# changelog

author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.22.0-2.p01
changelog:
  - Type:update
  - ID:[TASK#633779]
  - SUG:NA
  - DESC:Fix null pointer dereferences by checking memory allocation return values.
         Fix duplicate files between ModemManager-glib-devel and ModemManager-help.


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:NetworkManager-dispatcher.service not enabled when installed due to systemd_units not defined


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync bugfix patch: delete lease file when connection deleted and 
         update the way to get ppp version because patchlevel.h no more provided in  ppp-2.5.0


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:1.44.2-3.p03
changelog:
  - Type: BugFix
  - ID: [TASK#604471]
  - SUG: NA
  - DESC: mptcp fix error handling rp_filter when kernel don't support mptcp


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.15-38
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-add_sdl_config_man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7637.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7636.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7635_1.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7635_2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7573_CVE-2019-7576.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7578.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7577.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.10-GrabNotViewable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-const_XData32.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-ignore_insane_joystick_axis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-no-default-backing-store.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-SDL_EnableUNICODE_drops_keyboard_events.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-vec_perm-ppc64le.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13616.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overread-in-IMA_ADPCM_nibble.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7574-Fix-a-buffer-overread-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overwrite-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7575-Fix-a-buffer-overwrite-in-MS_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: zhaoqingyou <zhaoqingyou@163.com> - 0.18.6-7.p01
changelog:
  - Type:update
  - ID:[任务#633541]
  - SUG:NA
  - DESC:
  -      [任务#633541]Baby-Cat级组件悬镜扫描漏洞整改-aide
  -      添加补丁aide-sshaide.patch


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: pengxu <pengxu@kylinos.cn> - 2.41-28.p01
changelog:
  - Type:update
  - ID:[TASK#585321]
  - SUG:NA
  - DESC:Set sw_cpu to sw8a and fix binutils high risk vulnerability


author: pengxu <pengxu@kylinos.cn> - 2.41-28.p02
changelog:
  - Type:update
  - ID:[BUG#542191]
  - SUG:NA
  - DESC: 1.Fix CVE-2025-11494: Fixed incorrect discarding of the _GLOBAL_OFFSET_TABLE_ symbol in x86 linkers
          2.Fix CVE-2025-11840: Fixed a segmentation fault in coffcode.h caused by NULL name in EMPTY_HOWTO
          3.Fix CVE-2026-6846: Fixed a buffer overflow in xcoff_link_add_symbols in xcofflink.c
          4.Fix CVE-2025-11082: Fixed an out-of-bounds read during .eh_frame parsing in elf-eh-frame.c


author: peijiankang <peijiankang@kylinos.cn> - 0.9.63.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop biometric-authentication-0.9.63.1-0k1.42


author: peijiankang <peijiankang@kylinos.cn> - 0.9.63.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#469087]
  - SUG : NA
  - DESC: add biometric-authentication-0.9.63.1-kylin-fix-fortify.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.9.63.1-1.p04
changelog:
  - Type: update
  - ID  : [TASK#586743]
  - SUG : NA
  - DESC: sync code from desktop biometric-authentication-0.9.63.1-0v11k1.43k0.9


author: kouwenqi <kouwenqi@kylinos.cn> - 1.3.0-5.p01
changelog:
  - Type: update
  - ID: [TASK#554017]
  - SUG: NA
  - DESC: Backport v10 sp3 2403 patches:
          -btt: Add Q2X and X2G statistics
          -blkparse: Fix up the length of split completions
          -btt: eliminate redundant separators in btt -p display
          -add an option "-n" for blkparse and btt


author: fuwei <fuwei@kylinos.cn> - 4.1.0-1.se.3
changelog:
  - Type:update
  - ID:[BUG#492791]
  - SUG:NA
  - DESC:
  - 修复bug#492791 【V11-2603】【B04】【漏洞挖掘】box-manager组件存在KVE-2026-0203漏洞


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.5
changelog:
  - Type:update
  - ID:[TASK#595817] [TASK#590177]
  - SUG:NA
  - DESC:
  - 可信子系统-支持文件保护箱根密钥保护
  - box-utils 源码合规性整改及安全热点整改


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.6
changelog:
  - Type:update
  - ID:[BUG#498833] [BUG#498291] [BUG#498791]
  - SUG:NA
  - DESC:
  - BUG#498833 重启系统后透明保护箱未自动挂载
  - BUG#498291 解锁保护箱输入错误密码后重启，保护箱变为透明加密保护箱
  - BUG#498791 新建加密保护箱，未解锁状态可在保护箱内进行文件操作


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.7
changelog:
  - Type:update
  - ID:[TASK#596345] [BUG#498405] [BUG#499769]
  - SUG:NA
  - DESC:
  - BUG#498405 锁屏后自动锁定失败，保护箱仍处于解锁状态
  - BUG#499769 KYSEC保护箱功能未开启，保护箱功能可用
  - ADD FUZZ MODULE TO CI WITH make fuzz
  - ADD valgrind TO CI


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.8
changelog:
  - Type:update
  - ID:[BUG#501157] [BUG#501141] [BUG#501055] [BUG#501707] [BUG#501529]
  - SUG:NA
  - DESC:
  - BUG#501157 命令行重置密码存在英文
  - BUG#501141 命令行重置密码提示错误
  - BUG#501055 关闭可信子系统，创建加密保护箱提示不对
  - BUG#501707 关闭可信子系统，加密保护箱导入失败
  - BUG#501529 命令行修改密码未校验新密码是否与原密码一致


author: shuzetian <shuzetian@kylinos.cn> - 4.1.0-1.se.10
changelog:
  - Type:update
  - ID:[Task#610575] [Task#596833]
  - SUG:NA
  - DESC:
  - Task#610575 密码超过64位时命令行报段错误
  - Task#596833 box-utils单测流程优化


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.11
changelog:
  - Type:update
  - ID:[BUG#541237] [BUG#532241]
  - SUG:NA
  - DESC:
  - BUG#541237 KVE-2026-0422
  - BUG#532241 KVE-2026-0408


author: fuwei <fuwei@kylinos.cn> - 4.1.0-1.se.12
changelog:
  - Type:update
  - ID:[TASK# 631663]
  - SUG:NA
  - DESC: box-utils dbus control union
  - 添加补丁:
  - TASK-631663-dbus-control-union.patch


author: fuwei <fuwei@kylinos.cn> - 4.1.0-1.se.13
changelog:
  - Type:update
  - ID:[TASK# 629781]
  - SUG:NA
  - DESC: box-manager dbus control union, add old version dbus
  - 添加补丁:
  - TASK-629781-dbus-control-union-add-oldversion.patch


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.2.v2601
changelog:
  - configs: update generic_defconfig (Jiangshan Yi) [task:588385]
  - Adjust the loading order of the RTC driver (liuyunchen) [bug:483945]
  - lib/raid6: Delete the RAID6_PQ_BENCHMARK config (sunliming) [task:585767]
  - lib/raid6: Optimizing the raid6_select_algo time through asynchronous processing (sunliming) [task:585767]
  - lib/raid6: Divide the raid6 algorithm selection process into two parts (sunliming) [task:585767]
  - LoongArch: drivers/pwm: export symbol for pwm_add_table (Tianrui Zhao) [task:577685]
  - ANOLIS: mm: use __GFP_MEMALLOC in vmemmap_alloc_block (Xu Yu) [task:590821]
  - NFS: Fix a deadlock involving nfs_release_folio() (Trond Myklebust) [task:590809]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Niklas Cassel)
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1 (Niklas Cassel)
  - exit: Sleep at TASK_IDLE when waiting for application core dump (Paul E. McKenney) [task:591267]
  - gve: defer interrupt enabling until NAPI registration (Ankit Garg) [task:589035] {CVE-2025-71156}
  - gve: Avoid rescheduling napi if on wrong cpu (Shailend Chand) [task:589035]
  - ublk: fix deadlock when reading partition table (Ming Lei) [task:589351] {CVE-2025-68823}
  - binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [task:573213] {CVE-2025-68239}
  - Adapt to the new version of Jenkins' changelog (Qingshuang Fu) [task:591019]
  - X86: enable CONFIG_HSR (taowei) [bug:487965]
  - configs/x86: enable config for CONFIG_BLK_DEV_UBLK (Yang Xiuwei) [bug:486253]
  - HYGON: EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors (allenli) [task:584695]
  - HYGON: x86/tsc: TSC adjust Backport x86 TSC adjust patch (allenli) [task:584695]
  - HYGON: EDAC/amd64: Bug fix for EDAC to correct the address translation on hygon family 18h model 4h (allenli) [task:584695]
  - HYGON: perf/x86/uncore: Correct the L3 PMU config for Hygon processors (Wenhui Fan) [task:586595]
  - blk-glitch: Enable the IO glitch detection function for ARM and X86 (liyouhong) [task:526187]
  - blk-glitch: Add the use of static_key in blk-glitch (liyouhong) [task:526187]
  - blk-glitch: Optimize the code structure to reduce performance overhead (liyouhong) [task:526187]
  - blk-glitch: Adjust blk_glitch_stats to blk_glitch_bio/rq_stats (liyouhong) [task:526187]
  - blk-glitch: Add timestamp recording during RQ requeueing (liyouhong) [task:526187]
  - blk-glitch: Add process filtering functionality (liyouhong) [task:526187]
  - blk-glitch: Add an attribute file to dynamically adjust the threshold (liyouhong) [task:526187]
  - blk-glitch: Add a timestamp record to the driver layer (liyouhong) [task:526187]
  - blk-glitch: Add a timestamp record to the block layer (liyouhong) [task:526187]
  - blk-glitch: Add io_glitch_detection tracepoint (liyouhong) [task:526187]
  - blk-glitch: Add the function of IO glitch detection timestamp statistics (liyouhong) [task:526187]
  - PHYTIUM: pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD (Cao Guanghui) [bug:477893]
  - PHYTIUM: pswiotlb: Adapt to the function iommu_pgsize() exported by EXPORT_SYMBOL_GPL() (Cao Guanghui) [bug:477893]
  - SCSI: Chang Linkdata HBA/RAID default value to m (zhanggenjian) [bug:487925, bug:486745]
  - inet: frags: drop fraglist conntrack references (Florian Westphal) [task:592299] {CVE-2026-23016}
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Zilin Guan) [task:592301] {CVE-2026-23038}
  - null_blk: fix kmemleak by releasing references to fault configfs items (Nilay Shroff) [task:592309] {CVE-2026-23032}
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts (Tetsuo Handa) [task:590799] {CVE-2026-22997}
  - macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [task:590131] {CVE-2026-23001}
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Duoming Zhou) [task:590069] {CVE-2025-68822}
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Gregory CLEMENT) [task:589963] {CVE-2025-71109}
  - ipv6: Fix use-after-free in inet6_addr_del(). (Kuniyuki Iwashima) [task:590053] {CVE-2026-23010}
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [task:589961] {CVE-2026-23004}
  - sunway/config: Modify sunway configure. (liuyunchen) [bug:480863]
  - rust: update all rust drivers (zhoulong) [task:587131]
  - drivers/yunsilicon: Added support for the sw architecture (luoqing) [bug:489797]
  - rust: sync input drivers, include serio, tablet, rmi4 and touchscreen (zhoulong) [task:587131]
  - rust: sync input drivers, include keyboard, mouse, joystick and misc (zhoulong) [task:587131]
  - btrfs: Use module_subinit{_noexit} and module_subeixt helper macros (Youling Tang) [task:591007]
  - module: Add module_subinit{_noexit} and module_subeixt helper macros (Youling Tang) [task:591007]
  - mm: fix build with CONFIG_KYLIN_MM_PAGEPOOL=n (Lincheng Yang) [task:592653]
  - rust: sync leds and i3c drivers (zhoulong) [task:587131]
  - rust: sync nls and gpio drivers (zhoulong) [task:587131]
  - ksaf: fix argv UAF in ksaf_run_cmd (penghuaihe) [bug:407083]
  - x86_64: configs: Hygon request for confidential computing test (lifangxu) [task:589941]
  - sync hwmon rust drviers (zhoulong) [task:587131]
  - rust: sync reset and typec rust drviers (zhoulong) [task:587131]
  - rust: sync watchdog rust drivers (zhoulong) [task:587131]
  - sync rust drivers framework (zhoulong) [task:587131]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.3.v2601
changelog:
  - Add common NIC drivers (Jiangshan Yi) [task:588385]
  - Revert "arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB" (张浩) [task:595141]
  - uacce: implement mremap in uacce_vm_ops to return -EPERM (Yang Shen) [task:593785] {CVE-2026-23056}
  - intel_th: fix device leak on output open() (Johan Hovold) [task:593619] {CVE-2026-23091}
  - scsi: qla2xxx: Sanitize payload size to prevent member overflow (Jiasheng Jiang) [task:593775] {CVE-2026-23059}
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [task:593625] {CVE-2026-23073}
  - ANOLIS: sched/fair: Clear ->h_load_next when unregistering cgroup (Peng Wang) [task:590819]
  - dmaengine: xilinx: xdma: Fix regmap max_register (Anthony Brandon) [task:593801] {CVE-2025-71195}
  - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection (Francesco Lavra) [task:593793] {CVE-2025-71198}
  - tracing: Fix crash on synthetic stacktrace field usage (Steven Rostedt) [task:593781] {CVE-2026-23088}
  - leds: led-class: Only Add LED to leds_list when it is fully ready (Hans de Goede) [task:593803] {CVE-2026-23101}
  - net/sched: act_ife: avoid possible NULL deref (Eric Dumazet) [task:593787] {CVE-2026-23064}
  - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (Andrey Vatoropin) [task:593611] {CVE-2026-23084}
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (Robbie Ko) [task:593633] {CVE-2025-71194}
  - scsi: core: Wake up the error handler when final completions race against each other (David Jeffery) [task:593729] {CVE-2026-23110}
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Mark Rutland) [task:593733] {CVE-2026-23107}
  - vsock/virtio: Coalesce only linear skb (Michal Luczaj) [task:593727] {CVE-2026-23057}
  - uacce: fix isolate sysfs check condition (Chenghai Huang) [task:593771] {CVE-2026-23094}
  - vsock/virtio: cap TX credit to local buffer size (Melbin K Mathew) [task:593641] {CVE-2026-23086}
  - vsock/virtio: fix potential underflow in virtio_transport_get_credit() (Melbin K Mathew) [task:593641]
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593621] {CVE-2026-23061}
  - uacce: ensure safe queue release with state management (Chenghai Huang) [task:593789] {CVE-2026-23063}
  - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (Jamal Hadi Salim) [task:593799] {CVE-2026-23105}
  - uacce: fix cdev handling in the cleanup path (Wenkai Lin) [task:593725] {CVE-2026-23096}
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [task:593609] {CVE-2026-23099}
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593635] {CVE-2026-23058}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Taeyang Lee) [task:593631] {CVE-2026-23060}
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima) [task:593627] {CVE-2026-23083}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [task:593607] {CVE-2026-23076}
  - irqchip/gic-v3-its: Avoid truncating memory addresses (Arnd Bergmann) [task:593591] {CVE-2026-23085}
  - regmap: Fix race condition in hwspinlock irqsave routine (Cheng-Yu Lee) [task:593595] {CVE-2026-23071}
  - net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [task:593593] {CVE-2026-23074}
  - udp: call skb_orphan() before skb_attempt_defer_free() (Eric Dumazet) [task:593555] {CVE-2026-23048}
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [task:593557] {CVE-2026-23089}
  - gue: Fix skb memleak with inner IP protocol 0. (Kuniyuki Iwashima) [task:593547] {CVE-2026-23095}
  - LoongArch: BPF: Enhance the bpf_arch_text_poke() function (Chenghao Duan) [task:593967]
  - LoongArch: BPF: No text_poke() for kernel text (Hengqi Chen) [task:519401]
  - LoongArch: BPF: Enable trampoline-based tracing for module functions (Chenghao Duan) [task:593967]
  - LoongArch: BPF: Adjust the jump offset of tail calls (Chenghao Duan) [task:593967]
  - LoongArch: BPF: Save return address register ra to t0 before trampoline (Chenghao Duan) [task:593967]
  - LoongArch: Enable exception fixup for specific ADE subcode (Chenghao Duan) [task:593967]
  - kvm: fix error initializing system register tables (Zongmin Zhou) [bug:491195]
  - netfilter: conntrack: warn when cleanup is stuck (Jakub Kicinski) [task:590215]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Jakub Kicinski) [task:590215] {CVE-2025-68768}
  - inet: frags: add inet_frag_queue_flush() (Jakub Kicinski) [task:590215]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Jakub Kicinski) [task:590215]
  - socket: Print pf->create() when it does not clear sock->sk on failure. (Kuniyuki Iwashima) [task:590215]
  - vsock: do not leave dangling sk pointer in vsock_create() (Eric Dumazet) [task:590215]
  - net: warn, if pf->create does not clear sock->sk on error (Ignat Korchagin) [task:590215]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.4.v2601
changelog:
  - rust: avoid vmlinux re-link on "make modules" with Rust drivers (long zhou) [task:587131]
  - rust: sync x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - fs: don't block write during exec on pre-content watched files (Amir Goldstein) [bug:480477]
  - crypto: hisi: disable in-tree ACC for out-of-tree deploy (chengang) [task:597259]
  - Revert "OPENEULER: irqchip/gic-v3: Fix one race condition due to NMI withdraw" (tanze) [task:597027]
  - configs: cleanup generic_defconfig (Jiangshan Yi) [task:588385]
  - Revert "rust: update x86 generic_defconfig for rust drivers" (Jiangshan Yi) [task:587131]
  - Revert "rust: Covert others nls drivers to rust" (周龙) [task:587131]
  - drivers/scsi/qedf: rust: Fix some function (wulinen) [task:587131]
  - rust: Fix the build_rust script (liuhaitian) [task:587131]
  - rust: Fix KEYBOARD_PINEPHONE driver (liuhaitian) [task:587131]
  - block/nbd: rust: type nbd pointers as NbdDevice in Rust path (sangliang) [task:587131]
  - block/nbd: rust: migrate generic wrappers to bindings (sangliang) [task:587131]
  - rust: update x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - rust: fix LED undefined ref and hidraw section mismatch (long zhou) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Fix incorrect implementation in the CAP11XX driver (liuhaitian) [task:587131]
  - rust: Fix incorrect implementation in rust driver (liuhaitian) [task:587131]
  - rust: Re-apply Rust drivers (liuhaitian) [task:587131]
  - rust: Re-apply Rust drivers (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Driver enablement prerequisites (liuhaitian) [task:587131]
  - rust: Enhance the INA209 driver security with Rust (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Enhance lineage-pem driver security with Rust (liuhaitian) [task:587131]
  - rust: fix unused function warnings in qlogic (gaoyinggang) [task:587131]
  - rust: Enhance emc6w201 driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance the tc654 driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance ina2xx driver security with Rust (liuhaitian) [task:587131]
  - rust: Driver enablement prerequisites (liuhaitian) [task:587131]
  - rust: Translate hwmon Rust/C driver comments from Chinese to English (lifengxiang) [task:587131]
  - rust: fix watchdog modpost errors and comment formatting (gaoyinggang) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs files (wulinen) [task:587131]
  - rust: Enhance the W83791D driver security with Rust (liuhaitian) [task:587131]
  - rust: hwmon: Convert LM85 driver to Rust and fix unused C symbols (wangyuxin) [task:587131]
  - block/nbd: rust: use shared bindings and port sock_shutdown, disk_init to Rust (sangliang) [task:587131]
  - rust: Keyborad driver fix (liuhaitian) [task:587131]
  - rust: Translate comments to English in shim (yijiqian) [task:587131]
  - rust: enable hwmon drivers (lifengxiang) [task:587131]
  - rust: Translate comments to English in Serio (yijiqian) [task:587131]
  - rust: mouse: Translate comments to English (yijiqian) [task:587131]
  - rust: kernel-helpers: Translate Chinese comments to English (wangyuxin) [task:587131]
  - rust: Enhance the tps23861 driver security with Rust (liuhaitian) [task:587131]
  - block/nbd: rust: port IDR helpers, nbd_send_cmd, and link_dead to Rust (sangliang) [task:587131]
  - rust: update Some *.shim.c comments (chenlongteng) [task:587131]
  - rust: Standardize Rust driver integration and fix errors (lifengxiang) [task:587131]
  - rust: update watchdog C comments (Haoze Wu) [task:587131]
  - rust: update binging wrappers comments (Haoze Wu) [task:587131]
  - rust: scsi/fnic: Move driver to scsi subdirectory (chentao) [task:587131]
  - rust: scsi/fnic: Expand driver core and protocol modules (chentao) [task:587131]
  - rust: fix bindings and shim for out-of-tree (O=) builds (long zhou) [task:587131]
  - drivers/rust/drivers/scsi: add qedf io (wulinen) [task:587131]
  - rust: scsi/fnic: Add queue descriptors and VNIC extensions (chentao) [task:587131]
  - rust: hwmon: Translate comments to English and add SPDX (wangyuxin) [task:587131]
  - rust: update kernel-helper comments (Haoze Wu) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs attr (wulinen) [task:587131]
  - rust: update typec driver && Some *.shim.c comments (chenlongteng) [task:587131]
  - rust: hwmon: Convert NCT7802 driver to Rust (wangyuxin) [task:587131]
  - rust: fix depmod Cycle detected (long zhou) [task:587131]
  - rust: hwmon: Convert LTC2945 driver to Rust (wangyuxin) [task:587131]
  - rust: Convert four drivers to Rust (chenlongteng) [task:587131]
  - rust: Standardize comments part4 (liuhaitian) [task:587131]
  - rust: Implement HID core functions in Rust (yijiqian) [task:587131]
  - rust: Convert the comments in bcm5974, cyapa_common/gen3/gen5 (input/mouse) into English (yijiqian) [task:587131]
  - rust: Convert hd3ss3220 & rts5453 & fsa4480 driver to Rust (chenlongteng) [task:587131]
  - rust/hwmon: Convert tmp401 driver to Rust (wangyuxin) [task:587131]
  - rust: iio_hwmon driver fix (liuhaitian) [task:587131]
  - rust: update drivers comments (lingfuyi) [task:587131]
  - rust: Enhance oxp-sensors driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance the smpro-hwmon driver security with Rust (liuhaitian) [task:587131]
  - rust: update watchdog driver comments (Haoze Wu) [task:587131]
  - rust: Add infrastructure for C2Rust migration of partial drivers (liuhaitian) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs files-4 (wulinen) [task:587131]
  - rust: update driver shim comments (Haoze Wu) [task:587131]
  - rust: hwmon: Translate comments to English and add SPDX (wangyuxin) [task:587131]
  - rust: Covert others nls drivers to rust (lingfuyi) [task:587131]
  - rust: normalize qlogic and kernel-helpers comments to English (gaoyinggang) [task:587131]
  - rust: update joystick driver comments (long zhou) [task:587131]
  - rust: scsi/fnic: Extend SCSI, FCS and VNIC device layers (chentao) [task:587131]
  - rust: update unit_test,template and subsystems comments (long zhou) [task:587131]
  - rust: Convert cp932 NLS driver to Rust (lingfuyi) [task:587131]
  - rust: scsi/fnic: Add main driver, trace and debugfs modules (chentao) [task:587131]
  - rust: scsi/fnic: Add SCSI processing and FC services in Rust (chentao) [task:587131]
  - rust: scsi/fnic: Add FNIC core driver structures in Rust (chentao) [task:587131]
  - rust: Implement HID core functions in Rust (chenlongteng) [task:587131]
  - rust: Convert ADT7470 driver to Rust (lifengxiang) [task:587131]
  - rust: convert comments to English and add license headers (lifengxiang) [task:587131]
  - rust: convert comments to English and add license headers (lifengxiang) [task:587131]
  - rust: Convert NLS CP950 to Rust (lingfuyi) [task:587131]
  - rust: scsi/fnic: Add VNIC hardware abstraction layer in Rust (chentao) [task:587131]
  - rust: scsi/fnic: Add Rust driver framework infrastructure (chentao) [task:587131]
  - rust: update pwm driver comments (long zhou) [task:587131]
  - rust: i3c: Convert Chinese comments to English (chentao) [task:587131]
  - rust: Enhance corsair-cpro driver security with Rust (liuhaitian) [task:587131]
  - rust: Translate comments to English in drivers (lifengxiang) [task:587131]
  - rust: Add ignore information (liuhaitian) [task:587131]
  - rust: Enhance the da9052-hwmon driver security with Rust (liuhaitian) [task:587131]
  - rust: Standardize comments part3 (liuhaitian) [task:587131]
  - rust: Enhance the INA238 driver security with Rust (liuhaitian) [task:587131]
  - block/nbd: rust: port Netlink CONNECT and RECONFIGURE to Rust (sangliang) [task:587131]
  - block/nbd: rust: port Netlink DISCONNECT/STATUS and Debugfs to Rust (sangliang) [task:587131]
  - rust/qlogic: fix compilation errors in qlcnic 83xx Rust driver (Haoze Wu) [task:587131]
  - rust: update reset driver comments (long zhou) [task:587131]
  - rust: update rmi4 driver comments (long zhou) [task:587131]
  - rust: Add path compare and probe wrappers, fix hid_generic (yijiqian) [task:587131]
  - rust: Convert report/field registration and report parser to Rust (yijiqian) [task:587131]
  - rust: update gpio comments (long zhou) [task:587131]
  - rust: Add qlcnic context, DCB, minidump, SR-IOV and sysfs in Rust. (gaoyinggang) [task:587131]
  - rust: Convert report parser, free report, resolution multiplier and scan to Rust (yijiqian) [task:587131]
  - rust: Convert fetch_item func and hid_parser_global func in hid_core (yijiqian) [task:587131]
  - rust: update touchscreen drivers comments (long zhou) [task:587131]
  - rust: gpio: fix unused import and variable warnings in unit tests (sangliang) [task:587131]
  - block/nbd: rust: port module init and cleanup to Rust (sangliang) [task:587131]
  - block/nbd: rust: port device start, disconnect, and config_put to Rust (sangliang) [task:587131]
  - rust: Convert the hid_close_report function in hid_core (yijiqian) [task:587131]
  - block/nbd: export nbd_cmd_size for Rust shim tag_set init (sangliang) [task:587131]
  - block/nbd: rust: port blk-mq ops and socket add/reconnect to Rust (sangliang) [task:587131]
  - block/nbd: rust: port handle_reply, clear_req, handle_cmd to Rust (sangliang) [task:587131]
  - rust: Convert HID core driver to Rust (yijiqian) [task:587131]
  - drivers/rust/drivers/scsi: add qedf net (wulinen) [task:587131]
  - rust: Add Rust ethtool, init and io modules in qlcnic (gaoyinggang) [task:587131]
  - rust: Add full Rust qlcnic_main.rs and qlcnic_hw.rs (gaoyinggang) [task:587131]
  - rust: Convert hid-generic driver to Rust (yijiqian) [task:587131]
  - rust: convert hid_generic_probe (yijiqian) [task:587131]
  - rust: Building HID infrastructure (yijiqian) [task:587131]
  - rust: Convert input/mouse/cyapa Gen3/Gen5/Gen6 to Rust (yijiqian) [task:587131]
  - rust: qlogic: complete qla3xxx driver with MSI and ethtool support (Haoze Wu) [task:587131]
  - rust: netxen: Complete NetXen NIC driver Rust translation (Haoze Wu) [task:587131]
  - rust: netxen: Complete NetXen NIC driver Rust translation (Haoze Wu) [task:587131]
  - rust: i3c: Add hardware controller drivers in Rust (chentao) [task:587131]
  - rust: i3c: Add IBI and compatibility helper modules (chentao) [task:587131]
  - rust: i3c: Add transfer and control helper modules (chentao) [task:587131]
  - rust: i3c: Add address and device management helpers (chentao) [task:587131]
  - rust: i3c: Add master_ops and related modules (chentao) [task:587131]
  - rust: i3c: Add ccc_cmd and transfer helper modules (chentao) [task:587131]
  - rust: i3c: Add daa, sysfs and bus helper modules (chentao) [task:587131]
  - rust: Add unaligned access and enhance wrappers (yijiqian) [task:587131]
  - kvm: Fix virtcca VM failed to boot (Hao Ge) [task:596021]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.5.v2601
changelog:
  - spec: Add Module.kabi_* to kernel source package (Jiangshan Yi) [task:598429]
  - kabi: initialize kabi list and symvers for v11 2603 (Jiangshan Yi) [task:598429]
  - rust: fix type paths after bindings types moved to bindings::types (sangliang) [task:587131]
  - configs/x86: enable config for INTEL_IOMMU and INTEL_IOMMU_SVM (tanze) [bug:497331]
  - update-kabilist.sh: add sw64 support (Jiangshan Yi) [task:598429]
  - configs: update generic_defconfig (Jiangshan Yi) [bug:496751, task:599339, task:598999]
  - amd64: enable EDAC drivers (Wang Yan) [bug:496771]
  - PM: Implement s3 timeout wakeup interface (Riwen Lu) [task:501149, task:590639]
  - drm/nouveau: kill plymouth before remove efifb (Wang Jiang) [bug:476569, task:590639]
  - vt: add func to get fg_console vt process info (Lu Yao) [bug:469845, task:590639]
  - usb: Fix the touchscreen(248a:501f) not working after s3 wake-up (dengjie03) [bug:449043, task:590639]
  - drm/nouveau: Solve the occasional screen flickering issue when switching to the first tty on gt730. (Wang Jiang) [bug:470713, task:590639]
  - drm/nouveau: Resolve the issue of the stress test application crashing (Wang Jiang) [bug:395369, task:590639]
  - drm/atomic: prioritize the judgment of hotspot attributes (Lu Yao) [task:561737, task:590639]
  - input: Reduce the duration of close input devices (songxiebing) [bug:434335, task:590639]
  - ata: Disable the Stagered Spin-up function (xiongxin) [bug:449871, task:590639]
  - drm/amdgpu: skip suspend when shutdown (Lu Yao) [bug:451223, task:590639]
  - acpi: cix: Rename acpi_clk_get_hw() function (dengjie03) [task:456373, task:590639]
  - usb: quirks: Add NO_LPM quirk for Realtek USB3.2 Hub (Jiayi Li) [task:532899, task:590639]
  - usb: quirks: Add USB_QUIRK_NO_LPM for realtek usb 3.2 hub(0dba:0411). (huxiaoying) [bug:434615, task:590639]
  - smmu: fix stream id duplicate error when do func0 dma alias (songxiebing) [task:528911, task:590639]
  - tee: checking the legitimacy of pointer address (yangzhao) [bug:373431, task:590639]
  - tee: shm: Validate pointers in release path (wangchi) [bug:373431, task:590639]
  - drm/nouveau: Resolve the partial resolution display issue of the gt70 screen. (Wang Jiang) [bug:408849, task:590639]
  - drm/radeon: Solve the problem of the audio options not disappearing promptly after unplugging the HDMI audio. (Wang Jiang) [bug:410803, task:590639]
  - gpio: move phytium gpio pm ops to noirq phase (Riwen Lu) [task:513931, task:590639]
  - Revert "PHYTIUM: gpio: Optimize the logic of suspend and resume" (Riwen Lu) [task:513931, task:590639]
  - drm/amdgpu: do not skip vt switch by default (Shixiong Ou) [bug:406295, task:590639]
  - sched: enable optimize the context1 and spawn test cases of unixbench by default (Longlong Xia) [task:450572, bug:362845, task:590639]
  - sched: Optimize the context1 and spawn test cases of unixbench (liwanwu) [task:417269, task:590639]
  - drm/amd/display: Delay hotplug detection time (Shixiong Ou) [bug:391627, bug:365869, task:590639]
  - drm/amdgpu: Fix the issue where audio still shows as connected after unplugging HDMI on AMD Oland cards. (Wang Jiang) [bug:365681, task:590639]
  - Revert "percpu_counter: add a cmpxchg-based _add_batch variant" (zenghongling) [task:450572, task:388551, task:590639]
  - drm/amdgpu: fix amdgpu_drv compile error (Lu Yao) [task:475401, task:590639]
  - drm: drm for si oland amdgpu (yangdeyi) [task:462438, task:590639]
  - mm: add max mode support for kymem turbo (Enze Li) [bug:490185]
  - machine_t: Add PHYTIUM D3000M interface (Riwen Lu) [task:453481, task:590639]
  - rust: update x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - LoongArch: Add crash dump support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add ELF binary support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add EFI binary support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add preparatory infrastructure for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add struct loongarch_image_header for kernel (Youling Tang) [task:598607]
  - mptcp: track fallbacks accurately via mibs (Paolo Abeni) [task:598609]
  - selftests: mptcp: add a check for 'add_addr_accepted' (Gang Yan) [task:598609]
  - selftests: mptcp: add checks for fallback counters (Gang Yan) [task:598609]
  - mptcp: allow overridden write_space to be invoked (Geliang Tang) [task:598609]
  - selftests: mptcp: close server IPC descriptors (Geliang Tang) [task:598609]
  - selftests: mptcp: close server file descriptors (Geliang Tang) [task:598609]
  - selftests: mptcp: join: allow more time to send ADD_ADDR (Matthieu Baerts (NGI0)) [task:598609]
  - selftests: mptcp: join: tolerate more ADD_ADDR (Matthieu Baerts (NGI0)) [task:598609]
  - mptcp: make ADD_ADDR retransmission timeout adaptive (Geliang Tang) [task:598609]
  - mptcp: add TCP_MAXSEG sockopt support (Geliang Tang) [task:598609]
  - tcp: add tcp_sock_set_maxseg (Geliang Tang) [task:598609]
  - mptcp: sockopt: drop redundant tcp_getsockopt (Geliang Tang) [task:598609]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.6.v2601
changelog:
  - security/ksaf: modify readonly mount hook para in fsmount (zhubing) [bug:499961]
  - rust: fix cyapa PM ops with CONFIG_RUST_DRIVER disabled (yijiqian) [task:587131]
  - Revert "rust: Enable configuration items" (周龙) [task:603115]
  - 3rd/mwv207: fix compile error (Lu Yao) [task:603117]
  - configs: enable auto-tuning on x86 and arm64 platforms (Enze Li) [task:525875]
  - rust: Add conditional compilation (liuhaitian) [task:587131]
  - configs: update generic_defconfig (Jiangshan Yi) [task:602241]
  - rust: Add conditional compilation (liuhaitian) [task:587131]
  - rust: Enable configuration items (liuhaitian) [task:587131]
  - ksaf: add ksaf_file_pre_open_fname hook (penghuaihe) [bug:500253]
  - rust: reduce mouse C glue by preferring Rust implementations (yijiqian) [task:587131]
  - kabi: Add kabi extended symvers check (Jiangshan Yi) [task:443413]
  - Documentation: remove sensitive wording from arcnet-hardware.rst (Haofeng.Li) [task:601483]
  - rust: reduce compiled C code by preferring Rust implementations (yijiqian) [task:587131]
  - configs/arm64: enable S3 timeout wakeup option (Riwen Lu) [task:590639]
  - rust: fix issues when built as module (CONFIG_SENSORS_K10TEMP=m) (gaoyinggang) [task:587131]
  - rust: fix SP5100 TCO WDT driver build issue (Haoze Wu) [task:587131]
  - SUNWAY: fix mmap_base exceeding Java assertion address (Gu Yuchen) [task:597783]
  - configs: enable SCSI_DH_ALUA (zhanggenjian) [bug:499437]
  - watchdog: Enable CONFIG_SOFT_WATCHDOG as module (wudandan) [bug:500569]
  - sched/kysched: Enable top task scheduler feature to klas-2603 (fangqiurong) [task:514421]
  - security/ksaf: add readonly mount hook in fsmount (zhubing) [bug:499961]
  - configs: enable CONFIG_RDMA_RXE and CONFIG_RDMA_SIW for RDMA test (Qingshuang Fu) [bug:499355]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.7.v2601
changelog:
  - config: re-enable CONFIG_NETKIT for generic_defconfig (Yun Lu) [bug:505271]
  - selftests: add damon tests to kernel-selftests package (Haofeng.Li) [bug:502773]
  - rust: make i3c Rust-only in Rust mode (chentao) [task:587131]
  - rust: decouple fnic/i3c objects and harden linker selection (chentao) [task:587131]
  - configs: enable CONFIG_ACPI_APEI_EINJ for test (Qingshuang Fu) [bug:504223]
  - configs: Enable the ECDH algorithm config on the arm64 platform (chengang) [task:600123]
  - loongarch/config: Enable SDF module compilation option (mengdehui) [bug:503421]
  - rust: reduce typec C glue by preferring Rust implementations (chenlongteng) [task:587131]
  - block/nbd: rust: fix GPF when NBD is loaded as module (sangliang) [task:587131]
  - block/nbd: rust: fix config layout, built-in module check, blksize_bits (sangliang) [task:587131]
  - mm: introduce blacklist mechanism to kymem turbo (Enze Li) [bug:502177]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.8.v2601
changelog:
  - configs: enable CONFIG_DNOTIFY (Jiangshan Yi) [bug:505255]
  - configs: enable CONFIG_FPROBE (yangfeng) [bug:506633]
  - configs: enable CONFIG_ACPI_APEI_EINJ for test on arm64 (Qingshuang Fu) [bug:506005]
  - rust: hid: use pr_debug for trace logs and fix printk loglevel prefixes (yijiqian) [bug:505099]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.9.v2601
changelog:
  - sched: fix the modification to the struct of rq (Zeng Chi) [task:599029]
  - add config for cpuidle-haltpoll (Zeng Chi) [task:599029]
  - fix abi for cpuidle-haltpoll (Zeng Chi) [task:599029]
  - net: automatically set sk_ll_usec to 100 for netperf/netserver (luoxuanqiang) [bug:488163]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.10.v2601
changelog:
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Pauli Virtanen) [task:574001, task:631577]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Edward Adam Davis) [task:574001, task:631577]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Luiz Augusto von Dentz) [task:574001, task:631577]
  - ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [task:630943]
  - Revert "configs: enable blktrace on sunway" (Qingshuang Fu) [task:630615]
  - smb: client: fix OOB reads parsing symlink error response (Greg Kroah-Hartman) [task:622623, task:626555] {CVE-2026-31613}
  - Bluetooth: ISO: free rx_skb if not consumed (Pauli Virtanen) [task:629911]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Luiz Augusto von Dentz) [task:629911]
  - ALSA: usb-audio: Use the right limit for PCM OOB check (Takashi Iwai) [task:597001]
  - ALSA: usb-audio: Prevent excessive number of frames (Edward Adam Davis) [task:597001] {CVE-2026-23208}
  - ALSA: usb-audio: Use guard() for spin locks (Takashi Iwai) [task:597001]
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [task:600375]
  - macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [task:595741]
  - ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Kuniyuki Iwashima) [task:600375]
  - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF (Shigeru Yoshida) [task:595741]
  - net: dsa: properly keep track of conduit reference (Vladimir Oltean) [task:588999] {CVE-2025-71152}
  - net/sched: act_gate: snapshot parameters with RCU on replace (Paul Moses) [task:609645]
  - ipvlan: Make the addrs_lock be per port (Dmitry Skorodumov) [task:593735] {CVE-2026-23103}
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [task:609645]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Henrique Carvalho) [task:595983]
  - scsi: core: Fix error handling for scsi_alloc_sdev() (Junxiao Bi) [task:609645]
  - scsi: core: Fix refcount leak for tagset_refcnt (Junxiao Bi) [task:609645]
  - tracing: Add recursion protection in kernel stack trace recording (Steven Rostedt) [task:596509] {CVE-2026-23138}
  - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (Eric Dumazet) [task:595983]
  - mptcp: pm: in-kernel: rename 'local_addr_list' to 'endp_list' (Matthieu Baerts (NGI0)) [task:595983]
  - mptcp: pm: in-kernel: refactor fill_local_addresses_vec (Matthieu Baerts (NGI0)) [task:595983]
  - ALSA: aloop: Fix racy access at PCM trigger (Takashi Iwai) [task:597107] {CVE-2026-23191}
  - ALSA: aloop: Introduce a function to get if access is interleaved mode (Chancel Liu) [task:597107]
  - ALSA: aloop: Add control element for getting the access mode (Ivan Orlov) [task:597107]
  - ALSA: aloop: Add support for the non-interleaved access mode (Ivan Orlov) [task:597107]
  - af_unix: Give up GC if MSG_PEEK intervened. (Kuniyuki Iwashima) [task:609273] {CVE-2026-23394}
  - MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:629903] {CVE-2026-46300}
  - sunrpc: fix cache_request leak in cache_release (Jeff Layton) [task:609645]
  - PM: runtime: Fix a race condition related to device removal (Bart Van Assche) [task:609645]
  - net/mlx5e: Prevent concurrent access to IPSec ASO context (Jianbo Liu) [task:609645]
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Hannes Reinecke) [task:595741]
  - net/sched: ets: fix divide by zero in the offload path (Davide Caratti) [task:609645]
  - blktrace: fix __this_cpu_read/write in preemptible context (Chaitanya Kulkarni) [task:609117] {CVE-2026-23374}
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei) [task:615913]
  - nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny) [task:609645]
  - bonding: annotate data-races around slave->last_rx (Eric Dumazet)
  - nfc: nci: Fix race between rfkill and nci_unregister_device(). (Kuniyuki Iwashima) [task:595243]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Möller) [task:609645]
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [task:615913]
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Eric Dumazet) [task:615913]
  - netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu) [task:615913]
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso) [task:615913]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi) [task:612463]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [task:614703] {CVE-2026-31407}
  - scsi: qla2xxx: Validate sp before freeing associated memory (Anil Gurumurthy) [task:595983]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Anil Gurumurthy) [task:595983]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Anil Gurumurthy) [task:595983]
  - btrfs: fix NULL dereference on root when tracing inode eviction (Miquel Sabaté Solà) [task:609645]
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei) [task:609645]
  - net/sched: teql: Fix double-free in teql_master_xmit (Jamal Hadi Salim) [task:609645]
  - clsact: Fix use-after-free in init/destroy rollback asymmetry (Daniel Borkmann) [task:609645]
  - spi: fix statistics allocation (Johan Hovold) [task:609645]
  - spi: fix use-after-free on controller registration failure (Johan Hovold) [task:609645]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Chuck Lever) [task:612463]
  - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded (Jiayuan Chen) [task:609645]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski) [task:609645]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum) [task:609645]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [task:609645]
  - nvme: fix admin queue leak on controller reset (Ming Lei) [task:612463]
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [task:609645]
  - scsi: target: Fix recursive locking in __configfs_open_file() (Prithvi Tambewagh) [task:609645]
  - net: gro: fix outer network offset (Paolo Abeni) [task:595741]
  - crypto: virtio - Add spinlock protection with virtqueue notification (Bibo Mao) [task:595983]
  - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset (Perry Yuan) [task:597105] {CVE-2026-23213}
  - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single (Hao Ge) {CVE-2026-23219}
  - bonding: provide a net pointer to __skb_flow_dissect() (Eric Dumazet) [task:594541]
  - ipv6: annotate data-race in ndisc_router_discovery() (Eric Dumazet) [task:594541]
  - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (Jens Axboe) [task:594541]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Eric Dumazet) [task:594541]
  - net/mlx5e: TC, delete flows only for existing peers (Mark Bloch) [task:595243]
  - KVM: Don't clobber irqfd routing type when deassigning irqfd (Sean Christopherson) [task:595741]
  - perf: sched: Fix perf crash with new is_user_task() helper (Steven Rostedt) [task:595243]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (SeongJae Park) [task:594541]
  - flex_proportions: make fprop_new_period() hardirq safe (Jan Kara) [task:595243]
  - interconnect: debugfs: initialize src_node and dst_node to empty strings (Georgi Djakov) [task:594541]
  - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure (SeongJae Park) [task:594541]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [task:594541]
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Jiayuan Chen) [task:589527] {CVE-2025-71080}
  - arm64: Set __nocfi on swsusp_arch_resume() (Zhaoyang Huang) [task:594541]
  - migrate: correct lock ordering for hugetlb file folios (Matthew Wilcox (Oracle)) [task:594541]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Johan Hovold) [task:589349] {CVE-2025-71163}
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Eric Dumazet) [task:589037] {CVE-2026-23003}
  - ipv4: ip_gre: make ipgre_header() robust (Eric Dumazet) [task:589547] {CVE-2026-23011}
  - cpuset: fix warning when disabling remote partition (Chen Ridong) [task:589063] {CVE-2025-71142}
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi) [task:612463]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi) [task:609645]
  - pNFS: Fix a deadlock when returning a delegation during open() (Trond Myklebust) [task:609645]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [task:609645]
  - RDMA/siw: Fix potential NULL pointer dereference in header processing (YunJe Shin) [task:600375]
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [task:609645]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Anil Gurumurthy) [task:595983]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso) [task:609645]
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den) [task:609645]
  - RDMA/umad: Reject negative data_len in ib_umad_write (YunJe Shin) [task:600375]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [task:595741]
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (Andrew Fasano) [task:595741]
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (YunJe Shin) [task:595741]
  - ALSA: scarlett2: Fix buffer overflow in config retrieval (Samasth Norway Ananda) [task:594541]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Tetsuo Handa) [task:589075] {CVE-2025-71157}
  - mm/page_alloc: prevent pcp corruption with SMP=n (Vlastimil Babka) [task:594541]
  - fuse: fix io-uring list corruption for terminated non-committed requests (Joanne Koong) [task:589017] {CVE-2025-68805}
  - x86/mm: Fix SMP ordering in switch_mm_irqs_off() (Ingo Molnar) [task:555265] {CVE-2025-40174}
  - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Niklas Schnelle) [task:600375]
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Sean Christopherson) [task:589405] {CVE-2025-68810}
  - nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton) [task:595983]
  - NFSD: fix race between nfsd registration and exports_proc (Maninder Singh) [task:594541]
  - team: Move team device type change at the end of team_port_add (Nikola Z. Ivanov) [task:595243]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (Pauli Virtanen) [task:574001] {CVE-2025-68304}
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Luiz Augusto von Dentz) [task:574001]
  - nvme: fix memory allocation in nvme_pr_read_keys() (Sungwoo Kim) [task:609645]
  - nvme: reject invalid pr_read_keys() num_keys values (Stefan Hajnoczi) [task:609645]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [task:595741]
  - smb/client: fix memory leak in smb2_open_file() (ChenXiaoSong) [task:595741]
  - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref (Yang Erkun)
  - arm64/fpsimd: signal: Fix restoration of SVE context (Mark Rutland) [task:595243]
  - arm64/fpsimd: signal: Consistently read FPSIMD context (Mark Rutland) [task:595243]
  - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (Mark Rutland) [task:595243]
  - shmem: fix recovery on rename failures (Al Viro) [task:589347] {CVE-2025-71072}
  - audit: add fchmodat2() to change attributes class (Jeffrey Bencteux) [task:600375]
  - audit: add missing syscalls to read class (Jeffrey Bencteux) [task:600375]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Nicolin Chen) [task:588847]
  - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Nicolin Chen) [task:588847] {CVE-2024-53225}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [task:595741]
  - pidfs: validate extensible ioctls (Christian Brauner) [task:566415] {CVE-2025-40217}
  - configs: enable blktrace on sunway (liuyunchen) [bug:551671]
  - mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat)) [task:593731] {CVE-2026-23100}
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Jane Chu) [task:593731]
  - LoongArch: stmmac: fix mdc too high issues. (wanghongliang) [task:605031]
  - LoongArch: enable CONFIG_LEDS_GPIO (wanghongliang) [task:605031]
  - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE (wudandan) [task:605031]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [task:626685] {CVE-2026-43500}
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [task:626685]
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (David Howells) [task:626685]
  - rxrpc: only handle RESPONSE during service challenge (Wang Jie) [task:622807]
  - rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [task:626685]
  - rxrpc: Fix rxkad crypto unalignment handling (David Howells) [task:626685]
  - rxrpc: Fix memory leaks in rxkad_verify_response() (David Howells) [task:626685]
  - rxrpc: Fix CPU time starvation in I/O thread (David Howells) [task:626685]
  - rxrpc: Parse received packets before dealing with timeouts (David Howells) [task:626685]
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (David Howells) [task:618851]
  - rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu) [task:618851]
  - rxrpc: Fix data-race warning and potential load/store tearing (David Howells) [task:609645]
  - rust: Fix missing spaces during variable assignment in Rust compilation options (zhangxi) [task:606401]
  - tpm: Fix incorrect TCM branch handling in tpm_buf_fill_hmac_session (Wang Yan) [task:590217]
  - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal (Srish Srinivasan) [task:590217]
  - tpm2-sessions: Fix out of range indexing in name_size (Jarkko Sakkinen) [task:590217] {CVE-2025-68792}
  - tpm: Mask TPM RC in tpm2_start_auth_session() (Jarkko Sakkinen) [task:590217]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Sean Christopherson) [task:589343] {CVE-2026-23005}
  - netfilter: nf_conntrack_expect: use expect->helper (Pablo Neira Ayuso) [task:615913]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [task:626683] {CVE-2026-43284}
  - openvswitch: vport: fix self-deadlock on release of tunnel ports (Ilya Maximets) [task:628809]
  - bcache: fix uninitialized closure object (Mingzhe Zou) [task:623065, task:628809]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) [task:628809]
  - ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [task:628809]
  - ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [task:628809]
  - nvmet: move async event work off nvmet-wq (Chaitanya Kulkarni) [task:622731, task:626555] {CVE-2026-31557}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Xiang Mei) [task:622807, task:626555] {CVE-2026-43085}
  - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (Baolin Wang) [task:618851, task:626555] {CVE-2026-31648}
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN (Jenny Guanni Qu) [task:612463, task:626555] {CVE-2026-31525}
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (Weiming Shi) [task:612463, task:626555] {CVE-2026-31426}
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel) [task:615913, task:626555] {CVE-2026-31778}
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [task:622807, task:626555] {CVE-2026-31673}
  - mptcp: fix soft lockup in mptcp_recvmsg() (Li Xiasong) [task:624587, task:626555] {CVE-2026-43029}
  - mptcp: add eat_recv_skb helper (Geliang Tang) [task:624587, task:626555]
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito) [task:622807, task:626555] {CVE-2026-31708}
  - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust (Huacai Chen) [task:622957, task:626555] {CVE-2026-31558}
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [task:615913, task:626555] {CVE-2026-43037}
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson) [task:622807, task:626555] {CVE-2026-31697}
  - net: sched: act_csum: validate nested VLAN headers (Ruide Cao) [task:622807, task:626555] {CVE-2026-31684}
  - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback (Willem de Bruijn) [task:615913, task:626555] {CVE-2026-43057}
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) [task:622807, task:626555] {CVE-2026-31700}
  - xfrm: Wait for RCU readers during policy netns exit (Steffen Klassert) [task:622807, task:626555] {CVE-2026-43091}
  - drm/ioc32: stop speculation on the drm_compat_ioctl path (Greg Kroah-Hartman) [task:615913, task:626555] {CVE-2026-31781}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet) [task:615913, task:626555] {CVE-2026-43038}
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [task:622807, task:626555] {CVE-2026-31685}
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Pablo Neira Ayuso) [task:609645, task:626555] {CVE-2026-23392}
  - net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [task:612463, task:626555] {CVE-2026-31504}
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [task:622807, task:626555] {CVE-2026-43093}
  - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (Junxi Qian) [task:624647, task:626555] {CVE-2026-31774}
  - ext4: publish jinode after initialization (Li Chen) [task:615913, task:626555] {CVE-2026-31450}
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Jacob Moroni) [task:600375, task:626555] {CVE-2026-43128}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Greg Kroah-Hartman) [task:622807, task:626555] {CVE-2026-31614}
  - vxlan: validate ND option lengths in vxlan_na_create (Yang Yang) [task:615913, task:626555] {CVE-2026-31738}
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam) [task:612463, task:626555] {CVE-2026-31473}
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation (Yussuf Khalil) [task:623193, task:626555] {CVE-2026-31488}
  - ext4: avoid infinite loops caused by residual data (Edward Adam Davis) [task:612463, task:626555] {CVE-2026-31448}
  - ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike) [task:612463, task:626555] {CVE-2026-31447}
  - bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov) [task:615913, task:626555] {CVE-2026-43030}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [task:595741, task:626555] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Eric Dumazet) [task:595741, task:626555]
  - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). (Kuniyuki Iwashima) [task:626555] {CVE-2026-43016}
  - xfs: avoid dereferencing log items after push callbacks (Yuto Ohnuki) [task:612463, task:626555] {CVE-2026-31453}
  - fuse: reject oversized dirents in page cache (Samuel Page) [task:622807, task:626555] {CVE-2026-31694}
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Tuo Li) [task:623173, task:626555] {CVE-2026-31436}
  - ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [task:622807, task:626555] {CVE-2026-31602}
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson) [task:622807, task:626555] {CVE-2026-31699}
  - bridge: br_nd_send: validate ND option lengths (Yang Yang) [task:615913, task:626555] {CVE-2026-31752}
  - ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [task:622807, task:626555] {CVE-2026-31581}
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (xietangxin) [task:612463, task:626555] {CVE-2026-31469}
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan) [task:618851, task:626555] {CVE-2026-31533}
  - perf: Make sure to use pmu_ctx->pmu for groups (Peter Zijlstra) [task:612463, task:626555] {CVE-2026-31528}
  - perf: Extract a few helpers (Peter Zijlstra) [task:612463, task:626555]
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Zide Chen) [task:622807, task:626555] {CVE-2026-43079}
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [task:615913, task:626555] {CVE-2026-43028}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen) [task:618851, task:626555] {CVE-2026-31669}
  - bonding: fix use-after-free due to enslave fail after slave array update (Nikolay Aleksandrov) [task:626555] {CVE-2026-23171}
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Inseo An) [task:600375, task:626555] {CVE-2026-23231}
  - Input: lkkbd - disable pending work before freeing device (Minseong Kim) [task:589015, task:626555] {CVE-2025-71073}
  - futex: Require sys_futex_requeue() to have identical flags (Peter Zijlstra) [task:622903, task:626555] {CVE-2026-31554}
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (Takashi Iwai) [task:600375, task:626555] {CVE-2026-43279}
  - nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi) [task:609645, task:626555] {CVE-2026-23397}
  - iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore) [task:615913, task:626555] {CVE-2026-31761}
  - iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore) [task:615913, task:626555]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [task:622807, task:626555] {CVE-2026-43077}
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson) [task:622807, task:626555] {CVE-2026-31698}
  - xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki) [task:612463, task:626555] {CVE-2026-31454}
  - xfrm: prevent policy_hthresh.work from racing with netns teardown (Minwoo Ra) [task:623237, task:626555] {CVE-2026-31516}
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [task:623239, task:626555] {CVE-2026-31449}
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang) [task:615913, task:626555] {CVE-2026-43027}
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich) [task:615913, task:626555] {CVE-2026-43040}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li) [task:615913, task:626555] {CVE-2026-31759}
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Josef Bacik) [task:615913, task:626555] {CVE-2026-43054}
  - cifs: some missing initializations on replay (Shyam Prasad N) [task:600375, task:626555] {CVE-2026-31693}
  - media: mediatek: vcodec: fix use-after-free in encoder release path (Fan Wu) [task:622807, task:626555] {CVE-2026-31584}
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (Shivam Kumar) [task:594541, task:626555] {CVE-2026-22998}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [task:594541, task:626555]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim) [task:609645, task:626555] {CVE-2026-23458}
  - net: ioam6: fix OOB and missing lock (Justin Iurman) [task:626555] {CVE-2026-43083}
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() (Kwok Kin Ming) [task:595741, task:626555] {CVE-2026-23178}
  - xdp: produce a warning when calculated tailroom is negative (Larysa Zaremba) [task:609645, task:626555] {CVE-2026-23343}
  - xdp: use modulo operation to calculate XDP frag tailroom (Larysa Zaremba) [task:609645, task:626555]
  - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [task:612463, task:626555] {CVE-2026-31508}
  - Squashfs: check metadata block offset is within range (Phillip Lougher) [task:609645, task:626555] {CVE-2026-23388}
  - ALSA: caiaq: take a reference on the USB device in create_card() (Berk Cem Goksel) [task:622807, task:626555] {CVE-2026-31701}
  - smb: client: fix krb5 mount with username option (Paulo Alcantara) [task:609645, task:626555] {CVE-2026-31392}
  - openvswitch: validate MPLS set/set_masked payload length (Yang Yang) [task:612463, task:626555] {CVE-2026-31679}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu) [task:609645, task:626555] {CVE-2026-23456}
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang) [task:615913, task:626555] {CVE-2026-31680}
  - eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [task:622807, task:626555] {CVE-2026-43074}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Chuck Lever) [task:609645, task:626555] {CVE-2026-31403}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [task:622807, task:626555] {CVE-2026-31607}
  - pstore: ram_core: fix incorrect success return when vmap() fails (Ruipeng Qi) [task:600375, task:626555] {CVE-2026-43124}
  - bridge: br_nd_send: linearize skb before parsing ND options (Yang Yang) [task:615913, task:626555] {CVE-2026-31682}
  - net/sched: act_ife: Fix metalist update behavior (Jamal Hadi Salim) [task:609645, task:626555] {CVE-2026-23378}
  - efivarfs: fix error propagation in efivar_entry_get() (Kohei Enju) [task:595243, task:626555] {CVE-2026-23156}
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [task:622807, task:626555] {CVE-2026-31586}
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo) [task:609645, task:626555] {CVE-2026-23318}
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei) [task:612463, task:626555] {CVE-2026-31674}
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [task:609645, task:626555] {CVE-2026-23412}
  - bpf: Fix incorrect pruning due to atomic fetch precision tracking (Daniel Borkmann) [task:624533, task:626555] {CVE-2026-43009}
  - openvswitch: defer tunnel netdev_put to RCU release (Yang Yang) [task:612463, task:626555] {CVE-2026-31678}
  - ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen) [task:612463, task:626555] {CVE-2026-31446}
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Benoît Sevens) [task:615913, task:626555] {CVE-2026-43051}
  - xfrm_user: fix info leak in build_mapping() (Greg Kroah-Hartman) [task:622807, task:626555] {CVE-2026-43089}
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do) [task:618851, task:626555] {CVE-2026-31665}
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption (Yucheng Lu) [task:615913, task:626555] {CVE-2026-31675}
  - bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [task:622807, task:626555] {CVE-2026-31580}
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai) [task:615913, task:626555] {CVE-2026-31776}
  - KVM: arm64: Read PMUVer as unsigned (James Clark) [task:628809]
  - ANOLIS: x86/csv: Allocate memory cyclically from different csv_cma (Wang Yan) [task:594243]
  - md-cluster: fix no recovery job when adding/re-adding a disk (Heming Zhao) [task:613175]
  - md-cluster: fix hanging issue while a new disk adding (Heming Zhao) [task:613175]
  - md/raid0: don't free conf on raid0_run failure (Christoph Hellwig) [task:613175]
  - md: add check for sleepers in md_wakeup_thread() (Florian-Ewald Mueller) [task:613175]
  - md/raid1: fix choose next idle in read_balance() (Yu Kuai) [task:613175]
  - md/raid1: record nonrot rdevs while adding/removing rdevs to conf (Yu Kuai) [task:613175]
  - md/raid1: factor out helpers to add rdev to conf (Yu Kuai) [task:613175]
  - md: sync blockdev before stopping raid or setting readonly (Li Nan) [task:613175]
  - md: factor out a helper to sync mddev (Li Nan) [task:613175]
  - md: return directly before setting did_set_md_closing (Li Nan) [task:613175]
  - md: get rdev->mddev with READ_ONCE() (Li Lingfeng) [task:613175]
  - x86/vmware: Fix hypercall clobbers (Josh Poimboeuf) [task:596649] {CVE-2026-23215}
  - x86/vmware: Add TDX hypercall support (Alexey Makhalov) [task:596649]
  - x86/vmware: Remove legacy VMWARE_HYPERCALL* macros (Alexey Makhalov) [task:596649]
  - x86/vmware: Correct macro names (Alexey Makhalov) [task:596649]
  - x86/vmware: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - drm/vmwgfx: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - input/vmmouse: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - ptp/vmware: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - x86/vmware: Introduce VMware hypercall API (Alexey Makhalov) [task:596649]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Pingfan Liu) [task:595579]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Pingfan Liu) [task:595579]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Pingfan Liu) [task:595579]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Pingfan Liu) [task:595579]
  - OPENEULER: ipmi: Add HiSilicon IPMI Page Soft Offline driver (Wanhan He) [task:604183]
  - OPENEULER: apei/ghes: Add sysctl interface to control soft-offline page isolation (Qi Xi) [task:604183]
  - Add MAP_PEER_SHARED in SUNWAY (liuyunchen) [task:609357]
  - PM / devfreq: hisi: Fix potential UAF in OPP handling (Pengjie Zhang) [task:613159]
  - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (Zubin Mithra) [task:623055] {CVE-2026-31470}
  - block: change blk_mq_add_to_batch() third argument type to bool (Shin'ichiro Kawasaki) [bug:521953]
  - net: skb: fix cross-cache free of KFENCE-allocated skb head (Jiayuan Chen) [task:619059] {CVE-2026-31429}
  - tcp: secure_seq: add back ports to TS offset (Eric Dumazet) [task:606409] {CVE-2026-23247}
  - bpf, arm64: Enable the inline of bpf_kptr_xchg() (Hou Tao) [task:613181]
  - skip policy check for virtualized environments (liuyunchen) [bug:521073]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Pablo Neira Ayuso) [task:606585] {CVE-2026-23272}
  - kernel: Remove signal hacks for vhost_tasks (Mike Christie) [task:513401]
  - net: add proper RCU protection to /proc/net/ptype (Eric Dumazet) [task:605985] {CVE-2026-23255}
  - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (Jiayuan Chen) [task:614737] {CVE-2026-23472}
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei) [task:616143] {CVE-2026-31419}
  - bridge: mrp: reject zero test interval to avoid OOM panic (Xiang Mei) [task:616111] {CVE-2026-31420}
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Namjae Jeon) [task:596721] {CVE-2026-23226}
  - ksmbd: check return value of xa_store() in krb5_authenticate (Namjae Jeon) [task:596721]
  - smb: server: smb2pdu: check return value of xa_store() (Salah Triki) [task:596721]
  - selftests/net: calibrate txtimestamp (Willem de Bruijn) [task:613189]
  - bpf: Fix constant blinding for PROBE_MEM32 stores (Sachin Kumar) [task:614747] {CVE-2026-23417}
  - OPENEULER: sunrpc: fix NULL pointer dereference in rpcb_register_inet6 and rpcb_register_inet4 (zhaoyonghao) [task:612091]
  - watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_se30_wdt_probe() (Henry Martin) [task:614431] {CVE-2025-38144}
  - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() (Hyunwoo Kim) [task:614571] {CVE-2026-31406}
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Ben Horgan) [task:614697] {CVE-2026-23433}
  - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() (Qiang Ma) [task:592297, task:611585] {CVE-2026-23027}
  - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() (Qiang Ma) [task:592325, task:611585] {CVE-2026-23028}
  - ANOLIS: x86/mm: csv: Increase the maximum value of `csv_mem_percentage` from 80 to 95 (Zhiguang Ni) [task:594241]
  - tracing: Fix enabling of tracing on file release (Steven Rostedt) [task:613165]
  - OPENEULER: PCI: Fix NVMe link speed downgrade to 2.5GT/s during hotplug (Jinhui Guo) [task:612093]
  - ipv6: add NULL checks for idev in SRv6 paths (Minhong He) [task:613203] {CVE-2026-23442}
  - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations (Felix Fietkau) [task:613197] {CVE-2026-31394}
  - ext4: initialize superblock fields in the kballoc-test.c kunit tests (Zhang Yi) [task:551425]
  - OPENEULER: dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [task:612095]
  - sunrpc: fix race in cache cleanup causing stale nextcheck time (Long Li) [task:612089]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Pablo Neira Ayuso) [task:610371] {CVE-2026-23399}
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson) [task:611423] {CVE-2026-23401}
  - mm: remove unnecessary calls to lru_add_drain (Rik van Riel) [task:573689]
  - netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash (Florian Westphal) [task:589629]
  - io_uring/rw: free potentially allocated iovec on cache put failure (Jens Axboe) [task:606459] {CVE-2026-23259}
  - io_uring: add async data clear/free helpers (Jens Axboe) [task:606459]
  - rcu: Add lockdep_assert_in_rcu_read_lock() and friends (Paul E. McKenney) [task:606593]
  - ice: Fix memory leak in ice_set_ringparam() (Zilin Guan) [task:609147] {CVE-2026-23389}
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Thomas Gleixner) [task:609085]
  - clocksource: Set cs_watchdog_read() checks based on .uncertainty_margin (Paul E. McKenney) [task:609085]
  - net: annotate data-races around sk->sk_{data_ready,write_space} (Eric Dumazet) [task:609103] {CVE-2026-23302}
  - bridge: cfm: Fix race condition in peer_mep deletion (Hyunwoo Kim) [task:609257] {CVE-2026-23393}
  - OPENEULER: arm64: topology: Setup amu fie when cpu hotplugging (Lifeng Zheng) [task:605313]
  - LoongArch: Replace seq_printf() with seq_puts() for simple strings (George Guo) [task:555987]
  - LoongArch: Add 128-bit atomic cmpxchg support (George Guo) [task:555987]
  - LoongArch: Add detection for SC.Q support (George Guo) [task:555987]
  - LoongArch: Select HAVE_CMPXCHG_LOCAL in Kconfig (Huacai Chen) [task:555987]
  - LoongArch: Only use SC.Q when supported by the assembler (Thomas Weißschuh) [task:555987]
  - LoongArch: Complete CPUCFG registers definition (Huacai Chen) [task:555987]
  - LoongArch: BPF: Make error handling robust in arch_prepare_bpf_trampoline() (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Make trampoline size stable (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Don't align trampoline size (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Remove duplicated bpf_flush_icache() (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Remove duplicated flags check (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Fix uninitialized symbol 'retval_off' (Huacai Chen) [task:555987]
  - LoongArch: BPF: Optimize sign-extention mov instructions (Tiezhu Yang) [task:555987]
  - LoongArch: Add irq_work support via self IPIs (Huacai Chen) [task:555987]
  - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (Fuad Tabba) [task:609211] {CVE-2026-23383}
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen) [task:608995] {CVE-2026-23300}
  - bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju) [task:609007] {CVE-2026-23359}
  - cpufreq: intel_pstate: Fix crash during turbo disable (Srinivas Pandruvada) [task:608555] {CVE-2026-23332}
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Rafael J. Wysocki) [task:608555]
  - mm: thp: deny THP for files on anonymous inodes (Deepanshu Kartikey) [task:608979] {CVE-2026-23375}
  - VOLANS: vrcdrv: update vrcdrv RAID card driver to version 2.0-b2599-gf365215 (Cao Guanghui) [task:577915]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [task:606591] {CVE-2026-23278}
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (Peter Zijlstra) [task:606597] {CVE-2026-23271}
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [task:606589] {CVE-2026-23274}
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira) [task:606435] {CVE-2026-23270}
  - rtl8192FU: fix compile error due to wireless stack change (Yi Cong) [task:605713]
  - arm64, tlbflush: don't TLBI broadcast if page reused in write fault (Huang Ying) [task:594255]
  - mm: add spurious fault fixing support for huge pmd (Huang Ying) [task:594255]
  - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (Lang Xu)
  - espintcp: Fix race condition in espintcp_close() (Hyunwoo Kim) [task:603763] {CVE-2026-23239}
  - tls: Fix race condition in tls_sw_cancel_work_tx() (Hyunwoo Kim) [task:603765] {CVE-2026-23240}
  - btrfs: do not strictly require dirty metadata threshold for metadata writepages (Qu Wenruo) [task:597229] {CVE-2026-23157}
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Jie Zhan) [task:597037]
  - selftests/bpf: Add selftests for the invocation of bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - mm/khugepaged: use KMEM_CACHE() (Wei Yang) [task:594223]
  - mm/ksm: cleanup mm_slot_entry() invocation (Wei Yang) [task:594223]
  - mm/khugepaged: remove definition of struct khugepaged_mm_slot (Wei Yang) [task:594223]
  - mm/ksm: get mm_slot by mm_slot_entry() when slot is !NULL (Wei Yang) [task:594223]
  - mm/khugepaged: use list_xxx() helper to improve readability (Wei Yang) [task:594223]
  - mm/khugepaged: fix comment for default scan sleep duration (wang lian) [task:594223]
  - OPENEULER: cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost (Lifeng Zheng) [task:597037]
  - OPENEULER: cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() (Lifeng Zheng) [task:597037]
  - OPENEULER: cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() (Lifeng Zheng) [task:597037]
  - OPENEULER: cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() (Jie Zhan) [task:597037]
  - HYGON: cpu vulnerabilities: support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS (zhangjun) [task:594245]
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() (Lifeng Zheng) [task:597037]
  - cpufreq: Remove duplicate check in __cpufreq_offline() (Lifeng Zheng) [task:597037]
  - cpufreq: Replace deprecated strncpy() with strscpy() (Justin Stitt) [task:597037]
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs (Lifeng Zheng) [task:597037]
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() (Lifeng Zheng) [task:597037]
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class() (Lifeng Zheng) [task:597037]
  - cpufreq: CPPC: Remove cpu_data_list (Lifeng Zheng) [task:597037]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Rafael J. Wysocki) [task:597101] {CVE-2026-23186}
  - md: suspend array while updating raid_disks via sysfs (FengWei Shih) [task:596723] {CVE-2025-71225}
  - r8169: add support for RTL8168M (Heiner Kallweit) [bug:495805]
  - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode (Thorsten Blum) [task:597121] {CVE-2025-71231}
  - net: fix segmentation of forwarding fraglist GRO (Jibin Zhang) [task:597103] {CVE-2026-23154}
  - net: ipv6: fix TCP GSO segmentation with NAT (Felix Fietkau) [task:597103]
  - net: gso: fix tcp fraglist segmentation after pull from frag_list (Felix Fietkau) [task:597103]
  - net: add support for segmenting TCP fraglist GSO packets (Felix Fietkau) [task:597103]
  - mm, shmem: prevent infinite loop on truncate race (Kairui Song) [task:596499] {CVE-2026-23177}
  - mm/shmem, swap: fix race of truncate and swap entry split (Kairui Song) [task:596499]
  - KVM: arm64: Get rid of __kvm_get_mdcr_el2() and related warts (Oliver Upton) [task:594237]
  - arm64: sysreg: Migrate MDCR_EL2 definition to table (Oliver Upton) [task:594237]
  - rxrpc: Fix recvmsg() unconditional requeue (David Howells) [task:593779] {CVE-2026-23066}
  - erofs: avoid infinite loops due to corrupted subpage compact indexes (Gao Xiang) [task:573831] {CVE-2025-68251}
  - dm-verity: disable recursive forward error correction (Mikulas Patocka) [task:589049] {CVE-2025-71161}
  - virtio_net: fix device mismatch in devm_kzalloc/devm_kfree (Kommula Shiva Shankar) [task:593777] {CVE-2026-23046}
  - netfilter: nf_conntrack_expect: honor expectation helper field (Pablo Neira Ayuso) [task:615913]
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [task:622625]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [task:622625]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [task:622625]
  - crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625]
  - crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [task:622625]
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625]
  - crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [task:622625]
  - doc: add documentation for XFS AF mount options (zhangshida) [task:225344, bug:506709]
  - xfs: fix AF search loop to support three allocation fields (zhangshida) [task:225344, bug:506709]
  - xfs: add verifier for AF layout mount options (zhangshida) [task:225344, bug:506709]
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [task:618851] {CVE-2026-31668}
  - rv: Use strings in da monitors tracepoints (Gabriele Monaco) [task:553379] {CVE-2025-38636}
  - mm/damon/sysfs: Add input validation for priority parameter (Enze Li) [bug:507657]
  - kalert: fix RAS event reporting ID mismatch (Huiwen He) [bug:509037]
  - kalert: limit maximum subscribers to 2048 (Huiwen He) [task:526009]
  - kalert: optimize heartbeat for proactive subscriber cleanup (Huiwen He) [task:526009]
  - kalert: implement unsubscribe handler (Huiwen He) [task:526009]
  - kalert: move INIT_WORK to connection initialization (Huiwen He) [task:526009]
  - LoongArch: Fix kexec cmdline check to be outside segment loop (Youling Tang) [task:607367]
  - make the packet_filter compiled as a module (YANGANG) [bug:504861]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.11.v2601
changelog:
  - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [task:636187]
  - MAILLIST: net/rds: reset op_nents when zerocopy page pin fails (Allison Henderson) [task:632491]


author: wangjie<wangjie294@huawei.com> -1.0.7-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-15.p01
changelog:
  - Type:bugfix
  - ID:[TASK#633631]
  - SUG:NA
  - DESC:libbtrfsutil: pass temporary subvol info buffer in btrfs_util_deleted_subvolumes_fd()


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: 1. enable pcp packages for cockpit
          2. add Patch: 0001-part1-support-and-add-zh_CN-translate-for-playground.patch
             add Patch: 0002-part2-support-and-add-zh_CN-translate-for-playground.patch
             Translate: and add zh_CN translate support for module playground
          3. add Patch: 0001-fix-zh_CN-translation-issue-of-storage-module.patch
             zh_CN translate for storaged module
          4. add Patch: 0001-kylin-fix-zh_CN-translation-issue-of-autoupdates.patch
             fix zh_CN translate of autoupdates
          5. add Patch: 0001-fix-wrong-invalid-format-error-when-setting-datetime.patch
             fix wrong invalid format error when setting datetime


author: wangshuo <wangshuo@kylinos.cn> - 309-4.p02
changelog:
  - Type:CVE
  - ID:CVE-2026-4802 KVE-2026-0415
  - SUG:NA
  - DESC:Fix CVE-2026-4802 KVE-2026-0415, sanitize value to prevent command injection


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-13.p03
changelog:
  - Type:update
  - ID:TASK#630021
  - SUG:NA
  - DESC:fix CVE-2025-9230,CVE-2025-69418,CVE-2026-22796,CVE-2026-22795,
  	   CVE-2025-69419,CVE-2025-68160,CVE-2025-69421,CVE-2025-69420,
             CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2.9.11-1.p01
changelog:
  - Type: update
  - ID: [BUG#382649]
  - SUG: NA
  - DESC: Add Traditional Chinese (Hong Kong) translation support


author: peijiankang <peijiankang@kylinos.cn> - 1:2.4.7-6.se.02.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#604487]
  - SUG:  NA
  - DESC: sync from version 1:2.4.7-6.se.01.p02 to fix CVE-2025-58436 CVE-2025-61915
          Unified source code support for x86_64 aarch64 loongarch64 and sw_64 architectures


author: peijiankang <peijiankang@kylinos.cn> - 1:2.4.7-6.se.02.p03
changelog:
  - Type: cves
  - ID  : CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079
  - SUG : NA
  - DESC: fix CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: gaoyukun <gaoyukun@kylinos.cn> - 8.4.0-26.p01
changelog:
  - Type:update
  - ID:[TASK#554071]
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers'


author: lifeifei <lifeifei@kylinos.cn> - 8.4.0-26.p02
changelog:
  - Type:bugfix
  - ID:[Bug#507747]
  - SUG:NA
  - DESC:add configure options '--enable-websockets' to support feature 'websocket'


author: liyunqing <liyunqing@kylinos.cn> - 8.4.0-26.p04
changelog:
  - Type: CVEs
  - ID: [TASK#560183] [TASK#560185] [TASK#560189] [TASK#560193] [TASK#560195]
  - SUG: NA
  - DESC: fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1:1.14.8-3.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: add 0001-adjusting-maximum-number-of-connections-for-per-user.patch
          Adjust the maximum number of connections for dbus users, fix the issue of insufficient connections


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1:1.14.8-3.p02
changelog:
  - Type:update
  - ID:[TASK#619873]
  - SUG:NA
  - DESC: Add precise control and limits for dbus, enhance the security of dbus


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: zhaojingyu <zhaojingyu@kylinos.cn> - 1:4.11-11.p01
changelog:
  - Type:update
  - ID:[BUG#239286]
  - SUG:NA
  - DESC:add loongarch support for resolve Cannot load 32-bit SWT libraries on 64-bit JVM error


author: peijiankang <peijiankang@kylinos.cn> - 1.28.2-1.p01
changelog:
  - Type: compile
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 1.26.2-1.p02(disable caja and Fix the translation issues)


author: peijiankang <peijiankang@kylinos.cn> - 5.1.3-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop fcitx5-chinese-addons-5.1.3-ok5k0.2
          upstream commtid:9334a2ec6c7f54951c37c9d82e6621d506ad412d


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p01
changelog:
  - Type: cves
  - ID: [BUG#582111] [BUG#582033] [BUG#582017] [BUG#581861] [BUG#581543] [BUG#581409] [BUG#567943] [BUG#567939] [BUG#567937] 
  - SUG: NA
  - DESC: Fix CVE-2026-40962,CVE-2026-30997,CVE-2025-9951


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: baizhonggui <baizhonggui@huawei.com> - 1.6.2-5
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: songliyang <songliyang@kylinos.cn> - 5.2.2-2.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Upgrade to sync for 4 architectures
          2.Backport Patch10 to support sw_64. Author:yueyaoqiang
          3.Backport a commit to enable pie compile option. Author: gaoxiang


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: lijian1 <lijian1@kylinos.cn> - 14.1-5.p01
changelog:
  - Type: Update
  - ID: [TASK#533467]
  - SUG: NA
  - DESC: backport kylin production info; loongarch register info modification.


author: lijian1 <lijian1@kylinos.cn> - 14.1-5.p04
changelog:
  - Type: cves
  - ID: [BUG#541941]
  - SUG: NA
  - DESC: fix cves:
  	CVE-2025-11082: Fix BFD ELF parsing heap overflow with crafted inputs.
  	CVE-2025-11494: Fix BFD/ELF input-validation bug causing memory corruption/crash.
  	CVE-2025-11083: Fix BFD ELF section-header handling heap overflow.
  	CVE-2025-11412: Fix BFD/ELF out-of-bounds access on malformed files.
  	CVE-2025-11840: Fix ld diagnostic NULL deref/OOB read leading to linker crash.
  	CVE-2026-4647:  Fix BFD XCOFF relocation OOB read leading to crash when loading crafted XCOFF.


author: lijian1 <lijian1@kylinos.cn> - 14.1-5.p05
changelog:
  - Type: cves
  - ID: [BUG#588749]
  - SUG: NA
  - DESC: fix CVE-2026-6846: heap buffer overflow in BFD XCOFF linking.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Qin Fandong <qinfandong@kylinos.cn> - 2:3.0.2-14.p01
changelog:
  - Type: update
  - ID: [BUG#556757]
  - SUG: NA
  - DESC: Add meson option no-splash
          Update bug url


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.78.3-10.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Mov gio-launch-desktop from devel to main rpm (BUG#296979)


author: litenglong <litenglong@kylinos.cn> - 2.38-65.p02
changelog:
  - Type:update
  - ID:[Task#426926]
  - SUG:NA
  - DESC: x86: Disable AVX Fast Unaligned Load on Hygon 1/2/3


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.38-65.p03
changelog:
  - Type:update
  - ID:[Task#552457]
  - SUG:NA
  - DESC: add glibc-lse sub-package for ARM LSE atomic instructions


author: litenglong <litenglong@kylinos.cn> -2.38-65.p08
changelog:
  - Type:update
  - ID:[Task#553637]
  - SUG:NA
  - DESC: malloc tcache modify static variable to thread local.


author: gaoxiang <gaoxiang@kylinos.cn> -2.38-65.p09
changelog:
  - Type:update
  - ID:[Task#595989]
  - SUG:NA
  - DESC: added dynamic tcache budgeting and NUMA-aware arenas on glibc.


author: litenglong <litenglong@kylinos.cn> -2.38-65.p11
changelog:
  - Type:update
  - ID:[Task#614317]
  - SUG:NA
  - DESC: Drop the thread memory allocation optimization patch due to compilation failures with Clang.


author: litenglong <litenglong@kylinos.cn> -2.38-65.p11
changelog:
  - Type:update
  - ID:[Task#614317]
  - SUG:NA
  - DESC: sw64: Drop the thread memory allocation optimization patch due to compilation failures with Clang, for sw64 is may not full support __thread define.


author: litenglong <litenglong@kylinos.cn> -2.38-65.p13
changelog:
  - Type:update
  - ID:[BUG#572653] 
  - SUG:NA
  - DESC: resolv: Count records correctly (CVE-2026-4437),  Check hostname for validity (CVE-2026-4438)


author: chenyanpanHW <chenyanpan@huawei.com> - 1.3.5-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/gnome-abrt-1.4.2-update-zh_HK-translations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: peijiankang <peijiankang@kylinos.cn> - 1.4.2-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#385923]
  - SUG:  NA
  - DESC: add gnome-abrt-1.4.2-update-zh_HK-translations.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.8.2-4.p01
changelog:
  - Type: update
  - ID: TASK#223527
  - SUG: NA
  - DESC: add certtool generate cert and tls1.3 protocol smx algorithm support


author: zhangzikang <zhangzikang@kylinos.cn> - 3.8.2-4.p02
changelog:
  - Type: update
  - ID: [TASK#372985]
  - SUG: NA
  - DESC: Fix gnutlsxx.h file, add set_credentials and db_check_entry functions.
          Supply follow symbols to solve the API/ABI compatibility issue:
            _ZNK6gnutls14server_session14db_check_entryER14gnutls_datum_t
            _ZN6gnutls7session15set_credentialsERNS_11credentialsE


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-5.p04
changelog:
  - Type: update
  - ID: [TASK#533691]
  - SUG: NA
  - DESC: fix CVE-2025-32988,CVE-2025-32989,CVE-2025-32990,CVE-2025-6395, add sw_64 support, synchronization Code


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-5.p05
changelog:
  - Type: update
  - ID: [TASK#601603]
  - SUG: NA
  - DESC: fix the issue of integer underflow in MTU in DTLS


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-5.p08
changelog:
  - Type: cves
  - ID: [BUG#560111]
  - SUG: NA
  - DESC: fix CVE-2026-33845,CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260,CVE-2026-5419


author: panxiaohe <panxh.life@foxmail.com> - 3.7-5
changelog:
  - grep: Don't limit jitstack_max to INT_MAX
  - grep: speed up, fix bad-UTF8 check with -P
  - grep: fix minor -P memory leak


author: songliyang <songliyang@kylinos.cn> - 3.11-4.p01
changelog:
  - Type: update
  - ID:   [TASK#618913]
  - SUG:  NA
  - DESC: Author: liuming
          Avoid regression with -mN and any of -q, -l, -L


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-41.p01
changelog:
  - Type:bugfix
  - ID:TASK#533221
  - SUG:NA
  - DESC:secure boot: support National Security and RSA
         loongarch64 :3C5000L boot with grub2 EFI
         loongarch64 :support large initramfs loading and startup
         i386: check for cpuid family when flush cache only on VIA CPUs
         add KYLIN_ROOT_USE_UUID, use UUID in this case


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-41:2.12-41.p02.se.01
changelog:
  - Type:update
  - ID:TASK#544091
  - SUG:NA
  - DESC:SW64: Enable GRUB EFI build support for sw_64 architecture in grub.macros


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Use meson rebuild


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: peijiankang <peijiankang@kylinos.cn> - 8.3.0-2.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 8.3.0-1.p02(add 0001-modify-gb18030-encoding.patch)


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: gaoyukun <gaoyukun@kylinos.cn> - 2.4.58-12.p01
changelog:
  - Type:bugfix
  - ID:[Task#542709]
  - SUG:NA
  - DESC: Add kylin support and fix htcacheclean.service start error.
          fix index.html for kylin.
          fix CVE-2024-38472 and CVE-2024-40898.


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.4.58-15.p01
changelog:
  - Type:bugfix
  - ID:[Task#542709]
  - SUG:NA
  - DESC: Backport 2.4.58-12.p01 and p02 patches:
           Add kylin support and fix htcacheclean.service start error.
           Fix index.html for kylin.
           Fix CVE-2024-38472 and CVE-2024-40898.


author: herengui <herengui@uniontech.com> - 1.7.3-11
changelog:
  - Fix: fix issue that change language in deepin-control-center cannot affect the fcitx
  - Bug: #I47HF0


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 20221126-8.p02
changelog:
  - Type:update
  - ID:[TASK#633779]
  - SUG:NA
  - DESC:Fix null pointer dereference risk when accessing ai_family after address lookup failure


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.6.1-2.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#371773]
  - SUG:  NA
  - DESC: rebuild to fix sensitive words of keyboard layout


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.1.v2601
changelog:
  - arm64: configs: Enable CONFIG_SENSORS_DMS5013A=m (Huiwen He) [task:425547]
  - OPENEULER: nfs, sunrpc: add enfs feature (ChenXiaoSong) [task:549271]
  - tpm: Compat with legacy TPM_MAX_DIGEST_SIZE (mengdehui) [task:589193]
  - selftests/damon: add tests for auto-tuning module (Enze Li) [task:525879]
  - mm/damon/sysfs: introduce priority sysfs interface (Enze Li) [task:525877]
  - mm/damon/auto-tuning: introduce DAMON-based auto-tunning module (Enze Li) [task:525877]
  - kalert: Rate limit BPF event reporting (Huiwen He) [task:526009]
  - kalert: Add KUnit tests (Huiwen He) [task:526009]
  - kalert: Add rate-limiting support for event reporting (Huiwen He) [task:526009]
  - kalert: Support Memory and PCIe RAS event reporting (Zheng Tan) [task:526009]
  - kalert: drop debug print in kfunc init path (Huiwen He) [task:526009]
  - sched/qos: only check cfs tasks in sched_qos_offline_wait (liwanwu) [task:579595]
  - Fix the missing syntax terminator error in the task_struct structure (Qingshuang Fu) [task:588353]
  - sched: Temporarily disable the DELAY_DEQUEUE scheduling feature (Bing Huang) [task:587045]
  - mm: Introduce page pool (Lincheng Yang) [task:587093]
  - mm: vmscan: shrink_all_memory optimization to optional (Lincheng Yang) [task:588185]
  - mm: vmscan: make shrink_all_memory as much as possible reclaim (Lincheng Yang) [task:588185]
  - add mmput_try_async (Lincheng Yang) [task:588175]
  - mm: Add pcp batch dynamic modification interface (WeiLixiang) [task:588175]
  - platform/x86: Lenovo X7 and X7H models do not use EC to control backlight. (zhangzihuan) [task:588189]
  - platform/x86: Lenovo adds X7 model board (zhangzihuan) [task:588189]
  - platform/x86: Lenovo adds LED controls for the speakers and microphone for X7h (Zihuan Zhang) [task:588189]
  - platform/x86: lenovo ec add support for X7H (huxiaoying) [task:588189]
  - platform/x86: fix spelling mistakes on lenovo ec led driver (zhangzihuan) [task:588189]
  - platform/x86: lenovo ec add led driver (zhangzihuan) [task:588189]
  - platform/x86: lenovo ec add support for X1 (Ai Chao) [task:588189]
  - configs: Enable KYLIN_EXTRA_BUTTON option (Riwen Lu) [task:531375, task:588159]
  - extra_button: Add ACPI extra button support (Riwen Lu) [task:458097, task:388697, task:531375, task:588159]


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01:kdelibs4support-5.113.0-kylin-mg-word-modification.patch


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-plasma-5.113.0-2.p00.ky11.sw_64" /usr/bin/cmake --install "sw_64-kylin-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-sonnet-5.113.0-2.p00.ky11.sw_64" /usr/bin/cmake --install "sw_64-kylin-linux-gnu" to fix build failure


author: duanhongtao <duanhongtao@kylinos.cn> 1.0.0.0-0k3.5
changelog:
  - Type:update
  - ID:BUG#498623/498837/498991/498843/499175/498587/498567/498649/498853/499077/498877/499211
  - SUG:NA
  - DESC: 配置修改后未重启服务导致功能异常
          dga服务状态判断调整
          设置服务状态后增加状态值检查
  	普通用户置灰ai相关ui


author: litianhao <litianhao@kylinos.cn> - 30-4.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG: NA
  - DESC: 合入kysec补丁
  -       kmod-add-kysec-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 30-4.se.02
changelog:
  - Type: update
  - ID: [BUG#346402]
  - SUG: NA
  - DESC: 去除kmod 插入模块时 kysec的检查
  -       kmod-remove-insmod-kysec-check.patch


author: fuhuanzhang <fuhuanzhang@kylinos.cn> - 1.21.2-20.p01
changelog:
  - [BUG#560223] krb5包安全漏洞【['CVE-2026-40356']】【银河麒麟高级服务器操作系统 V11 2603】
  - backport kylin patch: Add krb5-kycompat subpackage.[TASK#424795]
  - backport kylin patch: Fix code scan logic warning.[TASK#596097]


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.02
changelog:
  - Type:update
  - ID:[BUG#295657] [v11-B14] [外设管控] 系统初始环境，/var/log/下存在txt格式文本文件
  - SUG:NA
  - DESC: 修改审计应用日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 相关的轮替功能操作由logrotate来管理，提供默认转存配置
          增加fuzz测试
          合规性整改移除ksaf_config


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#474839] 【v11 2503】审计包功能优化
        [任务#471091] 【安全红线】整改自研组件第一轮Fortify问题-ksaf-audit-daemon
  - SUG: NA
  - DESC: 优化审计，和内核相关的定义从class-def.conf获取
          合规性整改
          没启动ksaf_main模块，不启动审计日志服务


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#490381] 【v11 2503】优化ksaf-audit-daemon相关功能
  - SUG: NA
  - DESC: 去除掉配置文件，不允许修改日志文件名


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-06
changelog:
  - Type: bugfix
  - ID: [BUG#439759]【V11-6.6.0-32.9】【龙芯3C5000L】龙芯3C5000L从selinux切换到off失败
  - SUG: NA
  - DES: 注释掉标记变更发布与订阅功能，该功能暂时未用到
         解决/opt目录下文件未打标的问题,使用宏定义将全盘打标时要跳过的目录与桌面版本区分开


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-07
changelog:
  - Type: bugfix
  - ID: [BUG#455411]【20251021update内网源测试】【loongarch/x86-v11 2503】提测软件包增量升级后，执行yum -y update核心转储
        [任务#553743]安全编译参数整改 / ksaf-label-manager安全编译参数整改
  - SUG: NA
  - DES: 解决动态库中dbus连接没有关闭文件描述符的问题
         修改软件包安装后脚本，解决软件包更新后服务进程身份错误问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-05
changelog:
  - Type: update
  - ID: [任务#595273]完成ksaf-label-manager模糊测试和ci对接
  - SUG: NA
  - DES: 添加模糊测试与CI平台对接代码，并提高测试覆盖率


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-06
changelog:
  - Type: bugfix
  - ID: [BUG#499477]【2603-B09】模糊测试ksaf-label-manager组件，10个小时打印了82G的日志，导致磁盘打满资源耗尽，出现了48个Hang，请分析修改
  - SUG: NA
  - DES:


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-07
changelog:
  - Type: bugfix
  - ID: [BUG#502817]【2603-B12】模糊测试ksaf-label-manager组件过程中，出现两个crash，提示stack-overflow栈溢出，请分析修复
  - SUG: NA
  - DES:


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-08
changelog:
  - Type: bugfix
  - ID: [BUG#505691]【B13】【需求59243】【文件防篡改】将软件包加入防篡改列表，卸载软件包后备份系统，安装软件包后还原系统，软件包相关的文件未被删除
  - SUG: NA
  - DES:


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 去掉ksafpolicy服务，因和dbus启动的服务冗余
          去除注释的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#487477] 【V11】【内核特性】内核启动时间调优 / 【安全】initrd裁剪-安全的脚本ksaf
        [bug#338197] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0302
        [bug#338196] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0301
  - SUG:NA
  - DESC: 新增ksaf-policy-sync-init只下发初始化策略
          修复脉诊漏洞


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 库修复，之前不是链接


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-02
changelog:
  - Type:update
  - ID: [任务#590181] 安全合规整改
        [任务#575963] 进行ksaf-policy的持续优化
  - SUG:NA
  - DESC: 添加自动化测试代码，对接平台
          策略优化


author: lengchunying <lengchunying@kylinos.cn> 1.0.2-06
changelog:
  - Type:update
  - ID: [bug#499207] 【2603-B09】【模糊测试】ksaf-policy-interpreter件fuzzing时，出现crash，稳定复现
  - SUG:NA
  - DESC: 修改参数校验，去掉无效代码


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-08
changelog:
  - Type:update
  - ID: [Bug#583521] 修复KVE-2026-0429
  - SUG:NA
  - DESC: 同步桌面的白盒测试和模糊测试
          ksaf-policy.log改权限为640
          去掉dbus接口sendInitPolicy和clearAllPolicy
          去掉策略库接口sendInitPolicy
          日志中去掉文件名和行数


author: lichenguang <lichenguang@kylinos.cn> - 1.0.2-4
changelog:
  - Type: update
  - ID: [TASK#593001] [TASK#595565]
  - SUG: NA
  - DESC: 
  - 1. 威胁分析整改: 新增审计日志防篡改机制 [TASK#593001] 
  - 2. kyldop模糊测试整改：完善模糊测试代码，提升测试覆盖率。[TASK#595565]


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p26
changelog:
  - Type: update
  - ID:[TASK#554091][BUG#481523]
  - SUG: NA
  - DESC: unified logger and configuration file
          support for displaying versions in multiple languages


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p27.06
changelog:
  - Type: bugfix
  - ID:[BUG#502191][BUG#501583]
  - SUG: NA
  - DESC: fix KVE-2026-0105
          optimizate secret key activation failure prompt


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p27.07
changelog:
  - Type: bugfix
  - ID:[BUG#503743][BUG#503739][BUG#504233]
  - SUG: NA
  - DESC: fix set autoactivated failed for kms 
          add check for dbus func write_common_log


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.10-6.p27.08
changelog:
  - Type: update
  - ID: [TASK#620581]
  - SUG: NA
  - DESC: Bump version for unified source across all four architectures
          fix bug#539315


author: huayadong <huayadong@kylinos.cn> - 3.24.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#424335]
  - SUG:  NA
  - DESC: update version to 3.24.0.0-0k0.35
          fix KVE-2024-1102


author: peijiankang <peijiankang@kylinos.cn> - 3.24.0.0-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#289223]
  - SUG:  NA
  - DESC: add kylin-device-daemon-3.24.0.0-fix-coredump-when-quit.patch


author: ganjianqing <ganjianqing@kylinos.cn> - 1.2.0.0-1
changelog:
  - Initial kylin-disk-encryption code  based on  desktop 1.2.0.0-1k1.35~1 version of bugfix/yhkylin/v11 brach


author: kangyu <ganjianqing@kylinos.cn> - 1.2.0.0-1.se.04
changelog:
  - Types:update
  - ID:BUG#501283 BUG#500985 BUG#500945 BUG#500597
  - SUG:NA
  - DESC:modify auto mount after umount and fuser error


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#437383]
  - SUG: NA
  - DESC: kylin-nm-4.10.0.0-kylin-fix-closing-network-segment.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch5: kylin-nm-4.10.0.0-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#500277]
  - SUG : NA
  - DESC: Disabled all network cards when wired switch is off


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#504491]
  - SUG : NA
  - DESC: Fixed network connection when network adapter is disabled


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok6k0.3


author: peijiankang <peijiankang@kylinos.cn> - 4.0.0.0-1.p03
changelog:
  - Type: compile
  - ID  : [TASK#620945]
  - SUG : NA
  - DESC: rebuild for all arch and add copyright info


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: kylin-process-manager-daemon-4.10.0.0-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-process-manager-4.10.0.0-ok1.33k1.5
          upstream commtid:0038ddf0249de1761514d30db39c7730dc0a1242


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#452549]
  - SUG : NA
  - DESC: remove kylin-process-manager core functionality


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#473473]
  - SUG : NA
  - DESC: kylin-process-manager fix sonarqube hotpoints


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#583449]
  - SUG : NA
  - DESC: Fix coredump when starting daemon while service is already running


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.3kord-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.3kord-ok6.13k0.13
          upstream commitid: f1439f4f99b8afd4691d8a401861442be40ca815


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586739]
  - SUG : NA
  - DESC: sync code from desktop kylin-usb-creator-1.2.0.3kord-ok6.13k0.21


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p03
changelog:
  - Type: update
  - ID  : [TASK#586739]
  - SUG : NA
  - DESC: update upstream version to 1.2.0.3kord-ok6.13k0.54 and fixed empty plugin version info


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#491479]
  - SUG : NA
  - DESC: Skip MD5 check for ISO images missing md5sum.txt


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-ukui-control-center-jump-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: update kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#385929]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-shortcut-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-wayland-compositor-1.3.1.0-0k0.5
          upstream commtid:1e12b35019a7339c27fabc4c88c6cee50f566461


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-1.p04
changelog:
  - Type: TASK
  - ID: [TASK#598185]kysdk-netflow-monitor 自研代码提升评估
  - SUG: NA
  - DESC: Delete bpf bcc 安装依赖，使用pcap机制


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p01
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;Bugfix496401 
  - SUG: NA
  - DESC: 增加指针链表回收、删除未使用的HIGH问题函数内容；删除python3安装依赖；rpm包名获取不到时返回“-”


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p02
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;
  - SUG: NA
  - DESC: 添加单元测试代码tests文件夹；修复安全热点问题


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p04
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;
  - SUG: NA
  - DESC:
  -       添加模糊测试代码
  -       修改配置文件为600
  -       增加之前的对应CI时自动新建模糊测试输出out文件夹
  -       删除未使用的decpcap的单元测试代码文件


author: hanzhengyun<hanzhengyun@kylinos.cn>-1.0.0.1-4.p05
changelog:
  - Type: update
  - ID: [任务#616297]
  - SUG: NA
  - DESC:
  -       添加补丁 kysdk-netflow-monitor-add-interface-permission-check-and-audit.patch
  -       [任务#616297] 根据评审意见修改详设


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-05
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 增加获取指定目录下所有子文件和子目录接口,逐级获取接口,增加获取指定目录下文件和目录,仅指定目录层级
  -     kysec-common-add-get-path-api.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.3.1-02
changelog:
  - Type: update
  - ID: [TASK#597481][BUG#492821]
  - SUG: NA
  - DESC: 1.完成kysec-common模糊测试和ci对接；2.修复kysec-common组件存在KVE-2026-0206漏洞
  -       kysec-common-add-sonar-and-fuzz-test-code.patch
  -       kysec-common-fix-KVE-2026-0206.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.3.1-03
changelog:
  - Type: update
  - ID: [TASK#599237]
  - SUG: NA
  - DESC: 1.完成valgrind测试和CI对接;
  -       kysec-common-add-valgrind-test.patch


author: wangshengye <wangshengye@kylinos.cn> - 1.3.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#498255]
  - SUG: NA
  - DESC: 1.优化判断文件是否为内核模块和动态库的判断逻辑
  -       kysec-common-optimize-the-identification-methods-for-kernel-modules-and-dynamic-libraries.patch


author: wangshengye <wangshengye@kylinos.cn> - 1.3.1-05
changelog:
  - Type: update
  - ID: [TASK#604821]
  - SUG: NA
  - DESC: 1.ksaf通用基础库消减措施整改
  -       kysec-common-threat-analysis-and-rectification.patch


author: wanghao <wanghao2@kylinos.cn> - 1.3.1-06
changelog:
  - Type: update
  - ID: [TASK#618137]
  - SUG: NA
  - DESC: 添加security-switch、kysec_set、kysec_get添加日志type
  -         kysec-common-add-some-cmdline-log-type.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-02
changelog:
  - Type: update
  - ID: [task#598013]
  - SUG: NA
  - DESC: 修复arm架构grub.cfg文件缺少resume参数，导致切换模式失败的问题
  -         kysec-daemon-fix-arm-grub-lack-resume-parameter-set-kysec-status-failed.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 3.0.0-3
changelog:
  - Type: update
  - ID: [task#589493]
  - SUG: NA
  - DESC: 更新安全容器接口，完成与服务器容器客户端联调
  -       [其它]添加麒麟软件许可证，解决门禁合规问题
  -       kysec-daemon-update-container-interfaces.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-04
changelog:
  - Type: bugfix
  - ID: [BUG#498047][BUG#496697][BUG#496675][BUG#497801][BUG#497819]
  -     [BUG#497817][BUG#497653][BUG#497987][BUG#497951][BUG#497559]
  -     [BUG#498333]
  - SUG: NA
  - DESC: 修复使用命令更新联网管控的策略失败,修改spec文件,安装时创建配置文件[BUG#498047]
  -       【内核模块防加载】添加被损坏的内核模块无错误提示信息[BUG#496697]
  -       【内核模块防加载】添加普通文件无错误提示信息[BUG#496675]
  -       【文件防篡改】界面添加文件夹的授权管理失败[BUG#497801]
  -       【文件保护】手动创建目录添加\删除\查看例外程序-例外程序为软件包不显示[BUG#497819]
  -       【文件保护】手动创建目录添加例外程序-例外程序为路径，-L 查询不显示[BUG#497817]
  -       开启ksaf子模块开启后，重启机器，开主开关，重启机器，其他子模块无法开启[BUG#497653]
  -       【文件保护】\删除例外路径\包不存在，提示信息错误[BUG#497987]
  -       【文件保护】删除例外路径\包不存在,提示信息错误[BUG#497951]
  -       【模式切换】执行命令“security-switch --set strict” off切strict，default切strict失败[BUG#497559]
  -       sm-example安装失败，无法进行套件授权测试[BUG#498333]
  -         kysec-daemon-fix-some-bug-1.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#498333][BUG#498557]
  - SUG: NA
  - DESC: 修复开启sm后，未重启后，多次开启sm报错的问题[BUG#498333]
  -       【执行控制】添加\修改\查看白名单-文件-二进制-kysec_set 输出显示异常[BUG#498557] 
  -         kysec-daemon-fix-repetition-set-sm-status-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#499949][BUG#500135][BUG#499939][BUG#499953][BUG#500289][BUG#500427]
  - SUG: NA
  - DESC: 设备管控不显示连接状态[BUG#499949]
  -       设备管控未自动生成策略[BUG#500135]
  -       【执行控制】二进制-kysec_set,设置unknown标记后kysec_get exectl -f不显示文件路径[BUG#499939]
  -       设备管控多次开关设备权限控制的usb接口，出现一个麦克风[BUG#499953]
  -       【联网管控】kysec_set 设置联网策略后，查新显示异常[BUG#500289]
  -       【文件防篡改】文件夹添加应用授权后无法取消授权[BUG#500427] 
  -       修复当GRUB_CMDLINE_LINUX_SECURITY=”“是空时无法添加lsm=ksaf的错误
  -       修改spec文件，优化目录不存在的脚本判断语句
  -           kysec-daemon-fix-dev-get-60-day-records-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#501289][BUG#502527][BUG#501285][BUG#501257][BUG#501243][TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 【设备安全】设备连接策略-导入策略显示导入0行策略[BUG#501289]
  -       【进程防护】删除-路径添加的例外递归目录失败[BUG#502527]
  -       【设备安全】光驱的连接记录不显示[BUG#501285]
  -       【设备安全】设备权限控制-光驱管控开启关闭测试（外置光驱），不符合策略[BUG#501257]
  -       【设备安全】设备权限控制-USB接口控制功能验证-禁用USB接口仅U盘生效，光驱和网卡可读[BUG#501243]
  -       修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         kysec-daemon-fix-dev-add-multi-policy-return-0-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-08
changelog:
  - Type: update
  - ID: [TASK#605711]
  - SUG: NA
  - DESC: 设备管控加入开机和关机的时候自动更新设备连接记录的功能
  -         kysec-daemon-dev-add-auto-add-record.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 3.0.0-09
changelog:
  - Type: update
  - ID: [TASK#605473]
  - SUG: NA
  - DESC: sdk优化问题自查及修复
  -       kysec-daemon-fix-gvariant-unref-issue.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-10
changelog:
  - Type: update
  - ID: [TASK#612781]
  - SUG: NA
  - DESC: 修复当切换状态重启时,最后一次切换状态不生效的问题
  -         kysec-daemon-fix-switch-status-bug-when-not-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-11
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         kysec-daemon-add-dbus-control-yaml-file.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-16
changelog:
  - Type: update
  - ID: [BUG#450991]
  - SUG: NA
  - DESC: 【安全套件】文件防护功能函数优化，对目录添加保护后子目录仍然能够被删除移动
  -	  kysec-utils-add-dir-protect.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-17
changelog:
  - Type: update
  - ID: [TASK#578567]
  - SUG: NA
  - DESC: 删除命令行中应用执行管控的例外管理
  -	  kysec-utils-del-exec-except.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-02
changelog:
  - Type: bugfix
  - ID: [BUG#494997]
  - SUG: NA
  - DESC: 隐藏apparmor相关功能, 修复apparmor当前状态与切换状态一致时提示重启的bug[BUG#494997]
  -       修复kysec_policy查询exec目录中的文件是否可执行显示错误的问题
  -         kysec-utils-fix-some-bug-1.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-03
changelog:
  - Type: bugfix
  - ID: [BUG#500643][BUG#500289][BUG#500619][BUG#499945]
  - SUG: NA
  - DESC: 【内核模块保护】添加未加载的模块到保护列表-kysec_set 失败[BUG#500643]
  -       【联网管控】kysec_set 设置联网策略后，查新显示异常[BUG#500289]
  -       【内核模块保护】删除保护策略-模块路径-kysec_set后依然能查询到结果[BUG#500619]
  -       【执行控制】添加\删除\查看\更新白名单-包-kysec_set,参数错误 建议优化提示[BUG#499945]
  -           kysec-utils-fix-kmod-add-uninsmod-ko-error.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-04
changelog:
  - Type: update
  - ID: [TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         kysec-utils-add-fuzz-test.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 5.0.0-05
changelog:
  - Type: update
  - ID: [TASK#595475]
  - SUG: NA
  - DESC: 增加模糊测试，增加单元测试[TASK#595475]
  -       kysec-utils-fix-fuzz-test.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#500069][BUG#500559][BUG#500579][BUG#500543]
  - SUG: NA
  - DESC: 【执行控制】对象不存在-kysec_set（包）提示信息错误[BUG#500069]
  -       【进程防护】添加\删除的进程\进程号不存在-kysec_policy提示信息错误[BUG#500559]
  -       【进程防护】重复删除进程\进程号保护策略-kysec_set缺少提示信息[BUG#500579]
  -       【进程防护】添加\删除的进程号不存在-kysec_set无提示信息[BUG#500543]
  -         kysec-utils-fix-kysec_set-prompt-info-error.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-07
changelog:
  - Type: update
  - ID: [TASK#618137]
  - SUG: NA
  - DESC: 添加操作日志[TASK#618137]
  -         kysec-utils-add-operation-log.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#584519]
  - SUG: NA
  - DESC: 修复kysec_policy命令中net模块日志信息错误的问题
  -         kysec-utils-fix-net-log-error.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#488491][BUG#497461][BUG#497547]
  - SUG: NA
  - DESC: 1.修复插件状态设置不生效和文件保护例外程序不生效的问题。
  -       2.kysec2-control-module-sync-policy-interface-changed.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [BUG#498345]
  - SUG: NA
  - DESC: 1.解决首次切换default模式时，自保护策略不生效问题.
  -       2.移除audit.log相关自保护策略，移动到ksafdefault.policy中实现
  -       3.post脚本中添加重新加载插件库命令
  -       kysec2-control-module-fix-kysec-self-protect-not-enable.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#497793][BUG#497957]
  - SUG: NA
  - DESC: 1.删除文件保护信任策略（除安全和系统安装包相关的）.
  -       kysec2-control-module-fix-filectl-trust-policy.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [BUG#500529]
  - SUG: NA
  - DESC: 1.修改进程管控的插件层枚举参数kysec_scene_resource_type，解决因为数值问题造成例外包程序无法添加;


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-01.se.01
changelog:
  - Type: update
  - ID: [任务#420435]【ksaf】安全编译选项整改-kysec2-rbac-utils和审计
  - SUG:NA
  - DESC: 优化spec文件
          不能删除最后一条用户配置
          移除rpath


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [Bug#352562] 【20250513update内网源测试】【v11-2409】kysec2-rbac-utils卸载失败，提示错误信息
  - SUG: NA
  - DESC:	未开启ksaf不用同步内核策略


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#471093] 【安全红线】整改自研组件第一轮Fortify问题-kysec2-rbac-utils
  - SUG: NA
  - DESC: fortify整改
          同步fuzz代码


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 2:1.2.2-11.p02
changelog:
  - Type:bugfix
  - ID:Task#621837
  - SUG:NA
  - DESC:Fix PT_REGS macro definition being overwritten in sw_64


author: songjuntao <songjuntao@kylinos.cn> - 1.10.2-3.p01
changelog:
  - Type:update
  - ID:TASK#599077
  - SUG:NA
  - DESC:fix use weak random while using rsa crt private operation


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-10
changelog:
  - Type:update
  - ID: [Bug#382843] 【出厂测试】【v11 2503】【需求41775】【内核模块防卸载】内核模块添加防卸载保护后卸载成功
  - SUG:NA
  - DESC: 文件写入强制落盘，防止断电丢失
          下发初始化策略，无策略二进制文件或无二进制策略目录均返回成功


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [任务#553741] 安全编译参数整改 / libksaf-policy-sync安全编译参数整改
  - SUG:NA
  - DESC: 将安全编译栈保护参数改为-fstack-protector-strong


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-08
changelog:
  - Type:update
  - ID: [Bug#583521] 修复KVE-2026-0429
  - SUG:NA
  - DESC: 同步桌面的白盒测试和模糊测试
          ksaf-policy.log改权限为640
          日志中去掉文件名和行数


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p38.03
changelog:
  - Type:bugfix
  - ID:[BUG#488739][BUG#488629]
  - SUG:NA
  - Desc: fix get network time
          fix ukey activate


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.08
changelog:
  - Type: bugfix
  - ID:[BUG#501717][BUG#501583]
  - SUG: NA
  - DESC: fix the issue of activation check for regular users
          optimizate secret key activation failure prompt


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.09
changelog:
  - Type: bugfix
  - ID:[BUG#503743][BUG#503739][BUG#503973]
  - SUG: NA
  - DESC: fix set autoactivated failed for kms and add subscribe check


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.10
changelog:
  - Type: bugfix
  - ID:[BUG#506061]
  - SUG: NA
  - DESC: optimize the JSON data of the obtained operating system version


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p38.11
changelog:
  - Type: update
  - ID: [TASK#620581]
  - SUG: NA
  - DESC: Bump version for unified source across all four architectures


author: huayadong<huayadong@kylinos.cn> - 2.5.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: chnage libkysdk-gsetting Requires for delete glib2-devel


author: peijiankang<peijiankang@kylinos.cn> - 2.5.1.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add libkysdk-base-2.5.1.0-fix-sync-dbus-server-strcmp-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.0-0k1.6


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.5.1.0-1.p09
changelog:
  - Type: updates
  - ID  : [TASK#619873]
  - SUG : NA
  - DESC: fix add processing the user.db file for the user dbus


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.2-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.2-0k4.22


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p04
changelog:
  - Type: update
  - ID  : [TASK#474331]
  - SUG : NA
  - DESC: add libkysdk-system-2.5.1.2-kylin-fix-fortity.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p06
changelog:
  - Type: cves
  - ID  : KVE-2025-259872293 KVE-2025-0703 KVE-2025-0704 KVE-2025-0705 KVE-2025-0706 KVE-2025-0707 KVE-2025-0801 KVE-2025-1001
  - SUG : NA
  - DESC: KVE-2025-259872293、KVE-2025-0703、KVE-2025-0704、KVE-2025-0705、
          KVE-2025-0706、KVE-2025-0707、KVE-2025-0801、KVE-2025-1001


author: liyunqing <liyunqing@kylinos.cn> - 14:1.10.4-5.p02
changelog:
  - Type: BugFix
  - ID: [TASK#628895]
  - SUG: NA
  - DESC: Fix libpcap BPF optimizer dominator recomputation after and/or pullup


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: litenglong <litenglong@kylinos.cn> - 1.4.5.p01
changelog:
  - Type:update
  - ID:[task#327351]
  - SUG:NA
  - DESC:Synchronize the SP3 patch:Disallow root from setting weak passwords and resolve localization issue.


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.4.5.p01.se.01
changelog:
  - Type:update
  - ID:[task#329817]
  - SUG:NA
  - DESC: 1.【账户保护】libpwquality包合入回文和相似性检查补丁
          2. 支持香港繁体字 
      add patch:libpwquality-add-palindrome-similar-option.patch
                libpwquality-add-zh_HK.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.4.5-3.p01.se.01
changelog:
  - Type:update
  - ID:[TASK#533695]
  - SUG:NA
  - DESC: backport upstream patch to remove redundant inclusion of libintl.h


author: tiandongdong <tiandongdong@kylinos.cn> - 3.5-4.se.01
changelog:
  - Type:update
  - ID:[Task#533985] v11补丁移植
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks
  -         add patch: libselinux-keep-getpeercon-errorno.patch


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: peijiankang <peijiankang@kylinos.cn> - 2.74.3-10.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 2.74.3-4.p04(fix CVE-2025-4945 and Failed to fix websocket-test case)


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-10.p03
changelog:
  - Type: cves
  - ID:   [BUG#538961]
  - SUG:  NA
  - DESC: fix CVE-2026-0716 CVE-2026-1760 CVE-2026-5119 CVE-2025-14523
              CVE-2026-0719 CVE-2026-1467 CVE-2026-1801 CVE-2026-2369
              CVE-2026-1761 CVE-2026-1539


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangjun <zhangjun@kylinos.cn> - 1.10.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Prevent files from being skipped if the output buffer is too small


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: chenyanpanHW <chenyanpan@huawei.com> - 1:1.1.1-26
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-pp_sharp_mod-calculation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-fix-underlinking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-png_sizeof-no-longer-available-since-libpng.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-CVE-2024-56431.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2026-5673.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yubo <yubo1@kylinos.cn> - 0.9.5-4.p01
changelog:
  - Type:update
  - ID:[任务#223921]
  - SUG:NA
  - DESC:add support to tpm2-00-permall update and disable sm4 in configure


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: fangyi <eric.fangyi@huawei.com> - 9.10.0-15
changelog:
  - cpu-Add-new-Dharma-CPU-model.patch
  - qemu-cvm-support-uefi-boot-by-rom.patch
  - iommufd-Support-configuring-iommufd-backends-for-qem.patch
  - vdpa-iommufd-Support-associating-iommufd-with-vDPA-h.patch
  - capabilities-add-fun-to-determine-if-binary-is-strat.patch
  - qemu_command-unsupport-command-line-will-not-built-f.patch
  - chardev-use-path-instead-of-fd-for-stratovirt.patch
  - Revert-qemu-command-Delegate-qemuBuildDriveStr-to-SD.patch
  - Revert-qemu-Remove-pre-blockdev-PFLASH-setup.patch
  - qemu_command-get-disk-alias-from-disk-instead-of-nod.patch


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p01
changelog:
  - Type: Update
  - ID:   [TASK#534467]
  - SUG:  NA
  - DESC: Backport V11-2503 patch
  -   Enable netcf support
  -   Fix several iface-related translation issues
  -   Fix some translation errors of common functions.
  -   Support Phytium S5000c
  -   Add a path in DEFAULT_LOADER_NVRAM to solve the issue of not being able to find UEFI firmware in x86 architecture
  -   Support host-model for arm, solve core dump when libvirtd starts on Phytium,solve compile error with modify xml in the test dir
  -   Disconnect libvirt's dependency on rbd and install it when the user needs to support it
  -   Fix the translation problem of libvirtd.policy's prompts
  -   Support MCE error alert and optimization the function that locates VMs affected by MCE errors
  -   Fix virtual machine save and restore failure issue when CPU model is configured as host model mode


author: lijunwei <lijunwei@kylinos.cn> - 9.10.0-16.p04
changelog:
  - Type: Update
  - ID:   [TASK#554389]
  - SUG:  NA
  - DESC: Add support for Arm UEFI pflash vm internal snapshot


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p06
changelog:
  - Type: Update
  - ID:   [TASK#588425]
  - SUG:  NA
  - DESC: Disconnect libvirt's dependency on rbd and glusterfs


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p07
changelog:
  - Type: cves
  - ID:   CVE-2025-12748/CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.11.9-6.p01
changelog:
  - Type: update
  - ID: [TASK#529389]
  - SUG:NA
  - DESC: Sync kycompat patches from previous release
         0001-kylin-compat-support-V1.0-for-libxml2.patch
         0002-kylin-compat-support-V1.1-for-libxml2.patch


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-41
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.2
  - add a small patch for backport testcase issue fix


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-43
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.3


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-44
changelog:
  - [ICP] Enable promotion of more targets
  - [bugfix] Constant folding for long double type lib call is only supported for logl.
  - switch to gcc build for bootstrap building failure


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-45
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.4
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.4


author: wangqiang <wangqiang1@kylinos.cn> -17.0.6-45.p03
changelog:
  - Type:update
  - ID:[task#553653]
  - SUG:NA
  - DESC:Backport kylin-llvm-backport-avoid-neg-instructions-when-lowering.patch


author: wangqiang <wangqiang1@kylinos.cn> -17.0.6-45.p04
changelog:
  - Type:update
  - ID:[task#553653]
  - SUG:NA
  - DESC:Backport LoopVersionLICM-move-pipeline-to-benefit-from-vectorization.patch


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-45.p05
changelog:
  - Type:update
  - ID:[task#603663]
  - SUG:NA
  - DESC:sync source code, add mcjit/RuntimeDyld support on loongarch, enable all target on sw_64


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.7.2-29.p03
changelog:
  - Type: NA
  - ID: [TASK#634083]
  - SUG: NA
  - DESC: fix stack buffer overflows in mbchar and path handling


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: chenyanpanHW <chenyanpan@huawei.com> - 4.9.3-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6842.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6843.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: lipengyu <lipengyu@kylinos.cn> - 6.4-10.p01
changelog:
  - Type:update
  - ID:[Task#327352]
  - SUG:NA
  - DESC:ncurses-support-loongarch&&enable relocation for kylin


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-6.p01
changelog:
  - Type: update
  - ID: [TASK#532891]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-6.p03
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: Qiang Wei <qiang.wei@suse.com> - 2.2.1-1
changelog:
  - Update to version 2.2.1.
    * Remove 0001-bash-Fix-nvme-completion.patch, it is fixed in upstream.
    * backport upstream patch: Bash completion: move global declare into function.


author: kouwenqi <kouwenqi@kylinos.cn> - 2.8-1.p01
changelog:
  - Type: bugfix
  - ID: [TASK#631623]
  - SUG: NA
  - DESC: do not issue warning when nvme_core module is not loaded


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: liuming <liuming@kylinos.cn> - 9.6p1-5.p12.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p07
changelog:
  - Type:update
  - ID:TASK#533697
  - SUG:NA
  - DESC:add add-support-for-sw_64-architecture.patch and fix sw_64 _libdir


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p09
changelog:
  - Type:cves
  - ID:BUG#497061
  - SUG:NA
  - DESC: fix CVE-2025-15467,CVE-2025-69418,CVE-2025-69419,CVE-2025-69420,
              CVE-2025-69421,CVE-2026-22795,CVE-2026-22796,CVE-2025-68160


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p10
changelog:
  - Type:update
  - ID:TASK#599075
  - SUG:NA
  - DESC: fix negative input length in EVP_EncryptUpdate function


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p11
changelog:
  - Type:cves
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-31790,CVE-2026-31789,CVE-2026-28390,
             CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add peony-share Requires: samba samba-client


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok2k1.3
          upstream commitid: c2238e7f6811fe1e1faa5a9fde637c32b2d785bd


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-fix-peony-share.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#352174]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-add-uncompress-type.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: update
  - ID  : [TASK#586391]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: songliyang <songlyang@kylinos.cn> - 0.123-4.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100 Patch101 to fix BUG#243579 and BUG#260533. Author: huayadong
          3.Backport Patch102 to fix BUG#499255. Author: zhoukangyu


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p01
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: update to 15.17 (fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p02
changelog:
  - Type: updates
  - ID: [BUG#556223],[BUG#546389]
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2025-8713, CVE-2025-8714


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: songliyang <songliyang@kylinos.cn> - 4.0.4-8.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Upgrade to sync for 4 architectures
          2.Backport Patch100 to fix w print by utmp show info when systemd get tty failed. Author: litenglong
          3.Backport a commit to skip test_pids in check for sw_64 as there is an issue on koji when building. Author: liuming03


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p04
changelog:
  - Type: Bugfix
  - ID:   [BUG#464097]
  - SUG:  NA
  - DESC: fix can not use virsh command to get host capabilities on phytium cpu


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p05
changelog:
  - Type: Bugfix
  - ID:   [BUG#471289]
  - SUG:  NA
  - DESC: Enable disk encrypt function and fix compile error


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-37.p07
changelog:
  - Type: Update
  - ID:   [TASK#583973]
  - SUG:  NA
  - DESC: Add the PASUEOPT instruction to the ZHAOXIN chip.


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-37.p08
changelog:
  - Type: Update
  - ID:   [TASK#586391]
  - SUG:  NA
  - DESC: Disconnect qemu's dependency on qatzip-devel and intel-qpl-devel


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-37.p10
changelog:
  - Type: Bugfix
  - ID:   [BUG#466883]
  - SUG:  NA
  - DESC: Align VIRT_GED_CPUHP_ADDR to 4 bytes to fix cpu hotplug failure on loongarch64


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p11
changelog:
  - Type: cves
  - ID:   CVE-2025-14876
  - SUG:  NA
  - DESC: FIX CVE-2025-14876 qemu-kvm: Unbounded allocation in virtio-crypto


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p12
changelog:
  - Type: cves
  - ID:   CVE-2025-12464
  - SUG:  NA
  - DESC: FIX CVE-2025-12464 qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p13
changelog:
  - Type: cves
  - ID:   CVE-2023-49721
  - SUG:  NA
  - DESC: Sync fix CVE-2023-49721 An insecure default to allow UEFI Shell in EDK2


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-37.p14
changelog:
  - Type: cves
  - ID:   CVE-2024-8354 CVE-2026-2243
  - SUG:  NA
  - DESC: Sync fix CVE-2024-8354 usb: assertion failure in usb_ep_get()
                   CVE-2026-2243 Heap buffer out-of-bounds read in VMDK compressed grain parsing


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p15
changelog:
  - Type: cves
  - ID:   [BUG#525397]
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p02
changelog:
  - Type: update
  - ID  : [TASK#587039]
  - SUG : NA
  - DESC: Patch1002:qtbase-5.15.10-work-around-pyside2-brokenness.patch
          适配pyside2


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#485611]
  - SUG : NA
  - DESC: Patch1003:CVE-2025-5455-qtbase-5.15.patch
          修复CVE-2025-5455


author: lizequan<lizequan@kylinos.cn> - 5.15.10-11.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#504703]
  - SUG : NA
  - DESC: Patch1004:qt5-base-fix-coredump-missing-display-env-in-ssh.patch


author: peijiankang<peijiankang@kylinos.cn> - 5.15.10-11.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#507841]
  - SUG : NA
  - DESC: add sw_64 QT_ARCH to fix kylin-aiassistant build error


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: litianhao <litianhao@kylinos.cn> - 1.2.1-2.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG:NA
  - DESC: 合入sm设备管控补丁
          sane-backends-add-sm-devctl.patch


author: zhubing <zhubing@kylinos.cn> - 1.2.1-2.p01.se.02
changelog:
  - Type: update
  - ID: [TASK#427527] 增加ksaf补丁
  - SUG:NA
  - DESC: 移除sm设备管控代码，合入ksaf devctl补丁
          sane-backends-remove-sm-devctl.patch
          sane-backends-add-ksaf-devctl-hook.patch


author: sunjin <sunjin@kylinos.cn> 3.0.0-06
changelog:
  - Type:update
  - ID:[TASK#600263][BUG#499333]
  - SUG:NA
  - DESC:
  - 优化开始菜单图标模糊的问题
  - 增加dbus接口权限检查
  - 修正错误的命令行信息
  - 【B10】【V11-2503】【安全加固】【非交互命令】自定义参数导入测试-确保设置空闲超时锁屏时间未生效
  - 添加补丁security-reinforce-update-20260310.patch


author: zhaoyun <zhaoyun@kylinos.cn> 3.0.0-07
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260428.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 3.0.0-08
changelog:
  - Type: update
  - ID: [TASK#633053]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532237]
  -       修复安全漏洞[KVE-2026-0420][BUG#541241]
  -       dbus管控整改
  -       security-reinforce-update-20260521.patch


author: litianhao <litianhao@kylinos.cn> - 1.3.1-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       security-switch-add-license.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#457138]
  - SUG: NA
  - DESC: 对于security-switch命令的新参数需求 变更产品化版本
  -    security-switch-new-parameter-20250508.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653]
  - SUG: NA
  - DESC: 更新security-switch命令的help信息和关闭状态时get的返回值（none -> off）
  -	  security-switch-new-help-info.patch
  -	修复调用reboot命令执行错误的问题[BUG#352649][BUG#352653]
  -	  security-switch-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: bugfix 
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -       无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -         security-switch-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: bugfix 
  - ID: NA
  - SUG: NA
  - DESC: 修复缺少此设置将使系统失去安全防护，极大增加系统安全风险提示的问题,桌面bug#360683
  -	  -- security-switch-fix-error-with-missing-prompt-message.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-02
changelog:
  - Type: update
  - ID: [TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         security-switch-add-fuzz-test.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-03
changelog:
  - Type: bugfix
  - ID: [BUG#504759]
  - SUG: NA
  - DESC: 【模式切换】default切换off，未提示重启生效[BUG#504759]
  -         security-switch-default-to-off-prompt-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#507971]
  - SUG: NA
  - DESC: 修改安全模式切换到off状态时的提示
  -         security-switch-modify-security-mode-to-off-tips.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-05
changelog:
  - Type: update
  - ID: [TASK#618137]
  - SUG: NA
  - DESC: 添加操作日志[TASK#618137]
  -         security-switch-add-operation-log.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-06
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         security-switch-add-dbus-control-yaml-file.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.4-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#239817]
  - SUG:  NA
  - DESC: add fix-peony-filetype-not-translate-issue.patch


author: huayadong <huayadong@kylinos.cn> - 2.4-2.p01
changelog:
  - Type: update
  - ID:   [TASK#425693]
  - SUG:  NA
  - DESC: update to 2.4-2
          Remove locale files rather than exclude them
          fix build with libxml 2.12


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-16.p05
changelog:
  - Type:cve;bugfix
  - ID:[BUG#585405]
  - SUG:NA
  - DESC: fix CVE-2025-69421, CVE-2026-22796, CVE-2026-28388, CVE-2026-28389
          allow debuginfo to be installed alone without pulling in the debugsource package


author: litianhao <litianhao@kylinos.cn> - 1.1.1-10
changelog:
  - Type: update
  - ID: [BUG#382501]
  - SUG: NA
  - DESC: 修复remove pvid接口调用失败的问题
  -       sm-enhancement-fix-devctl-perm-when-remove-pvid.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 服务开机启动时，调用add_inf_policy add_device_policy add_usb_policy接口失败
  -       sm-enhancement-fix-return-incorrect-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-12
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 修改一处遗漏的返回值处理逻辑
  -       sm-enhancement-optimize-interface-return-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-13
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA
  - DESC: 同步桌面Bug#434735修复补丁
  -       sm-enhancement-sync-desktop-bug-434735.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-14
changelog:
  - Type: NA
  - ID: [TASK#589931]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-resolve-hotspot-issue.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [BUG#485723]
  - SUG: NA
  - DESC: 添加打印信息
  -       sm-enhancement-add-print-info.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#502831] [BUG#503699]
  - SUG: NA
  - DESC: 修改打印信息
  -       sm-enhancement-modify-the-prompt-message.patch


author: duanhongtao <duanhongtao@kylinos.cn> - 5.9.10-4.p05
changelog:
  - Type:CVE
  - CVE:CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: fuanan <fuanan3@h-partners.com> - 255-42
changelog:
  - backport: sync patches from systemd community
    add backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch


author: lijian<lijian01@kylinos.cn> - 255-44.p01
changelog:
  - Type: update
  - ID:   [TASK#529381]
  - SUG:  NA
  - DESC:  1  systemd-udev package contain kernel-install
           2  add Patch: 0001-Change-the-NTP-server.patch
              Change NTP server.
           3  add Patch: 0001-basic-add-missing-PIDFS-magic.patch
              Fix missing PIDFS magic issue when compile
           4 add Patch: 0001-basic-add-missing-BCACHEFS-magic.patch
              Fix missing BCACHEFS magic issue when compile
           5 Add 0001-rc-local-change-order-after-network-online.target.patch
              Change rc-local order after network-online.target, fix service or process start failed issue
  		 6 Revert patch to fix test performance regression
  		 7 Add zombie process recycling module component
  		 8 Add process monitoring, process self-healing and automatic pull up


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p05
changelog:
  - Type: update
  - ID:   [TASK#600247]
  - SUG:  NA
  - DESC: Optimize the code of the sysprocess-manage zombie process module,
          fix security vulnerabilities such as null pointer dereferences,
          and memory deallocation issues.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p06
changelog:
  - Type: update
  - ID:   [TASK#603661]
  - SUG:  NA
  - DESC: Unified source to support sw64/x86_64/aarch64/loongarch64


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p07
changelog:
  - Type: update
  - ID:   [TASK#568027]
  - SUG:  NA
  - DESC: fix CVE-2026-4105
          fix CVE-2026-29111
          fix CVE-2026-40226


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.8
          upstream commitid: e244d03cbbaa55bff8777acce8145a0b09f20f6a


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.11
          upstream commitid: 8f91b3ac9f0c054dffc5d12daf0ae419909d1d54


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch02: ukui-biometric-auth-4.10.0.0-kylin-add-KylinUserDatePtr-for-root.patch


author: huayadong<huayadong@kylinos.cn> 4.10.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: delete Requires: kf5-bluez-qt-devel kf5-bluez-qt


author: peijiankang<peijiankang@kylinos.cn> 4.10.1.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add ukui-bluetooth-add-copyright.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.1.0-ok3.2k0.10


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-bluetooth-4.10.1.0-ok3.2k0.14
          upstream commtid:1dddb5543c1a61b7a19a412f73da010effd59666


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p50
changelog:
  - Type: bugfix
  - ID  : [BUG#481277][BUG#482067]
  - SUG : NA
  - DESC: show register number when system activated
          don't show activate button when system activated on main about page


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p51
changelog:
  - Type: bugfix
  - ID  : [BUG#483057]
  - SUG : NA
  - DESC: fix the check when system activation is expired


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p52
changelog:
  - Type: cves
  - ID  : [TASK#589295]
  - SUG : NA
  - DESC: fix KVE-2026-0104, encode password when used as command argument


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p53
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch53: ukui-control-center-4.10.0.0-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p54
changelog:
  - Type: bugfix
  - ID  : [Bug#485195]
  - SUG : NA
  - DESC: activate button shouldn't named "Extend" when system is not activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p55
changelog:
  - Type: bugfix
  - ID  : [Bug#500581][BUG#500383]
  - SUG : NA
  - DESC: Fixed defaultapp invalid when clicked reset button
          Fixed excessive password prompts when adding group members


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p56
changelog:
  - Type: bugfix
  - ID  : [Bug#500531]
  - SUG : NA
  - DESC: add Patch57:ukui-control-center-4.10.0.0-kylin-change-png.patch
          更换帮助手册图片.


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p58
changelog:
  - Type: cves
  - ID  : KVE-2026-0405 KVE-2026-0406
  - SUG : NA
  - DESC: fix KVE-2026-0405 and KVE-2026-0406


author: douyan<douyan@kylinos.cn> 4.10.3.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch ukui-file-metadata-4.10.3.1-kylin-change-lib-to-lib64.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.3.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.3.1-ok4k0.3


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch6: ukui-greeter-4.10.0.0-kylin-remove-power-Button.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#294017]
  - SUG : NA
  - DESC: Patch7: ukui-greeter-4.10.0.0-kylin-fix-the-font-too-large.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-greeter-4.10.0.0-ok5.1k0.7
          upstream commtid:ba4854458f270994721d1348c774b8b41d2f8b0f


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#334467] [BUG#292059]
  - SUG : NA
  - DESC: fix greeterwindow and loginwindow translate bugs


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add ukui-greeter-4.10.0.0-fix-sonarqube-security-hotspots.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: delete file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: ukui-input-gather-4.1.0.0-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#289223]
  - SUG : NA
  - DESC: add ukui-input-gather-4.1.0.0-fix-coredump-about-ukuiinputgatherclient.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [BUG#294119]
  - SUG : NA
  - DESC: add ukui-power-manager-4.10.0.0-kylin-remove-ukui-control-center-Suspend-and-Hibernate-and-wakeUpDisplay-no-passwd.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: ukui-power-manager-kylin-4.10.0.0-hide-shutdown.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-power-manager-4.10.0.0-ok1.34k2.0
          upstream commtid:cc25d6a66a8e679daef437d0f5d243116752e994


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-add-application-with-DISPLAY.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#349212]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-ukui-menu-empty.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.13.0-1.p05
changelog:
  - Type:update
  - ID:[Task#482359]
  - SUG:NA
  - DESC: add ukui-search-4.10.13.0-kylin-remove-sensitive.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223][BUG#369841]
  - SUG : NA
  - DESC: update ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch
          add ukui-search-4.10.13.0-kylin-ukui-search-app-data-service-sql-exec-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370275]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-GetDesktopFileByPid-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.13.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [TASK#601833]
  - SUG : NA
  - DESC: Patch10: ukui-search-4.10.13.0-kylin-correction-of-ambiguous-description.patch
          修复字典文件的错误字符


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#291269]
  - SUG : NA
  - DESC: ukui-settings-daemon-4.10.0.0-fix-targetBrightness-to-100.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: add Patch5:ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.18k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch
          add ukui-settings-daemon-4.10.0.0-add-copyright-info.cpp


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#379967]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch
          add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.39.1-35.p01
changelog:
  - Type: update
  - ID: [TASK#604531]
  - SUG:  NA
  - DESC: 1.fix check error
         2.author:  litenglong <litenglong@kylinos.cn>
           support enable-raw
         3.sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
         4.sync patch 9400-set-locale-for-supporting-utf-8.patch
         5.fix_loongarch_test_error.patch
         6.sync patch 9401-libblkid-xfs-external-log-check-for-ceph_bluestore.patch


author: zhangtao <zhangtao@kylinos.cn> - 2.39.1-35.p02
changelog:
  - Type:cves
  - ID:CVE-2026-27456
  - SUG:NA
  - DESC: backport to fix symlink traversal vulnerability in loop device setup


author: songliyang <songliyang@kylinos.cn> - 2:9.0.2092-22.p01
changelog:
  - Type:update
  - ID:[task#512917]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: liuhuan01 <liuhuan01@kylinos.cn> - 6.6.0-7.p02
changelog:
  - Type: BugFix
  - ID: [TASK#604469]
  - SUG: NA
  - DESC: mkfs: fix the issue of maxpct set to 0 not taking effect


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p08
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083, CVE-2024-9632


author: HouHongxun <houhongxun@kylinos.cn> - 4.0.12kord1p18
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation-for-desktop-file.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}19
changelog:
  - Type: update
  - ID: [TASK#185224]
  - SUG: NA
  - DESC: add 0001-add-zh_HK-translate.patch 0001-add-zh_HK-qss-file.patch
          0001_backup_store_hk_png.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}21
changelog:
  - Type: buffix
  - ID: [BUG#215689]
  - SUG: NA
  - DESC: add 0001_add_ok_images.patch 0001-add-ok_btn-hk-translate.patch


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p22
changelog:
  - Type: bugfix
  - ID:   [BUG#469873]
  - SUG:  NA
  - DESC: add patch20: yhkylin-backup-tools-4.0.12-kylin-backup-management-add-selectable.patch
  	备份管理添加可选中.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p23
changelog:
  - Type: bugfix
  - ID:   [BUG#473555][BUG#473915]
  - SUG:  NA
  - DESC: add patch21: yhkylin-backup-tools-4.0.12-kylin-fix-an-empty-backup-size.patch
          add Patch22: yhkylin-backup-tools-4.0.12-kylin-update-UI.patch
          add Patch23: yhkylin-backup-tools-4.0.12-kylin-fix-log-file-could-not-be-created.patch
          修复备份管理中备份大小字段为零.
          更改UI使用窗口管理器接管所有窗口.
          修复日志文件/var/log/backup.txt无法创建.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p24
changelog:
  - Type: bugfix
  - ID:   [BUG#474743]
  - SUG:  NA
  - DESC: add patch24: yhkylin-backup-tools-4.0.12-kylin-update-translate.patch
          更新翻译文件.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p25
changelog:
  - Type: bugfix
  - ID:   [TASK#583377]
  - SUG:  NA
  - DESC: add Patch25:yhkylin-backup-tools-4.0.12-kylin-fix-command-line-functionality-unavailable.patch
          add Patch26:yhkylin-backup-tools-4.0.12-kylin-update-Copyright.patch
          修复命令行备份还原功能不可用问题.


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.21-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#223306]
  - SUG:  NA
  - DESC: add 0002-fix-blank-of-youker-assistant-3.1.4.21.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.21-1.p02
changelog:
  - Type: update
  - ID:   [TASK#335765]
  - SUG:  NA
  - DESC: add youker-assistant-3.1.4.21-add-check-lshw-installinfo.patch
          remove Requires: lshw


author: huayadong <huayadong@kylinos.cn> - 3.1.4.21-1.p04
changelog:
  - Type: update
  - ID:   [TASK#591331]
  - SUG:  NA
  - DESC: add Patch05: youker-assistant-3.1.4.21-kylin-remove-useless-comments.patch
          删除无用的Python代码


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: zengjianqi <zengjianqi@kylinos.cn> - 1.5.5-2.p01
changelog:
  - Type: update
  - ID: [TASK#424795]
  - SUG: NA
  - DESC: Build with ZSTD_LIB_DEPRECATED?=1.
          Add zstd-kycompat subpackage.
          Supply follow symbols to solve the ABI compatibility issue:
            ZSTD_getSequences
          Update kywrapper KYLIN_SUPPLY_LIB.


