# changelog

author: Youling Tang <tangyouling@kylinos.cn> - 1.0-2
changelog:
  - softirqs: Fix the naming error
  - Revert "ksnoop: use bpf_get_func_ip() where helper is available"
  - Add criticalstat support
  - ttysnoop: fix iov_iter.ubuf CO-RE mismatch
  - libbpf-tools/gethostlatency: Resolve the path of libc for different namespaces
  - libbpf-tools: Fix misaligned pointer accesses in exitsnoop
  - libbpf-tools/filelife: Fix error tracking caused by failed unlink
  - Added support for f2fs to fsdist and fsslower tools.
  - libbpf-tools: Check biolatency tracepoints using BTF
  - libbpf-tools: Add s390x support
  - libbpf-tools: Fix bindsnoop types usage
  - libbpf-tools: Fix -Wformat errors for 32bit systems
  - ksnoop: use bpf_get_func_ip() where helper is available
  - use tid instead of tgid
  - Add sofdsnoop support
  - spec: mark ketones need clang >= 10
  - package ketones for RPM


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-3
changelog:
  - Add adaptive readahead support
  - Add wqlat support
  - libbpf-tools: fix syscall tracepoints
  - Fix bashreadline
  - libbpf-tools/offcputime, futexctn: Fix incorrect DSO information in stacktrace
  - libbpf-tools/memleak: Add verbose option
  - libbpf: Some advanced features customized for ketones
  - Update libbpf to 1.4.0
  - Add netqtop support
  - Add kvmexit support
  - Add dddos support
  - cpuunclaimed: Add cpuunclaimed support
  - libbpf-tools/ksnoop: perf buffer fix unnecessary junk bits output
  - libbpf-tools: Fix bindsnoop for kernel v6.6+
  - libbpf-tools: Fix trace_helper symbol search bug
  - libbpf-tools/biotop: Add PID filter support
  - libbpf-tools: Fix misaligned pointer accesses in drsnoop
  - libbpf-tools: Fix misaligned pointer accesses in tcptracer
  - libbpf-tools: Fix misaligned pointer accesses in tcpstates
  - libbpf-tools: Fix misaligned pointer accesses in filegone
  - libbpf-tools: Fix misaligned pointer accesses in tcplife
  - libbpf-tools: Fix misaligned pointer accesses in tcpconnect
  - libbpf-tools: Fix misaligned pointer accesses in statsnoop
  - libbpf-tools: Fix misaligned pointer accesses in runqslower
  - libbpf-tools: Fix misaligned pointer accesses in opensnoop
  - libbpf-tools: Fix misaligned pointer accesses in gethostlatency
  - libbpf-tools: Fix misaligned pointer accesses in fsslower
  - libbpf-tools: Fix misaligned pointer accesses in filelife
  - libbpf-tools: Fix misaligned pointer accesses in biosnoop
  - Add futexctn support
  - libbpf-tools/memleak: correct key size of memptrs
  - Sync ketones.spec to v1.0-2


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-4
changelog:
  - tcpmemory: Fix -P filter
  - trace: Fix Segmentation fault
  - icstat: Fix -i error
  - softirqs: Fix compilation optimization issues
  - Correct copyright statements across multiple files
  - retsnoop: capture call stacks of kernel functions that return errors
  - Use kfunc bpf_log2l instead
  - softirqs: Fix R1 unbounded memory access
  - ugc: Fix usdt: no USDT notes section (.note.stapsdt) found in '/usr/bin/python3.11'
  - uflow: Fix get binary file path failed
  - ucalls: Fix get binary file path failed
  - ustat: Fix get binary file path failed
  - ustat: Ability to add Python3
  - provide string helpers
  - Update errno functions
  - Use newer version log2 function
  - Update .clang-format
  - fslatency: Use bpf buffer for compatibility with perf and ring buffer
  - Add fslatency support


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-6
changelog:
  - blk-glitch: Add IO glitch detection function
  - offcpureason: Add tool to trace off-CPU reasons
  - wqlat: Add target function
  - wqlat: Fix the data missing issue
  - compiler: add __must_nonnull attribute and apply to bpf_buffer functions
  - compiler_types.h: add "auto" as a macro for "__auto_type"
  - chmodsnoop: Add tool to trace chmod() syscalls
  - fsdist/fslatency/fsslower: Add fuse support
  - trace_helpers: Use legacy probe attach mode for better compatibility
  - readahead: Fix eBPF program loading and attachment mismatch
  - Add funcratio support
  - filesnoop: improve code quality and fix bugs
  - tcplife: refactor port filtering with inline helper function
  - build: add compile_commands.json generation support
  - syscall_helpers: Update syscall_names_x86_64
  - sofdsnoop: fix BPF verifier error and refactor code
  - execsnoop: improve code quality and formatting consistency
  - udpdrop: Delete unused judgments
  - build: avoid creating empty binary file when cargo is missing
  - udpdrop: Fix the issue where qdisc packet loss has no stack trace
  - tcpdrop: Fix the issue where qdisc packet loss has no stack trace
  - build: streamline build system and improve maintainability
  - build: refactor library system to use static archive
  - build: optimize compilation performance and binary size
  - dddos: Fix dddos no-data issue
  - deadlock: Add lock/unlock name set
  - trace_helpers: Fix double free bug
  - build: add static compilation support with STATIC=1 flag
  - bpflist: replace strncpy with snprintf to fix truncation warning
  - wakeuptime: optimize argument parsing and error handling
  - string_helpers: cleanup and modernize code
  - memory_helpers: refactor ensure_mem function
  - btf_helpers: refactor with C99 features and improve code clarity
  - argp_helpers: simplify parsing functions and improve error handling
  - uprobe_helpers: modernize code with GNU C features and cleanup attributes
  - pattern_helpers: modernize resource management with automatic cleanup
  - vector: replace realloc with reallocarray for overflow protection
  - numa_helpers: replace sscanf with manual parsing for complex NUMA formats
  - trace_helpers: apply RAII and GNU99 optimizations
  - git-review: drop obsolete .gitreview config
  - filesnoop: add missing Makefile for symlink definitions
  - bpflist: reimplement using BPF iterator for accurate process tracking
  - bpftop: refactor BPF program type classification system
  - memleak: migrate allocation tracking to vector.h
  - vector: introduce vector.h and migrate multiple tools to use it
  - tcpdrop/udpdrop: add fentry support with runtime detection
  - system_helpers: move detect_language function for better modularity
  - commons: add variadic support to INIT_TOOL_COMPONENTS macro
  - commons: integrate skeleton cleanup into INIT_TOOL_COMPONENTS
  - udpdrop: add UDP packet drop tracing tool
  - reset-trace: Fix the infinite loop
  - include: Fix list_syscalls() prototype return type
  - opensnoop: add creation-only filtering support
  - build: rename ARCH to Arch in config.mk
  - softirqslower: add Rust-based eBPF tool for softirq latency monitoring
  - build: improve Rust tool detection and cargo availability handling
  - nfssnoop: Add more prominent error log prompts
  - ksnoop: Remove useless and white lines
  - ksnoop: Fix two invalid access to map value (#5361)
  - runqslower: add -c option to filter by process name prefix
  - ttysnoop: clean up and optimize code structure
  - runqueue-latency: clean up argument parsing and error handling
  - funcslower: refactor probe function generation using unroll macro
  - runqslower: simplify error handling and remove unnecessary cleanup logic
  - retsnoop-rs: add root privilege check before main execution
  - retsnoop: simplify Linux source path detection
  - retsnoop: revert incorrect use of bpf_map__set_max_entries()
  - execsnoop: switch from perf buffer to bpf_buffer
  - bpf: use min_t macros for histogram slot boundary checking
  - bpf: optimize string comparison with unified compat_bpf_strncmp
  - retsnoop-rs: implement professional kernel symbol resolution and stack formatting
  - stack: refactor time calibration to use OnceLock and functional style
  - build: fix BPF tool compilation dependency order
  - retsnoop-rs: implement complete BPF tracing system with dual comm support
  - build: add Rust tool support and retsnoop-rs integration
  - nfssnoop: migrate to CO-RE compatible BTF structures
  - core_fixes: improve code style and formatting consistency
  - intrusiondetec: Fix bpf_program__attach_xdp failed
  - dirwatch: Fix missing attach_mode setting in the BPF function for vfs_open
  - deadlock: Add lib set
  - libs: Fix the mismatch error
  - strings: add unified boolean-to-string and plural helpers
  - nfssnoop: add NFS client operations tracing tool
  - retsnoop: fix uninitialized a2l causing invalid free in addr2line__free
  - Add udppktlat support
  - tcplinks: add automatic PID correction for TCP connections
  - Add iowait support
  - tcplinks: simplify TCP connection tracking implementation
  - tcplinks: update man page to reflect current functionality
  - tcplinks: enhance TCP connection monitoring with complete state machine
  - bpftop: optimize TUI rendering performance and fix header display
  - tcplinks: rewrite as interactive TUI monitoring tool
  - bpftop: simplify TUI rendering logic and remove redundant color handling
  - bpftop: enhance program type detection with detailed categorization
  - bpftop: optimize filtering and sorting algorithms for better performance
  - bpftop: fix memory corruption caused by mismatched array sizes
  - man: add manual page for bpftop
  - bpftop: improve graph scaling logic for data visualization
  - bpftop: fix initial sorting with optimized baseline sampling
  - bpftop: remove non-TUI mode and filtering system to simplify architecture
  - bpftop: implement intelligent sort pausing during navigation
  - bpftop: implement comprehensive graph mode with time-series visualization
  - bpftop: add interactive TUI mode with UTF-8 support
  - bpftop: add real-time eBPF program monitoring tool
  - zombiememcgstat: Fix R8 invalid mem access 'scalar'
  - KYLIN: update the man page of mptcpify
  - docs: update development environment requirements in contributing guides
  - opensnoop: add caller stack trace functionality
  - opensnoop: implement single-event full-path reconstruction
  - KYLIN: update mptcp tool
  - docs: add contributing guides in both English and Chinese
  - license: correct LICENSE and debian/copyright to LGPL-3+
  - debian: update build and runtime dependencies
  - build: preserve BPF skeleton files for debugging purposes
  - deb: fix the issue preventing binary .deb generation on LoongArch platforms
  - trace_helpers: replace manual ELF symbol parsing with libdw interface
  - offcputime: add support for multiple PIDs and TIDs
  - offcputime: rewrite BPF program using tracepoint sched:sched_switch
  - log2: modernize implementation with type-safe dispatch and clang compatibility
  - compiler_types: simplify attribute macro definitions
  - system: implement variadic strftime_now with automatic buffer sizing
  - tcprtt: modernize BTF usage and improve exit handling
  - numamove: adopt modern resource management and runtime BSS detection
  - libs: fix resource leaks in FILE pointer operations
  - refactor: consolidate header files and improve code organization
  - libs: refactor commons.h by extracting helper functions to dedicated modules
  - bpf_buffer: add macro overloading for bpf_buffer__new function
  - tcpdrop: add support for dumping TCP drop reasons
  - libbpf-tools: sigsnoop: display target process's comm
  - tools: unify component initialization with INIT_TOOL_COMPONENTS
  - include: enhance signal handling with type safety and compilation checks
  - commons: introduce modular initialization macros for system tools
  - futexslower: implement new eBPF tool for tracing slow futex operations
  - commons: remove DEFINE_SKEL_OBJECT macro and improve resource management
  - memleak: Extract print_headers
  - biotop: Use dump_hash for map processing
  - map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  - dirtop: refactor directory tree traversal using shared filesystem helpers
  - errno_helpers: standardize error code format with negative prefix
  - bpf: extract filesystem target directory checking into common helper
  - opensnoop: add full path reconstruction capability
  - build: improve output path display in build messages
  - bpf: remove duplicate network constant definitions
  - clangd: add configuration to disable unused include warnings
  - bpf_buffer: refactor compat layer to bpf_buffer abstraction
  - constants.h: extract common constants into unified header file
  - refactor: unify min/max macros and improve header organization
  - Makefile: move vmlinux headers to src directory and update build config
  - debian: enhance packaging documentation and fix build targets
  - deb: create separate ketones-doc package for man pages
  - rpm: add comprehensive man pages and create ketones-doc package
  - build: complete migration to modern modular build system
  - retsnoop: comprehensive modernization and optimization
  - filetop,filelife: add directory filtering support and man pages
  - dirwatch: Add directory file operations monitoring tool
  - blkalgn: add block device alignment analysis tool
  - libs: remove DWARF debug support
  - Add deadlock support
  - tcprst: Correct a typo
  - uprobe_helpers.c: Fix the issue of unreleased resources
  - llcstat: Fix error: redefinition of 'key_info' on aarch64
  - drsnoop: Fix typo
  - syscall_helpers.c: Fix incorrect syscall name
  - syscall_helpers.c: support loongarch64 and add more generic syscall
  - Add dynamic switching congestion support
  - README: Add some dependencies
  - rdmaucma: add RDMA userspace connection manager tracer
  - btf: Replace ensure_core_btf with guard(btf_open_opts)
  - btf: Introduce RAII mechanism for BTF resource management
  - libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  - capable: optimize PID namespace and process tracking logic
  - libbpf-tools/profile: Add support for PID-namespacing
  - libbpf-tools: support to find symbols in different mount namespace
  - bpf: Replace version checks with BTF detection for cap_capable
  - bpf: Replace kernel version check with BTF detection for block tracepoints
  - Replace PERF_POLL_TIMEOUT_MS with POLL_TIMEOUT_MS
  - numasched: Convert to use bpf_buffer instead of perf_buffer
  - fsslower: Convert to use bpf_buffer instead of perf_buffer
  - gethostlatency: Convert to use bpf_buffer instead of perf_buffer
  - exitsnoop: Convert to use bpf_buffer instead of perf_buffer
  - runqslower: Convert to use bpf_buffer instead of perf_buffer
  - drsnoop: update to use bpf_buffer instead of perf_buffer
  - capable: update to use bpf_buffer instead of perf_buffer
  - bindsnoop: update to use bpf_buffer instead of perf_buffer
  - bashreadline: update to use bpf_buffer instead of perf_buffer
  - sofdsnoop: update to use bpf_buffer instead of perf_buffer
  - mdflush: update to use bpf_buffer instead of perf_buffer
  - filelife: switch from perf_buffer to bpf_buffer
  - biosnoop: switch from perf_buffer to bpf_buffer
  - block: refactor block_rq_* tracepoint parameter detection
  - btf: Use __free attribute for automatic btf object cleanup
  - zombiememcgstat: add new tool to track zombie memory cgroups
  - statsnoop: Missing dirfd check
  - klockstat: Don't crash on NULL ksym when looping over stack
  - klockstat: Track IOCTL numbers
  - memleak: Change the start message to match memleak python
  - memleak: Allocate map and calculate statistics only when -C option is used
  - memleak: Fix output error for invalid stackid when using combined-only mode
  - biosnoop: Fix biosnoop dependency on kernel version
  - statsnoop: Support fstat(2) and parse fd/dirfd in userspace
  - klockstat: Track netlink message types when taking locks
  - statsnoop: Display syscall name with -s
  - Add intrusiondetec support
  - Add jbdrunstat support
  - loads: simplify perf event sampling and CPU handling
  - inject: refactor call depth tracking with unroll macro
  - irq_storm: implement interrupt storm detection tool
  - trace: optimize code structure and string handling
  - trace_helpers: refactor kprobe attachment logic
  - trace: unify pattern parsing across all tools
  - trace_helpers: add DWARF debug info support for symbol resolution
  - common: refactor NUMA helpers and linker flags
  - Add kctxlatency support
  - softirqs: add target_cpu for softirqs
  - hardirqs: add target_cpu for hardirqs
  - profile,flamegraph: improve C++ symbol handling in flame graph
  - profile: add flame graph visualization support
  - offcputime: improve SVG output option handling
  - offcputime: add flamegraph support for visualizing off-CPU time
  - offcputime: add detailed stack printing functions
  - bitesize: use BTF to detect block_rq_issue tracepoint parameters
  - bitesize: enhance I/O statistics and improve code structure
  - wqlat: Add extra activation time
  - runqueue-latency: Add CPU display and sorting functions
  - softirqs: Optimize output information and increase CPU display and sorting
  - hardirqs: Optimize output information and increase CPU display and sorting
  - Add biofullpathlatency support
  - ttysnoop: use CO-RE to handle ITER_UBUF value changes
  - ttysnoop: enhance error handling and resource management
  - biolatency: improve code documentation and error handling
  - bindsnoop: improve code documentation and resource management
  - bashreadline: improve code documentation
  - adaptive-readahead: improve code documentation and error handling
  - biostacks: enhance error handling and statistics
  - biotop: improve error handling and thread safety
  - bpf: Use DEFINE_FREE for automatic cleanup of BPF skeletons
  - bashreadline: Use __free attribute for automatic cleanup
  - trace_helpers: Use AUTO and __free attributes for resource management
  - signoop: Support real-time signals
  - memleak: add mremap uprobe
  - klockstat: Search for correct stack offset in userspace
  - trace_helpers/partitions: Add __free attribute for partitions
  - trace_helpers/ksyms: Add __free attribute for ksyms
  - syms_cache: Add cleanup support for syms_cache
  - Replace explicit bpf_is_root checks with CHECK_ROOT_CONSTRUCTOR macro
  - Use __free macro for automatic resource cleanup
  - Use __free macro for automatic bpf_buffer cleanup
  - Add cleanup macros and refactor code for better resource management
  - trace: Update demangling_cplusplus_function to use cplus_demangle


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-7.01
changelog:
  - bitesize/zombiememcgstat: Fix no data bug
  - blkalgn: Fix segmentation fault in blkalgn -t
  - schedtrace: refactor userspace code for clarity and maintainability
  - schedtrace: add per-CPU scheduling latency statistics
  - numasched: modernize codebase and improve BPF efficiency
  - dirwatch: Fix the issue where mkdir has no output
  - solisten: Fix failed to get map info bug
  - jbdrunstat: Add more elegant error messages
  - numamove: Fix the segmentation fault
  - netfilter: Fix the bug where packet loss detection fails
  - schedtrace: add timeslice analysis and refactor codebase
  - schedtrace: add BPF-based scheduling delay tracker
  - offcputime: Fix the unit conversion error


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01:kdelibs4support-5.113.0-kylin-mg-word-modification.patch


author: fuhuanzhang <fuhuanzhang@kylinos.cn> - 1.21.2-20.p01
changelog:
  - [BUG#560223] krb5包安全漏洞【['CVE-2026-40356']】【银河麒麟高级服务器操作系统 V11 2603】
  - backport kylin patch: Add krb5-kycompat subpackage.[TASK#424795]
  - backport kylin patch: Fix code scan logic warning.[TASK#596097]


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.01
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 修改spec文件及删除一些无用文件
  -       添加状态切换日志
  -       按照打包规范修改版本号
  -       添加异常退出时输出堆栈


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.02
changelog:
  - Type:update
  - ID:[BUG#295657] [v11-B14] [外设管控] 系统初始环境，/var/log/下存在txt格式文本文件
  - SUG:NA
  - DESC: 修改审计应用日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 相关的轮替功能操作由logrotate来管理，提供默认转存配置
          增加fuzz测试
          合规性整改移除ksaf_config


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#474839] 【v11 2503】审计包功能优化
        [任务#471091] 【安全红线】整改自研组件第一轮Fortify问题-ksaf-audit-daemon
  - SUG: NA
  - DESC: 优化审计，和内核相关的定义从class-def.conf获取
          合规性整改
          没启动ksaf_main模块，不启动审计日志服务


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#490381] 【v11 2503】优化ksaf-audit-daemon相关功能
  - SUG: NA
  - DESC: 去除掉配置文件，不允许修改日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#649531] 修复ksaf-audit-daemon的systemd unit 配置指令位置错误
  - SUG: NA
  - DESC: 收缩日志dac权限，Netlink 消息发送方校验绕过漏洞


author: zhubing zhubing@kylinos.cn - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#327787]【V11-B19】【loongarch】【外设管控】sm-example命令执行失败
  - SUG: NA
  - DESC: 同步v11 2409解决网卡策略及时生效异常问题


author: zhubing zhubing@kylinos.cn - 1.0.1-05
changelog:
  - Type: update
  - ID: [BUG#639515]ksaf-devctl包安全漏洞['KVE-2026-0733']
  - SUG: NA
  - DESC: 升级包版本至1.0.1-05, rpm包中移除ksaf_devctl_test二进制文件


author: zhubing zhubing@kylinos.cn - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#651407]【威胁分析】ksaf-devctl组件优化
  - SUG: NA
  - DESC: 0010-fix-system-command-injection-bug-and-verify-netlink-.patch


author: lengchunying <lengchunying@kylinos.cn> 1.0.1-01
changelog:
  - Type:update
  - ID: [任务#434606] 【ksaf】升级kysec2.0包版本至1.0.1-01
  - SUG:NA
  - DESC: 升级kysec2.0包版本至1.0.1-01


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#486679] 【v11 2503】优化ksaf-dynamic-uid相关功能
  - SUG:NA
  - DESC: 未加载ksaf_main模块不启动该服务
          修改方案，优化该程序，减少io访问。
          移除无效的监控
  	修改单元测试
          从qmake变为cmake
          修改依赖选项


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#300787]【V11-B16】【ARM】【安全模式切换】none-strict重启过程中报错
  - SUG: NA
  - DESC: [任务#412519]【ksaf】已运行进程标记更新功能优化
          [任务#415507] ksaf-label-manager安全问题整改


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-02
changelog:
  - Type: update
  - ID: [BUG#340532]【V11-2503】【B05】rpm包vendor信息检查失败
  - SUG: NA
  - DESC: 修改SPEC文件vendor信息
          同步os-release-v11分支最新代码


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [BUG#346402]【V11-2503】【B09】【需求36791】【执行控制】加载无执行权限的内核模块，无审计日志
  - SUG: NA
  - DESC: tid配置文件中添加/usr/bin/kmod,值设置为4


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#364225]【v11-2503】【B14】【需求36795|41839|41835】【文件保护】移除软件包文件保护后被移动后还原的文件，再次添加保护不生效
  -     [BUG#364165]【v11-2503】【B14】【需求36795|41549】【文件保护】移除包方式添加的保护的例外后，文件保护不生效
  - SUG: NA
  - DESC: 优化继承标志设置逻辑
          同步桌面最新代码，桌面独有代码使用条件编译
          优化程序启动时对软件包查询的流程，减少对CPU资源的占用


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#374711]【B17】【v11 2503】【需求36795|41839|41835】【文件保护】添加\删除\查看文件保护策略-软件包-kysec_set，只读策略不生效
  - SUG: NA
  - DES: 全盘打标之前删除包内文件父目录缓存文件


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-06
changelog:
  - Type: bugfix
  - ID: [BUG#439759]【V11-6.6.0-32.9】【龙芯3C5000L】龙芯3C5000L从selinux切换到off失败
  - SUG: NA
  - DES: 注释掉标记变更发布与订阅功能，该功能暂时未用到
         解决/opt目录下文件未打标的问题,使用宏定义将全盘打标时要跳过的目录与桌面版本区分开


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-07
changelog:
  - Type: bugfix
  - ID: [BUG#455411]【20251021update内网源测试】【loongarch/x86-v11 2503】提测软件包增量升级后，执行yum -y update核心转储
        [任务#553743]安全编译参数整改 / ksaf-label-manager安全编译参数整改
  - SUG: NA
  - DES: 解决动态库中dbus连接没有关闭文件描述符的问题
         修改软件包安装后脚本，解决软件包更新后服务进程身份错误问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-09
changelog:
  - Type: update
  - ID: [任务#637697]ksaf-label-manger组件增强
  - SUG: NA
  - DES: 解决日志文件授权不当问题
         dbus接口增加polkit用户身份检查


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [任务#649215]ksaf-label-manager组件功能增强
  - SUG: NA
  - DES: 修改dbus配置文件
         加强dbus接口参数校验
         修改相关配置文件权限


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 固定函数名和函数ID对应关系解决增量下发函数名会变问题
          内置变量interactive扩展：由bool类型更改为int类型
          删除由配置生成的源文件，改为编译时自动生成
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-06
changelog:
  - Type:update
  - ID: [任务#461412] 策略改动及优化
  - SUG:NA
  - DESC: 优化策略下发速度
          全量下发和增量下发方案调整
          添加策略module_name字段
          代码冗余调整，重复代码合并
          解决当section段没策略全量下发，后加入策略增量下发失败问题
  	修复loongarch初始化下发策略段错误问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 去掉ksafpolicy服务，因和dbus启动的服务冗余
          去除注释的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#487477] 【V11】【内核特性】内核启动时间调优 / 【安全】initrd裁剪-安全的脚本ksaf
        [bug#338197] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0302
        [bug#338196] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0301
  - SUG:NA
  - DESC: 新增ksaf-policy-sync-init只下发初始化策略
          修复脉诊漏洞


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 库修复，之前不是链接


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [Bug#583555] 修复KVE-2026-0429
  - SUG:NA
  - DESC: ksaf-policy.log改权限为640
          日志中去掉文件名和行数


author: houhongxun<houhongxun@kylinos.cn> - 5.24.4-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#352453]
  - SUG : NA
  - DESC: fix some windows displaying abnormally for 16bit depth


author: peijiankang<peijiankang@kylinos.cn> - 5.24.4-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kwin-5.24.4-fix-coredump-when-logout.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.24.4-1.p05
changelog:
  - Type: bugfix
  - ID  : [Task#536445]
  - SUG : NA
  - DESC: fix some apps displaying abnormally under 16bit color depth


author: huayadong <huayadong@kylinos.cn> - 5.24.4-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#429071]
  - SUG : NA
  - DESC: add Patch06:kwin-5.24.4-kylin-Turn-off-Tablet-Manager.patch
          关闭平板模式管理器


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-2
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 修复门禁系统兼容性分析问题 
  - 2. 修复门禁系统合规分析问题； 
  - 3. 提升ldop-ext模块的单元测试覆盖率;


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-4
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 提升单元测试覆盖率至80%; 
  - 2. 修复sonarqube扫描中的部分问题；


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-12
changelog:
  - Type: cves/bugfix/update
  - ID: KVE-2026-0710,[BUG#631845],[TASK#648147]
  - SUG: NA
  - DESC:
  - 1. 威胁分析整改，修复kyldop软件安全模块密钥硬编码问题[TASK#648147].
  - 2. 修复漏洞: KVE-2026-0710


author: liyulong <liyulong@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#637189]
  - SUG: NA
  - DESC:
  - 1. 修复KVE-2026-0688、KVE-2026-0689 KVE-2026-0716安全漏洞。
  - 2. 去除log.conf的执行权限。


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p16
changelog:
  - Type: update
  - ID:[TASK#436445][TASK#432968]
  - SUG: NA
  - DESC: add fuzz check
          add secret key activation
          add deactivation function
          adjust the configuration file to the/etc directory
          adjust activate the policy to the server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p17
changelog:
  - Type: bugfix
  - ID: [BUG#336521][BUG#336143] 
  - SUG: NA
  - DESC: update get activation code from kylin


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p18
changelog:
  - Type: bugfix
  - ID: [BUG#336143][TASK#442197][BUG#336809][BUG#339458][BUG#338942]
  - SUG: NA
  - DESC: update spec to fix install error
  	integrate value for added product
  	upate get activation status logic


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p22
changelog:
  - Type: update
  - ID:[TASK#463164][BUG#348859][TASK#466714]
  - SUG: NA
  - DESC: ajust the size of the Confirm Cancel button
  	check license osname locally when kms version lower than 2.5
  	fix security compilation issues


author: lichenguang <lichenguang@kylinos.cn> 1.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#473471]
  - SUG : NA
  - DESC: Fix security hotsposts in the sonarqube report.


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-calendar-4.10.0.0-ok2.16k0.12
          upstream commtid:33a3c76c0b50b9058fdebd352de5229ce21d71bb


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#250111]
  - SUG : NA
  - DESC: Patch0002: kylin-calendar-4.10.0.0-kylin-update-zh_HK-translation.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-calendar-4.10.0.0-Single-instance-addition-of-DISPLAY-judgment.patch


author: huayadong <huayadong@kylinos.cn> - 3.24.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#424335]
  - SUG:  NA
  - DESC: update version to 3.24.0.0-0k0.35
          fix KVE-2024-1102


author: peijiankang <peijiankang@kylinos.cn> - 3.24.0.0-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#289223]
  - SUG:  NA
  - DESC: add kylin-device-daemon-3.24.0.0-fix-coredump-when-quit.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-2
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-2
  	support xfs.
  	add -d to output important logs to syslog.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-3
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-3
  	support device mapper
  	fix bug when print wwid


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-5
changelog:
  - Type:compile
  - ID:431407
  - SUG:NA
  - DESC: release 1.0-5
  	supports monitoring of file system mount/umount events.
  	improve program startup speed.
  	adjust license's description.
  	add option `--mask` to enable debug mode.
  	fix coredump when argc == 0.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-7
changelog:
  - Type:bugfix
  - ID:[bug#381669]
  - SUG:NA
  - DESC: release 1.0-7
  	fix coredump when wwid's length is less than 32.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-8
changelog:
  - Type:compile
  - ID:582005
  - SUG:NA
  - DESC: release 1.0-8
  	trigger unit tests and generate reports in CI.
  	supplement the copyright information and file header of the source code.


author: peijiankang <peijiankang@kylinos.cn> - 1.1.0.47-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-music-1.1.0.47-ok9.25k0.14
          upstream commtid:6d4626ab05a46fe6f1712a2f06571fb1d0cbd724


author: huayadong <huayadong@kylinos.cn> - 1.1.0.47-1.p01.01
changelog:
  - Type: update
  - ID  : [BUG#584863]
  - SUG : NA
  - DESC: add Patch2:kylin-music-1.1.0.47-kylin-remove-jieba.dict.utf8-idf.utf8-data.patch
          去掉不合适的字符


author: douyan<douyan@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch 0001-fix-kylin-nm-4.10.0.0-add-LANG-env.patch


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#437383]
  - SUG: NA
  - DESC: kylin-nm-4.10.0.0-kylin-fix-closing-network-segment.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: kylin-process-manager-daemon-4.10.0.0-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-process-manager-4.10.0.0-ok1.33k1.5
          upstream commtid:0038ddf0249de1761514d30db39c7730dc0a1242


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#452549]
  - SUG : NA
  - DESC: remove kylin-process-manager core functionality


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#473473]
  - SUG : NA
  - DESC: kylin-process-manager fix sonarqube hotpoints


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#583449]
  - SUG : NA
  - DESC: Fix coredump when starting daemon while service is already running


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0.1kylin1k81-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0.1kylin1k81-ok8.24k1.3


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-fix-aboutinfo-and-singleinstance.patch
          add kylin-screenshot-1.0.0.1kylin1k81-add-copyright-info.patch


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-8
changelog:
  - Type:compile
  - ID:TASK#387157
  - SUG:NA
  - DESC:add unit test code & improve code coverage & modify bpf program.


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-11
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#431721 TASK#429232
  - SUG:NA
  - DESC:monitor of signal & inode & filehandle & number of process


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-12
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#443800 TASK#433604 TASK#431721
  - SUG:NA
  - DESC:fix some known issues and GPL issue


author: changtao <changtao@kylinos.cn> - 2.0-13
changelog:
  - Type:compile
  - ID:BUG#339854 BUG#339852 TASK#446051
  - SUG:NA
  - DESC:fix file monitor failed of rm operation & fix file monitor timestamp problem &fix PenTest


author: changtao <changtao@kylinos.cn> - 2.0-15
changelog:
  - Type:compile
  - ID:TASK#471101 TASK#415537
  - SUG:NA
  - DESC:fix fortify high-level problem & add file license headers


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.3kord-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.3kord-ok6.13k0.13
          upstream commitid: f1439f4f99b8afd4691d8a401861442be40ca815


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p01.01
changelog:
  - Type: bugfix
  - ID  : [TASK#622499][BUG#491479][TASK#586739]
  - SUG : NA
  - DESC: add dbus limit
          Skip MD5 check for ISO images missing md5sum.txt
          fixed empty plugin version info


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.16
          upstream commtid:7ad757f89f412a5be1d5684048a516c028645671


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.18
          upstream commtid:a780d9a4d36e4f58f6dea3412fc3974c14e5f6ea


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-ukui-control-center-jump-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: update kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#385929]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-shortcut-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-virtual-keyboard-3.0.1.0-ok0.12k0.4
          upstream commtid:f3b588138f44997947ec3b5c2912a11fcafcd71f


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#470133]
  - SUG : NA
  - DESC: fix kylin-virtual-keyboard animationAvailability


author: zuohsh <zuohongsheng@kylinos.cn> -2.0.1-1
changelog:
  - Type:Task
  - ID:457822
  - SUG:NA
  - DESC: kylin_warm_revert_patch-taget_definition_compatible_with_all_hotpatches.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-wayland-compositor-1.3.1.0-0k0.5
          upstream commtid:1e12b35019a7339c27fabc4c88c6cee50f566461


author: wanghao <wanghao2@kylinos.cn> 1.0.0-02
changelog:
  - Type: bugfix
  - ID: [BUG#205129][BUG#205129]
  - SUG:NA
  - DESC: 添加默认授权配置,解决清空策略失败的问题
  -	  add patch: kysdk-module-authorize-add-default-authorize-conf.patch


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p01
changelog:
  - Type:update
  - ID:[任务#328060]
  - SUG:NA
  - add Patch02: kysdk-module-authorize-copyright.patch
  - DESC: 328060 libkysdk-module-authorize在V11上移植适配


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p02
changelog:
  - Type:update
  - ID:[任务#332809]
  - SUG:NA
  - add Patch03:	kysdk-module-authorize-unit-test.patch
  - DESC: 332809 kysdk-module-authorize单元测试


author: duanhongtao <duanhongtao@kylinos.com> - 1.0.0-02.p03
changelog:
  - Type:update
  - ID:[任务#421367]
  - SUG:NA
  - add Patch04:	kysdk-module-authorize-code-rectification.patch
  - DESC: 421367 kysdk-module-authorize代码整改及合规检查


author: duanhongtao <duanhongtao@kylinos.com> - 1.0.0-02.p04
changelog:
  - Type:update
  - ID:[任务#435323]
  - SUG:NA
  - add Patch05:	kysdk-module-authorize-code-add-more-unit-test.patch
  - DESC: 435323 kysdk-module-authorize提升单元测试覆盖率至70%


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p05
changelog:
  - Type:update
  - ID:[BUG#353731][BUG#357525]
  - SUG:NA
  - add Patch06:	kysdk-module-authorize-selfprotect.patch
  - DESC: 
  - 353731 [V11-2503][B11][安全SDK]enforcing状态下，kdk-authorize授权过的程序，执行时无法访问授权配置
  - 357525 [V11-2503][安全SDK][安全管控]应用执行控制添加应用,执行报错


author: hanzhengyun <hanzhengyun@kylinos.com> - 1.0.0-02.p06
changelog:
  - Type:update
  - ID:[任务#642861]
  - SUG:NA
  - add Patch07:	kysdk-module-authorize-fix-negative-permission-id-boundary-check.patch
  - DESC:
  - 642861 kysdk-module-authorize 组件增强，增加接口枚举入参下界检查


author: yangguangjing <yangguangjing@kylinos.com> - 1.0.0-02.p07
changelog:
  - Type:update
  - ID:[任务#649283]
  - SUG:NA
  - add Patch08:	change_dlopen_lib_to_abs_path_and_add_root_permissive_20260707.patch
  - DESC:
  - task649283 kysdk-module-authorize 【威胁分析】组件优化。bug628071_628157_628095包安全漏洞【KVE-2026-0673】


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#307245]
  - SUG: NA
  - DESC: 修复parse_file_type函数解析文件类型错误问题
  -       kysec-common-fix-parse-file-type-error.path


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#405875]
  - SUG: NA
  - DESC: 增加单元测试代码
  -       kysec-common-add-unit-test-20241024.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       kysec-common-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#435234]
  - SUG: NA
  - DESC: 单元测试代码更新
  -       kysec-common-update-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#449386]
  - SUG: NA
  - DESC: 修复平台扫描的开源代码引入问题
  -       kysec-common-fix-opensource-introduce.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-01
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: kysec2.0命令行开发,添加kysec_policy的日志类型
  -         kysec-common-add-kysec-policy-log-type.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-05
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 增加获取指定目录下所有子文件和子目录接口,逐级获取接口,增加获取指定目录下文件和目录,仅指定目录层级
  -     kysec-common-add-get-path-api.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.2.1-06
changelog:
  - Type: CVE
  - ID: KVE-2026-0206
  - SUG: NA
  - DESC: 修复函数在处理文件操作时，存在条件竞争缺陷的问题，合入补丁
  -     KVE-2026-0206.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-07
changelog:
  - Type: update
  - ID: [TASK#643287]
  - SUG: NA
  - DESC: kysec-common组件增强
  -     kysec-common-fix-api.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-08
changelog:
  - Type: update
  - ID: [TASK#643287]
  - SUG: NA
  - DESC: kysec-common组件增强
  -     kysec-common-fix-api-remove-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: 模式切换时 去除kysec中开启box的动作,单独开启box
  -	  kysec-daemon-fix-double-enable-box.patch  
  - 	添加setModuleStatusReboot()接口, 可以直接重启系统
  -         kysec-daemon-add-set-module-status-reboot-interface.patch   
  -   box开启逻辑放在kysec中作为子项
  -         kysec-daemon-fix-change-box-status.patch
  - 修改security-switch --get 状态时 off的状态显示值由none 变为off
  -	  kysec-daemon-get-status-none-2-off.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653][BUG#351149]
  - SUG: NA
  - DESC: 修复调用reboot命令执行错误的问题
  -	  kysec-daemon-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -	无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -	  kysec-daemon-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#354035][BUG#353489]
  - SUG: NA
  - DESC: [BUG#354035]修复开启安全后 audit服务启动失败问题
  -       [BUG#353489]解决安全中心设置中无法关闭安全问题
  -       [其它]修复onoe模式下ksaf是开启状态, 检查切换模式是否需要重启错误的问题
  -          -- kysec-daemon-fix-none-mode-but-ksaf-on-check-reboot-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#369811][BUG#368135]
  - SUG: NA
  - DESC: [BUG#369811]修复softmode和enable互相切换时会修改子模块状态的问题
  -	[BUG#368135]推荐模式下，setstatus生效测试-apparmor-enable，失败
  -         -- kysec-daemon-fix-softmode-and-enable-switch-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#372191]
  - SUG: NA
  - DESC: [BUG#372191]修改涉密场景禁止设置安全模式和切换kysec、selinux、apparmor状态
  -	[其它]修复setstatus设置状态时, 如果状态出错, 是正常返回的问题
  -	  -- kysec-daemon-modify-sm-scene-forbidden-set-security-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#375127][BUG#372111]
  - SUG: NA
  - DESC: [BUG#375127]修复频繁操作security-switch --get 模式回变成off
  -	[BUG#372111]解决普通用户可以使用systemctl管理服务问题
  -	  -- kysec-daemon-fix-repeatedly-execute-security-switch-get-error.patch


author: litianhao <litianhao@kylinos.cn> - 2.0.0-10
changelog:
  - Type: bugfix
  - ID: [BUG#376773]
  - SUG: NA
  - DESC: [BUG#376773]修复频繁操作security-switch --get 模式回变成off
  -	  kysec-daemon-do-not-disable-audit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#379175]
  - SUG: NA
  - DESC: 修复切换切换strict或default模式后 grub中存在两个audit参数问题
  -	  kysec-daemon-fix-grub-audit-param-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#381085]
  - SUG: NA
  - DESC: 修复off模式下仅开启box 重启后 获取的安全状态不正常问题
  -	  kysec-daemon-fix-get-security-status-error-when-only-open-box.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-13
changelog:
  - Type: bugfix
  - ID: [TASK#555445]
  - SUG: NA
  - DESC: 解决只切换selinux状态时, 不进行策略编译下发
  -	  kysec-daemon-fix-set-selinux-status-not-sync-policy.patch


author: lengchunying <lengchunying@kylinos.cn> - 2.0.0-14
changelog:
  - Type: bugfix
  - ID: [TASK#566261]
  - SUG: NA
  - DESC: 修复CVE-2025-1202
  -         kysec-daemon-fix-cve-2025-1202.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-16
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         kysec-daemon-add-dbus-control-yaml-file.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-20
changelog:
  - Type: bugfix
  - ID: [BUG#639535]
  - SUG: NA
  - DESC: 为security-switch增加获取安全等级接口[KVE-2026-0730]
  -	  kysec-daemon-add-get-security-level-interface-for-security-switch.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#218046]
  - DESC: 修复系统重启后kmod的sm策略不生效
  -	  add patch: kysec-sync-daemon-fix-sm-policy-kmod-inoperative-when-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: bugfix
  - ID: [BUG#218522]
  - DESC: 修复重启后hub管控不生效的问题
  -     add patch: kysec-sync-daemon-fix-hub-policy-not-work-after-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: bugfix
  - ID: [TASK#217917]
  - DESC: 修复设备管控usb中的段错误
  -     add patch: kysec-sync-daemon-fix-usb-coredump.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: update
  - ID: [TASK#226809] 覆盖率测试
  - SUG: NA
  - DESC: 编写覆盖率测试用例，覆盖率>10%
  - 	add patch: kysec-sync-daemon-test-20240729.patch
  - 		kysec-sync-daemon-test1-20240731.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: update
  - ID: [TASK#391719][TASK#395913] 修复安全热点 修复fortify
  - SUG: NA
  - DESC: 修复安全热点
  - 	add patch: kysec-sync-daemon-fix-security-func.patch
  - 		       kysec-sync-daemon-fix-sonarqube-bugs.patch
  -              kysec-sync-daemon-fix-fortify-security-issues.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: update
  - ID: [TASK#401353]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-add-unit-test-20241030.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 解决安全热点,增加license
  - 	add patch: kysec-sync-daemon-fix-sonarqube-scan.patch
  -   add path: kysec-sync-daemon-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#435238]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-update-unit-code.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#591121]
  - SUG: NA
  - DESC: 增加test条件编译变量
  - 	add patch: kysec-sync-daemon-20260129-add-test-compile-condition.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#642867]
  - SUG: NA
  - DESC: kysec-sync-daemon 组件增强
  - 	add patch: kysec-sync-daemon-comment-unused-code.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-01.se.20
changelog:
  - Type: update
  - ID: [TASK#642867]
  - SUG: NA
  - DESC: kysec-sync-daemon 组件增强
  - 	add patch: kysec-sync-daemon-comment-unused-code-1.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#347304][BUG#346994][BUG#352195][BUG#347171][BUG#346911]
  - SUG: NA
  - DESC: 应用联网控制-命令行状态实时更新到UI测试（关-开-关）-切换过安全功能的none，命令开启联网控制失败[BUG#347304]
  -	普通用户修改保护箱状态失败kysec_policy命令未提示失败原因[BUG#352195]
  -	kysec_policy错误参数未输出帮助信息[BUG#347171]
  -	应用联网控制，首次安装系统后执行kysec_policy net on，提示先开启kysec[BUG#346994]
  -	未开启kysec，输入错误参数未输出帮助信息[BUG#346911]
  -	  kysec-utils-fix-kysec-policy-command-bug3.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#346897]
  - SUG: NA
  - DESC: 修复BUG#346897 文件保护箱打不开
  -	kysec_policy和kysec_set命令交互提示之前,先检查接口调用权限
  -	旧命令加入废弃提示
  -	_get_func_status()接口查询子模块状态之前,先查询kysec状态, kysec为关,子模块都是关
  -	文件保护允许删除不存在的文件、目录和软件包的只读保护策略和例外策略
  -	忽略链接文件的实际文件不存在时的报错
  -	  kysec-utils-fix-kysec-policy-command-bug4.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#360575]
  - SUG: NA
  - DESC: 修复BUG#360575 添加\删除\查看\清除白名单-对象不存在-kysec_set提示信息未换行
  -       同步桌面修改:
  -       1、修复bug#353590 kysec_policy命令行-A添加策略时,不允许设置-v选项, 增加错误提示
  -       2、修复enable和warning的拼写错误
  -       3、修改checkSecuritySwitchReboot_dbus()接口调用函数名错误的问题
  -       4、新增getBootMode_dbus()查询当前系统模式的接口
  -       5、网络保护查询所有策略不检查软件包和文件是否存在
  -       6、网络保护删除文件策略时, 不检查文件是否存在
  -       7、网络保护删除、添加和更新文件策略时，如果文件有所属软件包，需要处理软件包的策略
  -       8、执行控制添加告警弹窗状态设置
  -       9、执行控制和文件只读保护添加在不可变模式下过滤/usr路径下的文件
  -         -- kysec-utils-fix-kysec-policy-command-bug5.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#361691]
  - SUG: NA
  - DESC: [BUG#361691]解决进程保护和文件只读保护例外程序无法删除的问题
  -       同步桌面补丁:
  -       [其它]文件保护和执行控制添加例外程序时，在不可变模式下过滤/usr目录
  -       [其它]删除status_dbus.h中的config.h头文件引用, 解决其它包引用时编包错误
  -         -- kysec-utils-fix-kysec-policy-command-bug6.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#347672][TASK#471077][BUG#346106][BUG#352444][BUG#346106][BUG#364039][BUG#364125][BUG#363959]
  - SUG: NA
  - DESC: [BUG#347672]根据要求去除错误码
  -       [BUG#347672]根据要求去除错误码
  -       [TASK#471077]修复申请的资源未释放问题
  -       [其它]安全热点问题
  -       [BUG#346106]修复使用kysec_set添加文件策略后, kysec_policy更新对应文件策略失败的问题
  -       [BUG#352444]优化kysec关闭时, 开启单独模块耗时长的问题
  -       [BUG#346106]网络控制修改逻辑, 文件有所属软件包, 添加修改软件包策略
  -       [BUG#364039]文件保护的帮助信息不对
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#363959]目录添加保护，删除文件保护例外失败
  -       [其它]修改setstatus命令, 切换box时ksaf开启不提示重启
  -       同步桌面补丁:
  -       [其它]修改设备管控光驱的状态显示
  -       [其它]优化执行控制查询白名单速度
  -          -- kysec-utils-fix-kysec-policy-command-bug7.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-10
changelog:
  - Type: bugfix
  - ID: 
  - SUG: NA
  - DESC: [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368127]kysec_get netctl -l 无数据
  -       [BUG#367319]帮助信息-kysec_get输出多余信息
  -       [BUG#367069]更新被篡改的文件，有多余的提示信息
  -       [BUG#366955]off->开启kysec，禁止程序执行的子模块显示名称不对
  -       [BUG#366937]开启获取selinux状态，命令提示处于废弃阶段，删除getstatus和setstatus中废弃提示
  -       [BUG#366379]execban禁止程序执行-strict权限测试，root和auditadm用户不可执行
  -       [BUG#366367]strict模式下关闭selinux，出现交互信息
  -       [BUG#365915]清除标签-递归目录-执行命令未达预期，删除提示信息
  -       [BUG#365873]清除标签-目录，执行命令提示不符预期，删除提示信息
  -       [BUG#364687]kysec_policy包名添加的程序，路径方式删除成功提示失败
  -       [BUG#364667]kysec_set添加的策略，kysec_policy更新失败
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#364017]删除文件保护后，例外程序未被删除
  -       [其它]修改设备管控错误, 修改cdrom设置权限的方式
  -       [其它]修改scripts/init-bottom/3adm_enable文件,解决三员模式下kysec-daemon修改netctl.xml错误的问题
  -          -- kysec-utils-fix-kysec-policy-command-bug8.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#370259]
  - SUG: NA
  - DESC: [BUG#370259]删除服务器的命令行的禁止执行功能
  -	[BUG#369979]解决黑白名单安装控制-黑白名单同时生效时，rpm安装软件包提示核心已转储的问题
  -       [其它]修复编译优化参数是-O0时，编译错误的问题
  -       [其它]涉密场景下kysec_policy禁止设置kysec状态, setstaus禁止设置kysec、selinux和apparmor状态,
                kysec_set和kysec_get禁止和查询设置fpro、ppro和kmod策略
  -         -- kysec-utils-fix-kysec-policy-command-bug9.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#375705]
  - SUG: NA
  - DESC: [BUG#375705]kysec_policy userid --help root用户不展示帮助手册
  -       同步桌面修改：
  -       [BUG#377631]删除开明包标记后，kaiming命令不可用，软件包忽略软链接文件
  -       [BUG#358329]开明包删除标记后，进行标记查询，出现警告弹窗，软件包忽略软链接文件
  -       [其它]隐私保护除设置开关外，其它操作不检查用户权限检查
  -	  -- kysec-utils-fix-kysec-policy-command-bug10.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-13
changelog:
  - Type: bugfix
  - ID: [BUG#378971][BUG#380475][BUG#380117]
  - SUG: NA
  - DESC:[BUG#378971]下发docker中的脚本，无法移除策略, 修改通过pid获取路径接口
  -      [BUG#380475]kysec_policy -V不显示版本信息, 隐藏-V选项
  -      [BUG#380117]更新不存在的管控策略成功, 修改文件和软件包策略都不存在,不添加软件包策略
  -      [BUG#380347]/usr/etc/文件不应存在,修改spec文件,创建命令注释了
  -      spec文件增加libksaf-label-manager-devel依赖
  -	  -- kysec-utils-fix-kysec-policy-command-bug11.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-14
changelog:
  - Type: TASK
  - ID: [TASK#502485]
  - SUG: NA
  - DESC: 同步桌面修改：
  -	[BUG#355391]不可变模式下，忽略软件包中含有不可变目录下的文件设置执行控制标签
  -	  -- kysec-utils-fix-kysec-policy-command-bug12.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-15
changelog:
  - Type: TASK
  - ID: [TASK#548021]
  - SUG: NA
  - DESC: 同步Bug#434735修复补丁
  -	[BUG#434735]进程防杀死接口测试-执行./ppro add /usr/bin/top失败
  -	  kysec-utils-fix-return-value.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-16
changelog:
  - Type: update
  - ID: [BUG#450991]
  - SUG: NA
  - DESC: 【安全套件】文件防护功能函数优化，对目录添加保护后子目录仍然能够被删除移动
  -	  kysec-utils-add-dir-protect.patch


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.07
changelog:
  - Type: update
  - ID: [BUG#290677]【V11-B14】【访问控制】【白名单访问控制】模块防卸载-执行控制标记为unknown内核模块无法修改标识
  - SUG: NA
  - DESC: 修复无法添加ko.xz文件到白名单


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [BUG#347949]【执行控制】将空目录加入白名单列表执行失败
  - SUG: NA
  - DESC: 添加空目录时接口返回0；过滤掉路径前面不存在的 /tmproot


author: wangchi <wangchi@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [BUG#528259]  修复python脚本无法被管控的问题
  - SUG: NA
  - DESC: 1.修改脚本判断逻辑，增加对pyc文件管控; 2.修改未授权文件执行控制标记;


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-01.se.01
changelog:
  - Type: update
  - ID: [任务#420435]【ksaf】安全编译选项整改-kysec2-rbac-utils和审计
  - SUG:NA
  - DESC: 优化spec文件
          不能删除最后一条用户配置
          移除rpath


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [Bug#352562] 【20250513update内网源测试】【v11-2409】kysec2-rbac-utils卸载失败，提示错误信息
  - SUG: NA
  - DESC:	未开启ksaf不用同步内核策略


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#471093] 【安全红线】整改自研组件第一轮Fortify问题-kysec2-rbac-utils
  - SUG: NA
  - DESC: fortify整改
          同步fuzz代码


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [BUG#364017]
  - SUG: NA
  - DESC: kysec2-scenen升级策略合并, 新增清除例外策略接口,解决自保护相关问题
  -     kysec2-scene-20250613-add-some-features.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#366133]
  - SUG: NA
  - DESC: chronyc命令在strict模式下 只能root执行
  -     kysec2-scene-20250624-fix-some-bugs.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [BUG#370845][BUG#368687]
  - SUG: NA 
  - DESC: 修复安装pure-ftpd后ftp无法连接，获取kysec状态时线程阻塞的问题
  -     kysec2-scene-20250626-fix-some-bugs.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#372333]
  - SUG: NA 
  - DESC: 去除secadm的dac override权能
  -     kysec2-scene-remove-secadm-dac-override-cap.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#377637]
  - SUG: NA 
  - DESC: boxctl增加user protect接口
  -     kysec2-scene-20250708-fix-some-bugs.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-14
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -     kysec2-scene-add-sm-authorize-sync-exception-rules.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [BUG#379211]
  - SUG: NA 
  - DESC: 修复通过pid获取容器内进程的路径不正确
  -    kysec2-scene-fix-get-program-path-by-pid-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: 修复缺kmodctl.h文件中缺失的对scene_common.h的引用问题
  -    kysec2-scene-fix-missing-header-file.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-17
changelog:
  - Type: update
  - ID: [TASK#501697]
  - SUG: NA 
  - DESC: 修复：根据PID获取进程路径时，路径中大写字母强制转成小写字母，导致授权程序异常
  -    kysec2-scene-fix-get-path-case-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-18
changelog:
  - Type: update
  - ID: [BUG#383859]
  - SUG: NA 
  - DESC: 【通用用例安全适配】开启strcit后 secadm无权限执行 setsebool ftpd_full_access on
  -    kysec2-scene-fix-strict-not-exec-setsebool.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-19
changelog:
  - Type: update
  - ID: [BUG#416485]
  - SUG: NA 
  - DESC: 解决下发静态度量策略不生效问题
  -    kysec2-scene-fix-static_measurement-not-effective.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-20
changelog:
  - Type: update
  - ID: [BUG#418689]
  - SUG: NA 
  - DESC: 升级软件包时，即时生效策略
  -    kysec2-scene-add-update-rpm-sync-policy.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-21
changelog:
  - Type: update
  - ID: [TASK#549749]
  - SUG: NA
  - DESC: 移除setfattr命令特权
  -    kysec2-scene-remove-setfattr-permit.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-29
changelog:
  - Type: update
  - ID: [TASK#649101]
  - SUG: NA
  - DESC: kysec2-package-plugins组件优化
  -    kysec2-scene-fix-rpm-install.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-31
changelog:
  - Type: bugfix
  - ID: [BUG#642171][BUG#636005]
  - SUG: NA
  - DESC: 1.修复存在D-Bus名称抢占漏洞的问题-[KVE-2026-0752]；
  -    	2.修复存在配置策略文件权限设置不当，本地非特权用户可以读取策略内容的问题-[KVE-2026-0740]；
  -    	kysec2-scene-fix-KVE-2026-0752.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: songjuntao <songjuntao@kylinos.cn> - 1.10.2-3.p01
changelog:
  - Type:update
  - ID:TASK#599077
  - SUG:NA
  - DESC:fix use weak random while using rsa crt private operation


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: lizhipeng <lizhipeng@kylinos.cn> - 2.29.0-4.p01
changelog:
  - Type: update
  - ID: [TASK#614387]
  - SUG: NA
  - DESC: 1.EC: load xgfts with VBROADCASTI128 (AVX2)
          2.EC: special dispatch case for Hygon 1/2/3
          3.CRC: use crc32_iscsi_by8_02 instead
          4.CRC: short data opt
          5.CRC: add crc32_iscsi_by16_10 for simplicity of dispatch
          6.No 32-bit support in new files.


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解决动态变量不生效问题
          固定函数名和函数ID对应关系解决增量下发函数名会变问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解析策略前先初始化函数名解决增量下发函数名会变问题
          解决首次加载安全缺少section信息的问题
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [Bug#354818] 【poc】安全中心多次切换策略后，策略不生效
  - SUG:NA
  - DESC: 支持多次编译一次下发
          解决动态变量不生效问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 修改单元测试代码
          删除注释掉的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 未挂载日志目录时打印到屏幕


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-10
changelog:
  - Type:update
  - ID: [Bug#382843] 【出厂测试】【v11 2503】【需求41775】【内核模块防卸载】内核模块添加防卸载保护后卸载成功
  - SUG:NA
  - DESC: 文件写入强制落盘，防止断电丢失
          下发初始化策略，无策略二进制文件或无二进制策略目录均返回成功


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [任务#553741] 安全编译参数整改 / libksaf-policy-sync安全编译参数整改
  - SUG:NA
  - DESC: 将安全编译栈保护参数改为-fstack-protector-strong


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-13
changelog:
  - Type:update
  - ID: [任务#645217] libksaf-policy-sync组件增强
  - SUG:NA
  - DESC: 对makeSingleExprPolicy 函数和parsePolicyData 函数进行安全加固


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[TASK#366361] 【安全函数】libkydima整改
  - SUG:NA
  - DESC:安全编码合规性整改
  -      [TASK#361219] 【安全编译】gcc编译添加安全编译参数-libkydima
  -      修正不可靠代码，增加安全增强编译选项


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-19
changelog:
  - Type:update
  - ID:[BUG#351739]
  - SUG:NA
  - DESC: 针对set命令增加配置异常提示，针对get命令增加模块未加载时off状态显示
  	针对开源标准tcm2设备节点名称做自适应
  	修改kydima_get安装路径确保默认状态下普通用户可以访问该命令


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-20
changelog:
  - Type:update
  - ID:[BUG#353894] 【v11 2503】【B11】【需求44504】【x86\arm】【动态度量】不指定设备时，开启PCR策略命令执行失败
  - SUG:NA
  - DESC: 优化命令提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-21
changelog:
  - Type:update
  - ID:[TASK#471063] 【安全红线】整改自研组件第一轮Fortify问题-libkydima
  - SUG:NA
  - DESC: 修复server.cpp中 文件打开后存在句柄不释放的问题


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-22
changelog:
  - Type:update
  - ID: [BUG#369787] 【v11-2503】【B15】【需求44504】【动态度量】动态度量总开关关闭，无法获取子开关状态
  - SUG:NA
  - DESC: 修改kydima_get关闭状态显示信息
    	调整kydima_set用户执行权限


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-23
changelog:
  - Type:update
  - ID: [BUG#385507]【出厂测试】【v11-2503】【B20】【需求44504】【动态度量】帮助信息描述不对
  - SUG:NA
  - DESC: 优化命令帮助信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-24
changelog:
  - Type:update
  - ID: [BUG#408605]【自动化update内网源测试】【SP3-2403】libkydim包kydima_set命令设置周期可为负数
  - SUG:NA
  - DESC: 增加参数容错告警，修复后台服务无意义告警信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC: 
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC:
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-26~RC0
changelog:
  - Type:update
  - ID: [TASK#595487]完成libkydima模糊测试和ci对接
  - SUG:NA
  - DESC:
  	添加ci平台模糊测试支持
  	添加ci平台单元覆盖率测试支持


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-27
changelog:
  - Type:update
  - ID: [BUG#499553] 【2603-B09】kydima_get命令fuzzing过程中出现crash，非100%复现，请分析确认
  - SUG:NA
  - DESC:
  	优化对系统文件读取时的格式限位校验


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-28
changelog:
  - Type:update
  - ID: [BUG#502811]【V11 2503】【B12】【威胁消减】【动态度量】default模式下，kydima-daemon.service关闭后无法启
  - SUG:NA
  - DESC:
  	增加后台服务禁止重复启动限制


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p25
changelog:
  - Type: bugfix
  - ID:[BUG#345916]
  - SUG: NA
  - DESC: adjust the hardware binding order for value-added product
  	add v10/v11 version check by LICENSE OSNAME
  	add osname check and similar_product check in ukey activation
  	backup license_serial upload to activation platform
  	fix get subscription status error


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p26
changelog:
  - Type: bugfix
  - ID:[BUG#348464]
  - SUG:NA
  - DESC: fix kylin_activation_sync output when subscription


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p27
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: change similar_product to product for ukey activation
  	add place activation check for activation sync
  	kylin_productinfo output optimization
  	check license osname locally when kms version lower than 2.5


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p28
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC:
  	reduce the number of subscription status checks in kms
          check license osname locally when kms version lower than 2.5 \
  	 for kms udp activation mode
  	add local osname and product_type check when system is \
  	 migrated from other system which is not v11


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p29
changelog:
  - Type: bugfix
  - ID:[BUG#359265][TASK#463164]
  - SUG: NA
  - DESC:
  	change the process of obtaining hard disk serial number
  	optimized code and add copyright header
  	add restart_activation to conf for automatic activation


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p30
changelog:
  - Type: bugfix
  - ID:[BUG#363291][BUG#365021][BUG#364959]
  - SUG: NA
  - DESC: fix ukey write error 
  	fix activate with v10 kyinfo and license
  	update testcase


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p31
changelog:
  - Type: update
  - ID:[TASK#442245]
  - SUG: NA
  - DESC: fix value added product osname check error for place


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: cancel bind system uuid
  	change the way of obtaining embedded network card names on x86


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32.01
changelog:
  - Type: update
  - ID:[TASK#502175][BUG#378051][BUG#414807]
  - SUG: NA
  - DESC: fix ukey activation more times
          upload cpu and os version info to kms server
  	change the access method of os version


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p32.04
changelog:
  - Type:bugfix
  - ID:[BUG#526731]
  - SUG:NA
  - DESC: optimize the mechanism for obtaining unique hardware identifiers
          add sw64 support
          security hardening
          add support for mqtt user login


author: huayadong<huayadong@kylinos.cn> 2.5.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch:libkysdk-applications-2.5.1.0-kylin-fix-compile-error-of-STB_IMAGE.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.2.0-0k0.16


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add libkysdk-applications-2.5.1.0-fix-sonarqube-security-hotspots.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#352900]
  - SUG : NA
  - DESC: fix klabel problem displaying multiple line text


author: huayadong<huayadong@kylinos.cn> - 2.5.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: chnage libkysdk-gsetting Requires for delete glib2-devel


author: peijiankang<peijiankang@kylinos.cn> - 2.5.1.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add libkysdk-base-2.5.1.0-fix-sync-dbus-server-strcmp-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.0-0k1.6


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.5.1.0-1.p09
changelog:
  - Type: updates
  - ID  : [TASK#619873]
  - SUG : NA
  - DESC: fix add processing the user.db file for the user dbus


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p01
changelog:
  - Type:update
  - ID:[任务#333425]
  - SUG:NA
  - add Patch10:	libkysdk-security-copyright.patch
  - DESC: 333425 【sdk】移植libkysdk-security,解决编译错误,添加版权声明


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p02
changelog:
  - Type:update
  - ID:[BUG#242653]
  - SUG:NA
  - add Patch11:	libkysdk-security-unit-test.patch
  - DESC: 242653 【V11-B06】【安全sdk】devicesectest -g rulelist/devicelist无设备信息和策略输出
  - 添加单元测试


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p03
changelog:
  - Type:update
  - ID:[任务#332809]
  - SUG:NA
  - add Patch12:	libkysdk-security-unit-test2.patch
  - DESC: 332809 libkysdk-security单元测试添加测试内容提高覆盖率


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p04
changelog:
  - Type:update
  - ID:[任务#439178]
  - SUG:NA
  - add Patch13:	libkysdk-security-add-interface.patch
  - DESC: 439178 安全SDK-安全管控API接口增加


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p05
changelog:
  - Type:update
  - ID:[BUG#347377][BUG#351500]
  - SUG:NA
  - DESC: add Patch14: libkysdk-security-fix-secriskbox.patch
  -     【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM】篡改BIOS配置后，系统未给通知
  -     【V11 2503】【B10】【需求41769】【安全中心】【可信启动】【TPM/TCM/KYEE】不可信状态下，切换用户后登录系统，未弹出通知


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-11.p06
changelog:
  - Type:update
  - ID:[BUG#358491]
  - SUG:NA
  - DESC: 【V11-2503】【B13】LoongArch物理机安装后物理鼠标键盘无法键入
  -         去除usbguard依赖


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p07
changelog:
  - Type:update
  - ID:[BUG#358491][BUG#363023][BUG#250867]
  - SUG:NA
  - DESC: add Patch15: libkysdk-security-fix-filesectest-coredump.patch
  - add Patch16: libkysdk-security-fix-process-exectl.patch
  - add Patch17: libkysdk-security-devicesec-emptyattr.patch
  - 【B13】【V11-2503】【安全SDK】【应用防护】文件保护控制添加应用，执行失败
  - 【B13】【V11-2503】【安全SDK】【应用防护】进程防杀死添加可执行应用
  - 【V11-B10】【安全SDK】整条设备管控策略添加-添加错误格式的策略成功，查看策略时提示核心已转储


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p08
changelog:
  - Type:update
  - ID:[BUG#363023]
  - SUG:NA
  - DESC: add Patch18: libkysdk-security-fix-process-exectl-2.patch


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p09
changelog:
  - Type:update
  - ID:[BUG#375587]
  - SUG:NA
  - add Patch19:	libkysdk-security-devicesec-auth.patch
  - DESC: 375587 【V11-2503】【B17】【安全SDK】【接口授权】添加删除接口授权提示usbguard服务开启失败


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p10
changelog:
  - Type:update
  - ID:[任务#647491]
  - SUG:NA
  - add Patch20:	libkysdk-security-remove-dbus-interface.patch
  - DESC: 647491 libkysdk-security-secRiskBox 组件功能增强


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.2-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.2-0k4.22


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p04
changelog:
  - Type: update
  - ID  : [TASK#474331]
  - SUG : NA
  - DESC: add libkysdk-system-2.5.1.2-kylin-fix-fortity.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p06
changelog:
  - Type: cves
  - ID  : KVE-2025-259872293 KVE-2025-0703 KVE-2025-0704 KVE-2025-0705 KVE-2025-0706 KVE-2025-0707 KVE-2025-0801 KVE-2025-1001
  - SUG : NA
  - DESC: KVE-2025-259872293、KVE-2025-0703、KVE-2025-0704、KVE-2025-0705、
          KVE-2025-0706、KVE-2025-0707、KVE-2025-0801、KVE-2025-1001


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-35789.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-44235.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-44236.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: peijiankang <peijiankang@kylinos.cn> - 2.74.3-10.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 2.74.3-4.p04(fix CVE-2025-4945 and Failed to fix websocket-test case)


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-10.p03
changelog:
  - Type: cves
  - ID:   [BUG#538961]
  - SUG:  NA
  - DESC: fix CVE-2026-0716 CVE-2026-1760 CVE-2026-5119 CVE-2025-14523
              CVE-2026-0719 CVE-2026-1467 CVE-2026-1801 CVE-2026-2369
              CVE-2026-1761 CVE-2026-1539


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-4.p02
changelog:
  - Type:cves
  - ID:[BUG#347089]
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
         CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911
         CVE-2025-32912 CVE-2025-32913 CVE-2025-32907 CVE-2025-32914


author: houzhiwei <houzhiwei@kylinos.cn> - 2.74.3-4.p03
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-4.p06
changelog:
  - Type:cves
  - ID:[TASK#593047][TASK#595441]
  - SUG:NA
  - DESC:fix CVE-2026-0719 CVE-2025-14523 CVE-2026-1761 CVE-2026-1539 CVE-2026-1467
         CVE-2026-0716 CVE-2026-2369 CVE-2026-1801 CVE-2026-1760


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangjun <zhangjun@kylinos.cn> - 1.10.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Prevent files from being skipped if the output buffer is too small


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: liuming <liuming@kylinos.cn> - 1.11.0-6.p01
changelog:
  - Type:update
  - ID:task#650707
  - SUG:NA
  - DESC:fix byte amount copied for method in libssh2_agent_sign


author: chenyanpanHW <chenyanpan@huawei.com> - 1:1.1.1-26
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-pp_sharp_mod-calculation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-fix-underlinking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-png_sizeof-no-longer-available-since-libpng.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-CVE-2024-56431.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2026-5673.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: huayadong <huayadong@kylinos.cn> - 0.4.5.2-1.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01: timezonemap-0.4.5.2-kylin-mg-word-modification.patch


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yubo <yubo1@kylinos.cn> - 0.9.5-4.p01
changelog:
  - Type:update
  - ID:[任务#223921]
  - SUG:NA
  - DESC:add support to tpm2-00-permall update and disable sm4 in configure


author: hy-euler <eulerstoragemt@huawei.com> - 1.0.22-3
changelog:
  - delete -Sgit in 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-descriptor-Fix-two-memory-safety-bugs-in-malformed-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: yanjainqing <yanjianqing@kylinos.cn> - 9.10.0-14.p01
changelog:
  - Type: Update
  - ID:   [TASK#425201]
  - SUG:  NA
  - DESC: Backport V11-2409 patch
  -   Support Phytium S5000c
  -   Add a path in DEFAULT_LOADER_NVRAM to solve the issue of not being able to find UEFI firmware in x86 architecture
  -   Support host-model for arm, solve core dump when libvirtd starts on Phytium,solve compile error with modify xml in the test dir
  -   Disconnect libvirt's dependency on rbd and install it when the user needs to support it
  -   Fix the translation problem of libvirtd.policy's prompts
  -   Support MCE error alert and optimization the function that locates VMs affected by MCE errors
  -   Fix CVE-2024-4418
  -   Fix virtual machine save and restore failure issue when CPU model is configured as host model mode


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p02
changelog:
  - Type: Update
  - ID:   [BUG#345770]
  - SUG:  NA
  - DESC: Fix some translation errors of common functions.


author: yanjianqing <yanjianqing@kylinos.cn> - 9.10.0-14.p03
changelog:
  - Type: Bugfix
  - ID: [BUG#347955]
  - SUG: NA
  - DESC: Enable netcf support
  -       Fix several iface-related translation issues


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p05
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p06
changelog:
  - Type: update
  - ID:   [TASK#592121]
  - SUG:  NA
  - DESC: Rebuild for wirshark update from 3.6.14-12.p01 to 4.4.10-3.p01


author: zhangxianjun <zhangxianjun@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type:update
  - ID:[TASK#425066]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: lipengyu <lipengyu@kylinos.cn> - 2.11.9-2.p01
changelog:
  - Type: update
  - ID: [TASK#424807]
  - SUG:NA
  - DESC:add patch
         0001-kylin-compat-support-V1.0-for-libxml2.patch
         0002-kylin-compat-support-V1.1-for-libxml2.patch


author: zuo <zuohongsheng@kylinos.cn> - 2.11.9-3.p03
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.20.2-2
changelog:
  - Set TERM to xterm-256color
  - use https://github.com/mate-desktop/mate-terminal/commit/4f89d21
  - fix rhbz https://bugzilla.redhat.com/show_bug.cgi?id=1517870


author: longcheng <longcheng@kylinsec.com.cn> - 1.22.1-5
changelog:
  - KYOS-B: add kylin mask and part of translations
  - KYOS-T: Fix translation errors in help manual.
  - KYOS-B: set text preview content (#24148)
  - KYOS-B: add two color theme and change the default color theme to Dracula Dark (#30872)
  - KYOS-B: select the default charset by locale(#49592)


author: huayadong <huayadong@kylinos.cn> - 1.22.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#238335]
  - SUG:  NA
  - DESC: Patch1009: mate-terminal-1.22.1-kylin-remove-Reset.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.22.1-5.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#240137]
  - SUG:  NA
  - DESC: Patch1010: mate-terminal-1.22.1-fix-help-display-error.patch


author: Shixiong Ou <oushixiong@kylinos.cn> - 24.0.5-1.p02
changelog:
  - Type:bugfix
  - ID:TASK#378129
  - SUG:NA
  - DESC:add upstream orcjit patch and support loongarch64 orcjit


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: gaihuiying <eaglegai@163.com> - 2:0.94-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if detach the GTK package from the master package
         modify changelog  to add epoch:2


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: chenyanpanHW <chenyanpan@huawei.com> - 4.9.3-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6842.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6843.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: lipengyu <lipengyu@kylinos.cn> - 6.4-10.p01
changelog:
  - Type:update
  - ID:[Task#327352]
  - SUG:NA
  - DESC:ncurses-support-loongarch&&enable relocation for kylin


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p01
changelog:
  - Type: bugfix
  - ID: [BUG#334490]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p06
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p07
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p09
changelog:
  - Type: cves
  - ID: CVE-2026-48142 CVE-2026-42055
  - SUG: NA
  - DESC: fix CVE-2026-48142 CVE-2026-42055


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: songliyang <songliyang@kylinos.cn> - 1:20.18.2-7.p01
changelog:
  - Type: updates
  - ID:   [BUG#528049]
  - SUG:  NA
  - DESC: 1.Upgrade to fix followup CVEs:
            CVE-2025-55130 CVE-2025-55131 CVE-2025-55132 CVE-2025-59465
            CVE-2025-59466 CVE-2026-21637 CVE-2026-21710 CVE-2026-21713
            CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 CVE-2026-21717
          2.Fix a build error on sw_64


author: Qiang Wei <qiang.wei@suse.com> - 2.2.1-1
changelog:
  - Update to version 2.2.1.
    * Remove 0001-bash-Fix-nvme-completion.patch, it is fixed in upstream.
    * backport upstream patch: Bash completion: move global declare into function.


author: kouwenqi <kouwenqi@kylinos.cn> - 2.8-1.p01
changelog:
  - Type: bugfix
  - ID: [TASK#631623]
  - SUG: NA
  - DESC: do not issue warning when nvme_core module is not loaded


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:update the sshd_config and ssh_config, add the auto control
          mode scripts, add auto generate sm2 hostkey when start sshd service,
          fix ssh-keyscan can't get host pubkey issue


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: jiaocong <jiaocong@kylinos.cn> - 9.6p1-5.p07.02.se.01
changelog:
  - Type:update
  - ID:TASK#608701
  - SUG:NA
  - DESC:add comment for StrictScpCheck option in sshd_config.


author: liuming <liuming@kylinos.cn> - 9.6p1-5.p07.04.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p01
changelog:
  - Type: update
  - ID:TASK#424671
  - SUG:NA
  - DESC: add tlcp protocol patch, add tls rfc8998 patch , add zuc algorithm
          patch, add random drbg satisfy the GM/T 0105-2021 implementation,
          add passout and cipher parameter of ecparam apps,
          add Add-support-for-Zhaoxin-SM2-3-4-RNG.patch,
          fix some issues for the base openssl version and
          adapter the kylin old version cert


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:3.0.12-15.p10
changelog:
  - Type:cves
  - ID:TASk#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160
             CVE-2025-69418
             CVE-2025-69419
             CVE-2025-69420
             CVE-2025-69421
             CVE-2026-22795
             CVE-2026-22796


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p12
changelog:
  - Type:cves
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-31790,CVE-2026-31789,CVE-2026-28390,
  	   CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p13
changelog:
  - Type:cves
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-34182,
             CVE-2026-42766,CVE-2026-42767,CVE-2026-42770,CVE-2026-45445,
             CVE-2026-45446,CVE-2026-45447


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: chenjian <chenjian@kylinos.cn> - 3.2.1-5.p02
changelog:
  - Type:Task
  - ID:[TASK#648193]
  - SUG: NA
  - DESC: fix OVSDB Python monitors expose UUIDv1 MAC/time data over plaintext


author: mengchaoming <mengchaoming@kylinos.cn> - 0.80-10.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch
  - add patch: 0001-kylin-add-zh-HK-po.patch
  - 修改zh_HK.po文件的“户”为“戶”: kylin-modify-zh_HK_po.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 0.80-10.p01.se.01
changelog:
  - Type:update
  - ID:[Task#329161]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  - add patch: passwd-0.80-add-security-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 0.80-10.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#383361]
  - SUG:NA
  - DESC: passwd去除对libkysec包的依赖,改用dlopen方式
  - add patch: passwd-remove-libkysec-require.patch


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#250151] [BUG#334551] [BUG#346033]
  - SUG : NA
  - DESC:
  -   1. peony fix translation error.
  -   2. remove a critial messagebox.


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#337905] [BUG#296933]
  - SUG : NA
  - DESC: remove support for exfat from format dialog.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#354594]
  - SUG : NA
  - DESC: fix thread race condition which caused coredumps


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#352389]
  - SUG : NA
  - DESC: fix for copying long name file to file safe box


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#497725]
  - SUG : NA
  - DESC: fix copying files that with specific symbols name


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add peony-share Requires: samba samba-client


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok2k1.3
          upstream commitid: c2238e7f6811fe1e1faa5a9fde637c32b2d785bd


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-fix-peony-share.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#352174]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-add-uncompress-type.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p07.03
changelog:
  - Type: bugfix
  - ID  : [BUG#584613]
  - SUG : NA
  - DESC: reference gvolume object if we used after(rebuild after peony fix)


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: longcheng <longcheng@kylinos.com.cn> - 1.22.2-4
changelog:
  - fix(pluma-utils):Fixed garbled toolTips path in tab page with GB18030 encoding chinese translation


author: peijiankang <peijiankang@kylinos.cn> - 1.22.2-4.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#240263]
  - SUG:  NA
  - DESC: add pluma-1.22.2-cannot-automatically-detect-Chinese-encoding.patch
          add pluma-guide.tar.gz(fix BUG#240720)


author: peijiankang<peijiankang@kylinos.cn> - 1.22.2-4.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add pluma-1.22.2-fix-coredump-about-uri-isnot-exist.patch


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p02
changelog:
  - Type:cves
  - ID: CVE-2025-9566
        CVE-2025-58058
  - SUG:NA
  - DESC:Fix CVE-2025-9566 and CVE-2025-58058, 
         and change exec path from /usr/bin to /usr/local/bin about podman-docker, 
         and exclude podman-remote.1.gz from podman-remote rpm


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p03
changelog:
  - Type:cves
  - ID: CVE-2024-9676
        CVE-2024-9675
        CVE-2024-9407
        CVE-2024-9341
  - SUG:NA
  - DESC:Fix CVE-2024-9676, CVE-2024-9675, CVE-2024-9407, CVE-2024-9341


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: huayadong <huayadong@kylinos.cn> - 123-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#243579]
  - SUG:  NA
  - DESC: add Patch1:polkit-123-kylin-add-10-shutdown.rules-restrict-reboot-and-shutdown.patch


author: huayadong <huayadong@kylinos.cn> - 123-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#260533]
  - SUG:  NA
  - DESC: add Patch2:polkit-123-kylin-fix-prompt-no-chinese.patch


author: tianyunnuan<tianyunnuan@kylinos.cn> - 123-1.p03
changelog:
  - Type:cves
  - ID:CVE-2025-7519
  - SUG:NA
  - DESC: add patch backport-CVE-2025-7519-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch
          add patch polkit-123-kylin-fix-prompt-no-chinese.patch


author: songliyang <songlyang@kylinos.cn> - 0.123-4.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100 Patch101 to fix BUG#243579 and BUG#260533. Author: huayadong
          3.Backport Patch102 to fix BUG#499255. Author: zhoukangyu


author: houhongxun <houhongxun@kylinos.cn> - 23.12.0-7.p03
changelog:
  - Type: cves
  - ID:   [Task#549531]
  - SUG:  NA
  - DESC: fix CVE-2025-43718 and CVE-2025-52885
          fix conflicting man documents problem


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p01
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: update to 15.17 (fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p02
changelog:
  - Type: updates
  - ID: [BUG#556223],[BUG#546389]
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2025-8713, CVE-2025-8714


author: liuying <liuying03@kylinos.cn> - 15.18-1.p01
changelog:
  - Type: cves
  - ID: CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: lipengyu <lipengyu@kylinos.cn> - 3.7.1-2.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-10.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p01
changelog:
  - Type: Update
  - ID:   [TASK#425199]
  - SUG:  NA
  - DESC: 
  - Add loongarch defalut machine type in machine map and fix qemu-iotest error
  - enable spice for aarch64
  - add phytium cpu models ft-2000+ ft-S2500 ft-S5000c
  - show virtio nic bandwith as 10Gbps
  - make libvirt support host-model on aarch64
  - Fixed:systemd-detect-virt returns the result qemu, when kvm acceleration is enabled in Loongson architecture.
  - Add support for migration from rhel or openEuler to Kylin
  - Fix acpi hotplug state cause migration failure


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p02
changelog:
  - Type: Update
  - ID:   [TASK#433635]
  - SUG:  NA
  - DESC: Support migration between Phytium different CPU model


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p03
changelog:
  - Type: Bug
  - ID:   [BUG#346607]
  - SUG:  NA
  - DESC: Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'.


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p05
changelog:
  - Type: Update
  - ID:   [BUG#346607][BUG#351085]
  - SUG:  NA
  - DESC: fix vm can not use virtio-gpu with error 'egl-headless is not available'


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p06
changelog:
  - Type: Update
  - ID:   [TASK#433654]
  - SUG:  NA
  - DESC: sync virtcca support patch from euler and fix bug


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p07
changelog:
  - Type: Bugfix
  - ID:   [Bug#346647][Bug#346638]
  - SUG:  NA
  - DESC: fix vm shutdown and reboot issues in loongarch


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p08
changelog:
  - Type: Bugfix
  - ID:   [Bug#398833]
  - SUB:  NA
  - DESC: resolve file conflicts in compatibility testing


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p09
changelog:
  - Type: Bugfix
  - ID:   [Bug#393455]
  - SUB:  NA
  - DESC: hw: Fix bug, multiple default machines caused the qemu-kvm to crash.


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-27.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-2243
  - SUG:  NA
  - DESC: Sync fix CVE-2026-2243 Heap buffer out-of-bounds read in VMDK compressed grain parsing


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 11:8.2.0-27.p13
changelog:
  - Type: cves
  - ID:   CVE-2026-3195 CVE-2026-3196 CVE-2025-11234
  - SUG:  NA 
  - DESC: MAINTAINERS: add me as maintainer to virtio-snd
          virtio-snd: remove TODO comments
          virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
          virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
          virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
          Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 11:8.2.0-27.p14
changelog:
  - Type: cves
  - ID:   CVE-2025-12464
  - SUG:  NA
  - DESC: Sync fix CVE-2025-12464 qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p15
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: malike <malike@kylinos.cn> - 11:8.2.0-27.p16
changelog:
  - Type: Update
  - ID:   [TASK#589851]
  - SUG:  NA
  - DESC: Add support Hygon hct live migration feature


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p17
changelog:
  - Type: cves
  - ID:   CVE-2026-5761
  - SUG:  NA
  - DESC: Fix CVE-2026-5761 virtio-blk: fix zone report buffer out-of-memory


author: peijiankang <peijiankang@kylinos.cn> - 0.9.2-1.p01
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: fix build error caused by disabling decoration_shadows support in qt5-qtwayland


author: Xu Jin <jinxu@kylinos.cn> - 8.0.2-3.p01
changelog:
  - Type:enhancement
  - ID:TASK#372069
  - SUG:NA
  - DESC:Add loongarch support.Fix build error for Kylin V11.


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p02
changelog:
  - Type: update
  - ID  : [TASK#587039]
  - SUG : NA
  - DESC: Patch1002:qtbase-5.15.10-work-around-pyside2-brokenness.patch
          适配pyside2


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#485611]
  - SUG : NA
  - DESC: Patch1003:CVE-2025-5455-qtbase-5.15.patch
          修复CVE-2025-5455


author: lizequan<lizequan@kylinos.cn> - 5.15.10-11.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#504703]
  - SUG : NA
  - DESC: Patch1004:qt5-base-fix-coredump-missing-display-env-in-ssh.patch


author: peijiankang<peijiankang@kylinos.cn> - 5.15.10-11.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#507841]
  - SUG : NA
  - DESC: add sw_64 QT_ARCH to fix kylin-aiassistant build error


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop qt5-ukui-platformtheme-4.10.0.0-ok52k0.18
          upstream commtid:723df8376ab0c104ef9b4e5612fee9012cad4fc9


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: qt5-ukui-platformtheme remove libqt5-gesture-extensions


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#500213]
  - SUG : NA
  - DESC: add Patch05: qt5-ukui-platformtheme-4.10.0.0-kylin-fix-QLabel-Text.patch
          修复AI模块管理界面显示与预期不符配


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: lifeifei <lifeifei@kylinos.cn> 7.2.10-1
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangchaorui <zhangchaorui@kylinos.cn> -3.2.2-152.p01
changelog:
  - Type:cves
  - ID:CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257
  - SUG:NA
  - DESC:fix CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257


author: songliyang <songlyang@kylinos.cn> - 1.4.5-2.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Sync for 4 architectures
          2.Skip part of check test error on sw_64 and aarch64


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: liyunqing <liyunqing@kylinos.cn> - 4.19.3-6.p02
changelog:
  - Type:cves
  - ID:TASK#594565 TASK#594587 TASK#595621 TASK#595973 CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: litianhao <litianhao@kylinos.cn> - 1.2.1-2.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG:NA
  - DESC: 合入sm设备管控补丁
          sane-backends-add-sm-devctl.patch


author: zhubing <zhubing@kylinos.cn> - 1.2.1-2.p01.se.02
changelog:
  - Type: update
  - ID: [TASK#427527] 增加ksaf补丁
  - SUG:NA
  - DESC: 移除sm设备管控代码，合入ksaf devctl补丁
          sane-backends-remove-sm-devctl.patch
          sane-backends-add-ksaf-devctl-hook.patch


author: sunjin <sunjin@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[Bug#290827][Bug#290809][Bug#281275][Bug#292899]
  - SUG:NA
  - DESC: 【安全加固】security-reinforce入库
  -   【V11-B14】【安全加固】【还原中】还原中断，安全加固界面异常 [用例#1365655]
  -   【V11-B14】【安全加固】【安全扫描】编辑用户自定义模板，安全中心闪退 [用例#1365641]
  -   【V11 B12】【安全加固】【交互命令】选择模板-扫描/加固/还原测试 加固模板与加固项不匹配 [用例#989419]
  -   【v11-B14】【安全加固】使用扫描项为所有的自定义模板进行扫描加固后，重启系统，安全加固功能不可用


author: sunjin <sunjin@kylinos.cn> 2.0.0-01
changelog:
  - Type:update
  - ID:[Task#436662][Bug#313077]
  - SUG:NA
  - DESC: 安全加固2.0版本，更新基线描述，v11适配空闲时间锁屏加固项
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   修复了一些自测发现的问题，禁用不必要别名需要执行newaliase


author: sunjin <sunjin@kylinos.cn> 2.0.0-02
changelog:
  - Type:update
  - ID:[Bug#347476][Bug#313077][Bug#348346][Bug#348226]
  - SUG:NA
  - DESC:
  -   【v11 2503】【B09】【需求44508】【uid唯一性检验】关闭uid唯一性检验-uid加固项测试，还原报告中用户名称出现了2次的问题
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   【B09】【41499】【V11-2503】【安全加固】【系统安全】防火墙配置在报告中描述错误
  -   【B09】【41499】【V11-2503】【安全加固】【文件权限】限制日志文件权限，描述错误
  -    未开启三员，root或管理员有安全加固的使用权限； 开启三员，仅root有安全加固的使用权限


author: sunjin <sunjin@kylinos.cn> 2.0.0-03
changelog:
  - Type:update
  - ID:[Bug#349061][Bug#349027][Bug#348813][Bug#348462][Bug#347932][Bug#348879]
  - SUG:NA
  - DESC:
  -   【B09】【41785】【V11-2503】【安全加固】【安全服务】用户登录ftp后访问目录权限正确 加固还原后源文件备注的信息被删除
  -   【B09】【41499】【V11-2503】【安全加固】【安全服务】限制FTP用户登录后能访问的目录加固|还原后的报告描述错误
  -   【V11-2503】【B09】【安全加固】【安全服务】设置SSH安全协议还原后将注释项也删除了
  -   【B09】【41499】【V11-2503】【安全加固】【密码强度】加强口令的密码算法报告描述错误
  -   【V11-2503】【B09】【安全加固】【系统维护】限制仅允许系统管理员进入维护模式，实际加固失败
  -   【V11-2503】【B09】【安全加固】【安全服务】禁止root登录VSFTP，扫描不成功
  -    同步修复密码策略里回文检查参数错误
  -    添加security-reinforce-update-20250521.patch


author: sunjin <sunjin@kylinos.cn> 2.0.0-04
changelog:
  - Type:update
  - ID:[Bug#246503]
  - SUG:NA
  - DESC:
  -   【V11-B07】【安全加固】【系统设置】禁用ctrl+alt+del组合键失败
  -    解决安全热点
  -    删除无用代码initSp3ToSp4IdMap
  -    单元测试覆盖率到达70%
  -    添加security-reinforce-update-20250611.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-05
changelog:
  - Type:bugfix
  - ID:[Bug#368657]
  - SUG:NA
  - DESC:
  -   【V11-2503】【B15】【需求41499】【安全加固】【交互命令】扫描后不加固，再次扫描加固，导出报告按enter键提示核心已转储


author: sunjin <sunjin@kylinos.cn> 2.0.0-06
changelog:
  - Type:TASK
  - ID:[TASK#553765][TASK#543765]
  - SUG:NA
  - DESC:
  -    子 安全编译参数整改 / security-reinforce安全编译参数整改
  -    V10各版本及V11版本安全加固项ssh强加密算法调整
  -    add security-reinforce-update-20251127.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-07
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260428.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-08
changelog:
  - Type: update
  - ID: [TASK#633053]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532237]
  -       修复安全漏洞[KVE-2026-0420][BUG#541241]
  -       dbus管控整改
  -       security-reinforce-update-20260521.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-09
changelog:
  - Type: update
  - ID: [TASK#636621]
  - SUG: NA
  - DESC: 授权不当脚本整改
  -       增强dbus接口调用输入参数的检查
  -       security-reinforce-update-20260530.patch


author: sunjin <sunjin@kylinos.cn> - 2.0.0-10
changelog:
  - Type: update
  - ID: [TASK#646757]
  - SUG: NA
  - DESC: 增加元字符检查
  -       模版导出限制
  -       增加dbus访问白名单
  -       修改数据库权限为640
  -       security-reinforce-update-20260701.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.07
changelog:
  - Type: update
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: 由于内核不支持中文,将代码中的中文更改成英文
  -     add patch: security-switch-add-en-translation.patch


author: chengang <chengang@kylinos.cn> - 1.3.1-1.se.08
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      security-switch-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.09
changelog:
  - Type: update
  - ID: [TASK#379847]
  - SUG: NA
  - DESC: kasf compatible
  -     add patch: security-switch-2501-compatible01.patch


author: litianhao <litianhao@kylinos.cn> - 1.3.1-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       security-switch-add-license.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#457138]
  - SUG: NA
  - DESC: 对于security-switch命令的新参数需求 变更产品化版本
  -    security-switch-new-parameter-20250508.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653]
  - SUG: NA
  - DESC: 更新security-switch命令的help信息和关闭状态时get的返回值（none -> off）
  -	  security-switch-new-help-info.patch
  -	修复调用reboot命令执行错误的问题[BUG#352649][BUG#352653]
  -	  security-switch-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: bugfix 
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -       无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -         security-switch-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: bugfix 
  - ID: NA
  - SUG: NA
  - DESC: 修复缺少此设置将使系统失去安全防护，极大增加系统安全风险提示的问题,桌面bug#360683
  -	  -- security-switch-fix-error-with-missing-prompt-message.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#468603]
  - SUG: NA
  - DESC: 修改安全模式切换到off状态时的提示[BUG#468603]
  -         security-switch-modify-security-mode-to-off-tips.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         security-switch-add-dbus-control-yaml-file.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-7
changelog:
  - Type: bugfix
  - ID: [BUG#639535][BUG#639517]
  - SUG: NA
  - DESC: 修复dbus管控策略宽松和命令行注入的漏洞[KVE-2026-0730][KVE-2026-0731]
  -	  security-switch-fix-dbus-conf-loose-and-command-line-injection.patch


author: mengchaoming <mengchaoming@kylinos.cn> - 2:4.14.3-1.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch:支持香港繁体中文	 	 
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.01
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
  - add patch: kylin-shadow-add-user-UID-unique.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.02
changelog:
  - Type:update
  - ID:[BUG#241779]
  - SUG:NA
  - DESC: 【uid唯一性检验】uid唯一性提示语为英文
  - add patch: kylin-shadow-fix-zh_CN-po-0001.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-15.p05
changelog:
  - Types:bugfix
  - ID:BUG#500923
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-16.p05
changelog:
  - Type:cve;bugfix
  - ID:[BUG#585405]
  - SUG:NA
  - DESC: fix CVE-2025-69421, CVE-2026-22796, CVE-2026-28388, CVE-2026-28389
          allow debuginfo to be installed alone without pulling in the debugsource package


author: litianhao <litianhao@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [TASK#443853] 新增产品化功能 修复产品化功能BUG
  - SUG: NA
  - DESC: 优化sm授权机制，使用scene的接口控制授权
  -       sm-enhancement-optimize-authorize.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-04
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 优化sm授权进程，添加进程时，自动添加自保护例外放行
  -       sm-enhancement-add-self-protect-exception.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-05
changelog:
  - Type: update
  - ID: [TASK#468477]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-06
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 网卡管控-普通用户修改细粒度网卡策略无失败提示
  -       sm-enhancement-fix-common-user-no-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-07
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 修改普通用户设置细颗粒度网卡策略失败提示信息
  -       sm-enhancement-update-common-user-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-08
changelog:
  - Type: update
  - ID: [BUG#377853]
  - SUG: NA
  - DESC: 解决sm-authorize取消授权后无法切换strict模式
  -       sm-enhancement-fix-uninstall-sm-switch-strict-failed.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-09
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -       sm-enhancement-add-sm-authorize-sync-exception.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-10
changelog:
  - Type: update
  - ID: [BUG#382501]
  - SUG: NA
  - DESC: 修复remove pvid接口调用失败的问题
  -       sm-enhancement-fix-devctl-perm-when-remove-pvid.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 服务开机启动时，调用add_inf_policy add_device_policy add_usb_policy接口失败
  -       sm-enhancement-fix-return-incorrect-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-12
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 修改一处遗漏的返回值处理逻辑
  -       sm-enhancement-optimize-interface-return-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-13
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA
  - DESC: 同步桌面Bug#434735修复补丁
  -       sm-enhancement-sync-desktop-bug-434735.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-14
changelog:
  - Type: NA
  - ID: [TASK#589931]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-resolve-hotspot-issue.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: cenhuilin <cenhuilin@kylinos.cn> - 24.01-7.p03
changelog:
  - Type: cves
  - ID: [BUG#546429]
  - SUG: NA
  - DESC:1.fix CVE-2025-57275: lib/nvmf: limit number of NVMe-oF registrants when updating PTPL info
         2.nvmf/rdma: Shorten trace name of request state


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: duanhongtao <duanhongtao@kylinos.cn> - 5.9.10-4.p05
changelog:
  - Type:CVE
  - CVE:CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: zhangyao <zhangyao108@huawei.com> - 255-32
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p01
changelog:
  - Type: update
  - ID:   [TASK#424801]
  - SUG:  NA
  - DESC:  1. systemd-udev package contain kernel-install
           2. add Patch: 0001-Change-the-NTP-server.patch
              Change NTP server.
           3. add Patch: 0001-basic-add-missing-PIDFS-magic.patch
              Fix missing PIDFS magic issue when compile
           4. add Patch: 0001-basic-add-missing-BCACHEFS-magic.patch
              Fix missing BCACHEFS magic issue when compile
           5. Add 0001-rc-local-change-order-after-network-online.target.patch
              Change rc-local order after network-online.target, fix service or process start failed issue


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p02
changelog:
  - Type: update
  - ID:   [TASK#447315]
  - SUG:  NA
  - DESC: Revert patch to fix test performance regression


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p03
changelog:
  - Type: update
  - ID:   [TASK#350099]
  - SUG:  NA
  - DESC: 1. Add zombie process recycling module component
          2. Add process monitoring, process self-healing and automatic pull up


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-34.p05
changelog:
  - Type: update
  - ID:   [TASK#568069]
  - SUG:  NA
  - DESC: fix CVE-2026-4105
          fix CVE-2026-29111
          fix CVE-2026-40226


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: Yu Peng <yupeng@kylinos.cn> - 5.0-3.p03
changelog:
  - Type:bugfix
  - ID:task#641921
  - SUG:NA
  - DESC:Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-80.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: huayadong <huayadong@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type: update
  - ID:   [TASK#327372]
  - SUG:  NA
  - DESC: add tigervnc-1.13.1-kylin-vncpasswd-add-pwquality-check-and-translation.patch
  	add tigervnc-1.13.1-kylin-add-pwquality-check-and-translation.patch
  	add BuildRequires:libpwquality-devel  Requires:libpwquality


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决可信启动与tpm通信失败问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tabrmd-communication-with-kytrust-error.patch


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.02
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决tpm dbus服务读写设备文件错误问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tpm-wirte-device-failed.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.8
          upstream commitid: e244d03cbbaa55bff8777acce8145a0b09f20f6a


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.11
          upstream commitid: 8f91b3ac9f0c054dffc5d12daf0ae419909d1d54


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch02: ukui-biometric-auth-4.10.0.0-kylin-add-KylinUserDatePtr-for-root.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: huayadong<huayadong@kylinos.cn> 4.10.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: delete Requires: kf5-bluez-qt-devel kf5-bluez-qt


author: peijiankang<peijiankang@kylinos.cn> 4.10.1.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add ukui-bluetooth-add-copyright.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.1.0-ok3.2k0.10


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-bluetooth-4.10.1.0-ok3.2k0.14
          upstream commtid:1dddb5543c1a61b7a19a412f73da010effd59666


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p30
changelog:
  - Type: bugfix
  - ID  : [BUG#353727]
  - SUG : NA
  - DESC: standard user shouldn't change other users' type、password、groups


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p32
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add kui-control-center-4.10.0.0-kylin-fix-display-widget.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p33
changelog:
  - Type: bugfix
  - ID  : [BUG#353362]
  - SUG : NA
  - DESC: add Patch30:ukui-control-center-4.10.0.0-kylin-change-checkUserPwd-rule.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p34
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-add-copyright-head.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p36
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-fix-SIGABRT-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p37
changelog:
  - Type: bugfix
  - ID  : [BUG#370881]
  - SUG : NA
  - DESC: fix opt bind prompt message size and position


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p39
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-add-kylin-mfa-help-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p40
changelog:
  - Type: bugfix
  - ID  : [BUG#396007]
  - SUG : NA
  - DESC: add ukui-control-center accountinfo user guide


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p41
changelog:
  - Type: bugfix
  - ID  : [BUG#448987]
  - SUG : NA
  - DESC: add Patch39: ukui-control-center-4.10.0.0-kylin-changeUserPwd-add-QMessageBox-warning.patch
  	changeUserPwd add QMessageBox warning.
          用户修改自身密码结束后添加弹窗，显示pam回显。


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p42
changelog:
  - Type: update
  - ID  : [TASK#553947]
  - SUG : NA
  - DESC: add Patch40: 0001-ukui-control-center-update-license-for-v11-2603.patch
  	update license for v11 2603


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p43
changelog:
  - Type: bugfix
  - ID  : [BUG#468605][TASK#553947]
  - SUG : NA
  - DESC: BUG#468605:get os_version from kylin-system-version.conf
          TASK#553947:update license for v11 2603(Revised)


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p44
changelog:
  - Type: bugfix
  - ID  : [TASK#525485][BUG#471359]
  - SUG : NA
  - DESC: remove ukui-search requires and add theme transparency value


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p45
changelog:
  - Type: update
  - ID  : [TASK#553999]
  - SUG : NA
  - DESC: add Patch44: 0001-ukcc-show-activation-status-dialog-when-click-serial.patch
  	show activation status dialog when click service serial number


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p46
changelog:
  - Type: update
  - ID  : [TASK#554089]
  - SUG : NA
  - DESC: add Patch45: 0001-ukcc-show-customer-when-locally-activated.patch
  	show customer info when system is locally activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p47
changelog:
  - Type: bugfix
  - ID  : [BUG#478205]
  - SUG : NA
  - DESC: Add UserName reading when dbus interface RealName is empty.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p48
changelog:
  - Type: bugfix
  - ID  : [BUG#477075]
  - SUG : NA
  - DESC: support password history account protection feature when change other users' password


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p50
changelog:
  - Type: bugfix
  - ID  : [BUG#481277][BUG#482067]
  - SUG : NA
  - DESC: show register number when system activated
          don't show activate button when system activated on main about page


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p51
changelog:
  - Type: bugfix
  - ID  : [BUG#483057]
  - SUG : NA
  - DESC: fix the check when system activation is expired


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p52
changelog:
  - Type: cves
  - ID  : [TASK#589295]
  - SUG : NA
  - DESC: fix KVE-2026-0104, encode password when used as command argument


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p52.01
changelog:
  - Type: cves
  - ID  : KVE-2026-0405 KVE-2026-0406
  - SUG : NA
  - DESC: fix KVE-2026-0405 and KVE-2026-0406


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p52.02
changelog:
  - Type: bugfix
  - ID  : [TASK#625879][Bug#500581][BUG#500383]
  - SUG : NA
  - DESC: update user license info
          Fixed defaultapp invalid when clicked reset button
          Fixed excessive password prompts when adding group members


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p52.07
changelog:
  - Type: update
  - ID  : NA
  - SUG : NA
  - DESC: add Patch60 Patch61 Patch62 Patch63 Patch64 Patch65
          hardening dbus interface


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p52.08
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add Patch66
          hardening dbus interface for polkit


author: douyan<douyan@kylinos.cn> 4.10.3.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch ukui-file-metadata-4.10.3.1-kylin-change-lib-to-lib64.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.3.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.3.1-ok4k0.3


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.1-1.p04
changelog:
  - Type: compile
  - ID  : [TASK#620945]
  - SUG : NA
  - DESC: rebuild for all arch and add copyright info


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.1-1.p05
changelog:
  - Type: update
  - ID  : [TASK#637941]
  - SUG : NA
  - DESC: 优化ukui-file-metadata对文件头参数的安全校验，增强ukui-file-metadata数据处理能力


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch6: ukui-greeter-4.10.0.0-kylin-remove-power-Button.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#294017]
  - SUG : NA
  - DESC: Patch7: ukui-greeter-4.10.0.0-kylin-fix-the-font-too-large.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-greeter-4.10.0.0-ok5.1k0.7
          upstream commtid:ba4854458f270994721d1348c774b8b41d2f8b0f


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#334467] [BUG#292059]
  - SUG : NA
  - DESC: fix greeterwindow and loginwindow translate bugs


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add ukui-greeter-4.10.0.0-fix-sonarqube-security-hotspots.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: delete file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: cves
  - ID  : KVE-2026-05100 KVE-2026-05102
  - SUG : NA
  - DESC: fix ukui-greeter KVE-2026-05100 and KVE-2026-05102


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: ukui-input-gather-4.1.0.0-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#289223]
  - SUG : NA
  - DESC: add ukui-input-gather-4.1.0.0-fix-coredump-about-ukuiinputgatherclient.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok1k0.10
          upstream commitid: 1a9e6bbc2ee562d89d4cebfcc5fb2244b3e35513


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#504657]
  - SUG : NA
  - DESC: add Patch03:ukui-media-4.10.0.0-kylin-add-check-for-display.patch
          添加DISPLAY检测，修复KVE-2026-0320


author: huayadong<huayadong@kylinos.cn> 4.10.2.12-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-kylin-remove-s3-s4-chang-poweroff-reboot.patch


author: peijiankang<peijiankang@kylinos.cn> 4.10.2.12-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#288929]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-add-root-to-listCachedUsers.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.2.12-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-menu-4.10.2.12-ok0.2k0.9
          upstream commtid:3148deafc141224257df8dd9c5e67a37d8290e3b


author: huayadong <huayadong@kylinos.cn> - 4.10.2.12-1.p05
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: add patch4:ukui-menu-4.10.2.12-chnage-uninstall-rule.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.2.12-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#344202]
  - SUG: NA
  - DESC: add patch5:fix-chinese-translation-problem.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#347730] [BUG#347734]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-add-3adm.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#353097]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-update-3adm-appinfo.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#366591]
  - SUG : NA
  - DESC: add Patch08:ukui-menu-4.10.2.12-kylin-remove-kylin-process-manager.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#429765]
  - SUG : NA
  - DESC: remove argv --help-all
  	add Patch09:ukui-menu-4.10.2.12-kylin-remove-argv-help-all.patch
  	删除无用参数 --help-all


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p10.01
changelog:
  - Type: update
  - ID  : [TASK#636669]
  - SUG : NA
  - DESC: 移除ReloadSecurityConfig()废弃方法，减少dbus接口暴露，保障ukui-menu功能正常


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-notification-4.10.1.5-ok0.1k0.6
          upstream commtid:c54c60447b72e60f90fb0e80cfc9ceacc8d6177e


author: mengchaoming<mengchaoming@kylinos.cn> - 4.10.1.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#334491]
  - SUG : NA
  - DESC: add Patch2:ukui-notification-4.10.1.5-add-zh_HK.ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-fix-ukui-notification-server-no-quit-when-ukui-session-quit.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-kylin-fix-ukui-notification-server-coredump-SIGABRT-when-logout.patch


author: houhongxun<houhongxun@kylinos.cn> 4.10.4.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix ukui control center icon showing twice problem


author: huayadong<huayadong@kylinos.cn> 4.10.4.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch3: ukui-panel-4.10.4.3-kylin-remove-s3-s4-reboot-poweroff.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-panel-4.10.4.3-ok0.1k0.11
          upstream commtid:9f40cceb1001001c1a767ce4335f31edf6f90a07


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [BUG#294119]
  - SUG : NA
  - DESC: add ukui-power-manager-4.10.0.0-kylin-remove-ukui-control-center-Suspend-and-Hibernate-and-wakeUpDisplay-no-passwd.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: ukui-power-manager-kylin-4.10.0.0-hide-shutdown.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-power-manager-4.10.0.0-ok1.34k2.0
          upstream commtid:cc25d6a66a8e679daef437d0f5d243116752e994


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#636667]
  - SUG : NA
  - DESC: 增强ukui-power-manager功能，添加参数校验，保障ukui-power-manager功能正常


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#363325][BUG#369099]
  - SUG : NA
  - DESC: add Patch14:ukui-screensaver-4.10.0.0-kylin-remove-black-drawPath.patch
          add Patch15:ukui-screensaver-4.10.0.0-kylin-change-message-rule.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch16: ukui-screensaver-4.10.0.0-kylin-remove-AuthDialog-onChangeUser.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-fix-ukui-screensaver-backend-coredump-in-vncdesktop.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p24
changelog:
  - Type: bugfix
  - ID  : [BUG#498405]
  - SUG : NA
  - DESC: Patch25: ukui-screensaver-4.10.0.0-add-dbus-signal-lock-for-session-tools.patch
          修复从电源管理器锁定屏幕没有lock dbus信号发出问题


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-add-application-with-DISPLAY.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#349212]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-ukui-menu-empty.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.13.0-1.p05
changelog:
  - Type:update
  - ID:[Task#482359]
  - SUG:NA
  - DESC: add ukui-search-4.10.13.0-kylin-remove-sensitive.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223][BUG#369841]
  - SUG : NA
  - DESC: update ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch
          add ukui-search-4.10.13.0-kylin-ukui-search-app-data-service-sql-exec-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370275]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-GetDesktopFileByPid-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.13.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [TASK#601833]
  - SUG : NA
  - DESC: Patch10: ukui-search-4.10.13.0-kylin-correction-of-ambiguous-description.patch
          修复字典文件的错误字符


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-save-param-SIGABRT.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#291269]
  - SUG : NA
  - DESC: ukui-settings-daemon-4.10.0.0-fix-targetBrightness-to-100.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: add Patch5:ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.18k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch
          add ukui-settings-daemon-4.10.0.0-add-copyright-info.cpp


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#379967]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch
          add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: update
  - ID  : [TASK#635561]
  - SUG : NA
  - DESC: add Patch13:ukui-settings-daemon-4.10.0.0-1-kylin-Remove-the-write-permissions-of-files-and-folders.patch
          安全性提升


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: update
  - ID  : [TASK#637935]
  - SUG : NA
  - DESC: 新增基于inode的白名单校验机制，增强ukui-settings-daemon D-Bus访问控制。


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-sidebar-4.10.3.5-ok0.3k0.10
          upstream commtid:9b2175d39a58d36e5c2f7f05bade021dacd7c00a


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-fix-ukui-sidebar-coredump-SIGABRT-when-logout.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.3.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-change-kylin-screenshot-args.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: houzhiwei <houzhiwei@kylinos.cn> - 1.17.1-16.p01
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p02
changelog:
  - Type:update
  - ID:[BUG#238630][BUG#238129]
  - SUG:NA
  - add Patch0011:usbguard-parse.patch
  - DESC: 238129 【V11 B02】【龙芯】【USBGuard】USB设备及策略管理交互模式界面展示不友好
  - DESC: 238630 【V11 B02】【USBGuard】设备已有拦截策略，再次手动添加放行策略不生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p04
changelog:
  - Type:update
  - ID:[BUG#242968][BUG#245015]
  - SUG:NA
  - add Patch0012: usbguard-config.patch
  - DESC: 242968 【V11-B05】【安全SDK】全部设备管控策略查询-授权提示转储
  - DESC: 245015 【V11-B06】【安全SDK】设备授权取消授权大概率转储，usbguard服务起不来
  - 去除usbguard-selinux包,策略已在selinux-policy统一管理


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p05
changelog:
  - Type:update
  - ID:[BUG#242972]
  - SUG:NA
  - add Patch0013: usbguard-format.patch
  - DESC: 242972 【V11 B05】【USBGuard】导入错误格式策略，提示核心已转储
  - DESC: 243051 【V11 B05】【USBGuard】放行部分USB接口提示核心已转储
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p06
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0014:     usbguard-restore.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p07
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0015:     usbguard-restore2.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p08
changelog:
  - Type:update
  - ID:[BUG#310899]
  - SUG:NA
  - add Patch0016:     usbguard-hub.patch
  - DESC: 306393 【V11-B17】【USBGuard】root hub 1.0和2.0设备设置永久拦截和放行提示核心已转储
  - DESC: 310899 【V11-B18】【USBGuard】在设备策略管理中，修改策略失败，策略被删除


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p09
changelog:
  - Type:update
  - ID:[BUG#247155/347856]
  - SUG:NA
  - add Patch0017: usbguard-import.patch
  - DESC: 247155 【V11-B07】【安全SDK】通过设备信息删除设备管控策略，删除serial名字较长的设备管控策略失败
  - DESC: 347856 [V11 2503][B09][需求41823][USBGuard]管理设备策略-导入放行策略使被拦截U盘放行，导入拦截策略覆盖现有策略后没有及时生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p10
changelog:
  - Type:update
  - ID:[任务#479543]
  - SUG:NA
  - add Patch0018: usbguard-idnull.patch
  - DESC: 479543 【V11 2503】修改usbguard默认策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p11
changelog:
  - Type:update
  - ID:[BUG#383547]
  - SUG:NA
  - add Patch0019: usbguard-setdev.patch
  - DESC:[出厂测试][v11-2503][B19][需求42057][USBGuard]管理已连接设备,设备状态为拦截,修改为永久拦截,未生成策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p12
changelog:
  - Type:update
  - ID:[BUG#391973]
  - SUG:NA
  - add Patch0020: usbguard-hub2.patch
  - DESC: 391973 [同源测试][v11-2503][B20][需求42057]开启usbguard后，bmc的虚拟鼠标和键盘被拦截


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: litenglong <litenglong@kylinos.cn> - 2.39.1-16.p01
changelog:
  - Type:update
  - ID:[task#424805]
  - SUG:NA
  - DESC:
     author:  litenglong <litenglong@kylinos.cn>
     support enable-raw
     sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
     9400-set-locale-for-supporting-utf-8.patch

     author: shenzhongwei <shenzhongwei@kylinos.cn> -
     fix loongarch test error
     fix_loongarch_test_error.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 2.39.1-16.p02
changelog:
  - Type:bugfix
  - ID:[TASK#542963]
  - SUG:NA
  - DESC:libblkid: (xfs) external log: check for ceph_bluestore


author: zhangtao <zhangtao@kylinos.cn> - 2.39.1-16.p04
changelog:
  - Type:cves
  - ID:CVE-2026-27456
  - SUG:NA
  - DESC: backport to fix symlink traversal vulnerability in loop device setup


author: herengui <herengui@kylinsec.com.cn> - 7.4.3-5
changelog:
  - Fix CVE-2026-34475: Fix http/1.1 absolute form dissection edge case leading to cache poisoning or authentication bypass


author: lijian <lijian01@kylinos.cn> - 2:9.0.2092-15.p01
changelog:
  - Type:update
  - ID:[task#424803]
  - SUG:NA
  - DESC:1) 移植敏感词修改和zh_HK繁体字支持的补丁
  -      2) 移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      3) remove discriminatory language


author: houzhiwei <houzhiwei@kylinos.cn> - 2:9.0.2092-18.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-53905 and CVE-2025-53906
  - SUG:NA
  - DESC:1.fix some tests failed. 2.fix CVE-2025-53905 and CVE-2025-53906


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-32.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: update to 9.0.2092-33 and fix CVE-2026-42307 CVE-2026-44656 CVE-2026-45130


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p02
changelog:
  - Type:update
  - ID:[#bug617491]
  - SUG:NA
  - DESC: fix CVE-2026-43961 CVE-2026-46483 CVE-2026-47162 CVE-2026-47167 CVE-2026-52858 CVE-2026-52859 CVE-2026-52860


author: zuo <zuohongsheng@kylinos.cn> - 1:4.4.14-1.p01
changelog:
  - Type:CVE
  - CVE:[task#597029]
  - SUG:NA
  - DESC: update to 4.14, and backport add-HK-complex-Chinese-character.patch


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.01
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083, CVE-2024-9632


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.04
changelog:
  - Type: CVE
  - ID:   [BUG#605083]
  - SUG:  NA
  - DESC: fix CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


