2020-22054


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p10
changelog:
  - Type: cves
  - ID: [TASK#507127]
  - SUG: NA
  - DESC: Fix CVE-2020-21688,CVE-2020-22042,CVE-2025-22919,CVE-2025-22921


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p17
changelog:
  - Type: cves
  - ID: [BUG#597617] [BUG#597615] [BUG#597613] [BUG#599939] 
  - SUG: NA
  - DESC: Fix CVE-2020-20445, CVE-2020-21041, CVE-2020-23906, CVE-2025-10256


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p21
changelog:
  - Type: cves
  - ID: CVE-2020-22025, CVE-2020-22017, CVE-2025-1594, CVE-2026-30999
  - SUG: NA
  - DESC: Fix CVE-2020-22025, CVE-2020-22017, CVE-2025-1594, CVE-2026-30999


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p23
changelog:
  - Type: cves
  - ID: CVE-2025-59728, CVE-2020-20448, CVE-2026-6385, CVE-2023-6603
  - SUG: NA
  - DESC: Fix CVE-2025-59728, CVE-2020-20448, CVE-2026-6385, CVE-2023-6603


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p25
changelog:
  - Type: cves
  - ID: CVE-2026-64834, CVE-2026-64830, CVE-2026-64833, CVE-2026-65703, CVE-2026-65706, CVE-2026-65704, CVE-2026-66039, CVE-2026-65705
  - SUG: NA
  - DESC: Fix CVE-2026-64834, CVE-2026-64830, CVE-2026-64833, CVE-2026-65703, CVE-2026-65706,CVE-2026-65704, CVE-2026-66039, CVE-2026-65705


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p27
changelog:
  - Type: cves
  - ID: CVE-2020-22032, CVE-2020-22031, CVE-2020-22023
  - SUG: NA
  - DESC: CVE-2020-22032, CVE-2020-22031, CVE-2020-22023


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p29
changelog:
  - Type: cves
  - ID: CVE-2026-70628, CVE-2026-70629, CVE-2026-70630, CVE-2026-70631
  - SUG: NA
  - DESC: Fix CVE-2026-70628, CVE-2026-70629, CVE-2026-70630, CVE-2026-70631


author: xu_ping <xuping33@huawei.com> - 3.0.3.32900-9
changelog:
  - Fix connect linking to web database by modifying the firebird.conf items to make client and server compatible


author: lvfei <lvfei@kylinos.cn> - 3.0.3.32900-9.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: cuiyudong <cuiyudong@kylinos.cn> - 3.0.3.32900-9.p02
changelog:
  - Type:NA
  - ID:bug#134298
  - SUG:NA
  - DESC: Add Patch0009 for support loongarch and Same source code as other arch for solve bug 134298


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: lvfei <lvfei@kylios.cn> - 79.0-7.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:Patch700:            0001-kylin-modify-the-first-url.patch
  -           0001-kylin-firefox-modify-firstrunURL.patch
  -            0001-firefox-modify-newtabel-top-site.patch
  -            firefox-modify-firsturl-http-to-https.patch
  -            0001-modify-taiwan-to-taiwansheng.patch
  - modify firefox desktop 
  - modify firefox.js
  - DESC: fix chandao bug add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p02
changelog:
  - type bug fix
  - ID bug 114400 
  - add patch:Patch705:     0001-fix-chandao-bug-114400.patch
  - DESC: fix chandao bug 114400  add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p03
changelog:
  - type bug fix
  - ID bug 129652
  - add patch:Patch705:     0001-defaultSearchEngine-baidu-bug129652.patch
  - DESC: fix chandao bug 129652  add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p04
changelog:
  - type cve fix
  - ID NA
  - add Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315
  - DESC: cve fix


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p10
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: lipengyu <lipengyu@kylinos.cn> - 79.0-7.p16
changelog:
  - Type: bugfix
  - ID: [BUG#231659]
  - SUG: NA
  - DESC:Change the default search engine in Firefox to Baidu


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p19
changelog:
  - Type: cves
  - ID:CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch
  - SUG: restart
  - DESC: patch  CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch


author: huayadong <huayadong@kylinos.cn> - 2.13.92-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#251085]
  - SUG : NA
  - DESC: add Patch9001:fontconfig-2.13.92-kylin-backport-Report-more-detailed-logs-instead-of-assertion.patch


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p02.ky10.aarch64 to correct stage


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p03.ky10.aarch64 to correct stage


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p01
changelog:
  - Type: bugfix
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: Add sed -i '/^95$/d' /etc/uid_list,resolve the issue of installation failure after uninstallation.


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p02
changelog:
  - Type: bugfix、compile
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: solve compilation problems,  remove "


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39352
  - Fix CVE-2023-39353
  - Fix CVE-2023-39354
  - Fix CVE-2023-39356
  - Fix CVE-2023-40181
  - Fix CVE-2023-40186
  - Fix CVE-2023-40188
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40589


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20210628.41
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: <majian@kylinos.cn> - 9.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#186426]
  - SUG: NA
  - DESC: Init package for Kylin V10 sp4 and add Kylin patches.
  - [BUG#112827] fix replace manufacturer string from openEuler to KylinOS in version info.
  - [BUG#199946] fix gdb hangup crash issue when attach running process debug.


author: majian <majian@kylinos.cn> - 9.2-7.p02
changelog:
  - Type: bugfix
  - ID: [BUG#218056]
  - SUG: NA
  - DESC: Add 0002-Set-entry-point-when-text-segment-is.patch.


author: lijian1 <lijian1@kylinos.cn> - 9.2-7.p03
changelog:
  - Type: cves
  - ID: [BUG#643387]
  - SUG: NA
  - DESC: Fix cves for CVE-2022-48064/2025-11082/2025-11083/2025-11412/2025-11494/2025-11840/2026-15003.


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch0:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p02
changelog:
  - Type: cve
  - ID:   [TASK#133075]
  - SUG:  NA
  - DESC: add patch1:gdm-3.38.2.1-kylin-use-autoptr-to-handle-errors-in-look-for-existing-users.patch
  	Fix CVE-2020-16125


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#160751]
  - SUG:  NA
  - DESC: add patch2:gdm-3.38.2.1-kylin-fix-fix-the-problem-of-failing-to-start.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 9.52-20.p03
changelog:
  - Type:cves
  - ID:CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837 CVE-2023-52722
  - SUG:NA
  - DESC:fix CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837, CVE-2023-52722


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p04
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473
          rebuild for version problem


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p08
changelog:
  - Type: cves
  - ID  : [TASK#580833]
  - SUG : NA
  - DESC: fix CVE-2025-14422 CVE-2025-14425 CVE-2025-6035


author: Qin Fandong <qinfandong@kylinos.cn> - 2:2.10.6-12.p10
changelog:
  - Type: CVE
  - ID  : [TASK#596375]
  - CVE : CVE-2026-2271, CVE-2026-2272, CVE-2026-2239, CVE-2026-4152, CVE-2026-2045, CVE-2026-2044, CVE-2026-4887
  - SUG : NA
  - DESC: fix CVE-2026-2271, CVE-2026-2272, CVE-2026-2239, CVE-2026-4152, CVE-2026-2045, CVE-2026-2044, CVE-2026-4887


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-26
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify patch
         backport-CVE-2025-27613-CVE-2025-46334-CVE-2025-46835.patch


author: fandeyuan <fandeyuan@kylinos.cn> - 2.66.8-12.p03
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.66.8-12.p04
changelog:
  - Type: cve fix
  - ID: NA
  - SUG: NA
  - DESC: add backport-glocalfilemonitor-Avoid-file-monitor-destruction-from-event-thread.patch
   backport-CVE-2024-34397.patch backport-gdbusconnection-Allow-name-owners-to-have-the-syntax-of-a-well-known-name.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.66.8-12.p08
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p01
changelog:
  - Type:	compile
  - ID:	[TASK#74801]
  - SUG: 	NA
  - DESC:	remove gcc_secure BuildRequires from spec & add BuildFlags="-O2 -g -fPIC"


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p02
changelog:
  - Type:	update & bugfix
  - ID:	[TASK#74132]
  - SUG: 	NA
  - DESC:	Added kylin patch merged from glibc-2.28-49.p02 of v10sp2


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p04
changelog:
  - Type:	bugfix
  - ID:	[bug#119200]
  - SUG: 	NA
  - DESC:	Provide compatibility support for linking against libpthread_nonshared.a


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p05
changelog:
  - Type:	update
  - ID:	[TASK#101352]
  - SUG: 	NA
  - DESC:	Add Give-a-chance-to-reload-gl_path-when-dlopen patch


author: Zhenneng Li <lizhenneng@kylinos.cn> - 2.28-88-p06
changelog:
  - Type:	update
  - ID:  	[TASK#105748]
  - SUG: 	NA
  - DESC: Delete 9001-kylin-glibc-add-mesa_func-in-midr-way.patch


author: majian <majian@kylinos.cn> - 2.28-28-88-p07
changelog:
  - cves: CVE-2023-0687
  - ID: [TASK#141422]
  - SUG: NA
  - DESC: Fix CVE-2023-0687.
          https://gitee.com/src-openeuler/glibc/pulls/555


author: majian <majian@kylinos.cn> - 2.28-88-p09
changelog:
  - Type:	update
  - ID:  	[TASK#165761]
  - SUG: 	NA
  - DESC: Add Kylin_fix_localesdata_countryname_v10sp3.patch .


author: <majian@kylinos.cn> - 2.28-88.p14
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813 .


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-88.p14
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: pengxu <pengxu@kylinos.cn> - 2.28-88.p16
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC:  fix pthread_once hangs when init routine throws an exception


author: litenglong <litenglong@kylinos.cn> - 2.28-88.p20
changelog:
  - Type:update
  - ID:[Task#550991]
  - SUG:NA
  - DESC: x86: Disable AVX Fast Unaligned Load on Hygon 1/2/3


author: Yu Peng <yupeng@kylinos.cn> - 2.28-88.p21
changelog:
  - Type:bugfix
  - ID:[Task#571025]
  - SUG:NA
  - DESC: Fix /etc/resolv.conf reloading defects backport from glibc 2.32
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=6c80c6e8767b860a5e18e136d04a80be2a8dce15
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=9642b85fd0dfa5731020a3271c08e33e1dc05c85
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=a1a20f029299dc27170912bb9233070c8403444d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=dd0b4df329ff7ff2a656404db271c8ee8379ff9d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=fa00db0a6eb755837ae5d413515e0da582b304f3
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=631cf64bc1d8306e011ef39f60b8cb6de91bd271


author: panzhe <panzhe@kylinos.cn> - 2.28-88.p22
changelog:
  - Type:update
  - ID:[Task#588463]
  - SUG:NA
  - DESC: resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: litenglong <litenglong@kylinos.cn> - 2.28-88.p23
changelog:
  - Type:update
  - ID:[Task#595081]
  - SUG:NA
  - DESC: posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)


author: litenglong <litenglong@kylinos.cn> - 2.28-88.p24
changelog:
  - Type:cves
  - ID:[BUG#573235]
  - SUG:NA
  - DESC: Use pending character state in IBM1390, IBM1399 character
   sets (CVE-2026-4046)


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: peijiankang <peijiankang@kylinos.cn>- 3.30.1-2.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add gnome-calculator-update-translations-for-hk.patch


author: houhongxun <houhongxun@kylinos.cn> - 3.30.2-2.p02
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-gnome-disk-utility-add-some-missing-traditional-chin.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.30.0-3.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#195945]
  - SUG:  NA
  - DESC: add 0001-update-gnome-font-viewer-zh_HK-translations.patch


author: huayadong <huayadong@kylinos.cn> - 3.30.1-10.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#165420]
  - SUG:  NA
  - DESC: add Requires: llvm-libs >= 8.0.1-1.6.p01 only for loongarch64


author: anyunhao <anyunhao@kylinos.cn> - 3.6.14-11.p01
changelog:
  - Type:update
  - ID:[Task#186398]
  - SUG:NA
  - DESC:Update to 3.6.14-11 and sync sp3 changes
  - add patch add_support_generate_sm2_certificate.patch and add_support_sm4.patch


author: anyunhao <anyunhao@kylinos.cn> - 3.6.14-11.p02
changelog:
  - Type:CVE fix
  - ID:[Task#202568]
  - SUG:NA
  - DESC:fix CVE-2024-0553
  - add patch backport-CVE-2024-0553-rsa-psk-minimize-branching-after-decryption.patch


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p05
changelog:
  - Type:cves
  - ID:CVE-2025-32988,CVE-2025-32990,CVE-2025-6395
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p08
changelog:
  - Type:cves
  - ID:[BUG#560111]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2026-33845,CVE-2026-33846,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260


author: anyunhao<anyunhao@kylinos.cn> - 3.6.14-7.p02
changelog:
  - Type:update
  - ID:[Task#85463]
  - SUG:NA
  - DESC:split package gnutls-utils,reduce main package installation dependencies


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: wangqiang <wangqiang1@kylinos.cn> - 2.8-1.p01
changelog:
  - Type:enhancement
  - ID:[TASK#393475]
  - SUG:NA
  - DESC:Add configure option '--with-tcmalloc-pagesize=64' adopt to aarch64 with 64K pazgesize


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: gaoyukun <gaoyukun@kylinos.cn> - 1.31.0-9.p02
changelog:
  - Type:bugfix
  - ID:[BUG#289897&289867&289847&289811&289669&289659]
  - SUG:NA
  - DESC:rebuild due to protobuf


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.p01
changelog:
  - Type:bugfix/update
  - ID:task#74110
  - SUG:NA
  - DESC:Add Patch0356,Patch0357,Patch0358
  -      Add support for uboot
  -      Add Grub2 password


author: xieyuxing<xieyuxing@kylinos.cn> - 2.04-21.se.01.p04
changelog:
  - Type:update
  - ID:task#81649 121848,123751,88712
  - SUG:NA
  - DESC:Add and modify Kyee measure mod
  -      Add tpcm patches provided by haiguang


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p05
changelog:
  - Type:update
  - ID:task#96116
  - SUG:NA
  - DESC:backport PATCH0368, support BPI01002 and phy-addr BIOS
         backport PATCH0369, loongArch64 add FDT support
         add PATCH0370, loongArch64 fix undeclared errors


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p06
changelog:
  - Type:update
  - ID:bug#127107
  - SUG:NA
  - DESC:add PATCH0371, loongArch64 solve "out of memory" during PXE installation


author: kangyu<kangyu@kylinos.cn> - 2.04-21.se.01.p07
changelog:
  - Type:update
  - ID:bug#128022
  - SUG:NA
  - DESC:Remove the not find kyee prompt
         add press y to enter the system


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.01.p08
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for grub-boot-indeterminate.service


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.03.p08
changelog:
  - Type:NA
  - ID:bug#144461
  - SUG:NA
  - DESC: measurefile.mod failed to load after x86qcow start message was displayed


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.03.p09
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.04.p09
changelog:
  - Type:bugfix
  - ID:task#148830
  - SUG:NA
  - DESC: Troubleshoot the nested virtualization installation exception


author: liuyang <liuyang01@kylinos.cn> - 2.04-21.se.04.p18
changelog:
  - Type:CVE
  - ID:task#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.04.p20
changelog:
  - Type:CVE
  - ID:task#381521
  - CVE:CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-2601 CVE-2022-28733 CVE-2022-28734 CVE-2022-28736 CVE-2022-3775
  - SUG:NA
  - DESC:CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-2601 CVE-2022-28733 CVE-2022-28734 CVE-2022-28736 CVE-2022-3775


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.04.p21
changelog:
  - Type:CVE
  - ID:task#441494
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125
  - SUG:NA
  - DESC:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125


author: yujingbo <yujingbo@kylinos.cn> - 2.04-21.se.04.p23
changelog:
  - Type:TASK
  - ID:task#462916
  - SUG:NA
  - DESC:Modify grub-boot-success.service and grub-boot-success.timer file permission to 644


author: Qin Fandong <qinfandong@kylinos.cn> - 2.04-21.se.04.p24
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-61663,CVE-2025-61664
  - ID:TASK#571799
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload


author: Qin Fandong <qinfandong@kylinos.cn> - 8.40-26.p01
changelog:
  - Type: update
  - ID: TASK#537247
  - SUG: NA
  - DESC: new-kernel-pkg: also set kernel-4k and kernel-64k as default


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p01
changelog:
  - Type:bugfix
  - ID:[Task#199901]
  - SUG:NA
  - DESC:Sync SP2 patches,fix gstreamer1-plugins-good-gtk no provides(element-gtksink)


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p02
changelog:
  - Type:bugfix
  - ID:[BUG#216576]
  - SUG:NA
  - DESC:change gstreamer1-devel-docs to gstreamer1-help,fix update error.


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: houhongxun <houhongxun@kylinos.cn> 2.24.32-11.p02
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix media volume control applet tooltip position


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: panzhe <panzhe@kylinos.cn> - 1.40.2-8.p01
changelog:
  - Type:bugfix/compile
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that coldplug does not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel 
  - Add Patch02, Fixed "Favorites" error in "My Computer".
  - Add Patch03, Solve the problem that usb flash drive sometimes fails to mount automatically.
  - Add Patch04, Solve the problem that the window displays "Network".


author: lilu <lilu@kylinos.cn> - 1.12-6.p01
changelog:
  - Type: cves
  - ID: CVE-2026-41991,CVE-2026-41992
  - SUG: NA
  - DESC: fix CVE-2026-41991 and CVE-2026-41992


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p01
changelog:
  - Type:bugfix
  - ID:[Bug#114844]
  - SUG:NA
  - DESC:add patch1:hardinfo-kylin-fix-vendor-unknown-bug.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p02
changelog:
  - Type:bugfix
  - ID:[Bug#127017][Bug#127010]
  - SUG:NA
  - DESC:add patch2:hardinfo-0.6.1-kylin-solve-segment-error-and-survival-reporting-problems.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p03
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch3:hardinfo-0.6.1-kylin-change-x11-vendor.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p04
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch4:hardinfo-0.6.1-kylin-fix-the-segment-error-when-executing-hardinfo-without-display.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p05
changelog:
  - Type:bugfix
  - ID:[Bug#140774]
  - SUG:NA
  - DESC:add patch5:hardinfo-0.6.1-kylin-fix-core-file-appears-in-the-report-generation-function.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p06
changelog:
  - Type:bugfix
  - ID:[Bug#171872]
  - SUG:NA
  - DESC:add patch6:hardinfo-0.6.1-kylin-add-the-name-YMTC-for-oui-id-a428b7.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p07
changelog:
  - Type:bugfix
  - ID:[Bug#177860]
  - SUG:NA
  - DESC:add patch7:hardinfo-0.6.1-kylin-fix-ft2000-cpu-no-speed.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.1-1.p08
changelog:
  - Type:bugfix
  - ID:[BUG#182817]
  - SUG:NA
  - DESC:add patch8, retrieve the motherboard info for arm and loongarch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p09
changelog:
  - Type:bugfix
  - ID:[TASK#178533]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p10
changelog:
  - Type:bugfix
  - ID:[BUG#197180]
  - SUG:NA
  - DESC:add patch10,0001-fix-pci-info-showing-wrong-link-width.patch
         fix that pci info showed wrong current link width


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch11,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p12
changelog:
  - Type:bugfix
  - ID:[BUG#199256]
  - SUG:NA
  - DESC:add patch12,hardinfo-0.6.1-kylin-hide-Firmware.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p13
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-hardinfo-add-traditional-chinese-translation.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#208197]
  - SUG : NA
  - DESC: add patch14:hardinfo-0.6.1-kylin-fix-sensors-driver-unknow.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#225214]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-fix-temperature-label-display-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch16:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#245937][BUG#245949]
  - SUG : NA
  - DESC: add patch17:hardinfo-0.6.1-kylin-change-int-to-long-int-in-memory_usage.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.8.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: add 0002-modify-gb18030-encoding.patch
          sync from 2.8.1-4.p01


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gongxingliang <gongxingliang@kylinos.cn> - 1.14.5-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove compile options (-fallow-argument-mismatch -fallow-invalid-boz) to fix compilation failure


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-9.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p02
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, change country and organization to kylin


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p03
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, according to the requirements , only  change country to CN


author: shaoning <shaoning@kylinos.cn> - 2.4.43-13.p04
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix  CVE-2022-23934(CVE编号有误，应为CVE-2022-23943) CVE-2022-22720 CVE-2022-31813


author: shaoning <shaoning@kylinos.cn> - 2.4.43-13.p05
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22721 CVE-2022-26377 CVE-2022-28330 CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 CVE-2022-30556


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: hanjinpeng <liutao1@kylinos.cn> - 2.4.43-20.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: zhangyulong <zhangyulong@kylinos.com> - 2.4.43-23.p02
changelog:
  - Type:TASK
  - ID:195905
  - SUG:NA
  - DESC:add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: yanglu <yanglu72@h-partners.com> - 2.4.43-28
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.43-28.p02
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: merge 2.4.43-26.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-31
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: wanggang <wanggang1@kylinos.cn> - 2.4.43-32.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         fix build error on loongarch64.
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.43-34
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: wanggang <wanggang1@kylinos.cn> - 2.4.43-35.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.43-36
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.43-37
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wangjie1 <wangjie1@kylinos.cn> - 2.4.43-37.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC: update index.html for kylin. 
          fix build error on loongarch64.
          Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.10-11
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: fixed a bug that occurs when starting a container in host mode


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.10-15.p03
changelog:
  - Type:bugfix
  - ID:[BUG#194818]
  - SUG:NA
  - DESC:seccomp_default.json delete archMap
  -      merge architecture support, modify x86, arm, longarch synchronously (x86 and arm skip p01, p02)


author: peijiankang <peijiankang@kylinos.cn> - 1.7.1-8.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#195945]
  - SUG:  NA
  - DESC: add 0001-add-im-chooser-zh_HK-translations.patch


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.312-b07.2
changelog:
  - add 8273111-Default-timezone-should-return-zone-ID-if-locatiome-is-valid-but-not-canonicalization-on-linux.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.8.0.392-b08.2.p01
changelog:
  - Type: cves
  - ID: [TASK#183363]
  - SUG: NA
  - fix install fail caused by %pretrans reporting error 
  	add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
          2.Default parameter updates for x86
          3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
          4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.452.b09-1.p01
changelog:
  - Type: update
  - ID:   [TASK#466871]
  - SUG:  NA
  - DESC: openjdk-1.8.0.452 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support
          fix date errors in changelog


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: zhaosaisai <zhaosaisai@kylinos.cn> -1:1.8.0.482.b08-7.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-1.8.0.482 GA release with kylin support


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC:	1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
  	3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
          2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
          4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.27.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#459119]
  - SUG:  NA
  - DESC: openjdk-11.0.27.6 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support
  	obsoletes java-11-openjdk-static-libs* which are nolonger used


author: songliyang <songiyang@kylinos.cn> - 1:11.0.29.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-11.0.29.7 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.30.7-4.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-11.0.30.7 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.31.11-4.p01
changelog:
  - Type: update
  - ID:   [TASK#635259]
  - SUG:  NA
  - DESC: sync openEuler openjdk-11.0.31.11 GA release with kylin patch


author: litenglong <litenglong@kylinos.cn>-5.3.0-1.p02
changelog:
  - Type:Requirement
  - ID:[REQ#34645]
  - SUG:NA
  - DMSC:jemalloc optimize for spec2017
         jemalloc-optimize-for-spec2017-base-v530.patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: liwenchong <liwenchong@kylinos.cn> - 2.0.20-16.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge kexec-tools-2.0.20-14.p01 kexec-tools-2.0.20-14.p02 patch 
  	disable kdump.service for mips.
  	put the patch of aarch64 into the src package on x86 environment 
  	it's not just enough to have a fixed size of memory range array,
  	patch 13 allowed to handle arbitrary number of memory ranges


author: wangqiang <wangqiang1@kylinos.cn> - 2.0.20-16.p03
changelog:
  - Type:cve
  - ID:NA
  - SUG:NA
  - DESC:Add "chmod 400 ${_path}/vmcore-dmesg.txt" to kdump-lib-initramfs.sh to fix CVE-2021-20269


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.01
changelog:
  - Type: update
  - ID: #75532
  - SUG: NA
  - DESC: 移植kysec补丁
  -         add patch: kmod-27-kylin-security.patch
  -       添加kysec检查
  -         add patch: kmod-27-add-kysec-kmod-check.patch
  -       使用kysec检查函数
  -         add patch: kmod-27-using-kysec-check-kmod-func.patch


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.02
changelog:
  - Type: bugfix
  - ID: [BUG#157423]
  - SUG: NA
  - DESC: 修复当kmod关闭时，insmod插入模块异常的问题
  -         add patch: kmod-27-fix-insmod-abnormal-when-close-kmod.patch


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#165082]
  - SUG: NA
  - DESC: 修复当修改内核模块文件后，仍可以insmod成功的问题
  -         add patch: kmod-27-fix-insmod-success-when-modify-ko-file-after.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> - 27-10.se.04
changelog:
  - Type: update
  - ID: [Task#381395]
  - SUG: NA
  - DESC: 合入patch
  -         add patch: kmod-task-381395-SM3.patch
  -         add patch: kmod-fix-modinfo-GM.patch


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: Bin Hu <hubin73@huawei.com> -1:0.9.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix segment fault and hotpatch compilation problem when using openEuler 22.03 LTS kernel


author: Bin Hu <hubin73@huawei.com> -1:0.9.5-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch-build: do not copy linux scripts when building OOT module hotpatch


author: Tang Bin <tangbin_yewu@cmss.chinamobile.com> -1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:livepatch-patch-hook: fix kpatch-build error which do not support ftrace


author: Bin Hu <hubin73@huawei.com> -1:0.9.5-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lookup: skip finding local symbols for object with no local symbols


author: zhangxi <zhangxi@kylinos.cn> -1:0.9.1-20.p05
changelog:
  - Type:enhancement
  - ID:task#569733
  - SUG:NA
  - DESC: Specify the ARCH as x86 when architecture is x86_64


author: zhangxi <zhangxi@kylinos.cn> -1:0.9.5-20.p01
changelog:
  - Type:enhancement
  - ID:task#569733
  - SUG:NA
  - DESC: Just upgrade the version number frome 0.9.1 to 0.9.5


author: wangjiang <wangjiang37@h-partners.com> - 1:2020.0.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix backport-Fix-hist_nearend.patch
         backport-functions-with-not-loaded-autoloaded-functions.patch
         backport-Fix-interactive-restricted-shell-behavior.patch


author: wangyuhang <wangyuhang27@huawei.com> - 2:1.0.8-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:due to the upstream community no longer maintaining the previous version,
         we have rolled back to the stable branch and switched to an active code repository.
         new upstream release and update version to 1.0.8


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.2-1.p33.07
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387985][BUG#390917]
  - SUG:NA
  - DESC: mv autostart to libkylin-activation
          fix kms ui miss deactivate button
          fix kms ui deactivate set autoactivated=0


author: yangyan<yangyan@kylinos.cn> -0.1.0-5
changelog:
  - Type:bugfix and task
  - ID:all
  - SUG:Na
  - DESC: The modifications made in the past week have been combined into a patch file


author: yangyan <yangyan@kylinos.cn> -0.1.0-6
changelog:
  - Type:task
  - ID:210047 & 210036
  - SUG:Na
  - DESC: Added archive profile judgment and removed patch_info field check


author: yangyan <yangyan@kylinos.cn> -0.1.0-7
changelog:
  - Type:BUG&Task
  - ID:all
  - SUG:NA
  - DESC:The modifications made in the past week have been combined into a patch file


author: qiaojijun <qiaojijun@kylinos.cn> -0.1.3-8
changelog:
  - Type:Task
  - ID: task#531177
  - SUG: NA
  - DESC: add use local kernel modules packages for kernel hotpatch build function


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户获取进程防杀死信息失败的问题
  -	  add patch: kysec-common-fix-secadm-ppro-get-pid-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.08
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-common-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.09
changelog:
  - Type: update
  - ID:[任务#189436]
  - SUG:NA
  - DESC: 修改解压xz文件的方式,提高解析文件类型的速度,修改spec文件，添加xz依赖
  -	  add patch: kysec-common-modify-decompress-xz-file.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.10
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截
  -	了pid的查询,获取的pid会是kysec_get进程的pid的问题
  -	  add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-16.se.11
changelog:
  - Type: CVE
  - ID: KVE-2026-0206
  - SUG: NA
  - DESC: 修复函数在处理文件操作时，存在条件竞争缺陷的问题，合入补丁
  -     add patch: KVE-2026-0206.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.03
changelog:
  - 修改kmod白名单
  -   add patch: kysec-daemon-modify-kmod-whlist.patch
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: kysec-daemon-fix-sql-inject-by-retrieve.patch
  - 添加enable_tpm编译宏
  -   add patch: kysec-daemon-add-enable-tpm-budil-macro.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#118414]
  - SUG:NA
  - DESC: 清空内核模块防卸载白名单，保留sm4_generic
  -         add patch: kysec-daemon-kmod-whlist-keep-sm4_generic.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.06
changelog:
  - Type: update
  - ID: [TASK#84294]
  - SUG:NA
  - DESC: 修复whlist_update_by_deb接口存在命令注入漏洞
  -         add patch: kysec-daemon-fix-popen-injection-command-leak.patch
  - Type: bugfix 
  - ID: [BUG#122953]
  - SUG:NA
  - DESC: 解决在龙芯机器上安全中心获取内核防卸载名单失败的问题 
  -         add patch: kysec-daemon-fix-ksc-defender-load-kmod-whlist-error.patch
  - Type: bugfix 
  - ID: [BUG#122688]BUG#122673]BUG#122671]BUG#122646]BUG#122644]
  - SUG:NA
  - DESC: 修复操作whlist数据库的SQL注入的问题
  -         add patch: kysec-daemon-fix-sql-inject-by-operate-whlist-database.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.07
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC:   kysec命令行改造，将security-switch模块设置逻辑下移到服务
  -         add patch: kysec-daemon-add-security-switch-module.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.08
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的服务接口
  -         add patch: kysec-daemon-add-chpolicy.patch
  - Type: bugfix
  - ID: [Bug#122953]
  - SUG:NA
  - DESC: 修复添加内核防卸载时，Qstring导致的乱码的问题
  -         add patch: kysec-daemon-fix-add-kmod-protect-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.09
changelog:
  - Type: bugfix
  - ID: [Bug#131435][Bug#131574]
  - SUG:NA
  - DESC: 修复security-switch加固后切换strict模式失败的问题
  -       修复strict模式下，切换selinux模式为permissive失败的问题
  -         add patch: kysec-daemon-fix-kysec-command-bug.patch
  - Type:update
  - ID: NA
  - SUG:NA
  - DESC: 将kysec-module的dbus通信移植到kysec-daemon
  -         add patch: kysec-daemon-modify-dbus-module-to-daemon.patch
  - Type: bugfix
  - ID: [bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.10
changelog:
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-daemon-fix-failed-to-remove-exectl.patch
  - Type: update 
  - ID: []
  - SUG:NA
  - DESC: netctl添加pkg path的dbus接口
  -         add patch: kysec-daemon-netctl-add-pkg-path-dbus-interface.patch 
  - Type: bugfix
  - ID: [Bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kysec-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.3-36.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151059]
  - SUG:NA
  - DESC: 切换selinux的permissive及enforcing模式实时生效
  -         add patch: kysec-daemon-fix-selinux-status-changenow.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663][BUG#206934]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题[BUG#205663]
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch
  -	修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题[BUG#206934]
  -	  add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.3-36.se.21
changelog:
  - Type: bugfix
  - ID: [BUG#220612]
  - SUG:NA
  - DESC: 【kysec】kysec状态关闭再打开后，重启系统后可以修改或删除受保护文件.
  -	  add patch:  kysec-daemon-fix-readonly-tag-loss-error.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.0.3-36.se.22
changelog:
  - Type: update
  - ID: [任务#566261]
  - SUG:NA
  - DESC: 修复中危漏洞KVE-2025-1202等1个漏洞--kysec-daemon
  -         add patch:  kysec-daemon-fix-cve-2025-1202.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.02
changelog:
  - netctl自动添加联网程序，并设置为拦截
  -   add patch: kysec-syc-daemon-netctl-auto-add-xml.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -          add patch: kysec-sync-daemon-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.04
changelog:
  - Type: bugfix 
  - ID:[bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题
  -       修复网络控制自动探测时程序不是rpm或者dpkg安装，导致包名不正确的问题
  -           add patch: kysec-sync-daemon-fix-netctl-auto-add-pkg-is-not-rpm-install.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.05
changelog:
  - Type: update
  - ID:[]
  - SUG:NA
  - DESC: 修改netctl自动探测，对于不是rpm包安装的,pkg填写全路径
  -         add patch: kysec-sync-daemon-modify-netctl-auto-add-whlist.patch
  - Type: bugfix
  - ID:[bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-sync-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#205537]
  - SUG:NA
  - DESC: 删除对devctl_auto_add_record.desktop文件的安装
  -	  add patch: kysec-sync-daemon-del-devctl-auto-add-record-desktop-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#75532]
  - SUG:NA
  - DESC: 修改getstatus查看kysec信息显示，去除devctl和tpm_status
  -         add patch: kysec-utils-modify-getstatus-info.patch
  - Type: update
  - ID:[TASK#81148]
  - SUG:NA
  - DESC: 当kysec_status或者exectl的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: kysec-utils-change-relabel_status-to-0.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#112677]
  - SUG:NA
  - DESC: 依据服务器部门提供的netctl白名单列表，修改网络控制xml文件
  -         add patch: kysec-utils-netctl-modify-xml-file.patch
  - Type: bugfix
  - ID:[BUG#106538]
  - SUG:NA
  - DESC: 修改kysec_check_exec()函数，解决sh执行脚本的问题
  -         add patch: kysec-utils-modify-kysec_check_exec-function.patch
  - Type: bugfix
  - ID:[BUG#118587]
  - SUG:NA
  - DESC: 修复当模块的标签是unknown是仍然可以insmod的问题
  -         add patch: kysec-utils-fix-insmod-seccuess-when-module-label-unknown.patch
  - Type: bugfix
  - ID:[BUG#122963]
  - SUG:NA
  - DESC: netctl为龙芯的机器添加龙芯浏览器白名单
  -         add patch: kysec-utils-netctl-xml-add-lbrowser-for-loongarch64.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 给安全加固程序加上kysoft标记，因为安全加固程序需要给配置文件打白名单，需要kysoft标记，否则没有权限
  -       add patch: kysec-utils-add-kysoft-label-to-security-reinforce.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.07
changelog:
  - Type: update
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-utils-fix-fortify.patch
  - Type: bugfix
  - ID:[Bug#121813]
  - SUG:NA
  - DESC: 在secadm_list列表中加入semodule程序，修复三权模式下，secadm用户安装，卸载策略模块失败的问题 
  -         add patch: kysec-utils-add-semodule-to-secadm_list.patch
  - Type: bugfix
  - ID:[Bug#122812]
  - SUG:NA
  - DESC: 修复sh执行可执行程序失败的问题，libkysecwhlist.so调用失败
  -         add patch: kysec-utils-fix-sh-execute-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.08
changelog:
  - Type: update
  - ID:[Task#90053]
  - SUG:NA
  - DESC: 修改kysec相关命令
  -         add patch: kysec-utils-modify-kysec-command.patch
  - Type: bugfix
  - ID:[Bug#128959][Bug#128809]
  - SUG:NA
  - DESC: sh执行没有标记的脚本，度量成功后，允许执行并打上verified的标记
  -         add patch: kysec-utils-fix-sh-execute-set-label.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.09
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的库接口
  -         add patch: kysec-utils-add-chpolicy.patch
  - Type: update
  - ID:[Task#90053][Bug#131756]
  - SUG:NA
  - DESC: 优化部分kysec相关命令, 解决软件包标签获取命令执行报错的问题
  -         add patch: kysec-utils-kysec-command-optimize-and-fix-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.10
changelog:
  - Type: update
  - ID:[Task#90053][Bug#128917][Bug#131796][Bug#131599][Bug#131594]
  - SUG:NA
  - DESC: 优化部分kysec相关命令
  -       修复进程开启情况下，设置防杀死标签，不生效，下次打开的进程才生效的问题
  -       修复kysec_set设置应用程序联网管控失败的问题
  -       修复strict模式下关闭kysec后root用户执行setenforce 0提示权限不够的问题
  -       修复strict模式下关闭kysec后secadm和auditadm用户仍存在的问题
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: kysec-utils-fix-kysec-command-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.11
changelog:
  - Type: update
  - ID: NA
  - SUG:NA
  - DESC: kysec检查接口还原p标记检查，先做hash值检查，再检查p标记
  -         add patch: kysec-utils-kysec-check-lib-restore-parent-label-check.patch
  - Type: bugfix
  - ID: [bug#135468]
  - SUG:NA
  - DESC: 修复kysec组件命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-command-inject-bug.patch
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-utils-fix-failed-to-remove-exectl.patch
  - Type: bugfix
  - ID: [Bug#138094]
  - SUG:NA
  - DESC: 旧版本接口兼容
  -         add patch: kysec-utils-add-old-version-interface-compatible.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.12
changelog:
  - Type: bugfix
  - ID: [BUG#140008]
  - SUG:NA
  - DESC: setstatus设置disable提示重启生效
  -         add patch: kysec-utils-setstaus-disable-prompt-reboot.patch
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-utils-fix-not-set-status-when-close-3adm.patch
  - Type: bugfix
  - ID: [BUG#142102]
  - SUG:NA
  - DESC: 修复非secadm用户不可查看当前安全状态的问题
  -         add patch: kysec-utils-delete-security-switch-from-secadm-list.patch
  - Type: update
  - ID: [TASK#113906]
  - SUG:NA
  - DESC: 从auditadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-auditadm-list.patch
  - Type: update
  - ID: [TASK#113152]
  - SUG:NA
  - DESC: 命令行注入分析及解决
  -         add patch: kysec-utils-command-line-injection.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#143767][BUG#143772][BUG#143803]
  - SUG:NA
  - DESC: 修复kysec_get module打印的帮助信息提示无效的参数
  -       修复kysec_set module(exectl\kmod\fpro\ppro)显示的不是子模块帮助信息
  -       修复kysec_set kmod -v allow -n nbd.ko.xz后有两个防卸载模块的问题
  -         add patch: kysec-utils-fix-kysec-command-prompt-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: kysec-utils-fix-security-switch-disable-after-force-reboot-bug.patch
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-utils-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#164394]
  - SUG:NA
  - DESC: 修复当kysec关闭时不能通过软件包获取3adm的标记的问题
  -         add patch: kysec-utils-fix-can-not-get-3adm-label-when-kysec-disable-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#165082]
  - SUG:NA
  - DESC: 修复当修改内核模块文件后，仍可以insmod成功的问题
  -         add patch: kysec-utils-fix-insmod-success-when-modify-ko-file-after.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 3.3.6-33.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151006]
  - SUG:NA
  - DESC: 修复关机过程调用initramfs内进程无执行权限的问题
  -         add patch: kysec-utils-fix-initramfs-exec-denied-halt.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-utils-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.22
changelog:
  - Type: bugfix
  - ID: [BUG#190352]
  - SUG:NA
  - DESC: 修复kysec设置disable后，提示重启生效的问题
  -	  add patch: kysec-utils-fix-kysec-set-disable-tips-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.23
changelog:
  - Type: update
  - ID: [任务#180316]
  - SUG:NA
  - DESC: 将load_policy命令加入到secadm_list文件中
  -	  add patch: kysec-utils-load_policy-add-secadm_list-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.24
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: kysec-utils-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.25
changelog:
  - Type: bugfix
  - ID: [BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-utils-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.26
changelog:
  - Type: bugfix
  - ID: [BUG#206934]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.27
changelog:
  - Type: bugfix
  - ID: [BUG#215075]
  - SUG:NA
  - DESC: 【授权管控】【S2500】系统安全切换至strict或者default模式后，切换tty后未显示授权管控提示语句
  -	  add patch: kysec-utils-fix-unetdns-service-start-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.28
changelog:
  - Type: bugfix
  - ID: [BUG#218250]
  - SUG:NA
  - DESC:  【52.36】【访问控制】【白名单访问控制】kysec配置-进程保护标签列表查看
  -         回退由国防bug引入的改动.
  -	  add patch: kysec-utils-fix-ppro-get-not-running-process-info.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.29
changelog:
  - Type: bugfix
  - ID: [BUG#220613]
  - SUG:NA
  - DESC: 【kysec】insmod被篡改的内核模块，没有产生拒绝日志.
  -     add patch: kysec-utils-fix-no-kysec-deny-logs-when-insmod-hash-not-verified-ko.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: Xiaole He <hexiaole@kylinos.cn> - 2.2-2
changelog:
  - Initial build of libabigail package using source code from git revision
  - 24a219d905ad61710d2a04a1a5e94bb15d3687dd (fix comparing array subrange DIEs)


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-exec-Fix-setting-locale-for-util-calls.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-dm-Fix-memory-leak-in-the-DM-plugin-and-DM-logging-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-fs-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-kbd-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-lvm-dbus-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-mdraid-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-swap-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-vdo-Do-not-use-g_memdup-in-bd_vdo_stats_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-Don-t-allow-suid-and-dev-set-on-fs-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: xuhe <xuhe@kylinos.cn> - 5.3.28-36.p01
changelog:
  - Rebuild for Kylin
  - Add BuildRequires:  java       >= 1:1.6.0
  - Add BuildRequires:  java-devel <  1:1.11.0
  - Add BuildRequires:  java       <  1:1.11.0


author: wuxiaolei <wuxiaolei@kylinos.cn> - 1.9.0rc1-1.p03
changelog:
  - Type:compile
  - ID:[TASK#455845]
  - SUG:NA
  - DESC:Add Obsoletes: libfabric-help <= 1.6.1 to handle legacy package conflicts


author: zhengxiaoxiao <zhengxiaoxiao@huawei.com> - 1.9.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport-Fix-the-behavior-for-child-process.patch
             backport-Clear-AESWRAP-scratch-area-immediately-after-use.patch


author: wangkai <13474090681@163.com> - 2.5.18-5
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: xuhe <xuhe@kylinos.cn> - 1.2.0-4.p02
changelog:
  - Type: bugfix
  - ID: [BUG#186959]
  - SUG: NA
  - DESC: Remove redundancy symbol link /usr/lib64/fipscheck/libkcapi.so.1.hmac,
  -       since system might boot failed due to wrong symbol link,
  -       or applications might start failed due to wrong symbol link.


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p58
changelog:
  - Type: update
  - ID:[TASK#176779]
  - SUG:NA
  - DESC: add auto activation for kms privatization and fix bug 199947
  - DESC: cancel read hardinfo from khwid and five m extension


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.08
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.15
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387899][BUG#387025]
  - SUG:NA
  - DESC: hwid not use bios uuid
          vm client not use disk


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.21
changelog:
  - Type:update
  - ID:[TASK#642797]
  - SUG:NA
  - DESC:fix cpu=100% when can not connect to kms server 
         fix delete_post and KVE-2026-05155


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.22
changelog:
  - Type:bugfix
  - ID:[BUG#510541][BUG#510541][TASK#642797]
  - SUG:NA
  - DESC: optimize the mechanism for obtaining unique hardware identifiers
          fix mem leak and get virtio net pci addr
          fix get raid disk and is network disk
          fix cpu=100% when can not connect to kms server
          fix delete_post and KVE-2026-05155


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: xinghe <xinghe2@h-partners.com> - 2:1.6.37-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 加入回文和相似性检查
  -         add patch: libpwquality-add-palindrome-similar-option.patch
  -       恢复pwquality.conf的默认配置
  -         add patch: libpwquality-restore-pwquality.conf-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.02
changelog:
  - Type:update
  - ID: [Task#91807]
  - SUG:NA
  - DESC: 恢复pwqprivate.h的默认配置
  -         add patch: libpwquality-restore-pwqprivate.h-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.03
changelog:
  - Type: Bugfix
  - ID: [Bug#118364]
  - SUG:NA
  - DESC: 回文检查配置项默认打开
  -         add patch: libpwquality-set-palindrome-default-on.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: peijiankang <peijiankang@kylinos.cn> - 2.50.5-2.p01
changelog:
  - Type: update
  - ID:   [Task#171031]
  - SUG:  NA
  - DESC: add loongarch support patch in vendor libc (sync from  2.50.5-1.p01)


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.06
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.07
changelog:
  - Type:update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: libsecurity1-netctl-set-off.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1-4-se.01
changelog:
  - Type:update
  - ID:[Task#]
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.1-4-se.03
changelog:
  - Type:update
  - ID:[BUG#157746] 
  - SUG:NA
  - add Patch6: libselinux-keep-getpeercon-errorno.patch
  - DESC: 157746 【虚拟化】libvirtd服务报错，virt-manager虚拟机管理器连接失败
    keep errorno value of function getsockopt before function security_lsm_is_enable change it.


author: hanhuijie <hanhuijie@qq.com> - 3.1-3.se.01
changelog:
  - Type:update
  - ID:[Task#76391]
  - SUG:NA
  - DESC:
  - 增加libsemanage补丁
  -         add patch: libsemanage-20200319.patch
  -       增加文件当前包含的作用户操作的模板


author: hanhuijie <hanhuijie@qq.com> - 3.1-3.se.02
changelog:
  - Type:update
  - ID:[任务#195740] 同步libsemanage的补丁到sp1 sp2 sp3 / sp3-libsemanage
  - SUG:NA
  - DESC:
  - 同步[BUG#209238]【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  - add patch: libsemanage-homedircon.patch
  - desc:secadm和auditadm不存在,genhomedircon生成adm_home_t的定义。


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: nickyang <nickyang228@163.com> - 2.71.0-11
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.71.0-12
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: wangjie1 <wangjie1@kylinos.cn> - 2.71.0-18.p01
changelog:
  - Type:cves
  - ID:CVE-2025-4945
  - SUG:NA
  - DESC:fix CVE-2025-4945; Failed to fix websocket-test case (backport-0003-CVE-2024-52532)


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p02
changelog:
  - Type:cves
  - Id:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p03
changelog:
  - Type:cves
  - Id:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p06
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: houhongxun <houhongxun@kylinos.cn> - 2.71.0-4.p09
changelog:
  - Type:cves
  - ID:[TASK#593047][TASK#595441]
  - SUG:NA
  - DESC:fix CVE-2026-0719 CVE-2025-14523 CVE-2026-1761 CVE-2026-1539 CVE-2026-1467
         CVE-2026-0716 CVE-2026-2369 CVE-2026-1801 CVE-2026-1760


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaihuiying <eaglegai@163.com> - 0.9.4-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.4-15
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.9.0-10
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: gaoyukun <gaoyukun@kylinos.cn> - 4.16.0-3.p01
changelog:
  - Type:compile
  - ID:TASK#414527
  - SUG:NA
  - DESC:Add 'BuildRequires gtk-doc',repair compilation failure.


author: Yu Peng <yupeng@kylinos.cn> - 1.30-1.p01
changelog:
  - Type:bugfix
  - ID:[Task#456739]
  - SUG:NA
  - DESC:sync community patches:
         backport-libteamdctl-validate-the-bus-name-before-using-it.patch


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:compile
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: wanfeng <wanfeng@kylinos.cn> - 1.2.6-2.p01
changelog:
  - Type:BUGFIX
  - ID:Task#145401
  - SUG:NA
  - DESC:add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
         add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
         fix oom bug


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: hy-euler <eulerstoragemt@huawei.com> - 1.0.22-3
changelog:
  - delete -Sgit in 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-descriptor-Fix-two-memory-safety-bugs-in-malformed-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: lizhanchun <lizhanchun@kylinos.cn> - 6.2.0-16.p11
changelog:
  - Type:	update
  - ID:	NA
  - SUG:	NA
  - DESC: Backport from libvirt-6.6.0. 
  -		Use g_autoptr() on pointers and remove the unneeded 'cleanup' label.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p12
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: backport from 7.1.0, fix CVE-2021-3975
  -       0001-qemu-Fix-potential-crash-during-driver-cleanup.patch


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p16
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: Backport: libvirt daemon finish all threads before exiting.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p18
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: Backport: virnetdaemon: Wait for "daemon-stop" thread to finish before quitting 
  - revert Backport: virnetdaemon: Wait for "daemon-stop" thread to finish before quitting
  - no optimization


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p19
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: clean all old nwfilter before apply new nwfilter when start libvirtd


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p20
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: remote_daemon: Set shutdown callbacks only after init is done


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p21
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: fix double free of cfg->firmwares when use qemu firmware metadata file


author: lilong <lilong@kylinos.cn> - 6.2.0-16.p23
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p25
changelog:
  - Type: Update
  - ID:   [BUG#244925]
  - SUG:  NA
  - DESC: fix: virtlockd/virtlogd service failed when reload service


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-16.p26
changelog:
  - Type: bugfix
  - ID:   [BUG#249689]
  - SUG:  NA
  - DESC: Fix the translation problem of libvirtd.policy's prompts.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-16.p27
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: Cai Yinan <caiyinan@kylinos.cn> - 1.7.0-10.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.10-43.p04
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.9.10-43.p08
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794、CVE-2025-49796、CVE-2025-6170
  - SUG:NA
  - DESC: fix CVE-2025-49794、CVE-2025-49796、CVE-2025-6170


author: zuo <zuohongsheng@kylinos.cn> - 2.9.10-43.p14
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: hexiaole <hexiaole@kylinos.cn> - 8:2.03.09-12.p01
changelog:
  - Type:compile
  - ID:[任务#74797]
  - SUG:NA
  - DESC:Patch18:0018-LD_LIBRARY_PATH-add-extra-dir.patch:add patch to resolve running-time error of test/unit/unit-test: error while loading shared libraries: libdevmapper-event.so.1.02: cannot open shared object file: No such file or directory


author: Xiaole He <hexiaole@kylinos.cn> - 8:2.03.09-12.p02
changelog:
  - Type:task
  - ID:[任务#116460]
  - SUG:NA
  - DESC:add Patch19-23 for supporting intel vroc raid(vitual raid on cpu)


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-12.p07
changelog:
  - Type: bugfix
  - ID: [任务#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group
          because sp4-ha occupies p06,so p07 is used.


author: liyue <liyue01@kylinos.cn> -2.1.36-2.p01
changelog:
  - Type:NA
  - ID:TASK#168978
  - SUG:NA
  - DESC:add patch:0001-mailman-2.1.36-kylin-remove-sensitive-character.patch


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylin.cn> - 1.16.1-4.p01
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.16.1-4.p04
changelog:
  - Type: update
  - ID  : [TASK#456095]
  - SUG : NA
  - DESC: fix window minimize animation to wrong direction


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p01
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p21
changelog:
  - Type: bugfix
  - ID:   [TASK#220038]
  - SUG:  NA
  - DESC: don't repeatedly reset desktop background which was used by caja


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p12
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-tranditional-chinese-translation.patch


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#205717]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-some-missing-translations-for-ca.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p14
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0001-fix-mate-indicators-memory-leaks.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p15
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0002-fix-mate-indicators-memory-leaks.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p16
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add Requires: mate-panel-libs >= 1.12.2-1kord37.p10.a.ky10


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#449341]
  - SUG : NA
  - DESC: add patch 0003-fix-mate-indicators-memory-leaks.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p05
changelog:
  -Type:bugfix
  -ID:[BUG#194507]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-system-monitor-menu-if-current-user-is-no.patch
        don't show system monitor when not logged in as root


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0.1-p02
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: mate-polkit-update-translations-for-hk.patch


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn> - 1.16.1-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus, add  Requires: kylin-menu


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: peijiankang <peijiankang@kylinos.cn>- 1.12.2-1kord13.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#194919]
  - SUG : NA
  - DESC: add Patch4 mate-session-manager-1.12.2-kylin-add-min-and-max-for-idle-delay.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.12.2-1kord13.p07
changelog:
  -Type:bugfix
  -ID:[BUG#203419]
  -SUG:NA
  -DESC:add patch 0001-mate-session-manager-add-missing-translations-for-zh.patch


author: douyan <douyan@kylinos.cn>- 1.12.2-1kord13.p08
changelog:
  -Type:bugfix
  -ID:[BUG#205945]
  -SUG:NA
  -DESC:add patch mate-session-manager-1.12.2-kylin-fix-autostart-process-no-quit-when-loggingout.patch


author: gaohaobo <gaohaobo@kylinos.cn> - 1.12.2-1kord13.p01
changelog:
  - add patch0 to  remove Hibernate&Suspend feature form  logout dialog ,cause we don't need it on server version


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p09
changelog:
  - Type: bugfix
  - ID  : [Task#573493]
  - SUG : NA
  - DESC: add patch7: mate-session-manager-1.12.2-kylin-fix-core-problem-caused-by-long-uid.patch
          修复当用户uid过长导致会话管理器崩溃.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p10
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add patch8:mate-session-manager-1.12.2-chnage-mate-screensaver-to-ukui-screensaver.patch
          替换mate-screensaver为ukui-screensaver，修复抑制注销窗口上的锁屏无法使用


author: peijiankang <peijiankang@kylinos.cn> - p04
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add mate-settings-daemon-update-translations-for-hk-and-tw.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: HouHongxun <houhongxun@kylinos.cn>1.12.1-1kord1k7.p06
changelog:
  - Type: update
  - ID: [TASK#187123]
  - SUG: NA
  - DESC: add 0001-mate-terminal-add-some-missing-traditional-chinese-t.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.5.1-1.p02
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-missing-trad-chinese-trans-for-desktop-file.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.5.1-1.p03
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-user-admin-add-missing-trad-chinese-translation.patch


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: Like <like@kylinos.cn> - 4.0.1-4.p01
changelog:
  - Type: cves
  - ID: CVE-2020-7921 CVE-2021-32036
  - SUG: restart
  - DESC: add Patch600 and Patch6001 fix CVE-2020-7921 and CVE-2021-32036


author: yinyongkang <yinyongkang@kylinos.cn> - 0.8.4-18.p02
changelog:
  - Type: bugfix
  - ID: [TASK#176871]
  - SUG: NA
  - DESC: Add 0042-libmultipath-fix-checker-detection-for-nvme-devices.patch


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 0.8.4-18.p03
changelog:
  - Type: update
  - ID: [TASK#190984]
  - SUG: NA
  - DESC: Backport oe -19 and -20 patches:
          -fix build failure caused by new compliation parametes
          -fix multipath -u not recognize multipath devices


author: Yu Peng <yupeng@kylinos.cn> - 0.8.4-18.p05
changelog:
  - Type:bugfix
  - ID:[Task#453521]
  - SUG:NA
  - DESC:fix check_path errors with removed map.
         sync community patches:
         multipathd-fix-check_path-errors-with-removed-map.patch
         libmultipath-make-dm_get_map-status-return-codes-sym.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 0.8.4-18.p06
changelog:
  - Type:bugfix
  - ID:[Task#514047]
  - SUG:NA
  - DESC:libmultipath: check if user_friendly_name is in use


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: zhangchaorui <zhangchaorui@kylinos.cn> - 6.2-7.p01
changelog:
  - Add patch: ncurses-support-loongarch.patch
  - Modify config.sub/config.guess for supporting loongarch


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: wangshuo <wangshuo@kylinos.cn> - 5.9-4.p03
changelog:
  - Type:bugfix
  - ID:[Bug#154748]
  - SUG:NA
  - DESC:Delete useless so file, see also:
  -        https://gitee.com/src-openeuler/net-snmp/commit/50d96cd21868c4b37f4629f34f37dfbd3be37592
  -      To fix bug, the LoongArch platform must use the newly compiled so library file.


author: baiguo <baiguo@kylinos.cn> - 5.9-4.p04
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is null


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: liyunqing<liyunqing@kylinos.cn>--1.18.22-4.p10
changelog:
  - Type:BUG
  - ID:[BUG#135567、BUG#53964]
  - SUG:NA
  - DESC:sync patch from loongarch, fix bug135567 and bug53964 for loongarch64 only


author: guojunding <guojunding@kylinos.cn> --1.18.22-4.p13
changelog:
  - Type: Bugfix
  - ID: [bug#203222]
  - SUG: NA
  - DESC: Supplemented with traditional Chinese translations


author: guojunding <guojunding@kylinos.cn> --1.18.22-4.p14
changelog:
  - Type: Bugfix
  - ID: [bug#204845]
  - SUG: NA
  - DESC: The network connection interface is converted to traditional Chinese


author: guojunding <guojunding@kylinos.cn> --1.18.22-4.p16
changelog:
  - Type: Bugfix
  - ID: [bug#205181]
  - SUG: NA
  - DESC: Traditional translation of the networkmanager icon


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p09
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p10
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p13
changelog:
  - Type: cves
  - ID: CVE-2026-42055 CVE-2026-42533 CVE-2026-56434 CVE-2026-60005
  - SUG: NA
  - DESC: fix CVE-2026-42055 CVE-2026-42533 CVE-2026-56434 CVE-2026-60005


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:12.22.11-5.p04
changelog:
  - Type: cves
  - ID: NA
  - SUG: NA
  - DESC: Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix an error in CVE-2025-23085.2.fix conflicts between help and docs packages


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p07
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix conflicts between npm in 12.22.xx and nodejs in 12.19.0-1.0.1


author: lvfei <lvfei@kylinos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: houzhiwei<houzhiwei@kylinos.cn>- 3.54.0-10.p07
changelog:
  - Type:update
  - ID:TASK#其它
  - SUG:NA
  - DESC: Add PK11_Pub{Wrap, Unwrap}SymkeyWithMechanism r=mt,rrelyea Summary


author: wangkai <13474090681@163.com> - 2:2022.5.17-5
changelog:
  - Fix CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-46569,
    CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-56135, CVE-2026-56136


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#337735]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: chenjianhu <chenjianhu@kylinos.cn> - 3.10.0-2.p01
changelog:
  - Type:compile
  - ID:[BUG#273633]
  - SUG:NA
  - DESC:Add --enable-locks flags for aarch64 compile,no using libitm-devel


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: changtao <changtao@kylinos.cn> - 2.3.1-15.p01
changelog:
  - Type: complie
  - CVE: NA
  - SUG: NA
  - DESC:fix openjpeg2-help noarch package built differently on different architectures


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p16
changelog:
  - Type: bugfix
  - ID:[BUG#294265]
  - SUG:NA
  - DESC:fix login error after use the qingyun special config


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p21
changelog:
  - Type: update
  - ID: TASK#554963
  - SUG: NA
  - DESC: backport feature of ChannelTimeout/UnusedConnectionTimeout


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p22
changelog:
  - Type: update
  - ID: TASK#567487;BUG#247641;BUG#345532
  - SUG: NA
  - DESC: remove abandoned configs: RSAAuthentication/RhostsRSAAuthentication;
          rm sha1 in MACs and KexAlgorithms, and mv etm to MACs head


author: jiaocong <jiaocong@kylinos.cn> - 8.2P1-16.p25
changelog:
  - Type: update
  - ID: TASK#608701
  - SUG: NA
  - DESC: add comment for strict scp check option in sshd_config


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p27
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p29
changelog:
  - Type:CVE
  - CVE:CVE-2026-59995 CVE-2026-59997 CVE-2026-59998 CVE-2026-59999 CVE-2026-60000 CVE-2026-60001
  - SUG:NA
  - DESC:fix CVE-2026-59995 CVE-2026-59997 CVE-2026-59998 CVE-2026-59999 CVE-2026-60000 CVE-2026-60001


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p02
changelog:
  - Type: update
  - ID: [Task#67548]
  - SUG: NA
  - DSEC: support national cryptographic standard algorithm feature


author: anyunhao <anyunhao@kylinos.cn> - 1:1.1.1f-15.p03
changelog:
  - Type: update
  - ID: [TASK#85463]
  - SUG: NA
  - DSEC: split package openssl-perl,reduce main package installation dependencies


author: wangshuo <wangshuo@kylinos.cn> - 1:1.1.1f-15.p04
changelog:
  - Type: update
  - ID: [TASK#78310]
  - SUG: NA
  - DESC: Add Patch85, Kylin add openssl loongarch64 support
  -       Modify spec, Kylin modify configure command for build on loongarch64


author: Xu Xiangyu <xuxiangyu@hygon.cn> - 1:1.1.1f-15.p05
changelog:
  - Type: update
  - ID: [Task#84503]
  - SUG: NA
  - DSEC: add hygoncpp engine and speed test for openssl support hygon cipher coprocessor hardware


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p06
changelog:
  - Type:cves
  - ID:CVE-2022-2097, CVE-2022-2068, CVE-2022-1292
  - SUG:NA
  - DESC:Fix CVE-2022-2097, CVE-2022-2068 and CVE-2022-1292


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p07
changelog:
  - Type:cves
  - ID:CVE-2022-4450, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286
  - SUG:NA
  - DESC:Fix CVE-2022-4450, CVE-2022-4304, CVE-2023-0215 and CVE-2023-0286


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p09
changelog:
  - Type:cves
  - ID:CVE-2023-0464, CVE-2023-0465, CVE-2023-0466
  - SUG:NA
  - DESC: Fix CVE-2023-0464, CVE-2023-0465 and CVE-2023-0466


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p12
changelog:
  - Type: update
  - ID: [TASK#167670]
  - SUG: NA
  - DSEC: add Patch108, add TLCP support
  -       add Patch109, add GDCA gm cert verification support
  -       add Patch110, add sm2 encryptedkey(password) support
  -       add Patch111, bugfix null-pointer in ec_pmeth
  -       add Patch112, add comment for ec_pkey_meth
  -       add Patch113, update certs for TLCP testcases
  -       add Patch114, set TLCP interface version


author: bianxiuning <bianxiuning@kylinos.cn> - 1:1.1.1f-15.p14
changelog:
  - Type: update
  - ID: [TASK#172146]
  - SUG: NA
  - DESC: add Patch117, add zhao-xin gmi suport for sm3 sm4 and random


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id, 
  	and optimize the return code, optimize dgst keyform for PEM,
  	support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p31
changelog:
  - Type:update
  - ID:TASK#560665
  - SUG:NA
  - DESC:solve some issues regarding the tlcp protocol, tls, and the use
         of national encryption suites under kylin server V10 and V11 systems


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p32
changelog:
  - Type:update
  - ID:TASK#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160、CVE-2026-22796、CVE-2026-22795、
             CVE-2025-69418、CVE-2025-69421、CVE-2025-69419、
             CVE-2025-69420


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p33
changelog:
  - Type:update
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-28390,CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p34
changelog:
  - Type:update
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-42766,
             CVE-2026-45447


author: ningjin <ningjin@kylinos.cn> -2.12.0-16.p08
changelog:
  - Type:bug
  - ID:[BUG#245059]
  - SUG:NA
  - DESC:openvswitch-ipsec adapt python3 ,fix start and stop failed


author: ningjin <ningjin@kylinos.cn> -2.12.0-16.p09
changelog:
  - Tyep:bug
  - ID:[BUG#252777]
  - SUG:NA
  - DESC:add /usr/local/share/openvswitch before start openvswitch-ipsec


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: mengchaoming <mengchaoming@kylinos.com> - 1.4.0-8.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:sync from sp2 patch: 0001-pam-13.1-8-loacal-chinese.patch;
  - DESC:resolve "Account temporarily locked due to %d failed logins" chinese local


  - Type:bugfix
  - ID:38353
  - SUG:sync from sp2 patch:0001-fix-chandao-bug-38353.patch
  - DESC:NA

  - Type:bugfix
  - ID:26337
  - SUG:sync from sp2 patch:Linux-PAM-1.4.0-kylin-fix-bug26337.patch
  - DESC:NA

  - Type:bugfix
  - ID:19898
  - SUG:modify spec
  - DESC:Modify system-auth.pamd to add 'use_first_pass'


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: pam-login-check-same-uid.patch


author: xieyuxing <xieyuxing@kylinos.com> - 1.4.0-8.p02
changelog:
  - Type:bugfix
  - ID:121657
  - SUG:NA
  - DESC:add patch KYLIN-add-sm3-hash-function-for-passwd-cmd.patch


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.02
changelog:
  - Type: bugfix
  - ID:[BUG#136126]
  - SUG:NA
  - DESC: 对于相同的uid的两个账户，允许uid和username匹配的账户登录
  -       add patch: pam-fix-right-uid-not-login-bug.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 1.4.0-8.p03.se.03
changelog:
  - Type:update
  - ID:[Task#133684]
  - SUG:NA
  - DESC: 提供状态检查接口
          add patch:pam-get-chkuid-state.patch


author: anyunhao<anyunhao@kylinos.cn> - 1.4.0-8.p04.se05
changelog:
  - Type:update
  - ID:[Bug#189847]
  - SUG:NA
  - DESC: add patch: 0001-Kylin-fix-bug163994-and-bug26337.patch


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.4.0-8.p04.se06
changelog:
  - Type:update
  - ID:[Bug#203691]
  - SUG:NA
  - DESC: 使用开源sm3算法
          delete patch: KYLIN-add-sm3-hash-function-for-passwd-cmd.patch


author: liyue <liyue01@kylinos.cn> - 1.4.0-8.p05.se06
changelog:
  - Type:update
  - ID:[Task#185449]
  - SUG:NA
  - DESC:   add patch: pam-1.4.0-kylin-modify-zh-HK-po.patch


author: wanghao <wanghao2@kylinos.cn> - 0.80-9.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  -         add patch: passwd-0.80-add-security-check.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.1.3-13.p07
changelog:
  - Type: Bugfix
  - ID: [TASK#161277]
  - SUG: NA
  - DESC:
  - 修复解析IPI0字段异常引起的coredump问题
  - add 0001-fix-analysis-proc-interrupts-name-error.patch


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: liudy <liudingyao@kylinos.cn> - 1:3.04-7.p01
changelog:
  - Add 'export PERL_CANARY_STABILITY_NOPROMPT=1' before perl Makefile.PL
  - Skip the Canary::Stability COMPATIBILITY AND SUPPORT CHECK prompt


author: wanghao<wanghao2@kylinos.cn> - 4:5.28.3-7.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec执行控制检查
  -         add patch: perl-5.28.3-add-kysec-exectl-check.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 4:5.28.3-7.se.01.p04
changelog:
  - Type:bugfix
  - ID:Bug#190774
  - SUG:NA
  - DESC:fix-perl-libs-re.so-undefined-symbol-error
  - Synchronize with Loongarch64 version, Skip 5.28.3-7.se.01.p03 version


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p03
changelog:
  - Type:cves
  - ID:CVE-2024-8925、CVE-2024-8926、CVE-2024-8927、CVE-2024-9026
  - SUG:NA
  - DESC:fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-2756,CVE-2024-3096,CVE-2024-5458
  - SUG:NA
  - DESC:fix CVE-2024-2756,CVE-2024-3096,CVE-2024-5458


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p07
changelog:
  - Type:cves
  - ID:CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233
  - SUG:NA
  - DESC:fix CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: gaoyukun <gaoyukun@kylinos.cn> - 8.0.30-10.p02
changelog:
  - Type:rebuild
  - ID:[BUG#338391]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Funda Wang <fundawang@yeah.net> - 8.0.30-12
changelog:
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Funda Wang <fundawang@yeah.net> - 8.0.30-13
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: lipengyu <lipengyu@kylinos.cn> - 8.0.30-13.p01
changelog:
  - Type:update
  - ID:[BUG#613853]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: Funda Wang <fundawang@yeah.net> - 8.0.30-14
changelog:
  - fix CVE-2026-14355: Memory corruption (zend_mm_heap corrupted) in
    openssl_encrypt with AES-WRAP-PAD


author: songliyang <songliyang@kylinos.cn> - 8.0.30-15.p01
changelog:
  - Type: update
  - ID:   [BUG#679579]
  - SUG:  NA
  - Desc: 1.Backport BuildRequires postgresql to resolve build errors
          2.Backport configure --without-pcre-jit to support loongarch64


author: houhongxun <houhongxun@kylinos.cn> - 1.16.2-1.6.p03
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-pluma-add-some-missing-traditional-chinese-translati.patch


author: xuhe <xuhe@kylinos.cn> - 0.9.5-2.p01
changelog:
  - Rebuild for Kylin
  - Migrates patch from v10sp2 to v10sp3 to fix default theme on FT-1500A platform


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: zhangbowei<zhangbowei@kylinos.cn> - 1:0.10.1-10.p03
changelog:
  - Type:bugfix
  - ID:[Bug#374071]
  - SUG:NA
  - DESC:change exec path from /usr/bin to /usr/local/bin about podman-docker,change man file from docker to podman


author: weiyucheng<weiyucheng@kylinos.cn> - 1:0.10.1-10.p05
changelog:
  - Type:CVE
  - CVE: CVE-2025-58058
  - SUG:NA
  - DESC:fix CVE-2025-58058 and add containers-common version limit


author: mengchaoming<mengchaoming@kylinos.cn> -3.1-7.p01
changelog:
  -Type:bugfix
  -ID:14829
  -SUG: Language Sinicization
  -DESC:sp2 patch to sp3:0001-Kylin-policycoreutils-2.8-14.2-kylin-fix-bug-14829.patch


author: songliyang <songlyang@kylinos.cn> - 0.116-12.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100: polkit-0.116-backport-Fix-two-minor-memory-leaks.patch. Author: mengchaoming
          3.Revert port polkit to mozjs78, use mozjs60 on v10 sp1


author: songliyang <songlyang@kylinos.cn> - 0.116-12.p02
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100: polkit-0.116-backport-Fix-two-minor-memory-leaks.patch. Author: mengchaoming
          3.Use p02 on v10 sp3, because p01 is used by v10 sp1


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: Like <like@kylinos.cn> - 0.67.0-8.p01
changelog:
  - Type:CVE
  - Id:CVE-2022-37050,CVE-2022-37051
  - SUG:NA
  - DESC:add backport-CVE-2022-37051-CVE-2022-37050.patch


author: lichenguang <lichenguang@kylinos.cn> - 0.67.0-8.p03
changelog:
  - Type: cves
  - ID: CVE-2025-32364 CVE-2025-32365 CVE-2024-4141
  - SUG: NA
  - DESC: fix CVE-2025-32364 CVE-2025-32365 CVE-2024-4141


author: huayadong <huayadong@kylinos.cn> - 0.67.0-8.p04
changelog:
  - Type: cves
  - ID: [Task#460978]
  - SUG: NA
  - DESC: add Patch10008: poppler-0.67.0-kylin-backport-CVE-2024-6239.patch


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p02
changelog:
  - Type: BUG fix 
  - ID: bug#142478
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel resolved conflicts


author: lilu <lilu@kylinos.cn> - 10.5-23.p06
changelog:
  - Type: cves/bugfix
  - ID: task#494175
  - SUG: NA
  - DESC: fix CVE-2023-39417 and move libpq.so* to avoid file conflict with libpq package


author: lilu <lilu@kylinos.cn> - 10.5-23.p09
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 and CVE-2026-2006


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1.3.8b-2.p01
changelog:
  - Type:cves
  - ID:CVE-2024-48651、CVE-2024-57392
  - SUG:NA
  - DESC:fix CVE-2024-48651、CVE-2024-57392,and solve the loongarch compilation issue


author: lijian2 <lijian2@kylinos.cn> - 3.12.3-14.p02
changelog:
  - Type:cves
  - ID:CVE-2025-4565
  - SUG:NA
  - DESC: 1.fix CVE-2025-4565
          2.Add obsoletes items to fix install conflict error


author: songliyang <songliyang@kylinos.cn> - 3.12.3-14.p03
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Completely obsoletes protobuf2* to fix install conflict error


author: Yu Peng <yupeng@kylinos.cn> - 13.0-4.p02
changelog:
  - Type: Update
  - ID  : [Task#187031]
  - SUG : NA
  - DESC: Traditional Chinese translations for the HK versions
          Add Kylin-add-translations-for-HK.patch.


author: gongxingliang <gongxingliang@kylinos.cn> - 3.6.0-2.p02
changelog:
  - Type: compile
  - ID: NA 
  - SUG: NA
  - DESC: fix build error due to hdf5 upgrade(patch1 patch2 patch3)


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Use gdbm_count for dbm_length if possible
         Don't override PYTHONPATH which is already set by the user


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: wanghao<wanghao2@huawei.com> - 3.7.9-18.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#104619]
  - SUG:NA
  - DESC: python3添加kysec检查
  -         add patch: Python3-judge-python-file-run.patch


author: wanghao<wanghao2@huawei.com> - 3.7.9-18.se.03
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python3加-c或者-m参数时kysec无法管控的问题
  -         add patch: python3-fix-parameter-c-or-m-kysec-exectl.patch


author: xiaozai<xiaozai@kylinos.cn> - 3.7.9-18.se.04.p01
changelog:
  - Type:CVE
  - CVE:CVE-2020-10735 CVE-2022-37454, CV-2022-45061
  - SUG:NA
  - DESC:fix CVE-2020-10735 CVE-2022-37454, CV-2022-45061


author: wanghao<wanghao2@kylinos.cn> - 3.7.9-18.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python3-parameter-c-add-exectl-status-check.patch


author: GuoCe <guoce@kylinos.cn> - 3.7.9-18.se.05.p04
changelog:
  - Type:CVE
  - ID:[TASK#165452]
  - SUG:NA
  - DESC:fix CVE-2021-4189,CVE-2022-0391
         support loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39.se.01
changelog:
  - Type: bugfix
  - ID: [BUG#193772]
  - SUG: NA
  - DESC: From: @wanghao
          移植kysec执行控制检查补丁
          add patch: python3-7.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add Patch9007-9008, fix CVE-2007-4559
  -      Add Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41.se.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
       CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
         CVE-2025-4330 CVE-2025-4435


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p07
changelog:
  - Type:CVE
  - ID:CVE-2025-11468 CVE-2026-0864 CVE-2026-11972 CVE-2026-1299  
       CVE-2026-4224 CVE-2026-4519 CVE-2026-4786  CVE-2026-8328
  - DESC:fix CVE-2025-11468 CVE-2026-0864 CVE-2026-11972 
             CVE-2026-1299  CVE-2026-4224 CVE-2026-4519
             CVE-2026-4786  CVE-2026-8328


author: wangguochun <wangguochun@kylinos.cn>
changelog:
  - Type:updated
  - ID:[任务#74236]
  - SUG:NA
  - DESC:
  - add patch 0001-KYLIN-0001-KYLIN-VIRTIO-GPU-Optimization-2.patch
  1) This patch aims to further improve the 3D performance of virtiogpu
  2) The changes include:
          a.When qemu received VIRTIO_GPU_ CMD_ SUBMIT_3D command, if the command length does not exceed the size of an IOV, the data in the IOV will no longer be copied to the buf, but directly point the *buf to the IOV, so as to reduce the data replication overhead during command execution
          b.By analyzing the 3D command, the screen area refreshed in this frame is obtained, so that when outputting the screen picture in each frame, there is no need to obtain the screen area to be refreshed by comparing the data difference between the previous and subsequent frames, so as to reduce the CPU overhead. In addition, when calling glreadpixels to obtain the frame cache picture, the obtained screen area can also be used to reduce the amount of frame cache picture data that glreadpixels needs to copy, further reducing the GPU overhead of glreadpixels
          c. Change the initial timing call time of virtio_gpu_virgl_fence_poll command to 1US to ensure that the execution of 3D command can be fed back in time
  3) by this patch,the 3D performance of virtiogpu can be improved by about 10%
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix-3.patch
  1) the processing steps of function egl_fb_read are adjusted.
  2) the new process is more reasonable,and can solve the programe of
  system crash when entering the commandline display(by ctrl+alt+F1)
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Bug-Fix-FOR-KYLIN-SERV.patch
  1) The previous virtio GPU optimizations were based on the desktop version of kylin system, when applied to the server version of Kirin system, there will be problems that the screen refresh is not timely and the output screen size cannot be changed.
  2) The reason for the above problems lies in the difference between the desktop graphics processing mechanism of the server version and the desktop version: each refresh of the desktop version is the whole desktop, so one of the optimization measures is to analyze and obtain the actual refresh area from the 3D command; The refresh operation of the server version is to directly send the actual refresh area to virtio GPU, so it needs to be handled differently.so in egl-headless, when egl_scanout_flush find that the flush area is not the whole desktop,it will call change_update_rect to update rect area.
  3) In addition, this bugfix also fixes an error in scanout operation, which will lead to the inconsistency between the screen area recorded by virtio GPU and the actual screen area, resulting in the problem of the screen size presented by the client


author: weishaokun <weishaokun@kylinos.cn>
changelog:
  - Type:updated
  - ID:[BUG#121211]
  - SUG:NA
  - DESC:Edk2 must be used when creating virtual machines. add ifarch aarch64 Requires: edk2-aarch64; add ifarch x86_64 Requires: edk2-ovmf.


author: lijunwei <lijunwei@kylinos.cn> -2:4.1.0-63.p05
changelog:
  - Type:update
  - ID:[BUG#132317]
  - SUG:NA
  - DESC:Enable fdt And add BuildRequires libfdt-devel to fix ifarch x86_64 can not start vm with virtio-gpu


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p12
changelog:
  - Type:bug
  - ID:[BUG#135672]
  - SUG:NA
  - DESC: Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28)


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p13
changelog:
  - Type:	bug
  - ID:	[BUG#143805]
  - SUG:	NA
  - DESC: Bugfix. When the virtual machine is restarted repeatedly, it may cause qemu-kvm crash.


author: weishaokun <weishaokun@kylinos.cn> -2:4.1.0-63.p14
changelog:
  - Type:bug
  - ID:[BUG#132317]
  - SUG:NA
  - DESC:Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -2:4.1.0-63.p16
changelog:
  - Type:Update
  - ID:[TASK#116597]
  - SUG:NA
  - DESC:to fix CVE-2021-3507 CVE-2021-20257 CVE-2020-13253 CVE-2021-3607 CVE-2021-3608, add openeuler qemu-4.1.0-70 version patches.
  - softmmu: Always initialize xlat in address_space_translate_for_iotlb (CVE-2022-35414)
  - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p17
changelog:
  - Type: Update
  - ID:   [TASK#132801]
  - SUG:  NA
  - DESC: fix CVE-2022-0216 CVE-2022-4144
  -       add Patch: 0001-Revert-qxl-add-migration-blocker-to-avoid-pre-save-a.patch
          to fix CVE-2022-4144 build error from GitLab commit dcc5fc2a3adb9ec4b196f82ebe4079bc88f3c91e


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-63.p18
changelog:
  - Type: bug
  - ID:   [TASK#132773]
  - SUG:  NA
  - DESC: Fix qemu-nbd child daemon connection process wont close stderr file


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p19
changelog:
  - Type: cve
  - ID:   CVE-2022-1050
  - SUG:  NA
  - DESC:	hw/pvrdma: Protect against buggy or malicious guest driver (CVE-2022-1050)


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p23
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p25
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-63.p27
changelog:
  - Type: Update
  - ID: [TASK#180246]
  - SUG: NA
  - DESC: 
  - Apply patches to fix CVE-2022-3872
  - Disable virtfs to fix CVE-2023-1386


author: lizhanchun <lizhanchun@kylinos.cn> - 2:4.1.0-63.p29
changelog:
  - Type: Update
  - ID: [TASK#180246]
  - SUG: NA
  - DESC: fix CVE-2022-36648 CVE-2018-18438 CVE-2023-0330
  - Disable (deprecated upstream) pvrdma to fix CVE-2023-1544


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p30
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.
  -	enable virtfs, undo the CVE-2023-1544


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-63.p34
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p36
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.0-63.p39
changelog:
  - Type: Update
  - ID:   [BUG#310535]
  - SUG:  NA
  - DECS: Update requires nettle version to latest version(p04) due to 
          function calls in qemu which realized in TASK#349341


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p42
changelog:
  - Type: Bugfix
  - ID:   [BUG#385783]
  - SUG:  NA
  - DESC: Forbid repeated device_del to fix hot-unplug issue


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p43
changelog:
  - Type: Bugfix
  - ID:   [BUG#415279]
  - SUG:  NA
  - DESC: Enable blockdev support for copying across storage block devices


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p44
changelog:
  - Type: Bugfix
  - ID:   [BUG#425473]
  - SUG:  NA 
  - DESC: Fix integer left shift error in qcow2_alloc_cluster_link_l2()
  	Fix common problems from qemu.spec in check


author: malike <malike@kylinos.cn> - 2:4.1.0-63.p46
changelog:
  - Type: Update
  - ID:   [TASK#625075]
  - SUG:  NA
  - DESC: drop dirty rect update to fix memory allocation error


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p47
changelog:
  - Type: cves
  - ID:   CVE-2025-11234
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 2:4.1.0-63.p51
changelog:
  - Type: cves
  - ID:   CVE-2026-48914
  - SUG:  NA
  - DESC: Fix CVE-2026-48914 heap buffer overflow in virtio-blk scsi request handling


author: malike <malike@kylinos.cn> - 2:4.1.0-63.p52
changelog:
  - Type: cves
  - ID:   CVE-2026-48003
  - SUG:  NA
  - DESC: ui/vnc: fix OOB read updating VNC update frequency stats(CVE-2026-48003)


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p53
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: liwenchong <liwenchong@kylinos.cn> - 4.9.2-4.p02
changelog:
  - Type:bugfix
  - ID:BUG#131963
  - SUG:NA
  - DESC:fix bug#131963 rebuild in tag v10-sp3;
  -      add llvm version differentit for make error.


author: wangqiang <wangqiang1@kylinos.cn> - 4.9.2-4.p03
changelog:
  -Type:UPDATE
  -ID:NA
  -SUG:NA
  -DESC:Rebuild for clang base library change, add patch5 fix ld error on clang-10


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p01
changelog:
  - add diff from 1:4.8.7-46, diff:
  - add qt-everywhere-opensource-src-4.8.7-neokylin-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-atomic-mips64el.patch
  - add qt-everywhere-opensource-src-4.8.7-qmake-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-mips64r2.patch
  - modified:  assistant.desktop designer.desktop linguist.desktop qdbusviewer.desktop
  - (1:4.8.7-46)ori uri: http://10.1.110.123/download/iso/Euler/openeuler_ARM64/openeuler-2020-03-13-01-32-06/Software/aarch64/SRPMS/Packages/qt-4.8.7-46.oe1.src.rpm
  - (1:4.8.7-46)modified: http://10.1.123.237/kojifiles/packages/qt/4.8.7/46.ky10/src/qt-4.8.7-46.ky10.src.rpm


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: huayadong <huayadong@kylinos.cn> - 1:4.8.7-47.p11
changelog:
  - Type: bugfix
  - ID:   [TASK#220326]
  - SUG:  NA
  - DESC: add patch45: fix-that-filediolog-cannot-use-input-methods.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: wangshuo <wangshuo@kylinos.cn> - 0.6.8-1.p04
changelog:
  - Type:update
  - ID:[TASK#158206]
  - SUG:NA
  - DESC:Add Patch004, fix poll() on per_cpu trace_pipe_raw blocks indefinitely
  -      See also https://github.com/mchehab/rasdaemon/commit/6986d818e6d2c846c001fc7211b5a4153e5ecd11
  -      Enable-memory-ce-pfa, enable-memory-failure for aarch64 configure


author: jiangjixiang <jiangjixiang@kylinos.cn> - 0.6.8-1.p06
changelog:
  - Type:update
  - ID:[TASK#186413]
  - SUG:NA
  - DESC: backport patch from OE2003-SP4
      1.wait for file access.
      2.Modify recording Hisilicon common error data in the rasdaemon.
      3.fix incomplete diskerror log.
      4.fix possible but unlikely file descriptor leak.
      5.fix ras-mc-ctl.service startup failed when selinux is on.
      6.Fix return value type issue of read/write function from unistd.h.
      7.adapt to kernel ftrace ring buffer change.
      8.ras-events:quit loop in read_ras_event when kbuf data is broken.


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 6.2.7-1.p01
changelog:
  - Type:cves
  - Id:CVE-2022-36021 CVE-2022-24834 CVE-2023-28856
  - SUG:NA
  - DESC:回合低版本补丁CVE-2022-36021 CVE-2022-24834 CVE-2023-28856 and fix-building-error-of-malloc.patch
     Fix redis.spec and redis.service


author: gaoyukun <gaoyukun@kylinos.cn> - 6.2.7-1.p03
changelog:
  - Type:cves
  - Id:CVE-2023-45145,CVE-2024-31228,CVE-2024-31449
  - SUG:NA
  - DESC:Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449


author: lifeifei <lifeifei@kylinos.cn>
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.
         2.Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.11-1.p01
changelog:
  - Type:update
  - ID:[Task#540289]
  - SUG:NA
  - DESC:Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: zhangzhou <zhangzhou@kylinos.cn> - 4.15.1-37.p01.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#164925]
  - SUG:NA
  - DESC: 保持rpm安装文件原安全标记
  -       add patch rpm-remainoldtag-kysec.patch


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-37.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118520]
  - SUG:NA
  - DESC: Remove rpm daily scheduled tasks,and add loongarch support


author: wanfeng <wanfeng@kylinos.cn> - 4.15.1-37.p02.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#118520]
  - SUG:NA
  - DESC: Fix install of block and character FIFO special files
  -       add patches backport-Fix-install-of-block-and-character-special-files-219.patch
  -                   backport-Use-fd-based-ops-for-metadata-in-FA_TOUCH-mode-too-w.patch
  -                   backport-Add-a-test-for-special-device-node-installation.patch


author: yueyuankun<yueyuankun@kylinos.cn> - 8.2006.0-7.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - DESC:solve the problem of duplicate logs in /var/log/messages after restarting the system


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: chenjianhu <chenjianhu@kylinos.cn> - 2.5.8-136.p01
changelog:
  - Type:compile
  - ID:[Task#564099]
  - SUG:NA
  - DESC:add requires elfutils-extra and add CVE-2025-58767 test case


author: lijian1<lijian1@kylinos.cn> - 1.51.0-6.p01
changelog:
  - Type: cves
  - ID: [TASK#393895]
  - SUG:  NA
  - DESC:  Fix CVE-2024-24577, CVE-2022-36113, CVE-2022-36114, fix kernel copy panic.


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 4.11.12-32.p08
changelog:
  - Type:bugfix
  - ID:[BUG#550911]
  - SUG:NA
  - DESC:Fix duplicate SMB file_ids leading to client cache poisoning


author: wangjie1 <wangjie1@kylinos.cn> - 4.11.12-32.p11
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:Fix CVE-2026-3238 CVE-2026-4480 CVE-2026-4408


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.04
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220608.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.05
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220615.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[TASK#97459]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0707）
  -	修正上一个版本遗留的bug，包括密码有效期对root生效，普通用户也有操作模板权限等
  -       添加补丁security-reinforce-update-20220707.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.07
changelog:
  - Type:update
  - ID:[TASK#90956]
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug,包括加固与还原项数不一致的bug，适配新版kysec的接口等
  -       添加补丁security-reinforce-update-20220713.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.08
changelog:
  - Type:update
  - ID:[TASK#100149]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0721）
  -	修正上一个版本遗留的bug,包括密码期限还原失效，gsetting加固未生效，其权限用户无法操作模板等bug
  -       添加补丁security-reinforce-update-20220721.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.09
changelog:
  - Type:update
  - ID:[TASK#99843][Bug#134347][Bug#134228][Bug#130320][Bug#119204][Bug#132763]
  - SUG:NA
  - DESC: 安全加固命令行功能优化
  -       修复security-reinforce 帮助手册与实际不符的问题
  -       修复还原操作，界面与命令行上次操作结果内容不一致的问题
  -       修复单字母用户名的用户不适用口令更改最小间隔天数策略的问题
  -       修复加固后的完成加固项数与还原后的上次加固项数不一致的问题
  -       修复选择模板后返回时提示无效的选项请重新选择的问题
  -       添加补丁security-reinforce-update-20220811.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.10
changelog:
  - Type:update
  - ID:[TASK#105459][Bug#135048][Bug#134148][Bug#133979][Bug#135646][Bug#129410]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0818）
  -       【安全加固】【终端命令】default模式root用户只能扫描无法加固
  -       【安全加固】【终端命令】三级项范围与全部项一样
  -       【安全加固】【终端命令】扫描过程中是用快捷键ctrl+d，扫描继续且异常
  -       【安全加固】【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       【安全加固】【系统设置】安全加固后系统ctrl+alt+del组合键未禁用
  -       添加补丁security-reinforce-update-20220818.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.11
changelog:
  - Type:update
  - ID:[TASK#108128][Bug#136311][Bug#136809][Bug#135646][Bug#136207]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0907）
  -       调整阻止root通过telnet登录的加固方法
  -       【安全加固】【终端命令】多个用户开启终端命令，其中一个进行扫描\加固\还原时，其他用户终端会同步输出
  -       【安全加固】【终端命令】命令行选择模板后无提示信息并且模板菜单连续出现两次
  -       【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       调试 strict模式下，cvs服务未禁用加固项加固失败
  -       修改vsftp禁止root登录的加固方法，将配置文件/etc/ftpusers修改为/etc/vsftpd/ftpuser
  -       将用到vector的类在每次扫描前进行情况操作，放置获取的是之前扫描的数据
  -       修复日志文件非全局可写加固测试，日志文件权限都为600时依旧需要加固的bug
  -       psacct判断服务修改与grub判断修改 
  -       安全加固sp1\sp2\sp3同源改造
  -       添加补丁security-reinforce-update-20220906.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.12
changelog:
  - Type:update
  - ID:[Bug#122949][Bug#129235]
  - SUG:NA
  - DESC:
  -     【安全加固】【密码强度】密码复杂度策略检测--加固后需要四种字符类型可以修改成功
  -     【安全加固】【密码强度】密码复杂度策略安全加固后未恢复最佳策略
  -      同步主机加固安全bug，将硬盘所有分区修改为根分区使用率的扫描
  -      同步主机加固安全bug，修复最小口令长度加固无效bug
  -      同步修复v10问题
  -      添加补丁security-reinforce-update-20221009.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.13
changelog:
  - Type:update
  - ID:[TASK#119587][Bug#146522][Bug#146702]
  - SUG:NA
  - DESC:去掉安全加固子项-应用联网控制
  -     【安全加固】环境进行过多次安全加固，切换成普通用户，无法进行安全加固
  -     【安全加固】【系统审计】检查是否记录用户对设备的操作加固报告显示异常
  -      添加补丁security-reinforce-update-20221103.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[TASK#97459]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0707）
  -   修正上一个版本遗留的bug，包括密码有效期对root生效，普通用户也有操作模板权限等
  -       添加补丁security-reinforce-update-20220707.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.08
changelog:
  - Type:update
  - ID:[TASK#100149]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0721）
  -   修正上一个版本遗留的bug,包括密码期限还原失效，gsetting加固未生效，其权限用户无法操作模板等bug
  -       添加补丁security-reinforce-update-20220721.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.14
changelog:
  - Type:update
  - ID:[TASK#124465][Bug#150309][Bug#150305][Bug#141728][Bug#146729][Bug#144179][Bug#158573]
  - SUG:NA
  - DESC: 安全加固优化包入库（238和239）
  -     【安全加固】应用防护控制功能加固项，加固状态显示异常
  -     【安全加固】【系统安全】关闭ppro，一键加固后，显示应用防护控制功能开启
  -     【安全加固】一键加固后未重启系统，即刻进行一键还原，界面提示语错误
  -     【安全加固】【系统设置】定时自动屏幕锁定加固失败 
  -     【安全加固】【系统设置】strict模式和custom模式系统ctrl+alt+del组合键禁用，加固失败
  -     【uid唯一性检验】安全加固项中没有“uid唯一性检验”项
  -      完善vsftpd的禁用root加固项扫描方法，修复禁用不必要别名加固重启还原不生效的问题
  -      同步修复南瑞继保问题
  -      添加补丁security-reinforce-update-20230223.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.15
changelog:
  - Type:update
  - ID:[Bug#160433]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -      【sp3】【uid唯一性检验】多个普通用户uid相同，加固后未禁用
  -       根据安全加固需要策略版本需升至selinux-policy-3.14.2-76.se.19.ky10.noarch版本
  -       添加补丁security-reinforce-update-20230303.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.15
changelog:
  - Type:update
  - ID:[Bug#160433]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -      【sp3】【uid唯一性检验】多个普通用户uid相同，加固后未禁用
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本
  -       添加补丁security-reinforce-update-20230303.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.16
changelog:
  - Type:update
  - ID:[Bug#162226]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -       [uid控制]多个用户uid相同，加固后登录提示信息不一致
  -       添加补丁security-reinforce-update-20230328.patch
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.17
changelog:
  - Type:update
  - ID:[Bug#173908]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -       【安全加固】【系统审计】 psacct已安装.psacct服务未开启，进行加固扫描，扫描结果错误修改
  -       添加补丁security-reinforce-update-20230001.patch
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.18
changelog:
  - Type:update
  - ID:[Bug#178224][Bug#176859][Bug#180898]
  - SUG:NA
  - DESC: security-reinforce入库se18版本
  -       【安全加固】【系统设置】“PAM认证模块禁止wheel组之外的用户su为root”加固成功后wheel组用户su为root失败预期成功
  -       【安全加固】【安全服务】系统存在rootkit感染项手动加固后再加固预期显示"无需加固"实际显示"待手动加固"
  -       添加security-reinforce-update-20231018.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.18
changelog:
  - Type:update
  - ID:[TASK#178224][Bug#176859][Bug#180898]
  - SUG:NA
  - DESC: security-reinforce入库se18版本
  -       【安全加固】【系统设置】“PAM认证模块禁止wheel组之外的用户su为root”加固成功后wheel组用户su为root失败预期成功
  -       【安全加固】【安全服务】系统存在rootkit感染项手动加固后再加固预期显示"无需加固"实际显示"待手动加固"
  -       添加security-reinforce-update-20231018.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.19
changelog:
  - Type:update
  - ID:[Bug#199669][Bug#199515]
  - SUG:NA
  - DESC: 【V10SPX科技与评测项目】【4.19】【安全加固】存在两项账户锁定项还原失败
  -       【V10SPX科技与评测项目】【内核版本5.15】【安全加固】root执行security-reinforce -f提示"请输入正确的正确的指令security-reinforce", 多了一个“正确的“
  -       添加security-reinforce-update-20231101.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 1.0.0-se.20
changelog:
  - Type: bugfix
  - ID: [BUG#532297][BUG#541349][BUG#541365][BUG#532307]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532297][BUG#541349]
  -       修复安全漏洞[KVE-2026-0420][BUG#541365][BUG#532307]
  -       security-reinforce-update-20260516.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 1.0.0-se.21
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260522.patch


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.05
changelog:
  - 修复安全切换之后，grub.cfg的中文变英文的bug
  -   add patch: security-switch-fix-bug-of-Chinese-to-English-in-grub.cfg.patch 
  - 开启三权分立时，不允许非root用户修改主机名
  - 开启三权分立时，允许用户断开、链接网络
  -   add patch: security-switch-allow-user-connection-network-and-no-hostname.patch
  - 开启三权分立时，允许secadm打开防火墙应用配置
  -   add patch: security-switch-firewall-configuration.patch
  - 执行 security_switch --get 时不写 /etc/security_custom.conf 文件
  - 修改 /etc/security_custom.conf 文件权限为0644 --spec文件
  -   add patch: security-switch-not-write-custom-mode-when-get-security.patch
  - 不允许同时启用selinux和apparmor
  -   add patch: security-switch-not-allow-enable-selinux-and-apparmor.patc
  - 解决普通用户可以通过开始菜单右键选择卸载系统应用
  -   add patch: security-switch-polkit-for-kylin-uninstaller.patch
  - 添加切换失败后回滚操作
  -   add patch: security-switch-add-retroversion-when-switch-failed.patch
  - security-switch取消能切换到同时开启selinux和apparmor的限制
  -   add patch: security-switch-allow-enable-selinux-and-appa.patch
  - Bug：#71255
  - 关闭安全后写状态值到状态文件中
  -   add patch: security-switch-echo-0-into-status-after-disable-kysec.patch
  - Bug:  #93603
  - 未开启三元时，安全中心修改密码有效期时不修改root、secadm、audadm密码过期时间；
  - 开启三元时需根据系统配置，设置三元用户密码过期时间；
  - 关闭三元时，设置三元用户密码不过期
  -   add patch: security-switch-set-sp_warn-and-sp_max-when-change-adm3.patch
  - Bug:  #93603
  - 修改密码过期时间前先检查用户是否存在
  -   add patch: security-switch-check-user-when-chage_spwd.patch
  - 同步桌面补丁到：1.2.7-21kylin


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.06
changelog:
  - 添加kysec_tpm配置
  -   add patch: security-switch-add-kysec-tpm.patch
  - 修改tpm获取状态的函数
  - 删除kysec-auth的检查
  -   add patch: security-switch-fix-tpm-getstatus-and-del-kysec-auth.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.09
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:彻底删除auto-resetpw选项
  -      添加补丁security-switch-delete-auto-resetpw-completely.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#145103]
  - SUG:NA
  - DESC: 关闭kysec后,不重启机器的情况下，在root用户下使用security-switch切换strict模式，保证kysec-daemon的启动用户是secadm
  -         add patch: security-switch-fix-not-reboot-set-strict-when-kysec-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: security-switch-fix-security-switch-disable-after-force-reboot-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#147592]
  - SUG:NA
  - DESC: 解决切换模式失败后，无法再次切换的问题
  -       add patch: security-switch-fix-can-not-excute-after-switch-failed.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#157825]
  - SUG:NA
  - DESC: 【安全模式】切换default模式后，概率性报核心已转储提示
  -       add patch: security-switch-add-client-thread-wait.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: security-switch-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: security-switch-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题，
  -	已合并secadm输错三次密码后仍可以切换状态的补丁
  -	  add patch: security-switch-fix-secadm-set-passwd-error-still-switch-mode.patch


author: anyunhao<anyunhao@kylinos.cn> - 3.3.20-4-p02
changelog:
  - TYPE:update
  - ID:[Task#187032]
  - SUG:NA
  - DESC:add patch 0001-Added-Hong-Kong-translation-support.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-10.se.01
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch
  -       添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch
  -       useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch
  -       off状态,-u参数默认getpwuid; on状态,-u使用uid_used
  -          add patch: shadow-chkuid-off-oflg-pwuid.patch
  -         add patch: shadow-get-chkuid-state.patch


author: mengchaogming<mengchaoming@kylinos.cn>-- 2:4.8.1-10.se.01.p01
changelog:
  - Type:update
  - ID:[Task#198754]
  - SUG:NA
  - DESC:支持香港繁体中文
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu<zhoukangyu@kylinos.cn>-- 2:4.8.1-10.se.02.p01
changelog:
  - Type:update
  - ID:[Task#562021]
  - SUG:NA
  - DESC: useradd: fix UID uniqueness check error
  - add patch: shadow-useradd-fix-UID-uniqueness-check-error.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.02.p01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.03.p01
changelog:
  - Type: bugfix 
  - ID: [BUG#136126]
  - SUG:NA
  - DESC: useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-5.se.04.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: off状态,-u参数默认getpwuid; on状态,-u使用uid_used
          add patch: shadow-chkuid-off-oflg-pwuid.patch
          add patch: shadow-get-chkuid-state.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-5.se.06.p01
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch:backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-5.se.07.p01
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.10-4.p03
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add shared-mime-info-add-translation-for-hk.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p08
changelog:
  - Types:bugfix
  - ID:BUG#500861
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wangqiang <wangqaing1@kylinos.cn> - 1.1.0-8.dev.git63085f5.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add patch: 0001-skopeo-1.1.0-kylin-add-loongarch64-support.patch


author: lijian <lijian2@kylinos.cn> - 1.1.0-8.dev.git63085f5.p02
changelog:
  - Type:cves
  - ID:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC:fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangdi <wangdi@kylinos.cn> - 0.20.0-2.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: xinghe <xinghe2@h-partners.com> - 7:4.9-25
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: XiaoZai<xiaozai@kylinos.cn> - 1.6-1.p01
changelog:
  - Type:bugfix
  - ID:BUG#186959
  - SUG:NA
  - DESC: move file "pax.1.gz" from package "star" to package "star-help"


author: duanhongtao <duanhongtao@kylinos.cn> - 5.7.2-10.p03
changelog:
  - Type:CVE
  - CVE:CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 233-6.p01
changelog:
  - Type:bugfix
  - ID:[BUG#385837]
  - SUG:NA
  - DESC: Fix crash issue. and Increase max PID and CPU constants


author: yangmingtai <yangmingtai@huawei.com> - 243-52
changelog:
  - fix some issue: 1.fix set blkio.bfq.weight 
                    2.udevadm fix --tag-match
                    3.fix check of Listen* arguments


author: caiyinan <caiyinan@kylinos.cn> - 243-55.p01
changelog:
  -- add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
     Change NTP server.
  -- add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
     Modify ctrl+alt+F2 switch to init5 stuck problem
  -- add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
     fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: wanghao <wanghao2@kylinos.cn> - 243-55.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 修复了当LSM堆叠启用时systemctl的selinux拒绝错误
  -         add patch: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p02.se.01
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p04.se.01
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          Remove gnu-efi check in loongarch64


author: yinyongkang <yinyongkang@kylinos.cn> - 243-55.p08.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch10030: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 243-55.p09.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SUG:NA
  - DESC:add backport-donot-open-CD-rom-use-exclusive-mode.patch，for ejecjt button


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p10.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p11.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#223633]
  - SUG:NA
  - DESC: Revert backport-udev-make-algorithm-that-selects-highest-priority-de.patch
          Revert patch to fix update device symlinks issue (similar #1942299)


author: wangshuo <wangshuo@kylinos.cn> - 243-55.p12.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#329354]
  - SUG:NA
  - DESC:add patch rc-local-order-after-network-online.target.patch
         fix rc-local service start failed


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p14.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p15.se.01
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: lijian <lijian01@kylinos.cn> - 243-55.p16.se.01
changelog:
  - Type:update
  - ID:[TASK#455059]
  - SUG:NA
  - DESC: fix wrong suffix assignment on putting dead process


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p17.se.01
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: andy <liuyang01@kylinos.cn> - 243-55.p18.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#541799]
  - SUG:NA
  - DESC: backport upstream patch: Avoid spurious realization of unit cgroups


author: fandeyuan <fandeyuan@kylinos.cn> - 243-55.p19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#559935]
  - SUG:NA
  - DESC: systemctl: do not print items twice in list-dependencies


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p20.se.01
changelog:
  - Type: update
  - ID:   [BUG#568359]
  - SUG:  NA
  - DESC: fix CVE-2022-4415, CVE-2025-4598, CVE-2026-4105, CVE-2026-29111, CVE-2026-40226, CVE-2026-40225


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-77.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: songliyang <songliyang@kylinos.cn> - 7:20180414-40.p01
changelog:
  - Type: updates
  - ID:   [TASK#561625]
  - SUG:  NA
  - DESC: 1. Update to fix CVE-2023-62668 CVE-2024-25262
          2. Add mips64el support and fix a build error on mips64el


author: Shi Jingying <shijingying@kylinos.cn> - 1.10.1-5.p01
changelog:
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error
  - add patch 102: tigervnc-1.10.1-kylin-xstart1.patch
  - the autokill parameter cannot creat port


author: Yue Jiayuan <yuejiayuan@kylinos.cn> - 5.0-3.p02
changelog:
  - Type:update 
  - ID:[84598]
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 5.0-5.p01
changelog:
  - Type:update
  - ID:[176526]
  - SUG:NA
  - DESC:
  -       1.add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch
  -	2.add 0001-bugfix-tpm-fix-policy-test-case-error.patch provided by HYGON


author: mengchaoming<mengchaoming@kylinos.cn> -5.0-5.p02
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream:remove rpath and runpath of exec files


author: zhangfan <zhangfan4@kylinos.cn> - 5.0-5.p04
changelog:
  - Type:update
  - ID:[TASK#374825]
  - SUG:NA
  - DESC: 1.添加TCM测试case
          2.修复test_tcm2_capability.sh测试case的错误


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-1.p01
changelog:
  - Type:update
  - ID:84598
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-2.p01
changelog:
  - Type:update
  - ID:TASK#175727
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: lixiaoyong <lixiaoyong@kylinos.cn> - 2.1.5-3.p02
changelog:
  - Type:bugfix
  - ID:[BUG#212538]
  - SUG:NA
  - DESC:add patch 0002-translate-tracker-help-output-from-English-to-Chinese-HK.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 2021.10-8.p02
changelog:
  - Type:CVE
  - ID:BUG#580819
  - SUG:NA
  - DESC: fix CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257
          fix CVE-2024-57258 CVE-2024-57259 CVE-2026-33243 CVE-2024-42040


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: peijiankang <peijiankang@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add ukui-screensaver-add-translations-for-hk-and-tw.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p28
changelog:
  - Type: bugfix
  - ID  : [BUG#520853]
  - SUG : NA
  - DESC: add Patch25:ukui-screensaver-0.3.62-fix-VirtualKeyboard-no-underline.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p29
changelog:
  - Type: bugfix
  - ID  : [TASK#600911]
  - SUG : NA
  - DESC: add Patch26:ukui-screensaver-0.3.62-kylin-add-PAM_SERVICE_ERR-detection.patch
          增加PAM服务配置错误检测


author: yanglu<yanglu72@h-partners.com> - 1.11.0-6
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.11.0-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.11.0-22
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: Like <like@kylinos.cn> - 1.11.0-4.p02
changelog:
  - Type:cves
  - CVE:CVE-2022-3204 CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch 6,7 fix CVE-2022-3204,CVE-2023-50387,CVE-2023-50868,CVE-2024-1488


author: wangshuo <wangshuo@kylinos.cn> - 0.99.8-5.p01
changelog:
  - Type:bugfix
  - ID:[BUG#424939]
  - SUG:NA
  - DESC:Backport upstream patch form 0.99.12, improve stability
  -      Reduce list of HID++ devices, which have been supported in Linux kernel 3.19
  -      Remove support for CSR devices(usb device battery status), which manufature mid-2000s


author: xiaozai <xiaozai@kylinos.cn> - 0.8.0-7.p01
changelog:
  - Type:bugfix
  - ID:BUG#177274
  - SUG:NA
  - DESC: add patch 0008-reset-parser-fields-on-unserialize.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-10.p09
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-10.p11
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-10.p12
changelog:
  - Type:bugfix
  - ID:[TASK#497341]
  - SUG:NA
  - DESC:add patch:backport-libfdisk-dos-fix-default-partition-start.patch
         backport-tests-sfdisk-fill-correctly-gaps-if-default-start-re.patch
         backport-libfdisk-fix-last-free-sector-detection-if-partition.patch
         fix default partition offset creates overlapping partitions


author: kouwenqi <kouwenqi@kylinos.cn> - 2.35.2-10.p13
changelog:
  - Type:bugfix
  - ID:[TASK#542963]
  - SUG:NA
  - DESC:libblkid: (xfs) external log: check for ceph_bluestore


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p05
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p01
changelog:
  - Type:update
  - ID:[task#512917]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p02
changelog:
  - Type:update
  - ID:[bug#610811]
  - SUG:NA
  - DESC: fix CVE: CVE-2026-41411,CVE-2026-42307,CVE-2026-43961,CVE-2026-44656,CVE-2026-45130,CVE-2026-46483,CVE-2026-47162,CVE-2026-47167,CVE-2026-52858,CVE-2026-52859,CVE-2026-52860, consistent with 9.0-50


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p04
changelog:
  - Type:update
  - ID:[task#655139]
  - SUG:NA
  - DESC: More productized modifications for vim help information.


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p05
changelog:
  - Type:update
  - ID:[bug#646971]
  - SUG:NA
  - DESC: fix CVE:  CVE-2026-55693,CVE-2026-55892,CVE-2026-55895,CVE-2026-57452,CVE-2026-57455,CVE-2026-57456,CVE-2026-59856,CVE-2026-59857,CVE-2026-59858,consistent with 9.0-53


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p06
changelog:
  - Type:update
  - ID:[task#655139]
  - SUG:NA
  - DESC: fix tags creating problem caused by productized modifications.


author: houhongxun <houhongxun@kylinos.cn> - 0.28.2-14.p01
changelog:
  - Type:bugfix
  - ID  :[Bug#203586]
  - SUG :NA
  - DESC:add Patch6:0001-vte-swallow-hyperlink-control-sequence-and-make-it-n.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.28.2-14.p02
changelog:
  - Type:bugfix
  - ID  :[TASK#532381]
  - SUG :NA
  - DESC:add Patch7: 0002-vte-fix-max-bytes-mate-terminal.patch


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:3.6.14-12
changelog:
  - Delete /usr/share/man/man1/wireshark.* in wireshark package because wireshark-help package also contains this files


author: Like<like@kylinos.cn> - 1.51.06-2.p01
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: Reference  1.51.06-1.p01 modify, splits sub packages client,c++,client++,apps


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.51.06-2.p04
changelog:
  - Type:cves
  - Id:TASK#480193
  - SUG:NA
  - DESC:backport CVE-2024-8176 patch and sync v11 modify to remove duplicate man file in xml-rpc-c-apps packages


author: Zhenneng Li <lizhenneng@kylinos.cn> - 19.1.0-2.p02
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p03
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-10.p10
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-10.p11
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p13
changelog:
  - Type: CVE
  - ID:   [TASK#453291]
  - SUG:  NA
  - DESC: fix CVE-2024-31080, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p14
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p15
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2025-62229,CVE-2025-62231,CVE-2025-62230,CVE-2025-49180,CVE-2025-49179,CVE-2025-49176,CVE-2025-49178,CVE-2025-49175,CVE-2022-49737


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.11-20.p16
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-20.p18
changelog:
  - Type: CVE
  - ID:   [BUG#552387]
  - SUG:  NA
  - DESC: fix tigervnc-server test failed (revert CVE-2023-5574 patch)


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-20.p19
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50253, CVE-2026-50254
  - SUG:  NA
  - DESC: fix CVE.


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-20.p19
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  - SUG:  NA
  - DESC: fix CVE.


author: lichenguang <lichenguang@kylinos.cn> - 0.2.35-9.p02
changelog:
  - Type:cves
  - ID: CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177
  - SUG:NA
  - DESC: fix CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177


