# changelog

author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p05
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p06
changelog:
  - Type: update
  - ID:   [TASK#592121]
  - SUG:  NA
  - DESC: Rebuild for wirshark update from 3.6.14-12.p01 to 4.4.10-3.p01


author: zhangxianjun <zhangxianjun@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type:update
  - ID:[TASK#425066]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: lipengyu <lipengyu@kylinos.cn> - 2.11.9-2.p01
changelog:
  - Type: update
  - ID: [TASK#424807]
  - SUG:NA
  - DESC:add patch
         0001-kylin-compat-support-V1.0-for-libxml2.patch
         0002-kylin-compat-support-V1.1-for-libxml2.patch


author: zuo <zuohongsheng@kylinos.cn> - 2.11.9-3.p03
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: yueyaoqiang <yueyaoqiang@kylinos.cn> -20241017-1.p01
changelog:
  - Type:update
  - ID:[Task#424811]
  - SUG:NA
  - DESC:add Corigine network interface card flash-boot-23.10-2.bin


author: zhangtao <zhangtao@kylinos.cn> -20241017-1.p03
changelog:
  - Type: update
  - ID: [Bug#343592]
  - SUG: NA
  - DESC: update 90-nfp-firmware-agilio-sriov-firmware.conf


author: yueyuankun <yueyuankun@kylinos.cn> - 20241017-1.p05
changelog:
  - Type:cves
  - ID:[Task#536541]
  - CVE:CVE-2024-36350 CVE-2024-36357
  - SUG:NA
  - DESC:Fix CVE-2024-36350 CVE-2024-3635


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.20.2-2
changelog:
  - Set TERM to xterm-256color
  - use https://github.com/mate-desktop/mate-terminal/commit/4f89d21
  - fix rhbz https://bugzilla.redhat.com/show_bug.cgi?id=1517870


author: longcheng <longcheng@kylinsec.com.cn> - 1.22.1-5
changelog:
  - KYOS-B: add kylin mask and part of translations
  - KYOS-T: Fix translation errors in help manual.
  - KYOS-B: set text preview content (#24148)
  - KYOS-B: add two color theme and change the default color theme to Dracula Dark (#30872)
  - KYOS-B: select the default charset by locale(#49592)


author: huayadong <huayadong@kylinos.cn> - 1.22.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#238335]
  - SUG:  NA
  - DESC: Patch1009: mate-terminal-1.22.1-kylin-remove-Reset.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.22.1-5.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#240137]
  - SUG:  NA
  - DESC: Patch1010: mate-terminal-1.22.1-fix-help-display-error.patch


author: Shixiong Ou <oushixiong@kylinos.cn> - 24.0.5-1.p02
changelog:
  - Type:bugfix
  - ID:TASK#378129
  - SUG:NA
  - DESC:add upstream orcjit patch and support loongarch64 orcjit


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: weiyucheng<weiyucheng@kylinos.cn> - 24.0.9-1
changelog:
  - Type: update
  - ID: [TASK#439666]
  - SUG: NA
  - DESC: change package name from docker-ce to moby && init package moby-24.0.9
          fix CVE-2024-29018
          fix CVE-2024-41110
          provides docker && conflicts docker-engine moby-engine


author: weiyucheng<weiyucheng@kylinos.cn> - 24.0.9-1.p01
changelog:
  - Type: update
  - ID: [TASK#468343]
  - SUG: NA
  - DESC: resolve secure compilation issues and add kylin notice to NOTICE file


author: weiyucheng <weiyucheng@kylinos.cn> - 24.0.9-1.p04
changelog:
  - Type:CVE
  - ID:CVE-2026-34040
       CVE-2026-33997
  - SUG:NA
  - DESC:fix CVE-2026-34040, CVE-2026-33997


author: gaihuiying <eaglegai@163.com> - 2:0.94-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if detach the GTK package from the master package
         modify changelog  to add epoch:2


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: chenyanpanHW <chenyanpan@huawei.com> - 4.9.3-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6842.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6843.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: lipengyu <lipengyu@kylinos.cn> - 6.4-10.p01
changelog:
  - Type:update
  - ID:[Task#327352]
  - SUG:NA
  - DESC:ncurses-support-loongarch&&enable relocation for kylin


author: lijian <lijian2@kylinos.cn> - 0.3.0-1
changelog:
  - Type:update
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:Upgrade to 0.3.0
         Support to deploy, extend OS & k8s clusters in VM & PXE for generalos
         Delete housekeeper


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p01
changelog:
  - Type:bugfix
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:1.Fix incorrect bus type in aarch64, from ide to scsi. IDE is not supported in aarch64.
         2.Adjust the cloud-init service start sequence. Some services are not started.
           After adjustment, the service starts normally.
         3.Add the rpm package storage path to the http service buffer, so that they can be obtained after instance starts.
         4.Fix the bug of resetting existing instances during extension in aarch64.
           Some key configurations have been changed, resulting in OpenTofu rebuilding instances.
         5.Support loongarch64 for generalos.


author: liukuo <liukuo@kylinos.cn> - 0.3.0-1.p02
changelog:
  - Type:update
  - ID:[TASK#331942]
  - SUG:NA
  - DESC:Add go test files.
         Add require packages libxslt and kubernetes-client for nkd.
         Delete housekeeper and upgrade command.
         Modify containerd runtime configuration and copy cni files for nkd.


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p03
changelog:
  - Type:update
  - ID:[TASK#379139]
  - SUG:NA
  - DESC:Change the dependency package management method from go vendor to go mod.


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p05
changelog:
  - Type:update
  - ID:[TASK#416005]
  - SUG:NA
  - DESC:Remove OpenStack authentication information from the configuration file template


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yaoxin <yao_xin001@hoperun.com> - 4.1.114-1
changelog:
  - Update to 4.1.114
    * Validate HTTP Method (#14280)
    * Release AdaptiveByteBuf when ownership could not be transfered. (#14285)
    * Make arenas reuse their last chunk more aggressively (#14291)
    * Only add Magazine to Set if we can ensure its removed again (#14292)
    * Ensure Chunk will not leak if init of AdaptiveByteBuf fails for whatever reason (#14295)
    * Correctly release one-off allocated chunks (#14302)
    * Ensure pooled memory is released when AdaptivePoolingAllocator is GC'ed (#14304)
    * Slices / duplicates of AdaptiveByteBuf must not escape the rootParent (#14310)
    * Fix sizeBucket bug in AdaptivePoolingAllocator (#14311)
    * AdaptiveByteBufAllocator: More strict reference counting for chunks (#14322)
    * Ensure we not store the DnsQueryContext for later removal when we couldnt obtain a query id (#14326)
    * Reduce memory fragmentation (#14333)
    * Properly free magazine chunks and avoid orphaned magazines (#14334)
    * Magazines must be freed under the expand lock (#14336)
    * Release message before failing promise when multiple requests are written while upgrade is in progress. (#14342)
    * Allow to reuse more then one session per host / port mapping (#14356)
    * Ensure writes will not fail when triggered after receiving UpgradeEvent.UPGRADE_SUCCESSFUL (#14362)
    * Refactor DnsNameResolver to be able to use different strategies when it comes to creating Channels for queries. (#14374)
    * DnsNameResolver: allow users to skip bind() during bootstrap (#14375)
    * DnsResolverBuilder methods should make it clear that these are for DatagramChannel (#14379)


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p01
changelog:
  - Type: update CVE
  - ID:   [TASK#553251]
  - SUG:  NA
  - DESC: 1.Fix CVE-2025-59419
          2.Fix a build error
          3.Remove unused buildrequires: netty-tcnative


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p02
changelog:
  - Type: update
  - ID:   [BUG#468839]
  - SUG:  NA
  - DESC: Update information that CVE-2022-24823 has been fixed while upgrading to 4.1.114


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: chenjian <chenjian@kylinos.cn> - 3.2.1-5.p02
changelog:
  - Type:Task
  - ID:[TASK#648193]
  - SUG: NA
  - DESC: fix OVSDB Python monitors expose UUIDv1 MAC/time data over plaintext


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p01
changelog:
  - Type: bugfix
  - ID: [BUG#334490]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p06
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p07
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p09
changelog:
  - Type: cves
  - ID: CVE-2026-48142 CVE-2026-42055
  - SUG: NA
  - DESC: fix CVE-2026-48142 CVE-2026-42055


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: songliyang <songliyang@kylinos.cn> - 1:20.18.2-7.p01
changelog:
  - Type: updates
  - ID:   [BUG#528049]
  - SUG:  NA
  - DESC: 1.Upgrade to fix followup CVEs:
            CVE-2025-55130 CVE-2025-55131 CVE-2025-55132 CVE-2025-59465
            CVE-2025-59466 CVE-2026-21637 CVE-2026-21710 CVE-2026-21713
            CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 CVE-2026-21717
          2.Fix a build error on sw_64


author: Qiang Wei <qiang.wei@suse.com> - 2.2.1-1
changelog:
  - Update to version 2.2.1.
    * Remove 0001-bash-Fix-nvme-completion.patch, it is fixed in upstream.
    * backport upstream patch: Bash completion: move global declare into function.


author: kouwenqi <kouwenqi@kylinos.cn> - 2.8-1.p01
changelog:
  - Type: bugfix
  - ID: [TASK#631623]
  - SUG: NA
  - DESC: do not issue warning when nvme_core module is not loaded


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:update the sshd_config and ssh_config, add the auto control
          mode scripts, add auto generate sm2 hostkey when start sshd service,
          fix ssh-keyscan can't get host pubkey issue


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: jiaocong <jiaocong@kylinos.cn> - 9.6p1-5.p07.02.se.01
changelog:
  - Type:update
  - ID:TASK#608701
  - SUG:NA
  - DESC:add comment for StrictScpCheck option in sshd_config.


author: liuming <liuming@kylinos.cn> - 9.6p1-5.p07.04.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p01
changelog:
  - Type: update
  - ID:TASK#424671
  - SUG:NA
  - DESC: add tlcp protocol patch, add tls rfc8998 patch , add zuc algorithm
          patch, add random drbg satisfy the GM/T 0105-2021 implementation,
          add passout and cipher parameter of ecparam apps,
          add Add-support-for-Zhaoxin-SM2-3-4-RNG.patch,
          fix some issues for the base openssl version and
          adapter the kylin old version cert


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:3.0.12-15.p10
changelog:
  - Type:cves
  - ID:TASk#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160
             CVE-2025-69418
             CVE-2025-69419
             CVE-2025-69420
             CVE-2025-69421
             CVE-2026-22795
             CVE-2026-22796


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p12
changelog:
  - Type:cves
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-31790,CVE-2026-31789,CVE-2026-28390,
  	   CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p13
changelog:
  - Type:cves
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-34182,
             CVE-2026-42766,CVE-2026-42767,CVE-2026-42770,CVE-2026-45445,
             CVE-2026-45446,CVE-2026-45447


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p01
changelog:
  - Type:update
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:Add providers of libvirt, openstack and template 
         support LoongArch64


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix file lock type compatibility on sw64 by using write lock only


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: shaojiansong <shaojiansong@kylinos.cn> - 20230518-1.p02
changelog:
  - Type:bugfix
  - ID:[TASK#234560]
  - SUG:NA
  - DESC:Add kylin-11.0.xml and kylin-hostos-11.0.xml for recognization of kylinos-v11 on virtmanager


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add peony-share Requires: samba samba-client


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok2k1.3
          upstream commitid: c2238e7f6811fe1e1faa5a9fde637c32b2d785bd


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-fix-peony-share.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#352174]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-add-uncompress-type.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p07.03
changelog:
  - Type: bugfix
  - ID  : [BUG#584613]
  - SUG : NA
  - DESC: reference gvolume object if we used after(rebuild after peony fix)


author: mengchaoming <mengchaoming@kylinos.cn> - 0.80-10.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch
  - add patch: 0001-kylin-add-zh-HK-po.patch
  - 修改zh_HK.po文件的“户”为“戶”: kylin-modify-zh_HK_po.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 0.80-10.p01.se.01
changelog:
  - Type:update
  - ID:[Task#329161]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  - add patch: passwd-0.80-add-security-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 0.80-10.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#383361]
  - SUG:NA
  - DESC: passwd去除对libkysec包的依赖,改用dlopen方式
  - add patch: passwd-remove-libkysec-require.patch


author: zhangxingrong <zhangxingrong@uniontech.cn> - 0.11.7-16
changelog:
  - fix logging handlers imports
  - use ruby code instead of system binaries
  - fix running pcsd from git


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.8-1
changelog:
  - Update package to version 0.11.8
  - Updated pcs-web-ui to 0.1.20
  - Adjust OCF metadata processing to support the latest pacemaker change


author: bixiaoyan <bixiaoyan@kylinos.cn> - 0.11.9-1
changelog:
  - Update package to version 0.11.9
  - Update pcs-web-ui to 0.1.22
  - Using pcs resource delete | remove to delete resources representing remote and guest nodes.


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: chenyanpanHW <chenyanpan@huawei.com> - 2.38-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-42496-and-CVE-2026-42497.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 3.02-1.p01
changelog:
  - Type:cves
  - Id:CVE-2026-42496 and CVE-2026-42497
  - SUG:CVE-2026-42496 and CVE-2026-42497
  - DESC:fix CVE-2026-42496 and CVE-2026-42497


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: longcheng <longcheng@kylinos.com.cn> - 1.22.2-4
changelog:
  - fix(pluma-utils):Fixed garbled toolTips path in tab page with GB18030 encoding chinese translation


author: peijiankang <peijiankang@kylinos.cn> - 1.22.2-4.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#240263]
  - SUG:  NA
  - DESC: add pluma-1.22.2-cannot-automatically-detect-Chinese-encoding.patch
          add pluma-guide.tar.gz(fix BUG#240720)


author: peijiankang<peijiankang@kylinos.cn> - 1.22.2-4.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add pluma-1.22.2-fix-coredump-about-uri-isnot-exist.patch


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p02
changelog:
  - Type:cves
  - ID: CVE-2025-9566
        CVE-2025-58058
  - SUG:NA
  - DESC:Fix CVE-2025-9566 and CVE-2025-58058, 
         and change exec path from /usr/bin to /usr/local/bin about podman-docker, 
         and exclude podman-remote.1.gz from podman-remote rpm


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p03
changelog:
  - Type:cves
  - ID: CVE-2024-9676
        CVE-2024-9675
        CVE-2024-9407
        CVE-2024-9341
  - SUG:NA
  - DESC:Fix CVE-2024-9676, CVE-2024-9675, CVE-2024-9407, CVE-2024-9341


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: huayadong <huayadong@kylinos.cn> - 123-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#243579]
  - SUG:  NA
  - DESC: add Patch1:polkit-123-kylin-add-10-shutdown.rules-restrict-reboot-and-shutdown.patch


author: huayadong <huayadong@kylinos.cn> - 123-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#260533]
  - SUG:  NA
  - DESC: add Patch2:polkit-123-kylin-fix-prompt-no-chinese.patch


author: tianyunnuan<tianyunnuan@kylinos.cn> - 123-1.p03
changelog:
  - Type:cves
  - ID:CVE-2025-7519
  - SUG:NA
  - DESC: add patch backport-CVE-2025-7519-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch
          add patch polkit-123-kylin-fix-prompt-no-chinese.patch


author: songliyang <songlyang@kylinos.cn> - 0.123-4.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100 Patch101 to fix BUG#243579 and BUG#260533. Author: huayadong
          3.Backport Patch102 to fix BUG#499255. Author: zhoukangyu


author: houhongxun <houhongxun@kylinos.cn> - 23.12.0-7.p03
changelog:
  - Type: cves
  - ID:   [Task#549531]
  - SUG:  NA
  - DESC: fix CVE-2025-43718 and CVE-2025-52885
          fix conflicting man documents problem


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p01
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: update to 15.17 (fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p02
changelog:
  - Type: updates
  - ID: [BUG#556223],[BUG#546389]
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2025-8713, CVE-2025-8714


author: liuying <liuying03@kylinos.cn> - 15.18-1.p01
changelog:
  - Type: cves
  - ID: CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473


author: wangjia <wangjia55@huawei.com> - 42.2.4-1.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:disable the failed tests that caused by BEP to repair binary diffrence


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: lipengyu <lipengyu@kylinos.cn> - 3.7.1-2.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-10.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:2.81.0-1.p02
changelog:
  - Type: Updaets 
  - ID: TASK#504811
  - SUG: NA
  - DESC: fix the problem that the previous patch was not merged


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.16.6-1
changelog:
  - Update package with version 7.16.6
    Prevent leading whitespace in markdown code blocks from being stripped
    Update base.tex.j2 for macro compatibility with newer versions of Pandoc
    Allow including text/x-rst outputs in rst conversion, transition away from text/restructuredtext
    Add support for mistune 3.1.0
    [HTMLExporter] Initialize resources before widget filtering
    Add a toggle to skip the svg encoding of images
    Support configureable width and height of reveal presentations
    Convert coalescese_streams function to CoalesceStreamsPreprocessor


author: openeuler_bot <infra@openeuler.sh> - 7.17.0-1
changelog:
  - Add support for arbitrary browser arguments (version:7.17.0).
  - Fix QtPNGExporter returning empty bytes on macOS (version:7.17.0).
  - Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) (version:7.17.0).
  - Drop support for Python 3.8, fix the CI tests (version:7.17.0).


author: YangengLiu <dev01202@linx-info.com> - 7.17.1-1
changelog:
  - update version to 7.17.1
    * Allow configureable WebPDF JavaScript processing timeout.
    * Fix when checking template paths on shared filesystems.
    * Tweak webpdf template logic to fix duplicate extension problem.


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: houzhiwei <houzhiwei@kylinos.cn> - 1.17.1-16.p01
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: chengyechun <chengyechun1@huawei.com> - 1.26.17-2
changelog:
  - Type:CVE
  - ID:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped form HTTP requests


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p01
changelog:
  - Type: Update
  - ID:   [TASK#425199]
  - SUG:  NA
  - DESC: 
  - Add loongarch defalut machine type in machine map and fix qemu-iotest error
  - enable spice for aarch64
  - add phytium cpu models ft-2000+ ft-S2500 ft-S5000c
  - show virtio nic bandwith as 10Gbps
  - make libvirt support host-model on aarch64
  - Fixed:systemd-detect-virt returns the result qemu, when kvm acceleration is enabled in Loongson architecture.
  - Add support for migration from rhel or openEuler to Kylin
  - Fix acpi hotplug state cause migration failure


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p02
changelog:
  - Type: Update
  - ID:   [TASK#433635]
  - SUG:  NA
  - DESC: Support migration between Phytium different CPU model


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p03
changelog:
  - Type: Bug
  - ID:   [BUG#346607]
  - SUG:  NA
  - DESC: Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'.


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p05
changelog:
  - Type: Update
  - ID:   [BUG#346607][BUG#351085]
  - SUG:  NA
  - DESC: fix vm can not use virtio-gpu with error 'egl-headless is not available'


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p06
changelog:
  - Type: Update
  - ID:   [TASK#433654]
  - SUG:  NA
  - DESC: sync virtcca support patch from euler and fix bug


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p07
changelog:
  - Type: Bugfix
  - ID:   [Bug#346647][Bug#346638]
  - SUG:  NA
  - DESC: fix vm shutdown and reboot issues in loongarch


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p08
changelog:
  - Type: Bugfix
  - ID:   [Bug#398833]
  - SUB:  NA
  - DESC: resolve file conflicts in compatibility testing


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p09
changelog:
  - Type: Bugfix
  - ID:   [Bug#393455]
  - SUB:  NA
  - DESC: hw: Fix bug, multiple default machines caused the qemu-kvm to crash.


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-27.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-2243
  - SUG:  NA
  - DESC: Sync fix CVE-2026-2243 Heap buffer out-of-bounds read in VMDK compressed grain parsing


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 11:8.2.0-27.p13
changelog:
  - Type: cves
  - ID:   CVE-2026-3195 CVE-2026-3196 CVE-2025-11234
  - SUG:  NA 
  - DESC: MAINTAINERS: add me as maintainer to virtio-snd
          virtio-snd: remove TODO comments
          virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
          virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
          virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
          Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 11:8.2.0-27.p14
changelog:
  - Type: cves
  - ID:   CVE-2025-12464
  - SUG:  NA
  - DESC: Sync fix CVE-2025-12464 qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p15
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: malike <malike@kylinos.cn> - 11:8.2.0-27.p16
changelog:
  - Type: Update
  - ID:   [TASK#589851]
  - SUG:  NA
  - DESC: Add support Hygon hct live migration feature


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p17
changelog:
  - Type: cves
  - ID:   CVE-2026-5761
  - SUG:  NA
  - DESC: Fix CVE-2026-5761 virtio-blk: fix zone report buffer out-of-memory


author: peijiankang <peijiankang@kylinos.cn> - 0.9.2-1.p01
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: fix build error caused by disabling decoration_shadows support in qt5-qtwayland


author: Xu Jin <jinxu@kylinos.cn> - 8.0.2-3.p01
changelog:
  - Type:enhancement
  - ID:TASK#372069
  - SUG:NA
  - DESC:Add loongarch support.Fix build error for Kylin V11.


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p02
changelog:
  - Type: update
  - ID  : [TASK#587039]
  - SUG : NA
  - DESC: Patch1002:qtbase-5.15.10-work-around-pyside2-brokenness.patch
          适配pyside2


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#485611]
  - SUG : NA
  - DESC: Patch1003:CVE-2025-5455-qtbase-5.15.patch
          修复CVE-2025-5455


author: lizequan<lizequan@kylinos.cn> - 5.15.10-11.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#504703]
  - SUG : NA
  - DESC: Patch1004:qt5-base-fix-coredump-missing-display-env-in-ssh.patch


author: peijiankang<peijiankang@kylinos.cn> - 5.15.10-11.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#507841]
  - SUG : NA
  - DESC: add sw_64 QT_ARCH to fix kylin-aiassistant build error


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: lifeifei <lifeifei@kylinos.cn> 7.2.10-1
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangchaorui <zhangchaorui@kylinos.cn> -3.2.2-152.p01
changelog:
  - Type:cves
  - ID:CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257
  - SUG:NA
  - DESC:fix CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257


author: songliyang <songlyang@kylinos.cn> - 1.4.5-2.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Sync for 4 architectures
          2.Skip part of check test error on sw_64 and aarch64


author: weiyuan <weiyuan@kylinos.cn> - 1.1.12-1.p03
changelog:
  - TYpe: update
  - ID: [TASK#371229]
  - SUG: NA
  - DESC: fix the problem that attackers could create files in arbitrary locations on the host filesystem


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p04
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p05
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 and fix system property miss handling in p04


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p07
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:resolve secure compilation issues and sync modified to the sw64 arch


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p08
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:inject stack proctector from Go compiler and modify the correct commit info


author: litianhao <litianhao@kylinos.cn> - 1.2.1-2.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG:NA
  - DESC: 合入sm设备管控补丁
          sane-backends-add-sm-devctl.patch


author: zhubing <zhubing@kylinos.cn> - 1.2.1-2.p01.se.02
changelog:
  - Type: update
  - ID: [TASK#427527] 增加ksaf补丁
  - SUG:NA
  - DESC: 移除sm设备管控代码，合入ksaf devctl补丁
          sane-backends-remove-sm-devctl.patch
          sane-backends-add-ksaf-devctl-hook.patch


author: sunjin <sunjin@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[Bug#290827][Bug#290809][Bug#281275][Bug#292899]
  - SUG:NA
  - DESC: 【安全加固】security-reinforce入库
  -   【V11-B14】【安全加固】【还原中】还原中断，安全加固界面异常 [用例#1365655]
  -   【V11-B14】【安全加固】【安全扫描】编辑用户自定义模板，安全中心闪退 [用例#1365641]
  -   【V11 B12】【安全加固】【交互命令】选择模板-扫描/加固/还原测试 加固模板与加固项不匹配 [用例#989419]
  -   【v11-B14】【安全加固】使用扫描项为所有的自定义模板进行扫描加固后，重启系统，安全加固功能不可用


author: sunjin <sunjin@kylinos.cn> 2.0.0-01
changelog:
  - Type:update
  - ID:[Task#436662][Bug#313077]
  - SUG:NA
  - DESC: 安全加固2.0版本，更新基线描述，v11适配空闲时间锁屏加固项
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   修复了一些自测发现的问题，禁用不必要别名需要执行newaliase


author: sunjin <sunjin@kylinos.cn> 2.0.0-02
changelog:
  - Type:update
  - ID:[Bug#347476][Bug#313077][Bug#348346][Bug#348226]
  - SUG:NA
  - DESC:
  -   【v11 2503】【B09】【需求44508】【uid唯一性检验】关闭uid唯一性检验-uid加固项测试，还原报告中用户名称出现了2次的问题
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   【B09】【41499】【V11-2503】【安全加固】【系统安全】防火墙配置在报告中描述错误
  -   【B09】【41499】【V11-2503】【安全加固】【文件权限】限制日志文件权限，描述错误
  -    未开启三员，root或管理员有安全加固的使用权限； 开启三员，仅root有安全加固的使用权限


author: sunjin <sunjin@kylinos.cn> 2.0.0-03
changelog:
  - Type:update
  - ID:[Bug#349061][Bug#349027][Bug#348813][Bug#348462][Bug#347932][Bug#348879]
  - SUG:NA
  - DESC:
  -   【B09】【41785】【V11-2503】【安全加固】【安全服务】用户登录ftp后访问目录权限正确 加固还原后源文件备注的信息被删除
  -   【B09】【41499】【V11-2503】【安全加固】【安全服务】限制FTP用户登录后能访问的目录加固|还原后的报告描述错误
  -   【V11-2503】【B09】【安全加固】【安全服务】设置SSH安全协议还原后将注释项也删除了
  -   【B09】【41499】【V11-2503】【安全加固】【密码强度】加强口令的密码算法报告描述错误
  -   【V11-2503】【B09】【安全加固】【系统维护】限制仅允许系统管理员进入维护模式，实际加固失败
  -   【V11-2503】【B09】【安全加固】【安全服务】禁止root登录VSFTP，扫描不成功
  -    同步修复密码策略里回文检查参数错误
  -    添加security-reinforce-update-20250521.patch


author: sunjin <sunjin@kylinos.cn> 2.0.0-04
changelog:
  - Type:update
  - ID:[Bug#246503]
  - SUG:NA
  - DESC:
  -   【V11-B07】【安全加固】【系统设置】禁用ctrl+alt+del组合键失败
  -    解决安全热点
  -    删除无用代码initSp3ToSp4IdMap
  -    单元测试覆盖率到达70%
  -    添加security-reinforce-update-20250611.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-05
changelog:
  - Type:bugfix
  - ID:[Bug#368657]
  - SUG:NA
  - DESC:
  -   【V11-2503】【B15】【需求41499】【安全加固】【交互命令】扫描后不加固，再次扫描加固，导出报告按enter键提示核心已转储


author: sunjin <sunjin@kylinos.cn> 2.0.0-06
changelog:
  - Type:TASK
  - ID:[TASK#553765][TASK#543765]
  - SUG:NA
  - DESC:
  -    子 安全编译参数整改 / security-reinforce安全编译参数整改
  -    V10各版本及V11版本安全加固项ssh强加密算法调整
  -    add security-reinforce-update-20251127.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-07
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260428.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-08
changelog:
  - Type: update
  - ID: [TASK#633053]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532237]
  -       修复安全漏洞[KVE-2026-0420][BUG#541241]
  -       dbus管控整改
  -       security-reinforce-update-20260521.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-09
changelog:
  - Type: update
  - ID: [TASK#636621]
  - SUG: NA
  - DESC: 授权不当脚本整改
  -       增强dbus接口调用输入参数的检查
  -       security-reinforce-update-20260530.patch


author: sunjin <sunjin@kylinos.cn> - 2.0.0-10
changelog:
  - Type: update
  - ID: [TASK#646757]
  - SUG: NA
  - DESC: 增加元字符检查
  -       模版导出限制
  -       增加dbus访问白名单
  -       修改数据库权限为640
  -       security-reinforce-update-20260701.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.07
changelog:
  - Type: update
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: 由于内核不支持中文,将代码中的中文更改成英文
  -     add patch: security-switch-add-en-translation.patch


author: chengang <chengang@kylinos.cn> - 1.3.1-1.se.08
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      security-switch-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.09
changelog:
  - Type: update
  - ID: [TASK#379847]
  - SUG: NA
  - DESC: kasf compatible
  -     add patch: security-switch-2501-compatible01.patch


author: litianhao <litianhao@kylinos.cn> - 1.3.1-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       security-switch-add-license.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#457138]
  - SUG: NA
  - DESC: 对于security-switch命令的新参数需求 变更产品化版本
  -    security-switch-new-parameter-20250508.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653]
  - SUG: NA
  - DESC: 更新security-switch命令的help信息和关闭状态时get的返回值（none -> off）
  -	  security-switch-new-help-info.patch
  -	修复调用reboot命令执行错误的问题[BUG#352649][BUG#352653]
  -	  security-switch-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: bugfix 
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -       无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -         security-switch-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: bugfix 
  - ID: NA
  - SUG: NA
  - DESC: 修复缺少此设置将使系统失去安全防护，极大增加系统安全风险提示的问题,桌面bug#360683
  -	  -- security-switch-fix-error-with-missing-prompt-message.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#468603]
  - SUG: NA
  - DESC: 修改安全模式切换到off状态时的提示[BUG#468603]
  -         security-switch-modify-security-mode-to-off-tips.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         security-switch-add-dbus-control-yaml-file.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-7
changelog:
  - Type: bugfix
  - ID: [BUG#639535][BUG#639517]
  - SUG: NA
  - DESC: 修复dbus管控策略宽松和命令行注入的漏洞[KVE-2026-0730][KVE-2026-0731]
  -	  security-switch-fix-dbus-conf-loose-and-command-line-injection.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.14
changelog:
  - Type:update
  - ID:[BUG#352649]
  - SUG:NA
  - DESC: 解决模式切换时自动重启失败的问题
  -		add patch9102: selinux-policy-fix-switch-mode-auto-reboot-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.15
changelog:
  - Type:update
  - ID:[BUG#353491][BUG#353491]
  - SUG:NA
  - DESC: 可惜启动适配三权策略
  -		add patch9103: selinux-policy-add-secadm-perms-for-kydima.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.16
changelog:
  - Type:update
  - ID:[TASK#474973]
  - SUG:NA
  - DESC: 修复升级ukui后 黑屏问题
  -		add patch9104: selinux-policy-fix-login-error-when-update-ukui.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.17
changelog:
  - Type:update
  - ID:[BUG#368341][BUG#365769]
  - SUG:NA
  - DESC: 入侵检测适配selinux,解决root用户能修改/etc/auditd/下的文件
  -		add patch9105: selinux-policy-20250624-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.18
changelog:
  - Type:update
  - ID:[BUG#368353]
  - SUG:NA
  - DESC: 解决入侵检测secadm、auditadm等其他用户无法打开问题
  -		add patch9106: selinux-policy-20250701-fix-kguard-some-bug.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.19
changelog:
  - Type:update
  - ID:[BUG#376643][BUG#376149]
  - SUG:NA
  - DESC: 解决strict模式下root无法插入ko的问题、安全加固偶现无法扫描的问题
  -		add patch9107: selinux-policy-20250704-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.20
changelog:
  - Type:update
  - ID:[BUG#377387]
  - SUG:NA
  - DESC: 解决ukmls策略下 登录界面和注销界面显示乱码问题
  -		add patch9108: selinux-policy-fix-ukmls-login-ui-display-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.21
changelog:
  - Type:update
  - ID:[BUG#381787][BUG#381725]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过控制面板修改密码
  -       解决strict模式下 root用户无法通过开始菜单打开防火墙软件
  -		add patch9109: selinux-policy-fix-root-open-firewall-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.22
changelog:
  - Type:update
  - ID:[BUG#382849]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过入侵检测工具无法导出报告问题
  -		add patch9110: selinux-policy-fix-kguard-export-doc-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.23
changelog:
  - Type:update
  - ID:[BUG#385099][BUG#383617]
  - SUG:NA
  - DESC: 解决开启selinux 非root用户打开终端过慢问题
  -       解决strict模式下【文件保护箱】strict模式下已锁定的保护箱写入文件成功
  -       其他: 解决ldap dovecot等开源服务strict模式下无法启动问题
  -		add patch9111: selinux-policy-20250722-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.24
changelog:
  - Type:update
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决targeted下kytrust与tpm dbus通信超时问题
  -		add patch9112: selinux-policy-fix-ktrust_config-dbus-timeout.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.25
changelog:
  - Type:update
  - ID:[BUG#431351]
  - SUG:NA
  - DESC: 解决targeted下 passwd 修改密码偶现卡主问题
  -		add patch9113: selinux-policy-20251030-fix-passwd-stuck.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.28
changelog:
  - Type:update
  - ID:[BUG#498055]
  - SUG:NA
  - DESC:
  -		add patch9115: selinux-policy-fix-netflow-monitor-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.29
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启无法启动lightdm.service问题引起的桌面无法进入
  -		add patch9116: selinux-policy-fix-lightdm-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.30
changelog:
  - Type:update
  - ID:[BUG#502337]
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启root用户无权限执行ksaf-label-manager-tool工具的问题
  -		add patch9117: selinux-policy-fix-ksaf-label-manager-tool-exec-failed.patch
  -       add patch9118: selinux-policy-fix-auditadm-can-use-systemctl-change-status-of-the-kydima-service.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.31
changelog:
  - Type:update
  - ID:[BUG#504255]
  - SUG:NA
  - DESC: 1.修复targeted模式下切换default模式失败的问题
  -		add patch9119: selinux-policy-fix-targeted-switch-default-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.32
changelog:
  - Type:update
  - ID:[BUG#499261][BUG#504489][BUG#504521][BUG##505103][BUG#506197]
  - SUG:NA
  - DESC: 1.修复targeted模式下安装k8s服务后，running节点失败的问题;
  -       2.修复strict模式下box、kvm以及ukey等问题;
  -		add patch9120: selinux-policy-fix-k8s-box-kvm-ukey-bugs.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.33
changelog:
  - Type:update
  - ID:[TASK#614655]
  - SUG:NA
  - DESC: 1.修复strcit模式下,root用户可以执行sudo相关命令，且访问限制目录的问题;
  -		add patch9121: selinux-policy-fix-policy-that-allows-root-access-restricted-directories.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.34
changelog:
  - Type:update
  - ID:[TASK#617539]
  - SUG:NA
  - DESC: 1.strcit模式下，为文件保护箱适配专用域策略;
  -       2.修复strict模式下root用户可以使用echo对/var/log写入权限问题;
  -		add patch9122: selinux-policy-adapt-box-manager-dedicated-domain-policy.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.35
changelog:
  - Type:update
  - ID:[BUG#544169]
  - SUG:NA
  - DESC: 1.strcit模式下，修复secadm用户无法使用boxadm创建启动保护箱应用的问题;
  -		add patch9123: selinux-policy-secadm-use-boxadm-permission-denied.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.36
changelog:
  - Type:update
  - ID:[BUG#544169][BUG#571099]
  - SUG:NA
  - DESC: 1.strcit模式下，修复secadm用户boxadm操作文件保护箱应用的报错问题;
  -       2.strict模式下，修复secadm执行sesearch -A和seinfo提示权限问题;
  -		add patch9124: selinux-policy-fix-boxmanager-and-sesearch-exec-bugs.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.37
changelog:
  - Type:update
  - ID:[BUG#583343]
  - SUG:NA
  - DESC: 1.target模式下，修复安全中心设置strict模式失败的问题;
  -       add patch9125: selinux-policy-fix-ksc-defender-set-strict-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.38
changelog:
  - Type:update
  - ID:[BUG#583343]
  - SUG:NA
  - DESC: 1.target模式下，修复loongarch环境下安全中心设置strict模式失败的问题;
  -       add patch9126: selinux-policy-fix-ksc-defender-set-strict-failed-loongarch.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.39
changelog:
  - Type:update
  - ID:[BUG#599431][BUG#608947]
  - SUG:NA
  - DESC: 1.target模式下，修复无法安装systemd软件包的问题;
  -       2.strict模式下，修复各用户可信启动命令执行失败的问题；
  -       add patch9127: selinux-policy-fix-kytrust-bima-permission-and-reinstall-systemd.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.40
changelog:
  - Type:update
  - ID:[BUG#569621]
  - SUG:NA
  - DESC: 1.strict模式下，修复各用户锁屏切换和注销切换登录卡死的问题；
  -       add patch9128: selinux-policy-fix-secadm-login-failed-due-to-authentication.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.41
changelog:
  - Type:update
  - ID:[BUG#651487][BUG#651573]
  - SUG:NA
  - DESC: 1.升级内核后，strict模式下，修复使用ssh登录各用户出现ovs-vsctl被拦截的问题；
  -       2.升级内核后，strict模式下，修复登录auditadm用户打开日志查看器查看崩溃日志的被拦截的问题；
  -       add patch9129: selinux-policy-fix-update-kernel-ssh-login-and-kylin-log-tool.patch


author: mengchaoming <mengchaoming@kylinos.cn> - 2:4.14.3-1.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch:支持香港繁体中文	 	 
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.01
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
  - add patch: kylin-shadow-add-user-UID-unique.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.02
changelog:
  - Type:update
  - ID:[BUG#241779]
  - SUG:NA
  - DESC: 【uid唯一性检验】uid唯一性提示语为英文
  - add patch: kylin-shadow-fix-zh_CN-po-0001.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-15.p05
changelog:
  - Types:bugfix
  - ID:BUG#500923
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-16.p05
changelog:
  - Type:cve;bugfix
  - ID:[BUG#585405]
  - SUG:NA
  - DESC: fix CVE-2025-69421, CVE-2026-22796, CVE-2026-28388, CVE-2026-28389
          allow debuginfo to be installed alone without pulling in the debugsource package


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: cenhuilin <cenhuilin@kylinos.cn> - 24.01-7.p03
changelog:
  - Type: cves
  - ID: [BUG#546429]
  - SUG: NA
  - DESC:1.fix CVE-2025-57275: lib/nvmf: limit number of NVMe-oF registrants when updating PTPL info
         2.nvmf/rdma: Shorten trace name of request state


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: duanhongtao <duanhongtao@kylinos.cn> - 5.9.10-4.p05
changelog:
  - Type:CVE
  - CVE:CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: zhangyao <zhangyao108@huawei.com> - 255-32
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p01
changelog:
  - Type: update
  - ID:   [TASK#424801]
  - SUG:  NA
  - DESC:  1. systemd-udev package contain kernel-install
           2. add Patch: 0001-Change-the-NTP-server.patch
              Change NTP server.
           3. add Patch: 0001-basic-add-missing-PIDFS-magic.patch
              Fix missing PIDFS magic issue when compile
           4. add Patch: 0001-basic-add-missing-BCACHEFS-magic.patch
              Fix missing BCACHEFS magic issue when compile
           5. Add 0001-rc-local-change-order-after-network-online.target.patch
              Change rc-local order after network-online.target, fix service or process start failed issue


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p02
changelog:
  - Type: update
  - ID:   [TASK#447315]
  - SUG:  NA
  - DESC: Revert patch to fix test performance regression


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p03
changelog:
  - Type: update
  - ID:   [TASK#350099]
  - SUG:  NA
  - DESC: 1. Add zombie process recycling module component
          2. Add process monitoring, process self-healing and automatic pull up


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-34.p05
changelog:
  - Type: update
  - ID:   [TASK#568069]
  - SUG:  NA
  - DESC: fix CVE-2026-4105
          fix CVE-2026-29111
          fix CVE-2026-40226


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: Yu Peng <yupeng@kylinos.cn> - 5.0-3.p03
changelog:
  - Type:bugfix
  - ID:task#641921
  - SUG:NA
  - DESC:Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-80.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: huayadong <huayadong@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type: update
  - ID:   [TASK#327372]
  - SUG:  NA
  - DESC: add tigervnc-1.13.1-kylin-vncpasswd-add-pwquality-check-and-translation.patch
  	add tigervnc-1.13.1-kylin-add-pwquality-check-and-translation.patch
  	add BuildRequires:libpwquality-devel  Requires:libpwquality


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: yaoxin <1024769339@qq.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117 for fix CVEs: CVE-2026-24880, CVE-2026-25854,
    CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990,
    CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500


author: yaoxin <1024769339@qq.com> - 1:9.0.118-1
changelog:
  - Update to 9.0.118 for fix CVEs: CVE-2026-41284, CVE-2026-41293,
    CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514,
    CVE-2026-43515
  - Fix tomcat-jsvc stop failed


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决可信启动与tpm通信失败问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tabrmd-communication-with-kytrust-error.patch


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.02
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决tpm dbus服务读写设备文件错误问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tpm-wirte-device-failed.patch


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: gaoyukun <gaoyukun@kylinos.cn> - 2.24.1-1.p01
changelog:
  - Type: update
  - ID: [BUG#310621]
  - SUG: NA
  - DESC: Migrate patches corresponding to task#153403,task#186385,bug#217426,bug#217442 in v10:
        - split package tuned-utils-systemtap, reduce main package installation dependencies
        - add the tuned profile sbm-performance, optimize filesystem and network performance
        - add disk IO optimization to sbm-performance profile, optimize disk IO performance
        - add jvm flag UseNUMA, optimize jvm performance
        - split sbm-performance mode to sbm and sbm-performance mode
        - improve disk IO and exec performance


author: xiejing <xiejing@kylinos.cn> - 2.24.1-1.p04
changelog:
  - Type: update
  - ID: [TASK#636695]
  - SUG: NA
  - DESC: modify polkit allow_active policy to auth_admin for switch_profile and auto_profile


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: huayadong<huayadong@kylinos.cn> 4.10.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: delete Requires: kf5-bluez-qt-devel kf5-bluez-qt


author: peijiankang<peijiankang@kylinos.cn> 4.10.1.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add ukui-bluetooth-add-copyright.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.1.0-ok3.2k0.10


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-bluetooth-4.10.1.0-ok3.2k0.14
          upstream commtid:1dddb5543c1a61b7a19a412f73da010effd59666


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p06
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Recommends:kylin-installer; delete Recommends:kylin-user-guide


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p08
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add ukui-server Recommends: kylin-user-guide


author: houhongxun<houhongxun@kylinos.cn> - 2.0.2-21.p09
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: ukui-server now requires kylin-user-guide fcitx5
          fcitx5-chinese-addons, fcitx5-config-qt


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#408731]
  - SUG : NA
  - DESC: change Requires: ukui-wallpapers to Recommends: ukui-wallpapers


author: peijiankang<peijiankangkylinos.cn> - 2.0.2-21.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#422303][BUG#468605]
  - SUG : NA
  - DESC: modify system os_version and update_version information
          revert 2.0.2-21.p13


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch6: ukui-greeter-4.10.0.0-kylin-remove-power-Button.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#294017]
  - SUG : NA
  - DESC: Patch7: ukui-greeter-4.10.0.0-kylin-fix-the-font-too-large.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-greeter-4.10.0.0-ok5.1k0.7
          upstream commtid:ba4854458f270994721d1348c774b8b41d2f8b0f


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#334467] [BUG#292059]
  - SUG : NA
  - DESC: fix greeterwindow and loginwindow translate bugs


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add ukui-greeter-4.10.0.0-fix-sonarqube-security-hotspots.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: delete file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: cves
  - ID  : KVE-2026-05100 KVE-2026-05102
  - SUG : NA
  - DESC: fix ukui-greeter KVE-2026-05100 and KVE-2026-05102


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok1k0.10
          upstream commitid: 1a9e6bbc2ee562d89d4cebfcc5fb2244b3e35513


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#504657]
  - SUG : NA
  - DESC: add Patch03:ukui-media-4.10.0.0-kylin-add-check-for-display.patch
          添加DISPLAY检测，修复KVE-2026-0320


author: houhongxun<houhongxun@kylinos.cn> 4.10.4.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix ukui control center icon showing twice problem


author: huayadong<huayadong@kylinos.cn> 4.10.4.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch3: ukui-panel-4.10.4.3-kylin-remove-s3-s4-reboot-poweroff.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-panel-4.10.4.3-ok0.1k0.11
          upstream commtid:9f40cceb1001001c1a767ce4335f31edf6f90a07


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [BUG#294119]
  - SUG : NA
  - DESC: add ukui-power-manager-4.10.0.0-kylin-remove-ukui-control-center-Suspend-and-Hibernate-and-wakeUpDisplay-no-passwd.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: ukui-power-manager-kylin-4.10.0.0-hide-shutdown.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-power-manager-4.10.0.0-ok1.34k2.0
          upstream commtid:cc25d6a66a8e679daef437d0f5d243116752e994


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#636667]
  - SUG : NA
  - DESC: 增强ukui-power-manager功能，添加参数校验，保障ukui-power-manager功能正常


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#363325][BUG#369099]
  - SUG : NA
  - DESC: add Patch14:ukui-screensaver-4.10.0.0-kylin-remove-black-drawPath.patch
          add Patch15:ukui-screensaver-4.10.0.0-kylin-change-message-rule.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch16: ukui-screensaver-4.10.0.0-kylin-remove-AuthDialog-onChangeUser.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-fix-ukui-screensaver-backend-coredump-in-vncdesktop.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p24
changelog:
  - Type: bugfix
  - ID  : [BUG#498405]
  - SUG : NA
  - DESC: Patch25: ukui-screensaver-4.10.0.0-add-dbus-signal-lock-for-session-tools.patch
          修复从电源管理器锁定屏幕没有lock dbus信号发出问题


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p02
changelog:
  - Type: update
  - ID  : [TASK#492845]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p03
changelog:
  - Type: update
  - ID  : [TASK#522795]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p02
changelog:
  - Type:update
  - ID:[BUG#238630][BUG#238129]
  - SUG:NA
  - add Patch0011:usbguard-parse.patch
  - DESC: 238129 【V11 B02】【龙芯】【USBGuard】USB设备及策略管理交互模式界面展示不友好
  - DESC: 238630 【V11 B02】【USBGuard】设备已有拦截策略，再次手动添加放行策略不生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p04
changelog:
  - Type:update
  - ID:[BUG#242968][BUG#245015]
  - SUG:NA
  - add Patch0012: usbguard-config.patch
  - DESC: 242968 【V11-B05】【安全SDK】全部设备管控策略查询-授权提示转储
  - DESC: 245015 【V11-B06】【安全SDK】设备授权取消授权大概率转储，usbguard服务起不来
  - 去除usbguard-selinux包,策略已在selinux-policy统一管理


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p05
changelog:
  - Type:update
  - ID:[BUG#242972]
  - SUG:NA
  - add Patch0013: usbguard-format.patch
  - DESC: 242972 【V11 B05】【USBGuard】导入错误格式策略，提示核心已转储
  - DESC: 243051 【V11 B05】【USBGuard】放行部分USB接口提示核心已转储
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p06
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0014:     usbguard-restore.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p07
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0015:     usbguard-restore2.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p08
changelog:
  - Type:update
  - ID:[BUG#310899]
  - SUG:NA
  - add Patch0016:     usbguard-hub.patch
  - DESC: 306393 【V11-B17】【USBGuard】root hub 1.0和2.0设备设置永久拦截和放行提示核心已转储
  - DESC: 310899 【V11-B18】【USBGuard】在设备策略管理中，修改策略失败，策略被删除


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p09
changelog:
  - Type:update
  - ID:[BUG#247155/347856]
  - SUG:NA
  - add Patch0017: usbguard-import.patch
  - DESC: 247155 【V11-B07】【安全SDK】通过设备信息删除设备管控策略，删除serial名字较长的设备管控策略失败
  - DESC: 347856 [V11 2503][B09][需求41823][USBGuard]管理设备策略-导入放行策略使被拦截U盘放行，导入拦截策略覆盖现有策略后没有及时生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p10
changelog:
  - Type:update
  - ID:[任务#479543]
  - SUG:NA
  - add Patch0018: usbguard-idnull.patch
  - DESC: 479543 【V11 2503】修改usbguard默认策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p11
changelog:
  - Type:update
  - ID:[BUG#383547]
  - SUG:NA
  - add Patch0019: usbguard-setdev.patch
  - DESC:[出厂测试][v11-2503][B19][需求42057][USBGuard]管理已连接设备,设备状态为拦截,修改为永久拦截,未生成策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p12
changelog:
  - Type:update
  - ID:[BUG#391973]
  - SUG:NA
  - add Patch0020: usbguard-hub2.patch
  - DESC: 391973 [同源测试][v11-2503][B20][需求42057]开启usbguard后，bmc的虚拟鼠标和键盘被拦截


author: herengui <herengui@kylinsec.com.cn> - 7.4.3-5
changelog:
  - Fix CVE-2026-34475: Fix http/1.1 absolute form dissection edge case leading to cache poisoning or authentication bypass


author: lijian <lijian01@kylinos.cn> - 2:9.0.2092-15.p01
changelog:
  - Type:update
  - ID:[task#424803]
  - SUG:NA
  - DESC:1) 移植敏感词修改和zh_HK繁体字支持的补丁
  -      2) 移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      3) remove discriminatory language


author: houzhiwei <houzhiwei@kylinos.cn> - 2:9.0.2092-18.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-53905 and CVE-2025-53906
  - SUG:NA
  - DESC:1.fix some tests failed. 2.fix CVE-2025-53905 and CVE-2025-53906


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-32.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: update to 9.0.2092-33 and fix CVE-2026-42307 CVE-2026-44656 CVE-2026-45130


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p02
changelog:
  - Type:update
  - ID:[#bug617491]
  - SUG:NA
  - DESC: fix CVE-2026-43961 CVE-2026-46483 CVE-2026-47162 CVE-2026-47167 CVE-2026-52858 CVE-2026-52859 CVE-2026-52860


author: zuo <zuohongsheng@kylinos.cn> - 1:4.4.14-1.p01
changelog:
  - Type:CVE
  - CVE:[task#597029]
  - SUG:NA
  - DESC: update to 4.14, and backport add-HK-complex-Chinese-character.patch


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.01
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083, CVE-2024-9632


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.04
changelog:
  - Type: CVE
  - ID:   [BUG#605083]
  - SUG:  NA
  - DESC: fix CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261


