# changelog

author: wangjie1 <wangjie1@kylinos.cn> - 1:7.1.2.25-1.p01
changelog:
  - Type: cves
  - ID: CVE-2026-53466, CVE-2026-53467, CVE-2026-55510, CVE-2026-55628, CVE-2026-55597, CVE-2026-55595, CVE-2026-55577, CVE-2026-55594
  - SUG: NA
  - DESC: fix CVE-2026-53466, CVE-2026-53467, CVE-2026-55510, CVE-2026-55628, CVE-2026-55597, CVE-2026-55595, CVE-2026-55577, CVE-2026-55594


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.22.0-2.p01
changelog:
  - Type:update
  - ID:[TASK#633779]
  - SUG:NA
  - DESC:Fix null pointer dereferences by checking memory allocation return values.
         Fix duplicate files between ModemManager-glib-devel and ModemManager-help.


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:NetworkManager-dispatcher.service not enabled when installed due to systemd_units not defined


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync bugfix patch: delete lease file when connection deleted and 
         update the way to get ppp version because patchlevel.h no more provided in  ppp-2.5.0


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:1.44.2-3.p03
changelog:
  - Type: BugFix
  - ID: [TASK#604471]
  - SUG: NA
  - DESC: mptcp fix error handling rp_filter when kernel don't support mptcp


author: chengguipeng <chengguipeng1@huawei.com> - 1.1.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solove the problem that no message is displayed when running a uninstalled command.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.15-38
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-add_sdl_config_man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7637.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7636.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7635_1.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7635_2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7573_CVE-2019-7576.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7578.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7577.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.10-GrabNotViewable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-const_XData32.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-ignore_insane_joystick_axis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-no-default-backing-store.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-SDL_EnableUNICODE_drops_keyboard_events.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-vec_perm-ppc64le.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13616.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overread-in-IMA_ADPCM_nibble.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7574-Fix-a-buffer-overread-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overwrite-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7575-Fix-a-buffer-overwrite-in-MS_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: zhaoqingyou <zhaoqingyou@163.com> - 0.18.6-7.p01
changelog:
  - Type:update
  - ID:[任务#633541]
  - SUG:NA
  - DESC:
  -      [任务#633541]Baby-Cat级组件悬镜扫描漏洞整改-aide
  -      添加补丁aide-sshaide.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-45.p02
changelog:
  - Type:update
  - ID:[TASK#433557]
  - SUG:NA
  - DESC: aarch64: add 'smmu.bypassdev=0xffe1:0xd200' in /etc/default/grub


author: Wenhua Huang <huangwenhua@kylinos.cn> - 36.16.5-47.p01
changelog:
  - Type:update
  - ID:[TASK#533221]
  - SUG:NA
  - DESC: update to 36.16.5-47 from v11-svr25 36.16.5-45.p03
          [backport] add support for sw_64 architecture
          [backport] Fix wrong dracut timeout message


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-47.p03
changelog:
  - Type:update
  - ID:[TASK#544091]
  - SUG:NA
  - DESC: sw_64: add 'crashkernel=512M audit=0 nokaslr' in /etc/default/grub


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-47.p08
changelog:
  - Type:bugfix
  - ID:[BUG#693523]
  - SUG:NA
  - DESC:keyboard: filter out the custom XKB placeholder from the layout list


author: wangjie1 <wangjie1@kylinos.cn> - 1.6.3-2.p01
changelog:
  - Type:cves
  - ID:CVE-2025-49506,CVE-2026-32327,CVE-2026-34191,CVE-2026-34501,CVE-2026-34502
  - SUG:NA
  - DESC:Backport Apache APR-util 1.6.4 security fixes to 1.6.3 (password timing, XML depth, oracle escape, redis/memcache bulk bounds)


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yaoxin <1024769339@qq.com> - 5.3.1-20
changelog:
  - Fix some CVEs: CVE-2025-70067, CVE-2025-70069, CVE-2025-70070,
    CVE-2025-70071, CVE-2025-70072, CVE-2026-10200, CVE-2026-10232,
    CVE-2026-14610


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.48-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-bypass-wrong-output-when-enabled-selinux.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-dont-skip-security.evm-when-copy-xattr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-attr-eliminate-a-dead-store-in-attr_copy_action.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-fix-stale-attr-references.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-use-run-as-the-filename-extension-for-run-test-sc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-fix-test-suite-for-selinux.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-add-visibility-attribute-header.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-add-xattrat-syscall-wrappers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0009-add-xattrat-syscall-backwards-compatibility-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0010-rename-walk_tree-to-old_walk_tree.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0011-add-the-new-walk_tree-helper.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0012-harden-getfattr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0013-setfattr-multiple-restore-accesses-freed-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0014-setfattr-do-not-ignore-no-dereference-after-resto.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0015-add-openat2-syscall-wrapper.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0016-harden-setfattr-restore.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.18.21-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: pengxu <pengxu@kylinos.cn> - 2.41-28.p01
changelog:
  - Type:update
  - ID:[TASK#585321]
  - SUG:NA
  - DESC:Set sw_cpu to sw8a and fix binutils high risk vulnerability


author: pengxu <pengxu@kylinos.cn> - 2.41-28.p02
changelog:
  - Type:update
  - ID:[BUG#542191]
  - SUG:NA
  - DESC: 1.Fix CVE-2025-11494: Fixed incorrect discarding of the _GLOBAL_OFFSET_TABLE_ symbol in x86 linkers
          2.Fix CVE-2025-11840: Fixed a segmentation fault in coffcode.h caused by NULL name in EMPTY_HOWTO
          3.Fix CVE-2026-6846: Fixed a buffer overflow in xcoff_link_add_symbols in xcofflink.c
          4.Fix CVE-2025-11082: Fixed an out-of-bounds read during .eh_frame parsing in elf-eh-frame.c


author: peijiankang <peijiankang@kylinos.cn> - 0.9.63.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop biometric-authentication-0.9.63.1-0k1.42


author: peijiankang <peijiankang@kylinos.cn> - 0.9.63.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#469087]
  - SUG : NA
  - DESC: add biometric-authentication-0.9.63.1-kylin-fix-fortify.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.9.63.1-1.p04
changelog:
  - Type: update
  - ID  : [TASK#586743]
  - SUG : NA
  - DESC: sync code from desktop biometric-authentication-0.9.63.1-0v11k1.43k0.9


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: pengxu <pengxu@kylinos.cn> - 3.8.2-5.p01
changelog:
  - Type:cves
  - ID:CVE-2026-56389 CVE-2026-56390
  - SUG:NA
  - DESC:Fix CVE-2026-56389: Fixed an issue where Bison could execute arbitrary programs defined via a grammar file during HTML report generation
         CVE-2026-56390: Fixed a path traversal vulnerability that allowed arbitrary file writes via crafted %output or %header directives in untrusted grammar files


author: kouwenqi <kouwenqi@kylinos.cn> - 1.3.0-5.p01
changelog:
  - Type: update
  - ID: [TASK#554017]
  - SUG: NA
  - DESC: Backport v10 sp3 2403 patches:
          -btt: Add Q2X and X2G statistics
          -blkparse: Fix up the length of split completions
          -btt: eliminate redundant separators in btt -p display
          -add an option "-n" for blkparse and btt


author: fuwei <fuwei@kylinos.cn> - 4.1.0-1.se.3
changelog:
  - Type:update
  - ID:[BUG#492791]
  - SUG:NA
  - DESC:
  - 修复bug#492791 【V11-2603】【B04】【漏洞挖掘】box-manager组件存在KVE-2026-0203漏洞


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.5
changelog:
  - Type:update
  - ID:[TASK#595817] [TASK#590177]
  - SUG:NA
  - DESC:
  - 可信子系统-支持文件保护箱根密钥保护
  - box-utils 源码合规性整改及安全热点整改


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.6
changelog:
  - Type:update
  - ID:[BUG#498833] [BUG#498291] [BUG#498791]
  - SUG:NA
  - DESC:
  - BUG#498833 重启系统后透明保护箱未自动挂载
  - BUG#498291 解锁保护箱输入错误密码后重启，保护箱变为透明加密保护箱
  - BUG#498791 新建加密保护箱，未解锁状态可在保护箱内进行文件操作


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.7
changelog:
  - Type:update
  - ID:[TASK#596345] [BUG#498405] [BUG#499769]
  - SUG:NA
  - DESC:
  - BUG#498405 锁屏后自动锁定失败，保护箱仍处于解锁状态
  - BUG#499769 KYSEC保护箱功能未开启，保护箱功能可用
  - ADD FUZZ MODULE TO CI WITH make fuzz
  - ADD valgrind TO CI


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.8
changelog:
  - Type:update
  - ID:[BUG#501157] [BUG#501141] [BUG#501055] [BUG#501707] [BUG#501529]
  - SUG:NA
  - DESC:
  - BUG#501157 命令行重置密码存在英文
  - BUG#501141 命令行重置密码提示错误
  - BUG#501055 关闭可信子系统，创建加密保护箱提示不对
  - BUG#501707 关闭可信子系统，加密保护箱导入失败
  - BUG#501529 命令行修改密码未校验新密码是否与原密码一致


author: shuzetian <shuzetian@kylinos.cn> - 4.1.0-1.se.10
changelog:
  - Type:update
  - ID:[Task#610575] [Task#596833]
  - SUG:NA
  - DESC:
  - Task#610575 密码超过64位时命令行报段错误
  - Task#596833 box-utils单测流程优化


author: liu_yi <liu_yi@kylinos.cn> - 4.1.0-1.se.11
changelog:
  - Type:update
  - ID:[BUG#541237] [BUG#532241]
  - SUG:NA
  - DESC:
  - BUG#541237 KVE-2026-0422
  - BUG#532241 KVE-2026-0408


author: fuwei <fuwei@kylinos.cn> - 4.1.0-1.se.12
changelog:
  - Type:update
  - ID:[TASK# 631663]
  - SUG:NA
  - DESC: box-utils dbus control union
  - 添加补丁:
  - TASK-631663-dbus-control-union.patch


author: fuwei <fuwei@kylinos.cn> - 4.1.0-1.se.13
changelog:
  - Type:update
  - ID:[TASK# 629781]
  - SUG:NA
  - DESC: box-manager dbus control union, add old version dbus
  - 添加补丁:
  - TASK-629781-dbus-control-union-add-oldversion.patch


author: fuwei <fuwei@kylinos.cn> - 4.1.0-1.se.13
changelog:
  - Type:update
  - ID:[TASK# 629781]
  - SUG:NA
  - DESC: box-manager dbus control union, add old version dbus
  - 添加补丁:
  - TASK-631663-dbus-control-union.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.1.0-1.se.14
changelog:
  - Type:update
  - ID:[Task#636637]
  - SUG:NA
  - DESC: fix-boximport-path-judge
  - 添加补丁:
  - TASK-636637-fix-boximport-path-judge.patch


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.2.v2601
changelog:
  - configs: update generic_defconfig (Jiangshan Yi) [task:588385]
  - Adjust the loading order of the RTC driver (liuyunchen) [bug:483945]
  - lib/raid6: Delete the RAID6_PQ_BENCHMARK config (sunliming) [task:585767]
  - lib/raid6: Optimizing the raid6_select_algo time through asynchronous processing (sunliming) [task:585767]
  - lib/raid6: Divide the raid6 algorithm selection process into two parts (sunliming) [task:585767]
  - LoongArch: drivers/pwm: export symbol for pwm_add_table (Tianrui Zhao) [task:577685]
  - ANOLIS: mm: use __GFP_MEMALLOC in vmemmap_alloc_block (Xu Yu) [task:590821]
  - NFS: Fix a deadlock involving nfs_release_folio() (Trond Myklebust) [task:590809]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Niklas Cassel)
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1 (Niklas Cassel)
  - exit: Sleep at TASK_IDLE when waiting for application core dump (Paul E. McKenney) [task:591267]
  - gve: defer interrupt enabling until NAPI registration (Ankit Garg) [task:589035] {CVE-2025-71156}
  - gve: Avoid rescheduling napi if on wrong cpu (Shailend Chand) [task:589035]
  - ublk: fix deadlock when reading partition table (Ming Lei) [task:589351] {CVE-2025-68823}
  - binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [task:573213] {CVE-2025-68239}
  - Adapt to the new version of Jenkins' changelog (Qingshuang Fu) [task:591019]
  - X86: enable CONFIG_HSR (taowei) [bug:487965]
  - configs/x86: enable config for CONFIG_BLK_DEV_UBLK (Yang Xiuwei) [bug:486253]
  - HYGON: EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors (allenli) [task:584695]
  - HYGON: x86/tsc: TSC adjust Backport x86 TSC adjust patch (allenli) [task:584695]
  - HYGON: EDAC/amd64: Bug fix for EDAC to correct the address translation on hygon family 18h model 4h (allenli) [task:584695]
  - HYGON: perf/x86/uncore: Correct the L3 PMU config for Hygon processors (Wenhui Fan) [task:586595]
  - blk-glitch: Enable the IO glitch detection function for ARM and X86 (liyouhong) [task:526187]
  - blk-glitch: Add the use of static_key in blk-glitch (liyouhong) [task:526187]
  - blk-glitch: Optimize the code structure to reduce performance overhead (liyouhong) [task:526187]
  - blk-glitch: Adjust blk_glitch_stats to blk_glitch_bio/rq_stats (liyouhong) [task:526187]
  - blk-glitch: Add timestamp recording during RQ requeueing (liyouhong) [task:526187]
  - blk-glitch: Add process filtering functionality (liyouhong) [task:526187]
  - blk-glitch: Add an attribute file to dynamically adjust the threshold (liyouhong) [task:526187]
  - blk-glitch: Add a timestamp record to the driver layer (liyouhong) [task:526187]
  - blk-glitch: Add a timestamp record to the block layer (liyouhong) [task:526187]
  - blk-glitch: Add io_glitch_detection tracepoint (liyouhong) [task:526187]
  - blk-glitch: Add the function of IO glitch detection timestamp statistics (liyouhong) [task:526187]
  - PHYTIUM: pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD (Cao Guanghui) [bug:477893]
  - PHYTIUM: pswiotlb: Adapt to the function iommu_pgsize() exported by EXPORT_SYMBOL_GPL() (Cao Guanghui) [bug:477893]
  - SCSI: Chang Linkdata HBA/RAID default value to m (zhanggenjian) [bug:487925, bug:486745]
  - inet: frags: drop fraglist conntrack references (Florian Westphal) [task:592299] {CVE-2026-23016}
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Zilin Guan) [task:592301] {CVE-2026-23038}
  - null_blk: fix kmemleak by releasing references to fault configfs items (Nilay Shroff) [task:592309] {CVE-2026-23032}
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts (Tetsuo Handa) [task:590799] {CVE-2026-22997}
  - macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [task:590131] {CVE-2026-23001}
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Duoming Zhou) [task:590069] {CVE-2025-68822}
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Gregory CLEMENT) [task:589963] {CVE-2025-71109}
  - ipv6: Fix use-after-free in inet6_addr_del(). (Kuniyuki Iwashima) [task:590053] {CVE-2026-23010}
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [task:589961] {CVE-2026-23004}
  - sunway/config: Modify sunway configure. (liuyunchen) [bug:480863]
  - rust: update all rust drivers (zhoulong) [task:587131]
  - drivers/yunsilicon: Added support for the sw architecture (luoqing) [bug:489797]
  - rust: sync input drivers, include serio, tablet, rmi4 and touchscreen (zhoulong) [task:587131]
  - rust: sync input drivers, include keyboard, mouse, joystick and misc (zhoulong) [task:587131]
  - btrfs: Use module_subinit{_noexit} and module_subeixt helper macros (Youling Tang) [task:591007]
  - module: Add module_subinit{_noexit} and module_subeixt helper macros (Youling Tang) [task:591007]
  - mm: fix build with CONFIG_KYLIN_MM_PAGEPOOL=n (Lincheng Yang) [task:592653]
  - rust: sync leds and i3c drivers (zhoulong) [task:587131]
  - rust: sync nls and gpio drivers (zhoulong) [task:587131]
  - ksaf: fix argv UAF in ksaf_run_cmd (penghuaihe) [bug:407083]
  - x86_64: configs: Hygon request for confidential computing test (lifangxu) [task:589941]
  - sync hwmon rust drviers (zhoulong) [task:587131]
  - rust: sync reset and typec rust drviers (zhoulong) [task:587131]
  - rust: sync watchdog rust drivers (zhoulong) [task:587131]
  - sync rust drivers framework (zhoulong) [task:587131]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.3.v2601
changelog:
  - Add common NIC drivers (Jiangshan Yi) [task:588385]
  - Revert "arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB" (张浩) [task:595141]
  - uacce: implement mremap in uacce_vm_ops to return -EPERM (Yang Shen) [task:593785] {CVE-2026-23056}
  - intel_th: fix device leak on output open() (Johan Hovold) [task:593619] {CVE-2026-23091}
  - scsi: qla2xxx: Sanitize payload size to prevent member overflow (Jiasheng Jiang) [task:593775] {CVE-2026-23059}
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [task:593625] {CVE-2026-23073}
  - ANOLIS: sched/fair: Clear ->h_load_next when unregistering cgroup (Peng Wang) [task:590819]
  - dmaengine: xilinx: xdma: Fix regmap max_register (Anthony Brandon) [task:593801] {CVE-2025-71195}
  - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection (Francesco Lavra) [task:593793] {CVE-2025-71198}
  - tracing: Fix crash on synthetic stacktrace field usage (Steven Rostedt) [task:593781] {CVE-2026-23088}
  - leds: led-class: Only Add LED to leds_list when it is fully ready (Hans de Goede) [task:593803] {CVE-2026-23101}
  - net/sched: act_ife: avoid possible NULL deref (Eric Dumazet) [task:593787] {CVE-2026-23064}
  - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (Andrey Vatoropin) [task:593611] {CVE-2026-23084}
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (Robbie Ko) [task:593633] {CVE-2025-71194}
  - scsi: core: Wake up the error handler when final completions race against each other (David Jeffery) [task:593729] {CVE-2026-23110}
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Mark Rutland) [task:593733] {CVE-2026-23107}
  - vsock/virtio: Coalesce only linear skb (Michal Luczaj) [task:593727] {CVE-2026-23057}
  - uacce: fix isolate sysfs check condition (Chenghai Huang) [task:593771] {CVE-2026-23094}
  - vsock/virtio: cap TX credit to local buffer size (Melbin K Mathew) [task:593641] {CVE-2026-23086}
  - vsock/virtio: fix potential underflow in virtio_transport_get_credit() (Melbin K Mathew) [task:593641]
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593621] {CVE-2026-23061}
  - uacce: ensure safe queue release with state management (Chenghai Huang) [task:593789] {CVE-2026-23063}
  - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (Jamal Hadi Salim) [task:593799] {CVE-2026-23105}
  - uacce: fix cdev handling in the cleanup path (Wenkai Lin) [task:593725] {CVE-2026-23096}
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [task:593609] {CVE-2026-23099}
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593635] {CVE-2026-23058}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Taeyang Lee) [task:593631] {CVE-2026-23060}
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima) [task:593627] {CVE-2026-23083}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [task:593607] {CVE-2026-23076}
  - irqchip/gic-v3-its: Avoid truncating memory addresses (Arnd Bergmann) [task:593591] {CVE-2026-23085}
  - regmap: Fix race condition in hwspinlock irqsave routine (Cheng-Yu Lee) [task:593595] {CVE-2026-23071}
  - net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [task:593593] {CVE-2026-23074}
  - udp: call skb_orphan() before skb_attempt_defer_free() (Eric Dumazet) [task:593555] {CVE-2026-23048}
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [task:593557] {CVE-2026-23089}
  - gue: Fix skb memleak with inner IP protocol 0. (Kuniyuki Iwashima) [task:593547] {CVE-2026-23095}
  - LoongArch: BPF: Enhance the bpf_arch_text_poke() function (Chenghao Duan) [task:593967]
  - LoongArch: BPF: No text_poke() for kernel text (Hengqi Chen) [task:519401]
  - LoongArch: BPF: Enable trampoline-based tracing for module functions (Chenghao Duan) [task:593967]
  - LoongArch: BPF: Adjust the jump offset of tail calls (Chenghao Duan) [task:593967]
  - LoongArch: BPF: Save return address register ra to t0 before trampoline (Chenghao Duan) [task:593967]
  - LoongArch: Enable exception fixup for specific ADE subcode (Chenghao Duan) [task:593967]
  - kvm: fix error initializing system register tables (Zongmin Zhou) [bug:491195]
  - netfilter: conntrack: warn when cleanup is stuck (Jakub Kicinski) [task:590215]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Jakub Kicinski) [task:590215] {CVE-2025-68768}
  - inet: frags: add inet_frag_queue_flush() (Jakub Kicinski) [task:590215]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Jakub Kicinski) [task:590215]
  - socket: Print pf->create() when it does not clear sock->sk on failure. (Kuniyuki Iwashima) [task:590215]
  - vsock: do not leave dangling sk pointer in vsock_create() (Eric Dumazet) [task:590215]
  - net: warn, if pf->create does not clear sock->sk on error (Ignat Korchagin) [task:590215]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.4.v2601
changelog:
  - rust: avoid vmlinux re-link on "make modules" with Rust drivers (long zhou) [task:587131]
  - rust: sync x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - fs: don't block write during exec on pre-content watched files (Amir Goldstein) [bug:480477]
  - crypto: hisi: disable in-tree ACC for out-of-tree deploy (chengang) [task:597259]
  - Revert "OPENEULER: irqchip/gic-v3: Fix one race condition due to NMI withdraw" (tanze) [task:597027]
  - configs: cleanup generic_defconfig (Jiangshan Yi) [task:588385]
  - Revert "rust: update x86 generic_defconfig for rust drivers" (Jiangshan Yi) [task:587131]
  - Revert "rust: Covert others nls drivers to rust" (周龙) [task:587131]
  - drivers/scsi/qedf: rust: Fix some function (wulinen) [task:587131]
  - rust: Fix the build_rust script (liuhaitian) [task:587131]
  - rust: Fix KEYBOARD_PINEPHONE driver (liuhaitian) [task:587131]
  - block/nbd: rust: type nbd pointers as NbdDevice in Rust path (sangliang) [task:587131]
  - block/nbd: rust: migrate generic wrappers to bindings (sangliang) [task:587131]
  - rust: update x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - rust: fix LED undefined ref and hidraw section mismatch (long zhou) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Fix incorrect implementation in the CAP11XX driver (liuhaitian) [task:587131]
  - rust: Fix incorrect implementation in rust driver (liuhaitian) [task:587131]
  - rust: Re-apply Rust drivers (liuhaitian) [task:587131]
  - rust: Re-apply Rust drivers (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Driver enablement prerequisites (liuhaitian) [task:587131]
  - rust: Enhance the INA209 driver security with Rust (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Enhance lineage-pem driver security with Rust (liuhaitian) [task:587131]
  - rust: fix unused function warnings in qlogic (gaoyinggang) [task:587131]
  - rust: Enhance emc6w201 driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance the tc654 driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance ina2xx driver security with Rust (liuhaitian) [task:587131]
  - rust: Driver enablement prerequisites (liuhaitian) [task:587131]
  - rust: Translate hwmon Rust/C driver comments from Chinese to English (lifengxiang) [task:587131]
  - rust: fix watchdog modpost errors and comment formatting (gaoyinggang) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs files (wulinen) [task:587131]
  - rust: Enhance the W83791D driver security with Rust (liuhaitian) [task:587131]
  - rust: hwmon: Convert LM85 driver to Rust and fix unused C symbols (wangyuxin) [task:587131]
  - block/nbd: rust: use shared bindings and port sock_shutdown, disk_init to Rust (sangliang) [task:587131]
  - rust: Keyborad driver fix (liuhaitian) [task:587131]
  - rust: Translate comments to English in shim (yijiqian) [task:587131]
  - rust: enable hwmon drivers (lifengxiang) [task:587131]
  - rust: Translate comments to English in Serio (yijiqian) [task:587131]
  - rust: mouse: Translate comments to English (yijiqian) [task:587131]
  - rust: kernel-helpers: Translate Chinese comments to English (wangyuxin) [task:587131]
  - rust: Enhance the tps23861 driver security with Rust (liuhaitian) [task:587131]
  - block/nbd: rust: port IDR helpers, nbd_send_cmd, and link_dead to Rust (sangliang) [task:587131]
  - rust: update Some *.shim.c comments (chenlongteng) [task:587131]
  - rust: Standardize Rust driver integration and fix errors (lifengxiang) [task:587131]
  - rust: update watchdog C comments (Haoze Wu) [task:587131]
  - rust: update binging wrappers comments (Haoze Wu) [task:587131]
  - rust: scsi/fnic: Move driver to scsi subdirectory (chentao) [task:587131]
  - rust: scsi/fnic: Expand driver core and protocol modules (chentao) [task:587131]
  - rust: fix bindings and shim for out-of-tree (O=) builds (long zhou) [task:587131]
  - drivers/rust/drivers/scsi: add qedf io (wulinen) [task:587131]
  - rust: scsi/fnic: Add queue descriptors and VNIC extensions (chentao) [task:587131]
  - rust: hwmon: Translate comments to English and add SPDX (wangyuxin) [task:587131]
  - rust: update kernel-helper comments (Haoze Wu) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs attr (wulinen) [task:587131]
  - rust: update typec driver && Some *.shim.c comments (chenlongteng) [task:587131]
  - rust: hwmon: Convert NCT7802 driver to Rust (wangyuxin) [task:587131]
  - rust: fix depmod Cycle detected (long zhou) [task:587131]
  - rust: hwmon: Convert LTC2945 driver to Rust (wangyuxin) [task:587131]
  - rust: Convert four drivers to Rust (chenlongteng) [task:587131]
  - rust: Standardize comments part4 (liuhaitian) [task:587131]
  - rust: Implement HID core functions in Rust (yijiqian) [task:587131]
  - rust: Convert the comments in bcm5974, cyapa_common/gen3/gen5 (input/mouse) into English (yijiqian) [task:587131]
  - rust: Convert hd3ss3220 & rts5453 & fsa4480 driver to Rust (chenlongteng) [task:587131]
  - rust/hwmon: Convert tmp401 driver to Rust (wangyuxin) [task:587131]
  - rust: iio_hwmon driver fix (liuhaitian) [task:587131]
  - rust: update drivers comments (lingfuyi) [task:587131]
  - rust: Enhance oxp-sensors driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance the smpro-hwmon driver security with Rust (liuhaitian) [task:587131]
  - rust: update watchdog driver comments (Haoze Wu) [task:587131]
  - rust: Add infrastructure for C2Rust migration of partial drivers (liuhaitian) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs files-4 (wulinen) [task:587131]
  - rust: update driver shim comments (Haoze Wu) [task:587131]
  - rust: hwmon: Translate comments to English and add SPDX (wangyuxin) [task:587131]
  - rust: Covert others nls drivers to rust (lingfuyi) [task:587131]
  - rust: normalize qlogic and kernel-helpers comments to English (gaoyinggang) [task:587131]
  - rust: update joystick driver comments (long zhou) [task:587131]
  - rust: scsi/fnic: Extend SCSI, FCS and VNIC device layers (chentao) [task:587131]
  - rust: update unit_test,template and subsystems comments (long zhou) [task:587131]
  - rust: Convert cp932 NLS driver to Rust (lingfuyi) [task:587131]
  - rust: scsi/fnic: Add main driver, trace and debugfs modules (chentao) [task:587131]
  - rust: scsi/fnic: Add SCSI processing and FC services in Rust (chentao) [task:587131]
  - rust: scsi/fnic: Add FNIC core driver structures in Rust (chentao) [task:587131]
  - rust: Implement HID core functions in Rust (chenlongteng) [task:587131]
  - rust: Convert ADT7470 driver to Rust (lifengxiang) [task:587131]
  - rust: convert comments to English and add license headers (lifengxiang) [task:587131]
  - rust: convert comments to English and add license headers (lifengxiang) [task:587131]
  - rust: Convert NLS CP950 to Rust (lingfuyi) [task:587131]
  - rust: scsi/fnic: Add VNIC hardware abstraction layer in Rust (chentao) [task:587131]
  - rust: scsi/fnic: Add Rust driver framework infrastructure (chentao) [task:587131]
  - rust: update pwm driver comments (long zhou) [task:587131]
  - rust: i3c: Convert Chinese comments to English (chentao) [task:587131]
  - rust: Enhance corsair-cpro driver security with Rust (liuhaitian) [task:587131]
  - rust: Translate comments to English in drivers (lifengxiang) [task:587131]
  - rust: Add ignore information (liuhaitian) [task:587131]
  - rust: Enhance the da9052-hwmon driver security with Rust (liuhaitian) [task:587131]
  - rust: Standardize comments part3 (liuhaitian) [task:587131]
  - rust: Enhance the INA238 driver security with Rust (liuhaitian) [task:587131]
  - block/nbd: rust: port Netlink CONNECT and RECONFIGURE to Rust (sangliang) [task:587131]
  - block/nbd: rust: port Netlink DISCONNECT/STATUS and Debugfs to Rust (sangliang) [task:587131]
  - rust/qlogic: fix compilation errors in qlcnic 83xx Rust driver (Haoze Wu) [task:587131]
  - rust: update reset driver comments (long zhou) [task:587131]
  - rust: update rmi4 driver comments (long zhou) [task:587131]
  - rust: Add path compare and probe wrappers, fix hid_generic (yijiqian) [task:587131]
  - rust: Convert report/field registration and report parser to Rust (yijiqian) [task:587131]
  - rust: update gpio comments (long zhou) [task:587131]
  - rust: Add qlcnic context, DCB, minidump, SR-IOV and sysfs in Rust. (gaoyinggang) [task:587131]
  - rust: Convert report parser, free report, resolution multiplier and scan to Rust (yijiqian) [task:587131]
  - rust: Convert fetch_item func and hid_parser_global func in hid_core (yijiqian) [task:587131]
  - rust: update touchscreen drivers comments (long zhou) [task:587131]
  - rust: gpio: fix unused import and variable warnings in unit tests (sangliang) [task:587131]
  - block/nbd: rust: port module init and cleanup to Rust (sangliang) [task:587131]
  - block/nbd: rust: port device start, disconnect, and config_put to Rust (sangliang) [task:587131]
  - rust: Convert the hid_close_report function in hid_core (yijiqian) [task:587131]
  - block/nbd: export nbd_cmd_size for Rust shim tag_set init (sangliang) [task:587131]
  - block/nbd: rust: port blk-mq ops and socket add/reconnect to Rust (sangliang) [task:587131]
  - block/nbd: rust: port handle_reply, clear_req, handle_cmd to Rust (sangliang) [task:587131]
  - rust: Convert HID core driver to Rust (yijiqian) [task:587131]
  - drivers/rust/drivers/scsi: add qedf net (wulinen) [task:587131]
  - rust: Add Rust ethtool, init and io modules in qlcnic (gaoyinggang) [task:587131]
  - rust: Add full Rust qlcnic_main.rs and qlcnic_hw.rs (gaoyinggang) [task:587131]
  - rust: Convert hid-generic driver to Rust (yijiqian) [task:587131]
  - rust: convert hid_generic_probe (yijiqian) [task:587131]
  - rust: Building HID infrastructure (yijiqian) [task:587131]
  - rust: Convert input/mouse/cyapa Gen3/Gen5/Gen6 to Rust (yijiqian) [task:587131]
  - rust: qlogic: complete qla3xxx driver with MSI and ethtool support (Haoze Wu) [task:587131]
  - rust: netxen: Complete NetXen NIC driver Rust translation (Haoze Wu) [task:587131]
  - rust: netxen: Complete NetXen NIC driver Rust translation (Haoze Wu) [task:587131]
  - rust: i3c: Add hardware controller drivers in Rust (chentao) [task:587131]
  - rust: i3c: Add IBI and compatibility helper modules (chentao) [task:587131]
  - rust: i3c: Add transfer and control helper modules (chentao) [task:587131]
  - rust: i3c: Add address and device management helpers (chentao) [task:587131]
  - rust: i3c: Add master_ops and related modules (chentao) [task:587131]
  - rust: i3c: Add ccc_cmd and transfer helper modules (chentao) [task:587131]
  - rust: i3c: Add daa, sysfs and bus helper modules (chentao) [task:587131]
  - rust: Add unaligned access and enhance wrappers (yijiqian) [task:587131]
  - kvm: Fix virtcca VM failed to boot (Hao Ge) [task:596021]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.5.v2601
changelog:
  - spec: Add Module.kabi_* to kernel source package (Jiangshan Yi) [task:598429]
  - kabi: initialize kabi list and symvers for v11 2603 (Jiangshan Yi) [task:598429]
  - rust: fix type paths after bindings types moved to bindings::types (sangliang) [task:587131]
  - configs/x86: enable config for INTEL_IOMMU and INTEL_IOMMU_SVM (tanze) [bug:497331]
  - update-kabilist.sh: add sw64 support (Jiangshan Yi) [task:598429]
  - configs: update generic_defconfig (Jiangshan Yi) [bug:496751, task:599339, task:598999]
  - amd64: enable EDAC drivers (Wang Yan) [bug:496771]
  - PM: Implement s3 timeout wakeup interface (Riwen Lu) [task:501149, task:590639]
  - drm/nouveau: kill plymouth before remove efifb (Wang Jiang) [bug:476569, task:590639]
  - vt: add func to get fg_console vt process info (Lu Yao) [bug:469845, task:590639]
  - usb: Fix the touchscreen(248a:501f) not working after s3 wake-up (dengjie03) [bug:449043, task:590639]
  - drm/nouveau: Solve the occasional screen flickering issue when switching to the first tty on gt730. (Wang Jiang) [bug:470713, task:590639]
  - drm/nouveau: Resolve the issue of the stress test application crashing (Wang Jiang) [bug:395369, task:590639]
  - drm/atomic: prioritize the judgment of hotspot attributes (Lu Yao) [task:561737, task:590639]
  - input: Reduce the duration of close input devices (songxiebing) [bug:434335, task:590639]
  - ata: Disable the Stagered Spin-up function (xiongxin) [bug:449871, task:590639]
  - drm/amdgpu: skip suspend when shutdown (Lu Yao) [bug:451223, task:590639]
  - acpi: cix: Rename acpi_clk_get_hw() function (dengjie03) [task:456373, task:590639]
  - usb: quirks: Add NO_LPM quirk for Realtek USB3.2 Hub (Jiayi Li) [task:532899, task:590639]
  - usb: quirks: Add USB_QUIRK_NO_LPM for realtek usb 3.2 hub(0dba:0411). (huxiaoying) [bug:434615, task:590639]
  - smmu: fix stream id duplicate error when do func0 dma alias (songxiebing) [task:528911, task:590639]
  - tee: checking the legitimacy of pointer address (yangzhao) [bug:373431, task:590639]
  - tee: shm: Validate pointers in release path (wangchi) [bug:373431, task:590639]
  - drm/nouveau: Resolve the partial resolution display issue of the gt70 screen. (Wang Jiang) [bug:408849, task:590639]
  - drm/radeon: Solve the problem of the audio options not disappearing promptly after unplugging the HDMI audio. (Wang Jiang) [bug:410803, task:590639]
  - gpio: move phytium gpio pm ops to noirq phase (Riwen Lu) [task:513931, task:590639]
  - Revert "PHYTIUM: gpio: Optimize the logic of suspend and resume" (Riwen Lu) [task:513931, task:590639]
  - drm/amdgpu: do not skip vt switch by default (Shixiong Ou) [bug:406295, task:590639]
  - sched: enable optimize the context1 and spawn test cases of unixbench by default (Longlong Xia) [task:450572, bug:362845, task:590639]
  - sched: Optimize the context1 and spawn test cases of unixbench (liwanwu) [task:417269, task:590639]
  - drm/amd/display: Delay hotplug detection time (Shixiong Ou) [bug:391627, bug:365869, task:590639]
  - drm/amdgpu: Fix the issue where audio still shows as connected after unplugging HDMI on AMD Oland cards. (Wang Jiang) [bug:365681, task:590639]
  - Revert "percpu_counter: add a cmpxchg-based _add_batch variant" (zenghongling) [task:450572, task:388551, task:590639]
  - drm/amdgpu: fix amdgpu_drv compile error (Lu Yao) [task:475401, task:590639]
  - drm: drm for si oland amdgpu (yangdeyi) [task:462438, task:590639]
  - mm: add max mode support for kymem turbo (Enze Li) [bug:490185]
  - machine_t: Add PHYTIUM D3000M interface (Riwen Lu) [task:453481, task:590639]
  - rust: update x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - LoongArch: Add crash dump support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add ELF binary support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add EFI binary support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add preparatory infrastructure for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add struct loongarch_image_header for kernel (Youling Tang) [task:598607]
  - mptcp: track fallbacks accurately via mibs (Paolo Abeni) [task:598609]
  - selftests: mptcp: add a check for 'add_addr_accepted' (Gang Yan) [task:598609]
  - selftests: mptcp: add checks for fallback counters (Gang Yan) [task:598609]
  - mptcp: allow overridden write_space to be invoked (Geliang Tang) [task:598609]
  - selftests: mptcp: close server IPC descriptors (Geliang Tang) [task:598609]
  - selftests: mptcp: close server file descriptors (Geliang Tang) [task:598609]
  - selftests: mptcp: join: allow more time to send ADD_ADDR (Matthieu Baerts (NGI0)) [task:598609]
  - selftests: mptcp: join: tolerate more ADD_ADDR (Matthieu Baerts (NGI0)) [task:598609]
  - mptcp: make ADD_ADDR retransmission timeout adaptive (Geliang Tang) [task:598609]
  - mptcp: add TCP_MAXSEG sockopt support (Geliang Tang) [task:598609]
  - tcp: add tcp_sock_set_maxseg (Geliang Tang) [task:598609]
  - mptcp: sockopt: drop redundant tcp_getsockopt (Geliang Tang) [task:598609]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.6.v2601
changelog:
  - security/ksaf: modify readonly mount hook para in fsmount (zhubing) [bug:499961]
  - rust: fix cyapa PM ops with CONFIG_RUST_DRIVER disabled (yijiqian) [task:587131]
  - Revert "rust: Enable configuration items" (周龙) [task:603115]
  - 3rd/mwv207: fix compile error (Lu Yao) [task:603117]
  - configs: enable auto-tuning on x86 and arm64 platforms (Enze Li) [task:525875]
  - rust: Add conditional compilation (liuhaitian) [task:587131]
  - configs: update generic_defconfig (Jiangshan Yi) [task:602241]
  - rust: Add conditional compilation (liuhaitian) [task:587131]
  - rust: Enable configuration items (liuhaitian) [task:587131]
  - ksaf: add ksaf_file_pre_open_fname hook (penghuaihe) [bug:500253]
  - rust: reduce mouse C glue by preferring Rust implementations (yijiqian) [task:587131]
  - kabi: Add kabi extended symvers check (Jiangshan Yi) [task:443413]
  - Documentation: remove sensitive wording from arcnet-hardware.rst (Haofeng.Li) [task:601483]
  - rust: reduce compiled C code by preferring Rust implementations (yijiqian) [task:587131]
  - configs/arm64: enable S3 timeout wakeup option (Riwen Lu) [task:590639]
  - rust: fix issues when built as module (CONFIG_SENSORS_K10TEMP=m) (gaoyinggang) [task:587131]
  - rust: fix SP5100 TCO WDT driver build issue (Haoze Wu) [task:587131]
  - SUNWAY: fix mmap_base exceeding Java assertion address (Gu Yuchen) [task:597783]
  - configs: enable SCSI_DH_ALUA (zhanggenjian) [bug:499437]
  - watchdog: Enable CONFIG_SOFT_WATCHDOG as module (wudandan) [bug:500569]
  - sched/kysched: Enable top task scheduler feature to klas-2603 (fangqiurong) [task:514421]
  - security/ksaf: add readonly mount hook in fsmount (zhubing) [bug:499961]
  - configs: enable CONFIG_RDMA_RXE and CONFIG_RDMA_SIW for RDMA test (Qingshuang Fu) [bug:499355]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.7.v2601
changelog:
  - config: re-enable CONFIG_NETKIT for generic_defconfig (Yun Lu) [bug:505271]
  - selftests: add damon tests to kernel-selftests package (Haofeng.Li) [bug:502773]
  - rust: make i3c Rust-only in Rust mode (chentao) [task:587131]
  - rust: decouple fnic/i3c objects and harden linker selection (chentao) [task:587131]
  - configs: enable CONFIG_ACPI_APEI_EINJ for test (Qingshuang Fu) [bug:504223]
  - configs: Enable the ECDH algorithm config on the arm64 platform (chengang) [task:600123]
  - loongarch/config: Enable SDF module compilation option (mengdehui) [bug:503421]
  - rust: reduce typec C glue by preferring Rust implementations (chenlongteng) [task:587131]
  - block/nbd: rust: fix GPF when NBD is loaded as module (sangliang) [task:587131]
  - block/nbd: rust: fix config layout, built-in module check, blksize_bits (sangliang) [task:587131]
  - mm: introduce blacklist mechanism to kymem turbo (Enze Li) [bug:502177]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.8.v2601
changelog:
  - configs: enable CONFIG_DNOTIFY (Jiangshan Yi) [bug:505255]
  - configs: enable CONFIG_FPROBE (yangfeng) [bug:506633]
  - configs: enable CONFIG_ACPI_APEI_EINJ for test on arm64 (Qingshuang Fu) [bug:506005]
  - rust: hid: use pr_debug for trace logs and fix printk loglevel prefixes (yijiqian) [bug:505099]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.9.v2601
changelog:
  - sched: fix the modification to the struct of rq (Zeng Chi) [task:599029]
  - add config for cpuidle-haltpoll (Zeng Chi) [task:599029]
  - fix abi for cpuidle-haltpoll (Zeng Chi) [task:599029]
  - net: automatically set sk_ll_usec to 100 for netperf/netserver (luoxuanqiang) [bug:488163]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.10.v2601
changelog:
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Pauli Virtanen) [task:574001, task:631577]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Edward Adam Davis) [task:574001, task:631577]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Luiz Augusto von Dentz) [task:574001, task:631577]
  - ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [task:630943]
  - Revert "configs: enable blktrace on sunway" (Qingshuang Fu) [task:630615]
  - smb: client: fix OOB reads parsing symlink error response (Greg Kroah-Hartman) [task:622623, task:626555] {CVE-2026-31613}
  - Bluetooth: ISO: free rx_skb if not consumed (Pauli Virtanen) [task:629911]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Luiz Augusto von Dentz) [task:629911]
  - ALSA: usb-audio: Use the right limit for PCM OOB check (Takashi Iwai) [task:597001]
  - ALSA: usb-audio: Prevent excessive number of frames (Edward Adam Davis) [task:597001] {CVE-2026-23208}
  - ALSA: usb-audio: Use guard() for spin locks (Takashi Iwai) [task:597001]
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [task:600375]
  - macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [task:595741]
  - ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Kuniyuki Iwashima) [task:600375]
  - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF (Shigeru Yoshida) [task:595741]
  - net: dsa: properly keep track of conduit reference (Vladimir Oltean) [task:588999] {CVE-2025-71152}
  - net/sched: act_gate: snapshot parameters with RCU on replace (Paul Moses) [task:609645]
  - ipvlan: Make the addrs_lock be per port (Dmitry Skorodumov) [task:593735] {CVE-2026-23103}
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [task:609645]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Henrique Carvalho) [task:595983]
  - scsi: core: Fix error handling for scsi_alloc_sdev() (Junxiao Bi) [task:609645]
  - scsi: core: Fix refcount leak for tagset_refcnt (Junxiao Bi) [task:609645]
  - tracing: Add recursion protection in kernel stack trace recording (Steven Rostedt) [task:596509] {CVE-2026-23138}
  - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (Eric Dumazet) [task:595983]
  - mptcp: pm: in-kernel: rename 'local_addr_list' to 'endp_list' (Matthieu Baerts (NGI0)) [task:595983]
  - mptcp: pm: in-kernel: refactor fill_local_addresses_vec (Matthieu Baerts (NGI0)) [task:595983]
  - ALSA: aloop: Fix racy access at PCM trigger (Takashi Iwai) [task:597107] {CVE-2026-23191}
  - ALSA: aloop: Introduce a function to get if access is interleaved mode (Chancel Liu) [task:597107]
  - ALSA: aloop: Add control element for getting the access mode (Ivan Orlov) [task:597107]
  - ALSA: aloop: Add support for the non-interleaved access mode (Ivan Orlov) [task:597107]
  - af_unix: Give up GC if MSG_PEEK intervened. (Kuniyuki Iwashima) [task:609273] {CVE-2026-23394}
  - MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:629903] {CVE-2026-46300}
  - sunrpc: fix cache_request leak in cache_release (Jeff Layton) [task:609645]
  - PM: runtime: Fix a race condition related to device removal (Bart Van Assche) [task:609645]
  - net/mlx5e: Prevent concurrent access to IPSec ASO context (Jianbo Liu) [task:609645]
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Hannes Reinecke) [task:595741]
  - net/sched: ets: fix divide by zero in the offload path (Davide Caratti) [task:609645]
  - blktrace: fix __this_cpu_read/write in preemptible context (Chaitanya Kulkarni) [task:609117] {CVE-2026-23374}
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei) [task:615913]
  - nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny) [task:609645]
  - bonding: annotate data-races around slave->last_rx (Eric Dumazet)
  - nfc: nci: Fix race between rfkill and nci_unregister_device(). (Kuniyuki Iwashima) [task:595243]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Möller) [task:609645]
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [task:615913]
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Eric Dumazet) [task:615913]
  - netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu) [task:615913]
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso) [task:615913]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi) [task:612463]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [task:614703] {CVE-2026-31407}
  - scsi: qla2xxx: Validate sp before freeing associated memory (Anil Gurumurthy) [task:595983]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Anil Gurumurthy) [task:595983]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Anil Gurumurthy) [task:595983]
  - btrfs: fix NULL dereference on root when tracing inode eviction (Miquel Sabaté Solà) [task:609645]
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei) [task:609645]
  - net/sched: teql: Fix double-free in teql_master_xmit (Jamal Hadi Salim) [task:609645]
  - clsact: Fix use-after-free in init/destroy rollback asymmetry (Daniel Borkmann) [task:609645]
  - spi: fix statistics allocation (Johan Hovold) [task:609645]
  - spi: fix use-after-free on controller registration failure (Johan Hovold) [task:609645]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Chuck Lever) [task:612463]
  - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded (Jiayuan Chen) [task:609645]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski) [task:609645]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum) [task:609645]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [task:609645]
  - nvme: fix admin queue leak on controller reset (Ming Lei) [task:612463]
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [task:609645]
  - scsi: target: Fix recursive locking in __configfs_open_file() (Prithvi Tambewagh) [task:609645]
  - net: gro: fix outer network offset (Paolo Abeni) [task:595741]
  - crypto: virtio - Add spinlock protection with virtqueue notification (Bibo Mao) [task:595983]
  - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset (Perry Yuan) [task:597105] {CVE-2026-23213}
  - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single (Hao Ge) {CVE-2026-23219}
  - bonding: provide a net pointer to __skb_flow_dissect() (Eric Dumazet) [task:594541]
  - ipv6: annotate data-race in ndisc_router_discovery() (Eric Dumazet) [task:594541]
  - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (Jens Axboe) [task:594541]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Eric Dumazet) [task:594541]
  - net/mlx5e: TC, delete flows only for existing peers (Mark Bloch) [task:595243]
  - KVM: Don't clobber irqfd routing type when deassigning irqfd (Sean Christopherson) [task:595741]
  - perf: sched: Fix perf crash with new is_user_task() helper (Steven Rostedt) [task:595243]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (SeongJae Park) [task:594541]
  - flex_proportions: make fprop_new_period() hardirq safe (Jan Kara) [task:595243]
  - interconnect: debugfs: initialize src_node and dst_node to empty strings (Georgi Djakov) [task:594541]
  - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure (SeongJae Park) [task:594541]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [task:594541]
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Jiayuan Chen) [task:589527] {CVE-2025-71080}
  - arm64: Set __nocfi on swsusp_arch_resume() (Zhaoyang Huang) [task:594541]
  - migrate: correct lock ordering for hugetlb file folios (Matthew Wilcox (Oracle)) [task:594541]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Johan Hovold) [task:589349] {CVE-2025-71163}
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Eric Dumazet) [task:589037] {CVE-2026-23003}
  - ipv4: ip_gre: make ipgre_header() robust (Eric Dumazet) [task:589547] {CVE-2026-23011}
  - cpuset: fix warning when disabling remote partition (Chen Ridong) [task:589063] {CVE-2025-71142}
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi) [task:612463]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi) [task:609645]
  - pNFS: Fix a deadlock when returning a delegation during open() (Trond Myklebust) [task:609645]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [task:609645]
  - RDMA/siw: Fix potential NULL pointer dereference in header processing (YunJe Shin) [task:600375]
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [task:609645]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Anil Gurumurthy) [task:595983]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso) [task:609645]
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den) [task:609645]
  - RDMA/umad: Reject negative data_len in ib_umad_write (YunJe Shin) [task:600375]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [task:595741]
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (Andrew Fasano) [task:595741]
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (YunJe Shin) [task:595741]
  - ALSA: scarlett2: Fix buffer overflow in config retrieval (Samasth Norway Ananda) [task:594541]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Tetsuo Handa) [task:589075] {CVE-2025-71157}
  - mm/page_alloc: prevent pcp corruption with SMP=n (Vlastimil Babka) [task:594541]
  - fuse: fix io-uring list corruption for terminated non-committed requests (Joanne Koong) [task:589017] {CVE-2025-68805}
  - x86/mm: Fix SMP ordering in switch_mm_irqs_off() (Ingo Molnar) [task:555265] {CVE-2025-40174}
  - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Niklas Schnelle) [task:600375]
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Sean Christopherson) [task:589405] {CVE-2025-68810}
  - nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton) [task:595983]
  - NFSD: fix race between nfsd registration and exports_proc (Maninder Singh) [task:594541]
  - team: Move team device type change at the end of team_port_add (Nikola Z. Ivanov) [task:595243]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (Pauli Virtanen) [task:574001] {CVE-2025-68304}
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Luiz Augusto von Dentz) [task:574001]
  - nvme: fix memory allocation in nvme_pr_read_keys() (Sungwoo Kim) [task:609645]
  - nvme: reject invalid pr_read_keys() num_keys values (Stefan Hajnoczi) [task:609645]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [task:595741]
  - smb/client: fix memory leak in smb2_open_file() (ChenXiaoSong) [task:595741]
  - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref (Yang Erkun)
  - arm64/fpsimd: signal: Fix restoration of SVE context (Mark Rutland) [task:595243]
  - arm64/fpsimd: signal: Consistently read FPSIMD context (Mark Rutland) [task:595243]
  - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (Mark Rutland) [task:595243]
  - shmem: fix recovery on rename failures (Al Viro) [task:589347] {CVE-2025-71072}
  - audit: add fchmodat2() to change attributes class (Jeffrey Bencteux) [task:600375]
  - audit: add missing syscalls to read class (Jeffrey Bencteux) [task:600375]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Nicolin Chen) [task:588847]
  - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Nicolin Chen) [task:588847] {CVE-2024-53225}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [task:595741]
  - pidfs: validate extensible ioctls (Christian Brauner) [task:566415] {CVE-2025-40217}
  - configs: enable blktrace on sunway (liuyunchen) [bug:551671]
  - mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat)) [task:593731] {CVE-2026-23100}
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Jane Chu) [task:593731]
  - LoongArch: stmmac: fix mdc too high issues. (wanghongliang) [task:605031]
  - LoongArch: enable CONFIG_LEDS_GPIO (wanghongliang) [task:605031]
  - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE (wudandan) [task:605031]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [task:626685] {CVE-2026-43500}
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [task:626685]
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (David Howells) [task:626685]
  - rxrpc: only handle RESPONSE during service challenge (Wang Jie) [task:622807]
  - rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [task:626685]
  - rxrpc: Fix rxkad crypto unalignment handling (David Howells) [task:626685]
  - rxrpc: Fix memory leaks in rxkad_verify_response() (David Howells) [task:626685]
  - rxrpc: Fix CPU time starvation in I/O thread (David Howells) [task:626685]
  - rxrpc: Parse received packets before dealing with timeouts (David Howells) [task:626685]
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (David Howells) [task:618851]
  - rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu) [task:618851]
  - rxrpc: Fix data-race warning and potential load/store tearing (David Howells) [task:609645]
  - rust: Fix missing spaces during variable assignment in Rust compilation options (zhangxi) [task:606401]
  - tpm: Fix incorrect TCM branch handling in tpm_buf_fill_hmac_session (Wang Yan) [task:590217]
  - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal (Srish Srinivasan) [task:590217]
  - tpm2-sessions: Fix out of range indexing in name_size (Jarkko Sakkinen) [task:590217] {CVE-2025-68792}
  - tpm: Mask TPM RC in tpm2_start_auth_session() (Jarkko Sakkinen) [task:590217]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Sean Christopherson) [task:589343] {CVE-2026-23005}
  - netfilter: nf_conntrack_expect: use expect->helper (Pablo Neira Ayuso) [task:615913]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [task:626683] {CVE-2026-43284}
  - openvswitch: vport: fix self-deadlock on release of tunnel ports (Ilya Maximets) [task:628809]
  - bcache: fix uninitialized closure object (Mingzhe Zou) [task:623065, task:628809]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) [task:628809]
  - ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [task:628809]
  - ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [task:628809]
  - nvmet: move async event work off nvmet-wq (Chaitanya Kulkarni) [task:622731, task:626555] {CVE-2026-31557}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Xiang Mei) [task:622807, task:626555] {CVE-2026-43085}
  - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (Baolin Wang) [task:618851, task:626555] {CVE-2026-31648}
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN (Jenny Guanni Qu) [task:612463, task:626555] {CVE-2026-31525}
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (Weiming Shi) [task:612463, task:626555] {CVE-2026-31426}
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel) [task:615913, task:626555] {CVE-2026-31778}
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [task:622807, task:626555] {CVE-2026-31673}
  - mptcp: fix soft lockup in mptcp_recvmsg() (Li Xiasong) [task:624587, task:626555] {CVE-2026-43029}
  - mptcp: add eat_recv_skb helper (Geliang Tang) [task:624587, task:626555]
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito) [task:622807, task:626555] {CVE-2026-31708}
  - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust (Huacai Chen) [task:622957, task:626555] {CVE-2026-31558}
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [task:615913, task:626555] {CVE-2026-43037}
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson) [task:622807, task:626555] {CVE-2026-31697}
  - net: sched: act_csum: validate nested VLAN headers (Ruide Cao) [task:622807, task:626555] {CVE-2026-31684}
  - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback (Willem de Bruijn) [task:615913, task:626555] {CVE-2026-43057}
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) [task:622807, task:626555] {CVE-2026-31700}
  - xfrm: Wait for RCU readers during policy netns exit (Steffen Klassert) [task:622807, task:626555] {CVE-2026-43091}
  - drm/ioc32: stop speculation on the drm_compat_ioctl path (Greg Kroah-Hartman) [task:615913, task:626555] {CVE-2026-31781}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet) [task:615913, task:626555] {CVE-2026-43038}
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [task:622807, task:626555] {CVE-2026-31685}
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Pablo Neira Ayuso) [task:609645, task:626555] {CVE-2026-23392}
  - net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [task:612463, task:626555] {CVE-2026-31504}
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [task:622807, task:626555] {CVE-2026-43093}
  - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (Junxi Qian) [task:624647, task:626555] {CVE-2026-31774}
  - ext4: publish jinode after initialization (Li Chen) [task:615913, task:626555] {CVE-2026-31450}
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Jacob Moroni) [task:600375, task:626555] {CVE-2026-43128}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Greg Kroah-Hartman) [task:622807, task:626555] {CVE-2026-31614}
  - vxlan: validate ND option lengths in vxlan_na_create (Yang Yang) [task:615913, task:626555] {CVE-2026-31738}
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam) [task:612463, task:626555] {CVE-2026-31473}
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation (Yussuf Khalil) [task:623193, task:626555] {CVE-2026-31488}
  - ext4: avoid infinite loops caused by residual data (Edward Adam Davis) [task:612463, task:626555] {CVE-2026-31448}
  - ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike) [task:612463, task:626555] {CVE-2026-31447}
  - bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov) [task:615913, task:626555] {CVE-2026-43030}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [task:595741, task:626555] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Eric Dumazet) [task:595741, task:626555]
  - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). (Kuniyuki Iwashima) [task:626555] {CVE-2026-43016}
  - xfs: avoid dereferencing log items after push callbacks (Yuto Ohnuki) [task:612463, task:626555] {CVE-2026-31453}
  - fuse: reject oversized dirents in page cache (Samuel Page) [task:622807, task:626555] {CVE-2026-31694}
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Tuo Li) [task:623173, task:626555] {CVE-2026-31436}
  - ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [task:622807, task:626555] {CVE-2026-31602}
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson) [task:622807, task:626555] {CVE-2026-31699}
  - bridge: br_nd_send: validate ND option lengths (Yang Yang) [task:615913, task:626555] {CVE-2026-31752}
  - ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [task:622807, task:626555] {CVE-2026-31581}
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (xietangxin) [task:612463, task:626555] {CVE-2026-31469}
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan) [task:618851, task:626555] {CVE-2026-31533}
  - perf: Make sure to use pmu_ctx->pmu for groups (Peter Zijlstra) [task:612463, task:626555] {CVE-2026-31528}
  - perf: Extract a few helpers (Peter Zijlstra) [task:612463, task:626555]
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Zide Chen) [task:622807, task:626555] {CVE-2026-43079}
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [task:615913, task:626555] {CVE-2026-43028}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen) [task:618851, task:626555] {CVE-2026-31669}
  - bonding: fix use-after-free due to enslave fail after slave array update (Nikolay Aleksandrov) [task:626555] {CVE-2026-23171}
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Inseo An) [task:600375, task:626555] {CVE-2026-23231}
  - Input: lkkbd - disable pending work before freeing device (Minseong Kim) [task:589015, task:626555] {CVE-2025-71073}
  - futex: Require sys_futex_requeue() to have identical flags (Peter Zijlstra) [task:622903, task:626555] {CVE-2026-31554}
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (Takashi Iwai) [task:600375, task:626555] {CVE-2026-43279}
  - nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi) [task:609645, task:626555] {CVE-2026-23397}
  - iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore) [task:615913, task:626555] {CVE-2026-31761}
  - iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore) [task:615913, task:626555]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [task:622807, task:626555] {CVE-2026-43077}
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson) [task:622807, task:626555] {CVE-2026-31698}
  - xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki) [task:612463, task:626555] {CVE-2026-31454}
  - xfrm: prevent policy_hthresh.work from racing with netns teardown (Minwoo Ra) [task:623237, task:626555] {CVE-2026-31516}
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [task:623239, task:626555] {CVE-2026-31449}
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang) [task:615913, task:626555] {CVE-2026-43027}
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich) [task:615913, task:626555] {CVE-2026-43040}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li) [task:615913, task:626555] {CVE-2026-31759}
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Josef Bacik) [task:615913, task:626555] {CVE-2026-43054}
  - cifs: some missing initializations on replay (Shyam Prasad N) [task:600375, task:626555] {CVE-2026-31693}
  - media: mediatek: vcodec: fix use-after-free in encoder release path (Fan Wu) [task:622807, task:626555] {CVE-2026-31584}
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (Shivam Kumar) [task:594541, task:626555] {CVE-2026-22998}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [task:594541, task:626555]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim) [task:609645, task:626555] {CVE-2026-23458}
  - net: ioam6: fix OOB and missing lock (Justin Iurman) [task:626555] {CVE-2026-43083}
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() (Kwok Kin Ming) [task:595741, task:626555] {CVE-2026-23178}
  - xdp: produce a warning when calculated tailroom is negative (Larysa Zaremba) [task:609645, task:626555] {CVE-2026-23343}
  - xdp: use modulo operation to calculate XDP frag tailroom (Larysa Zaremba) [task:609645, task:626555]
  - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [task:612463, task:626555] {CVE-2026-31508}
  - Squashfs: check metadata block offset is within range (Phillip Lougher) [task:609645, task:626555] {CVE-2026-23388}
  - ALSA: caiaq: take a reference on the USB device in create_card() (Berk Cem Goksel) [task:622807, task:626555] {CVE-2026-31701}
  - smb: client: fix krb5 mount with username option (Paulo Alcantara) [task:609645, task:626555] {CVE-2026-31392}
  - openvswitch: validate MPLS set/set_masked payload length (Yang Yang) [task:612463, task:626555] {CVE-2026-31679}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu) [task:609645, task:626555] {CVE-2026-23456}
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang) [task:615913, task:626555] {CVE-2026-31680}
  - eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [task:622807, task:626555] {CVE-2026-43074}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Chuck Lever) [task:609645, task:626555] {CVE-2026-31403}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [task:622807, task:626555] {CVE-2026-31607}
  - pstore: ram_core: fix incorrect success return when vmap() fails (Ruipeng Qi) [task:600375, task:626555] {CVE-2026-43124}
  - bridge: br_nd_send: linearize skb before parsing ND options (Yang Yang) [task:615913, task:626555] {CVE-2026-31682}
  - net/sched: act_ife: Fix metalist update behavior (Jamal Hadi Salim) [task:609645, task:626555] {CVE-2026-23378}
  - efivarfs: fix error propagation in efivar_entry_get() (Kohei Enju) [task:595243, task:626555] {CVE-2026-23156}
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [task:622807, task:626555] {CVE-2026-31586}
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo) [task:609645, task:626555] {CVE-2026-23318}
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei) [task:612463, task:626555] {CVE-2026-31674}
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [task:609645, task:626555] {CVE-2026-23412}
  - bpf: Fix incorrect pruning due to atomic fetch precision tracking (Daniel Borkmann) [task:624533, task:626555] {CVE-2026-43009}
  - openvswitch: defer tunnel netdev_put to RCU release (Yang Yang) [task:612463, task:626555] {CVE-2026-31678}
  - ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen) [task:612463, task:626555] {CVE-2026-31446}
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Benoît Sevens) [task:615913, task:626555] {CVE-2026-43051}
  - xfrm_user: fix info leak in build_mapping() (Greg Kroah-Hartman) [task:622807, task:626555] {CVE-2026-43089}
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do) [task:618851, task:626555] {CVE-2026-31665}
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption (Yucheng Lu) [task:615913, task:626555] {CVE-2026-31675}
  - bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [task:622807, task:626555] {CVE-2026-31580}
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai) [task:615913, task:626555] {CVE-2026-31776}
  - KVM: arm64: Read PMUVer as unsigned (James Clark) [task:628809]
  - ANOLIS: x86/csv: Allocate memory cyclically from different csv_cma (Wang Yan) [task:594243]
  - md-cluster: fix no recovery job when adding/re-adding a disk (Heming Zhao) [task:613175]
  - md-cluster: fix hanging issue while a new disk adding (Heming Zhao) [task:613175]
  - md/raid0: don't free conf on raid0_run failure (Christoph Hellwig) [task:613175]
  - md: add check for sleepers in md_wakeup_thread() (Florian-Ewald Mueller) [task:613175]
  - md/raid1: fix choose next idle in read_balance() (Yu Kuai) [task:613175]
  - md/raid1: record nonrot rdevs while adding/removing rdevs to conf (Yu Kuai) [task:613175]
  - md/raid1: factor out helpers to add rdev to conf (Yu Kuai) [task:613175]
  - md: sync blockdev before stopping raid or setting readonly (Li Nan) [task:613175]
  - md: factor out a helper to sync mddev (Li Nan) [task:613175]
  - md: return directly before setting did_set_md_closing (Li Nan) [task:613175]
  - md: get rdev->mddev with READ_ONCE() (Li Lingfeng) [task:613175]
  - x86/vmware: Fix hypercall clobbers (Josh Poimboeuf) [task:596649] {CVE-2026-23215}
  - x86/vmware: Add TDX hypercall support (Alexey Makhalov) [task:596649]
  - x86/vmware: Remove legacy VMWARE_HYPERCALL* macros (Alexey Makhalov) [task:596649]
  - x86/vmware: Correct macro names (Alexey Makhalov) [task:596649]
  - x86/vmware: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - drm/vmwgfx: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - input/vmmouse: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - ptp/vmware: Use VMware hypercall API (Alexey Makhalov) [task:596649]
  - x86/vmware: Introduce VMware hypercall API (Alexey Makhalov) [task:596649]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Pingfan Liu) [task:595579]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Pingfan Liu) [task:595579]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Pingfan Liu) [task:595579]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Pingfan Liu) [task:595579]
  - OPENEULER: ipmi: Add HiSilicon IPMI Page Soft Offline driver (Wanhan He) [task:604183]
  - OPENEULER: apei/ghes: Add sysctl interface to control soft-offline page isolation (Qi Xi) [task:604183]
  - Add MAP_PEER_SHARED in SUNWAY (liuyunchen) [task:609357]
  - PM / devfreq: hisi: Fix potential UAF in OPP handling (Pengjie Zhang) [task:613159]
  - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (Zubin Mithra) [task:623055] {CVE-2026-31470}
  - block: change blk_mq_add_to_batch() third argument type to bool (Shin'ichiro Kawasaki) [bug:521953]
  - net: skb: fix cross-cache free of KFENCE-allocated skb head (Jiayuan Chen) [task:619059] {CVE-2026-31429}
  - tcp: secure_seq: add back ports to TS offset (Eric Dumazet) [task:606409] {CVE-2026-23247}
  - bpf, arm64: Enable the inline of bpf_kptr_xchg() (Hou Tao) [task:613181]
  - skip policy check for virtualized environments (liuyunchen) [bug:521073]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Pablo Neira Ayuso) [task:606585] {CVE-2026-23272}
  - kernel: Remove signal hacks for vhost_tasks (Mike Christie) [task:513401]
  - net: add proper RCU protection to /proc/net/ptype (Eric Dumazet) [task:605985] {CVE-2026-23255}
  - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (Jiayuan Chen) [task:614737] {CVE-2026-23472}
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei) [task:616143] {CVE-2026-31419}
  - bridge: mrp: reject zero test interval to avoid OOM panic (Xiang Mei) [task:616111] {CVE-2026-31420}
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Namjae Jeon) [task:596721] {CVE-2026-23226}
  - ksmbd: check return value of xa_store() in krb5_authenticate (Namjae Jeon) [task:596721]
  - smb: server: smb2pdu: check return value of xa_store() (Salah Triki) [task:596721]
  - selftests/net: calibrate txtimestamp (Willem de Bruijn) [task:613189]
  - bpf: Fix constant blinding for PROBE_MEM32 stores (Sachin Kumar) [task:614747] {CVE-2026-23417}
  - OPENEULER: sunrpc: fix NULL pointer dereference in rpcb_register_inet6 and rpcb_register_inet4 (zhaoyonghao) [task:612091]
  - watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_se30_wdt_probe() (Henry Martin) [task:614431] {CVE-2025-38144}
  - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() (Hyunwoo Kim) [task:614571] {CVE-2026-31406}
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Ben Horgan) [task:614697] {CVE-2026-23433}
  - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() (Qiang Ma) [task:592297, task:611585] {CVE-2026-23027}
  - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() (Qiang Ma) [task:592325, task:611585] {CVE-2026-23028}
  - ANOLIS: x86/mm: csv: Increase the maximum value of `csv_mem_percentage` from 80 to 95 (Zhiguang Ni) [task:594241]
  - tracing: Fix enabling of tracing on file release (Steven Rostedt) [task:613165]
  - OPENEULER: PCI: Fix NVMe link speed downgrade to 2.5GT/s during hotplug (Jinhui Guo) [task:612093]
  - ipv6: add NULL checks for idev in SRv6 paths (Minhong He) [task:613203] {CVE-2026-23442}
  - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations (Felix Fietkau) [task:613197] {CVE-2026-31394}
  - ext4: initialize superblock fields in the kballoc-test.c kunit tests (Zhang Yi) [task:551425]
  - OPENEULER: dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [task:612095]
  - sunrpc: fix race in cache cleanup causing stale nextcheck time (Long Li) [task:612089]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Pablo Neira Ayuso) [task:610371] {CVE-2026-23399}
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson) [task:611423] {CVE-2026-23401}
  - mm: remove unnecessary calls to lru_add_drain (Rik van Riel) [task:573689]
  - netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash (Florian Westphal) [task:589629]
  - io_uring/rw: free potentially allocated iovec on cache put failure (Jens Axboe) [task:606459] {CVE-2026-23259}
  - io_uring: add async data clear/free helpers (Jens Axboe) [task:606459]
  - rcu: Add lockdep_assert_in_rcu_read_lock() and friends (Paul E. McKenney) [task:606593]
  - ice: Fix memory leak in ice_set_ringparam() (Zilin Guan) [task:609147] {CVE-2026-23389}
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Thomas Gleixner) [task:609085]
  - clocksource: Set cs_watchdog_read() checks based on .uncertainty_margin (Paul E. McKenney) [task:609085]
  - net: annotate data-races around sk->sk_{data_ready,write_space} (Eric Dumazet) [task:609103] {CVE-2026-23302}
  - bridge: cfm: Fix race condition in peer_mep deletion (Hyunwoo Kim) [task:609257] {CVE-2026-23393}
  - OPENEULER: arm64: topology: Setup amu fie when cpu hotplugging (Lifeng Zheng) [task:605313]
  - LoongArch: Replace seq_printf() with seq_puts() for simple strings (George Guo) [task:555987]
  - LoongArch: Add 128-bit atomic cmpxchg support (George Guo) [task:555987]
  - LoongArch: Add detection for SC.Q support (George Guo) [task:555987]
  - LoongArch: Select HAVE_CMPXCHG_LOCAL in Kconfig (Huacai Chen) [task:555987]
  - LoongArch: Only use SC.Q when supported by the assembler (Thomas Weißschuh) [task:555987]
  - LoongArch: Complete CPUCFG registers definition (Huacai Chen) [task:555987]
  - LoongArch: BPF: Make error handling robust in arch_prepare_bpf_trampoline() (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Make trampoline size stable (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Don't align trampoline size (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Remove duplicated bpf_flush_icache() (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Remove duplicated flags check (Hengqi Chen) [task:555987]
  - LoongArch: BPF: Fix uninitialized symbol 'retval_off' (Huacai Chen) [task:555987]
  - LoongArch: BPF: Optimize sign-extention mov instructions (Tiezhu Yang) [task:555987]
  - LoongArch: Add irq_work support via self IPIs (Huacai Chen) [task:555987]
  - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (Fuad Tabba) [task:609211] {CVE-2026-23383}
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen) [task:608995] {CVE-2026-23300}
  - bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju) [task:609007] {CVE-2026-23359}
  - cpufreq: intel_pstate: Fix crash during turbo disable (Srinivas Pandruvada) [task:608555] {CVE-2026-23332}
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Rafael J. Wysocki) [task:608555]
  - mm: thp: deny THP for files on anonymous inodes (Deepanshu Kartikey) [task:608979] {CVE-2026-23375}
  - VOLANS: vrcdrv: update vrcdrv RAID card driver to version 2.0-b2599-gf365215 (Cao Guanghui) [task:577915]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [task:606591] {CVE-2026-23278}
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (Peter Zijlstra) [task:606597] {CVE-2026-23271}
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [task:606589] {CVE-2026-23274}
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira) [task:606435] {CVE-2026-23270}
  - rtl8192FU: fix compile error due to wireless stack change (Yi Cong) [task:605713]
  - arm64, tlbflush: don't TLBI broadcast if page reused in write fault (Huang Ying) [task:594255]
  - mm: add spurious fault fixing support for huge pmd (Huang Ying) [task:594255]
  - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (Lang Xu)
  - espintcp: Fix race condition in espintcp_close() (Hyunwoo Kim) [task:603763] {CVE-2026-23239}
  - tls: Fix race condition in tls_sw_cancel_work_tx() (Hyunwoo Kim) [task:603765] {CVE-2026-23240}
  - btrfs: do not strictly require dirty metadata threshold for metadata writepages (Qu Wenruo) [task:597229] {CVE-2026-23157}
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Jie Zhan) [task:597037]
  - selftests/bpf: Add selftests for the invocation of bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (Feng Yang) [task:584649]
  - mm/khugepaged: use KMEM_CACHE() (Wei Yang) [task:594223]
  - mm/ksm: cleanup mm_slot_entry() invocation (Wei Yang) [task:594223]
  - mm/khugepaged: remove definition of struct khugepaged_mm_slot (Wei Yang) [task:594223]
  - mm/ksm: get mm_slot by mm_slot_entry() when slot is !NULL (Wei Yang) [task:594223]
  - mm/khugepaged: use list_xxx() helper to improve readability (Wei Yang) [task:594223]
  - mm/khugepaged: fix comment for default scan sleep duration (wang lian) [task:594223]
  - OPENEULER: cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost (Lifeng Zheng) [task:597037]
  - OPENEULER: cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate() (Lifeng Zheng) [task:597037]
  - OPENEULER: cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate() (Lifeng Zheng) [task:597037]
  - OPENEULER: cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn() (Jie Zhan) [task:597037]
  - HYGON: cpu vulnerabilities: support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS (zhangjun) [task:594245]
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() (Lifeng Zheng) [task:597037]
  - cpufreq: Remove duplicate check in __cpufreq_offline() (Lifeng Zheng) [task:597037]
  - cpufreq: Replace deprecated strncpy() with strscpy() (Justin Stitt) [task:597037]
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs (Lifeng Zheng) [task:597037]
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() (Lifeng Zheng) [task:597037]
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class() (Lifeng Zheng) [task:597037]
  - cpufreq: CPPC: Remove cpu_data_list (Lifeng Zheng) [task:597037]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Rafael J. Wysocki) [task:597101] {CVE-2026-23186}
  - md: suspend array while updating raid_disks via sysfs (FengWei Shih) [task:596723] {CVE-2025-71225}
  - r8169: add support for RTL8168M (Heiner Kallweit) [bug:495805]
  - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode (Thorsten Blum) [task:597121] {CVE-2025-71231}
  - net: fix segmentation of forwarding fraglist GRO (Jibin Zhang) [task:597103] {CVE-2026-23154}
  - net: ipv6: fix TCP GSO segmentation with NAT (Felix Fietkau) [task:597103]
  - net: gso: fix tcp fraglist segmentation after pull from frag_list (Felix Fietkau) [task:597103]
  - net: add support for segmenting TCP fraglist GSO packets (Felix Fietkau) [task:597103]
  - mm, shmem: prevent infinite loop on truncate race (Kairui Song) [task:596499] {CVE-2026-23177}
  - mm/shmem, swap: fix race of truncate and swap entry split (Kairui Song) [task:596499]
  - KVM: arm64: Get rid of __kvm_get_mdcr_el2() and related warts (Oliver Upton) [task:594237]
  - arm64: sysreg: Migrate MDCR_EL2 definition to table (Oliver Upton) [task:594237]
  - rxrpc: Fix recvmsg() unconditional requeue (David Howells) [task:593779] {CVE-2026-23066}
  - erofs: avoid infinite loops due to corrupted subpage compact indexes (Gao Xiang) [task:573831] {CVE-2025-68251}
  - dm-verity: disable recursive forward error correction (Mikulas Patocka) [task:589049] {CVE-2025-71161}
  - virtio_net: fix device mismatch in devm_kzalloc/devm_kfree (Kommula Shiva Shankar) [task:593777] {CVE-2026-23046}
  - netfilter: nf_conntrack_expect: honor expectation helper field (Pablo Neira Ayuso) [task:615913]
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [task:622625]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [task:622625]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [task:622625]
  - crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625]
  - crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [task:622625]
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625]
  - crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [task:622625]
  - doc: add documentation for XFS AF mount options (zhangshida) [task:225344, bug:506709]
  - xfs: fix AF search loop to support three allocation fields (zhangshida) [task:225344, bug:506709]
  - xfs: add verifier for AF layout mount options (zhangshida) [task:225344, bug:506709]
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [task:618851] {CVE-2026-31668}
  - rv: Use strings in da monitors tracepoints (Gabriele Monaco) [task:553379] {CVE-2025-38636}
  - mm/damon/sysfs: Add input validation for priority parameter (Enze Li) [bug:507657]
  - kalert: fix RAS event reporting ID mismatch (Huiwen He) [bug:509037]
  - kalert: limit maximum subscribers to 2048 (Huiwen He) [task:526009]
  - kalert: optimize heartbeat for proactive subscriber cleanup (Huiwen He) [task:526009]
  - kalert: implement unsubscribe handler (Huiwen He) [task:526009]
  - kalert: move INIT_WORK to connection initialization (Huiwen He) [task:526009]
  - LoongArch: Fix kexec cmdline check to be outside segment loop (Youling Tang) [task:607367]
  - make the packet_filter compiled as a module (YANGANG) [bug:504861]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.11.v2601
changelog:
  - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [task:636187]
  - MAILLIST: net/rds: reset op_nents when zerocopy page pin fails (Allison Henderson) [task:632491]


author: wangjie<wangjie294@huawei.com> -1.0.7-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-15.p01
changelog:
  - Type:bugfix
  - ID:[TASK#633631]
  - SUG:NA
  - DESC:libbtrfsutil: pass temporary subvol info buffer in btrfs_util_deleted_subvolumes_fd()


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: lijian <lijian2@kylinos.cn> - 1:1.36.1-21
changelog:
  - Type:cves
  - ID:CVE-2026-38754
  - SUG:NA
  - DESC:re-fix CVE-2026-38754, clear stale IFS state on expansion error


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: chenyanpanHW <chenyanpan@huawei.com> - 6.12-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-cifs.upcall-fix-UAF-in-get_cachename_from_process_en.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-cifs-utils-Make-automake-treat-sbin-as-exec-not-data.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-cifs.upcall-remove-getpwuid-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: 1. enable pcp packages for cockpit
          2. add Patch: 0001-part1-support-and-add-zh_CN-translate-for-playground.patch
             add Patch: 0002-part2-support-and-add-zh_CN-translate-for-playground.patch
             Translate: and add zh_CN translate support for module playground
          3. add Patch: 0001-fix-zh_CN-translation-issue-of-storage-module.patch
             zh_CN translate for storaged module
          4. add Patch: 0001-kylin-fix-zh_CN-translation-issue-of-autoupdates.patch
             fix zh_CN translate of autoupdates
          5. add Patch: 0001-fix-wrong-invalid-format-error-when-setting-datetime.patch
             fix wrong invalid format error when setting datetime


author: wangshuo <wangshuo@kylinos.cn> - 309-4.p02
changelog:
  - Type:CVE
  - ID:CVE-2026-4802 KVE-2026-0415
  - SUG:NA
  - DESC:Fix CVE-2026-4802 KVE-2026-0415, sanitize value to prevent command injection


author: wangshuo <wangshuo@kylinos.cn> - 309-4.p03
changelog:
  - Type:bugfix
  - ID:[BUG#278203][BUG#603479]
  - SUG:NA
  - DESC: Fix the regression issue of "Invalid date format" caused by the build process


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4.p04
changelog:
  - Type:bugfix
  - ID:[BUG#659053]
  - SUG:NA
  - DESC: 1. Add rebuild bundle support
          2. fix CVE-2024-2947 and CVE-2026-4802


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-13.p03
changelog:
  - Type:update
  - ID:TASK#630021
  - SUG:NA
  - DESC:fix CVE-2025-9230,CVE-2025-69418,CVE-2026-22796,CVE-2026-22795,
  	   CVE-2025-69419,CVE-2025-68160,CVE-2025-69421,CVE-2025-69420,
             CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1m-13.p04
changelog:
  - Type:bugfix
  - ID:BUG#618649
  - SUG:NA
  - DESC:fix CVE-2026-45447, CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, 
             CVE-2026-42766


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2.9.11-1.p01
changelog:
  - Type: update
  - ID: [BUG#382649]
  - SUG: NA
  - DESC: Add Traditional Chinese (Hong Kong) translation support


author: peijiankang <peijiankang@kylinos.cn> - 1:2.4.7-6.se.02.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#604487]
  - SUG:  NA
  - DESC: sync from version 1:2.4.7-6.se.01.p02 to fix CVE-2025-58436 CVE-2025-61915
          Unified source code support for x86_64 aarch64 loongarch64 and sw_64 architectures


author: peijiankang <peijiankang@kylinos.cn> - 1:2.4.7-6.se.02.p03
changelog:
  - Type: cves
  - ID  : CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079
  - SUG : NA
  - DESC: fix CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: gaoyukun <gaoyukun@kylinos.cn> - 8.4.0-26.p01
changelog:
  - Type:update
  - ID:[TASK#554071]
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers'


author: lifeifei <lifeifei@kylinos.cn> - 8.4.0-26.p02
changelog:
  - Type:bugfix
  - ID:[Bug#507747]
  - SUG:NA
  - DESC:add configure options '--enable-websockets' to support feature 'websocket'


author: liyunqing <liyunqing@kylinos.cn> - 8.4.0-26.p04
changelog:
  - Type: CVEs
  - ID: [TASK#560183] [TASK#560185] [TASK#560189] [TASK#560193] [TASK#560195]
  - SUG: NA
  - DESC: fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:http1: fix potential NULL dereference in Curl_h1_req_parse_read
         mqtt: fix EOF handling


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-32
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547 CVE-2026-10536 CVE-2026-12064


author: liyunqing <liyunqing@kylinos.cn> - 8.4.0-32.p01
changelog:
  - Type:CVE
  - CVE:CVE-2026-8926
  - ID:[BUG#639447]
  - SUG:NA
  - DESC:fix CVE-2026-8926 and enable c-ares/WebSocket support


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1:1.14.8-3.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: add 0001-adjusting-maximum-number-of-connections-for-per-user.patch
          Adjust the maximum number of connections for dbus users, fix the issue of insufficient connections


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1:1.14.8-3.p02
changelog:
  - Type:update
  - ID:[TASK#619873]
  - SUG:NA
  - DESC: Add precise control and limits for dbus, enhance the security of dbus


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: andy lau <liuyang01@kylinos.cn> - 059-11.p01.se.08
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] backport update stream fix zfcp_rules
          [backport] add backport-fix-dracut-install-copy-xattr-when-use-clone-ioctl.patch
          [backport] fix(dracut-install): copy mode when use clone ioctl
          [backport] add backport-feat-dracut-init.sh-give-force-add-precedence-over-o.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-11.p01.se.09
changelog:
  - Type: update
  - ID: [BUG#328705][BUG#335827]
  - SUG: NA
  - DESC: 解决kysec增加自保护后,initrd中初始化三权配置错误问题,defualt 模式 ksyec为permissive
  -       dracut-fix-3adm-settings.patch
  -       dracut-fix-initrd-set-kysec-status-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-11.p01.se.10
changelog:
  - Type: update
  - ID: [BUG#372101]
  - SUG: NA
  - DESC: 解决在未加载selinux时 修改passwd文件后 se标记未unlabeled_t的问题
  -       dracut-fix-passwd-selinux-context-is-unlabel.patch


author: yueyuankun <yueyuankun@kylinos.cn> -0.59-11.p03.se.10
changelog:
  - Type:bugfix
  - ID:[TASK#577533]
  - SUG:NA
  - DESC: fix(kernel-modules-extra): remove stray \ before /


author: tiandongdong <tiandongdong@kylinos.cn> -0.59-11.p03.se.11
changelog:
  - Type:update
  - ID:[TASK#595939]
  - SUG:NA
  - DESC: 兼容sdk优化reset_selinux_config文件路径的变更
  -       dracut-compatible-sdk-optimize.patch


author: tiandongdong <tiandongdong@kylinos.cn> -0.59-11.p03.se.12
changelog:
  - Type:update
  - ID:[BUG#492893]
  - SUG:NA
  - DESC: 98relabel去除对kysec-init命令的依赖
  -       dracut-98relabel-remove-kysec-init-require.patch


author: Qin Fandong <qinfandong@kylinos.cn> -0.59-11.p04.se.12
changelog:
  - Type:update
  - ID:[TASK#596741]
  - SUG:NA
  - DESC: fix(dracut-util): do not call `strcmp` if the `value` argument is NULL
  -       0001-fix-dracut-util-do-not-call-strcmp-if-the-value-argu.patch


author: Qin Fandong <qinfandong@kylinos.cn> -0.59-11.p06.se.12
changelog:
  - Type: CVE
  - ID: [BUG#654961] [BUG#654977] [BUG#654957]
  - CVE: CVE-2026-6893
  - SUG: NA
  - DESC: fix CVE-2026-6893: Fixes for various dhcp-related issues


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: zhaojingyu <zhaojingyu@kylinos.cn> - 1:4.11-11.p01
changelog:
  - Type:update
  - ID:[BUG#239286]
  - SUG:NA
  - DESC:add loongarch support for resolve Cannot load 32-bit SWT libraries on 64-bit JVM error


author: hanliyang<hanliyang@hygon.cn> - 202308-25
changelog:
  - Build OVMF.fd using AmdSevX64.dsc to support Full Disk Encryption
  - Add build process that uses OvmfPkg/AmdSev/AmdSevX64.dsc
  - Fix boot failure on OvmfPkg/AmdSev
  - Build OVMF without '-D SECURE_BOOT_ENABLE=TRUE' for X64


author: lijunwei <lijunwei@kylinos.cn> -202308-25.p01
changelog:
  - Type: Update
  - ID:   [TASK#425200]
  - SUG:  NA
  - DESC: Backport v11-2503 Kylin's patch to support sata cdrom


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202308-25.p03
changelog:
  - Type: Bugfix
  - ID:   [BUG#466159]
  - SUG:  NA
  - DESC: Sync fix CVE-2025-9230 CVE-2024-38805 CVE-2025-3770
  	Fix the VM startup failure caused by 0110-fix-fdt-parse-error.patch


author: wangdi <wangdi@kylinos.cn> - 202308-25.p04
changelog:
  - Type: Bugfix
  - ID:   [BUG#485081]
  - SUG:  NA
  - DESC: Sync Hygon patches to fix CSV3 vm failed to boot on host without RTMR support.


author: malike <malike@kylinos.cn> - 202308-25.p06
changelog:
  - Type: cves
  - ID:   CVE-2025-2296
  - SUG:  NA
  - DESC: Sync fix CVE-2025-2296 Un-verified kernel bypass Secure Boot mechanism in direct boot mode


author: malike <malike@kylinos.cn> - 202308-25.p07
changelog:
  - Type: cves
  - ID:   CVE-2024-38798
  - SUG:  NA
  - DESC: Sync fix CVE-2024-38798 Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege


author: malike <malike@kylinos.cn> - 202308-25.p08
changelog:
  - Type: cves
  - ID:   CVE-2025-2295
  - SUG:  NA
  - DESC: Sync fix CVE-2025-2295 Potential iSCSI R2T PDU Vulnerability


author: malike <malike@kylinos.cn> - 202308-25.p09
changelog:
  - Type: cves
  - ID:   CVE-2023-49721
  - SUG:  NA
  - DESC: Sync fix CVE-2023-49721 An insecure default to allow UEFI Shell in EDK2


author: lijunwei <lijunwei@kylinos.cn> - 202308-25.p10
changelog:
  * Type: cves
  - ID:  [BUG#546401][BUG#565717][BUG#524371]
  - SUG:  NA
  - DESC: CVE-2025-68160 CVE-2025-69418 CVE-2026-31790


author: lijunwei <lijunwei@kylinos.cn> - 202308-25.p10
changelog:
  - Type: cves
  - ID:  [BUG#546401][BUG#565717][BUG#524371]
  - SUG:  NA
  - DESC: CVE-2025-68160 CVE-2025-69418 CVE-2026-31790


author: malike <malike@kylinos.cn> - 202308-25.p11
changelog:
  - Type: Bugfix
  - ID:   [BUG#547833]
  - SUG:  NA
  - DESC: Bugfix aarch64 platform direct boot from kernel enter into UEFI Shell


author: lijunwei <lijunwei@kylinos.cn> - 202308-25.p12
changelog:
  - Type: cves
  - ID:   [BUG#587641][BUG#587633]
  - SUG:  NA
  - DESC: CVE-2025-69420、CVE-2025-69421、CVE-2026-22796、CVE-2026-22795


author: lijunwei <lijunwei@kylinos.cn> - 202308-25.p13
changelog:
  - Type: cves
  - ID:   [BUG#603841][BUG#603843][BUG#603845][BUG#603847][BUG#603859]
  - SUG:  NA
  - DESC: CVE-2026-28388、CVE-2026-28389、CVE-2026-28387、CVE-2026-28390、CVE-2026-31789


author: lijunwei <lijunwei@kylinos.cn> - 202308-25.p14
changelog:
  - Type: cves
  - ID:   [BUG#617473][BUG#617459][BUG#617453][BUG#617433][BUG#617429][BUG#617469]
  - SUG:  NA
  - DESC: CVE-2026-34182、CVE-2026-34180、CVE-2026-45445
          CVE-2026-7383、CVE-2026-9076、CVE-2026-42770


author: peijiankang <peijiankang@kylinos.cn> - 1.28.2-1.p01
changelog:
  - Type: compile
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 1.26.2-1.p02(disable caja and Fix the translation issues)


author: wangkai <13474090681@163.com> - 25.3.2.6-18
changelog:
  - Fix CVE-2026-48855, CVE-2026-48858, CVE-2026-49759, CVE-2026-49760, CVE-2026-53422,
    CVE-2026-54886, CVE-2026-54887, CVE-2026-54891, CVE-2026-55950, CVE-2026-55952


author: fly_fzc <2385803914@qq.com> - 2.5.0-22
changelog:
  - fix CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407
        CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412


author: peijiankang <peijiankang@kylinos.cn> - 5.1.3-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop fcitx5-chinese-addons-5.1.3-ok5k0.2
          upstream commtid:9334a2ec6c7f54951c37c9d82e6621d506ad412d


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p01
changelog:
  - Type: cves
  - ID: [BUG#582111] [BUG#582033] [BUG#582017] [BUG#581861] [BUG#581543] [BUG#581409] [BUG#567943] [BUG#567939] [BUG#567937] 
  - SUG: NA
  - DESC: Fix CVE-2026-40962,CVE-2026-30997,CVE-2025-9951


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p05
changelog:
  - Type: cves
  - ID: CVE-2023-6602, CVE-2025-0518, CVE-2025-1594, CVE-2026-12706, CVE-2026-30999
  - SUG: NA
  - DESC: Fix CVE-2023-6602, CVE-2025-0518, CVE-2025-1594,CVE-2026-12706, CVE-2026-30999


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p06
changelog:
  - Type: cves
  - ID: CVE-2025-59728, CVE-2026-6385
  - SUG: NA
  - DESC: Fix CVE-2025-59728, CVE-2026-6385


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p07
changelog:
  - Type: cves
  - ID: CVE-2026-64834, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-66038, CVE-2026-65703, CVE-2026-65706, CVE-2026-65704, CVE-2026-66039, CVE-2026-65705, CVE-2025-59731
  - SUG: NA
  - DESC: Fix CVE-2026-64834, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-66038, CVE-2026-65703, CVE-2026-65706, CVE-2026-65704, CVE-2026-66039, CVE-2026-65705, CVE-2025-59731


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p08
changelog:
  - Type: cves
  - ID: CVE-2025-63757, CVE-2025-59732, CVE-2026-64835
  - SUG: NA
  - DESC: Fix CVE-2025-63757, CVE-2025-59732, CVE-2026-64835


author: Tangsha <tangsha@kylinos.cn> - 6.1.1-24.p09
changelog:
  - Type: cves
  - ID: CVE-2026-70628, CVE-2026-70629, CVE-2026-70630, CVE-2026-70631
  - SUG: NA
  - DESC: Fix CVE-2026-70628, CVE-2026-70629, CVE-2026-70630, CVE-2026-70631


author: chengweizheng <chengweizheng@kylinos.cn> - 3.34-4.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#638555]
  - SUG:  NA
  - DESC: add requires numactl-libs, support numa_mem_policy


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: baizhonggui <baizhonggui@huawei.com> - 1.6.2-5
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-8.p03
changelog:
  - Type: bugfix
  - ID: BUG#626401
  - SUG: NA
  - DESC: 1. Remove build requires protobuf and disable plugin logitech-bulkcontroller
             which to upgrade the firmware on Logitech Video Collaboration products.
          2. Update distro info


author: songliyang <songliyang@kylinos.cn> - 5.2.2-2.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Upgrade to sync for 4 architectures
          2.Backport Patch10 to support sw_64. Author:yueyaoqiang
          3.Backport a commit to enable pie compile option. Author: gaoxiang


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: lijian1 <lijian1@kylinos.cn> - 14.1-5.p01
changelog:
  - Type: Update
  - ID: [TASK#533467]
  - SUG: NA
  - DESC: backport kylin production info; loongarch register info modification.


author: lijian1 <lijian1@kylinos.cn> - 14.1-5.p04
changelog:
  - Type: cves
  - ID: [BUG#541941]
  - SUG: NA
  - DESC: fix cves:
  	CVE-2025-11082: Fix BFD ELF parsing heap overflow with crafted inputs.
  	CVE-2025-11494: Fix BFD/ELF input-validation bug causing memory corruption/crash.
  	CVE-2025-11083: Fix BFD ELF section-header handling heap overflow.
  	CVE-2025-11412: Fix BFD/ELF out-of-bounds access on malformed files.
  	CVE-2025-11840: Fix ld diagnostic NULL deref/OOB read leading to linker crash.
  	CVE-2026-4647:  Fix BFD XCOFF relocation OOB read leading to crash when loading crafted XCOFF.


author: lijian1 <lijian1@kylinos.cn> - 14.1-5.p05
changelog:
  - Type: cves
  - ID: [BUG#588749]
  - SUG: NA
  - DESC: fix CVE-2026-6846: heap buffer overflow in BFD XCOFF linking.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: Qin Fandong <qinfandong@kylinos.cn> - 2:3.0.2-14.p01
changelog:
  - Type: update
  - ID: [BUG#556757]
  - SUG: NA
  - DESC: Add meson option no-splash
          Update bug url


author: wangjie1 <wangjie1@kylinos.cn> - 2:3.0.2-16.p01
changelog:
  - Type:cves
  - ID:CVE-2026-18301 CVE-2026-18302 CVE-2026-18303 CVE-2026-18304 CVE-2026-18305 CVE-2026-18306 CVE-2026-18308 CVE-2026-59088 CVE-2026-66757 CVE-2026-66758 CVE-2026-66759 任务#578775
  - SUG:NA
  - DESC:On gate-init 16 baseline, sync AtomGit PR#167/#177 CVE patches; roundtrip no-splash for sw_64


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.78.3-10.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Mov gio-launch-desktop from devel to main rpm (BUG#296979)


author: litenglong <litenglong@kylinos.cn> - 2.38-65.p02
changelog:
  - Type:update
  - ID:[Task#426926]
  - SUG:NA
  - DESC: x86: Disable AVX Fast Unaligned Load on Hygon 1/2/3


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.38-65.p03
changelog:
  - Type:update
  - ID:[Task#552457]
  - SUG:NA
  - DESC: add glibc-lse sub-package for ARM LSE atomic instructions


author: litenglong <litenglong@kylinos.cn> -2.38-65.p08
changelog:
  - Type:update
  - ID:[Task#553637]
  - SUG:NA
  - DESC: malloc tcache modify static variable to thread local.


author: gaoxiang <gaoxiang@kylinos.cn> -2.38-65.p09
changelog:
  - Type:update
  - ID:[Task#595989]
  - SUG:NA
  - DESC: added dynamic tcache budgeting and NUMA-aware arenas on glibc.


author: litenglong <litenglong@kylinos.cn> -2.38-65.p11
changelog:
  - Type:update
  - ID:[Task#614317]
  - SUG:NA
  - DESC: Drop the thread memory allocation optimization patch due to compilation failures with Clang.


author: litenglong <litenglong@kylinos.cn> -2.38-65.p11
changelog:
  - Type:update
  - ID:[Task#614317]
  - SUG:NA
  - DESC: sw64: Drop the thread memory allocation optimization patch due to compilation failures with Clang, for sw64 is may not full support __thread define.


author: litenglong <litenglong@kylinos.cn> -2.38-65.p13
changelog:
  - Type:update
  - ID:[BUG#572653] 
  - SUG:NA
  - DESC: resolv: Count records correctly (CVE-2026-4437),  Check hostname for validity (CVE-2026-4438)


author: chenyanpanHW <chenyanpan@huawei.com> - 1.3.5-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/gnome-abrt-1.4.2-update-zh_HK-translations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: peijiankang <peijiankang@kylinos.cn> - 1.4.2-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#385923]
  - SUG:  NA
  - DESC: add gnome-abrt-1.4.2-update-zh_HK-translations.patch


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: songjuntao <songjuntao@kylinos.cn> - 3.8.2-4.p01
changelog:
  - Type: update
  - ID: TASK#223527
  - SUG: NA
  - DESC: add certtool generate cert and tls1.3 protocol smx algorithm support


author: zhangzikang <zhangzikang@kylinos.cn> - 3.8.2-4.p02
changelog:
  - Type: update
  - ID: [TASK#372985]
  - SUG: NA
  - DESC: Fix gnutlsxx.h file, add set_credentials and db_check_entry functions.
          Supply follow symbols to solve the API/ABI compatibility issue:
            _ZNK6gnutls14server_session14db_check_entryER14gnutls_datum_t
            _ZN6gnutls7session15set_credentialsERNS_11credentialsE


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-5.p04
changelog:
  - Type: update
  - ID: [TASK#533691]
  - SUG: NA
  - DESC: fix CVE-2025-32988,CVE-2025-32989,CVE-2025-32990,CVE-2025-6395, add sw_64 support, synchronization Code


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-5.p05
changelog:
  - Type: update
  - ID: [TASK#601603]
  - SUG: NA
  - DESC: fix the issue of integer underflow in MTU in DTLS


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-5.p08
changelog:
  - Type: cves
  - ID: [BUG#560111]
  - SUG: NA
  - DESC: fix CVE-2026-33845,CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260,CVE-2026-5419


author: jiaocong <jiaocong@kylinos.cn> - 3.8.2-5.p11
changelog:
  - Type: cves
  - ID: [BUG#657069]
  - SUG: NA
  - DESC: fix CVE-2026-42011,CVE-2026-42012;post-patches of CVE-2026-33845 and CVE-2026-42010


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-41.p01
changelog:
  - Type:bugfix
  - ID:TASK#533221
  - SUG:NA
  - DESC:secure boot: support National Security and RSA
         loongarch64 :3C5000L boot with grub2 EFI
         loongarch64 :support large initramfs loading and startup
         i386: check for cpuid family when flush cache only on VIA CPUs
         add KYLIN_ROOT_USE_UUID, use UUID in this case


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-41:2.12-41.p02.se.01
changelog:
  - Type:update
  - ID:TASK#544091
  - SUG:NA
  - DESC:SW64: Enable GRUB EFI build support for sw_64 architecture in grub.macros


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-41.p05.se.02
changelog:
  - Type: CVE
  - ID: [BUG#603853]
  - CVE: CVE-2025-61663, CVE-2025-61664
  - SUG: NA
  - DESC: fix CVE-2025-61663, CVE-2025-61664


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-41.p06.se.02
changelog:
  - Type: update
  - ID: [TASK#648189] [TASK#648191]
  - SUG: NA
  - DESC: fix(trust_measurefiles): allocate correct struct size, not pointer size
          fix(tpm_efi): pass correct command buffer length to SM3_process


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Use meson rebuild


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: Funda Wang <fundawang@yeah.net> - 1.20.3-9
changelog:
  - fix CVE-2026-17072 (GStreamer-SA-2026-0073), GStreamer-SA-2026-0072,
    GStreamer-SA-2026-0068
  - fix CVE-2026-53705 (GStreamer-SA-2026-0035)


author: litianhao <litianhao@kylinos.cn> - 1.50.2-7.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 合入安全套件功能
  - SUG: NA
  - DESC: 合入sm设备管控补丁
  -       gvfs-add-sm-devctl.patch


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.p01.se.01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.se.01.p02
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.se.01.p4
changelog:
  - Type: update
  - ID  : [TASK#586391]
  - SUG : NA
  - DESC: remove BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: zhubing <zhubing@kylinos.cn> - 1.50.2-7.se.02.p04
changelog:
  - Type: update
  - ID  : [TASK#587195]
  - SUG : NA
  - DESC: remove v10 sm devctl code，add ksaf devctl hook


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: peijiankang <peijiankang@kylinos.cn> - 8.3.0-2.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 8.3.0-1.p02(add 0001-modify-gb18030-encoding.patch)


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: gaoyukun <gaoyukun@kylinos.cn> - 2.4.58-12.p01
changelog:
  - Type:bugfix
  - ID:[Task#542709]
  - SUG:NA
  - DESC: Add kylin support and fix htcacheclean.service start error.
          fix index.html for kylin.
          fix CVE-2024-38472 and CVE-2024-40898.


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.4.58-15.p01
changelog:
  - Type:bugfix
  - ID:[Task#542709]
  - SUG:NA
  - DESC: Backport 2.4.58-12.p01 and p02 patches:
           Add kylin support and fix htcacheclean.service start error.
           Fix index.html for kylin.
           Fix CVE-2024-38472 and CVE-2024-40898.


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.4.58-15.p02
changelog:
  - Type:cves
  - ID:CVE-2026-49975 CVE-2026-29167 CVE-2026-42535 CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-49975 CVE-2026-29167 CVE-2026-42535 CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.58-17
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.58-18
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951
  - SUG:NA
  - DESC:fix CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951


author: tangce <tangce1@h-partners.com> - 2.4.58-19
changelog:
  - Type:CVE
  - CVE:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: herengui <herengui@uniontech.com> - 1.7.3-11
changelog:
  - Fix: fix issue that change language in deepin-control-center cannot affect the fcitx
  - Bug: #I47HF0


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 20221126-8.p02
changelog:
  - Type:update
  - ID:[TASK#633779]
  - SUG:NA
  - DESC:Fix null pointer dereference risk when accessing ai_family after address lookup failure


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: houzhiwei <houzhiwei@kylinos.cn> - 4.1.0-4.p01
changelog:
  - Type: cves
  - ID: CVE-2025-8835,CVE-2025-8836,CVE-2025-8837
  - SUG: NA
  - DESC: Fix CVE-2025-8835,CVE-2025-8836,CVE-2025-8837


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: zhaosaisai <zhaosaisai@kylinos.cn> -1:1.8.0.482.b08-7.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-1.8.0.482 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.30.7-4.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-11.0.30.7 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.31.11-4.p01
changelog:
  - Type: update
  - ID:   [TASK#635259]
  - SUG:  NA
  - DESC: sync openEuler openjdk-11.0.31.11 GA release with kylin patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.8.7-2
changelog:
  - add add-Parallel-Full-gc-mark-stack-draining-should.patch
  - add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
  - add add-8267185-Add-string-deduplication-support-to.patch
  - add add-8292296-Use-multiple-threads-to-process-Par.patch
  - add fix-cds-SignedJar_java-test-fails.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-0.rolling
changelog:
  - fix 8253495-CDS-generates-non-deterministic-outpu.patch
  - fix add-8267185-Add-string-deduplication-support-to.patch
  - fix add-version-txt.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-1
changelog:
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8168469-Memory-leak-in-JceSecurity.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: BenShuai5D <benshuai5d@163.com> 1:17.0.18.8-0
changelog:
  - upgrade to 17.0.18
  - modify Backport-Important-Fixed-Issues.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch
  - modify puyuan-jdk17.0.9-patch.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch
  - add huawei-Fix-KAEProvider-SM2-Code.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:17.0.18.8-8.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-17.0.18.8 GA release with kylin support
          add patch kylin-fix-loongarch-ldc-error.patch


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.19.10-0
changelog:
  - update to jdk17.0.19-ga
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified 8264806-Backport-Graal-Compiler.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - modified add-version-txt.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-2
changelog:
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add fix-memory-leak-in-jBolt.patch
  - add HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-Heap-Size.patch
  - add Add-Aggresive-CDS-and-bugfix.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-3
changelog:
  - add Add-lost-ResourceMark-and-fix-delete-in-jBolt.patch
  - add support-for-Hisilicon-cpu.patch
  - add fix-test-failures-caused-by-the-Rename-createJavaPro.patch
  - add JProfilecache-remove-redundant-assert.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-5
changelog:
  - add JDK-8342238-Test-javax-crypto-CryptoPermissions-Inco.patch
  - add Keep-deflation-test-valid-with-compact-headers.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:17.0.19.10-6.p01
changelog:
  - Type: update
  - ID:   [TASK#635259]
  - SUG:  NA
  - DESC: sync openEuler openjdk-17.0.19.10 GA release and kylin patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.6.1-2.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#371773]
  - SUG:  NA
  - DESC: rebuild to fix sensitive words of keyboard layout


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.1.v2601
changelog:
  - arm64: configs: Enable CONFIG_SENSORS_DMS5013A=m (Huiwen He) [task:425547]
  - OPENEULER: nfs, sunrpc: add enfs feature (ChenXiaoSong) [task:549271]
  - tpm: Compat with legacy TPM_MAX_DIGEST_SIZE (mengdehui) [task:589193]
  - selftests/damon: add tests for auto-tuning module (Enze Li) [task:525879]
  - mm/damon/sysfs: introduce priority sysfs interface (Enze Li) [task:525877]
  - mm/damon/auto-tuning: introduce DAMON-based auto-tunning module (Enze Li) [task:525877]
  - kalert: Rate limit BPF event reporting (Huiwen He) [task:526009]
  - kalert: Add KUnit tests (Huiwen He) [task:526009]
  - kalert: Add rate-limiting support for event reporting (Huiwen He) [task:526009]
  - kalert: Support Memory and PCIe RAS event reporting (Zheng Tan) [task:526009]
  - kalert: drop debug print in kfunc init path (Huiwen He) [task:526009]
  - sched/qos: only check cfs tasks in sched_qos_offline_wait (liwanwu) [task:579595]
  - Fix the missing syntax terminator error in the task_struct structure (Qingshuang Fu) [task:588353]
  - sched: Temporarily disable the DELAY_DEQUEUE scheduling feature (Bing Huang) [task:587045]
  - mm: Introduce page pool (Lincheng Yang) [task:587093]
  - mm: vmscan: shrink_all_memory optimization to optional (Lincheng Yang) [task:588185]
  - mm: vmscan: make shrink_all_memory as much as possible reclaim (Lincheng Yang) [task:588185]
  - add mmput_try_async (Lincheng Yang) [task:588175]
  - mm: Add pcp batch dynamic modification interface (WeiLixiang) [task:588175]
  - platform/x86: Lenovo X7 and X7H models do not use EC to control backlight. (zhangzihuan) [task:588189]
  - platform/x86: Lenovo adds X7 model board (zhangzihuan) [task:588189]
  - platform/x86: Lenovo adds LED controls for the speakers and microphone for X7h (Zihuan Zhang) [task:588189]
  - platform/x86: lenovo ec add support for X7H (huxiaoying) [task:588189]
  - platform/x86: fix spelling mistakes on lenovo ec led driver (zhangzihuan) [task:588189]
  - platform/x86: lenovo ec add led driver (zhangzihuan) [task:588189]
  - platform/x86: lenovo ec add support for X1 (Ai Chao) [task:588189]
  - configs: Enable KYLIN_EXTRA_BUTTON option (Riwen Lu) [task:531375, task:588159]
  - extra_button: Add ACPI extra button support (Riwen Lu) [task:458097, task:388697, task:531375, task:588159]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.12.v2601
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [task:642737] {CVE-2026-46331}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.13.v2601
changelog:
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [task:636701] {CVE-2026-46242}
  - eventpoll: move epi_fget() up (Christian Brauner) [task:636701]
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [task:636701]
  - eventpoll: kill __ep_remove() (Christian Brauner) [task:636701]
  - eventpoll: split __ep_remove() (Christian Brauner) [task:636701]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [task:636701]
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:634999] {CVE-2026-46300}
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [task:634641] {CVE-2026-43503}
  - Revert "MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers" (Yun Lu) [task:634999, task:634641]
  - bonding: Fix kabi change in struct header_ops (Wang Yan) [task:634933]
  - bonding: prevent potential infinite loop in bond_header_parse() (Eric Dumazet) [task:623005]
  - bonding: fix type confusion in bond_setup_by_slave() (Jiayuan Chen) [task:623005] {CVE-2026-43456}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.14.v2601
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [task:649409] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [task:632813]
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [task:651189]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [task:632813] {CVE-2026-43499}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.15.v2601
changelog:
  - xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [task:657877] {CVE-2026-64600}
  - xfs: enable CoW for realtime data (Darrick J. Wong) [task:657877]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.16.v2601
changelog:
  - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [task:659317] {CVE-2026-64531}


author: Jackie Liu <liuyun01@kylinos.cn> - 1.0-1
changelog:
  - inject: add missing -h args
  - filesnoop: fix crash when -o OPEN
  - Add dbstat support
  - Add ustat support
  - Add inject support
  - tcplinks: fix typo for helps
  - Add icstat support
  - memleak: Tiny fixes
  - memleak: Fix memory leak
  - Fix memory leak when using getline()
  - dbslower: Fixes build errors caused by uninitialized variables in bpf program
  - Add dbslower support
  - Add ugc support
  - Add mysqld-qslower support
  - javagc: fix some attach errors
  - Add uflow support
  - ucalls: Correct 'phpccalls' to 'phpcalls'
  - Add cachetop support
  - biotop/filetop: Fix 'count' print count
  - Add get_uid_name() implementation
  - Add trace support
  - Display UID in username format
  - libbpf-tools: update arm vmlinux with missing perf_event, BPF_PROG_TYPE_PERF_EVENT
  - setuids: rename UID to SU_UID
  - filegone: convert errno to error string
  - filegone: Increase the buffer for filename
  - filegone: Add return code support
  - Expand the print width of pid
  - libbpf-tools/filelife: Check btf struct field for CO-RE
  - tplist: Use tracefs_path()
  - Add reset-trace support
  - Tiny fixes
  - libbpf-tools/tcprtt: use the same options to filter IPv4 and IPv6 addresses
  - tools, libpf-tools: increase IPv6 address width to 39 characters
  - Fix memory leak in capable.c
  - libbpf-tools/execsnoop: fix ret type of bpf_probe_read_user*.
  - libbpf-tools: add block_io_{start,done} tracepoints support to bio tools
  - libbpf-tools: fix tcppktlat show wrong ports
  - Tiny fix we meet
  - funcslower/profile/stackcount: Add folded format output
  - filegone: rewrite filegone base on unlinksnoop
  - offwaketime/wakeuptime: Add folded format output
  - offcputime: Add folded format output
  - Add offwaketime support
  - offcputime: Change the tracepoint mode to kprobe to repair the calltrace display
  - ketones: reword new software tagline
  - dcstat: fix macro err defined
  - Add uthreads support
  - Fix potential double fclose warning
  - Use bpf_core_filed_exist for bpf_ringbuf exist
  - Fix allocating and freeing memory in {probe,free}_usdt_notes
  - Add shmsnoop support
  - uobjnew: Adjust this program to better match the BCC version
  - Add uobjnew support
  - Add tplist support
  - package: Prompt for compilation dependencies
  - Add unlinksnoop support
  - Add dcstat support
  - core_fixes: Fix __builtin_preserve_enum_value not defined issue
  - libbpf-tools: Allow tcppktlat to run on old kernels
  - libbpf-tools: Add support for IPv6 to tcprtt.
  - libbpf-tools: fallback to tracefs mount point if debugfs is not mounted
  - libbpf-tools: add filter for biosnoop
  - cpufreq: read initial freqs only of valid links
  - libbpf-tools: Avoid virtual memory area [uprobes] warning
  - statsnoop: print parent pid
  - opensnoop: print parent pid
  - filesnoop: drop opensnoop and statsnoop in filesnoop
  - Revert "statsnoop: Remove specially designed statsnoop"
  - filesnoop: extend parent pid
  - debian rules to package ketones
  - prepare for make project
  - statsnoop: Remove specially designed statsnoop
  - libbpf: Support POSIX regular expressions for multi kprobe
  - Add tcprst support
  - Add ucalls support
  - uprobe_helpers: Fix path acquisition function
  - libbpf-tools: syscount: Add syscall lookup table for arm64 and riscv
  - Add profile support
  - Add tcpdrop support
  - tcplinks: use ncurses for draw UI
  - libbpf: tiny fixup of libbpf
  - Add tcpsubnet support
  - Add tcplinks support
  - libbpf: don't attach to non-attachable kprobes
  - Add stackcount support
  - libbpf: don't need zero res in exit path
  - libbpf: available_filter_functions_addrs for filter functions
  - Fix the function to get the sk_protocol
  - tcpaccept: Delete redundant code to make more compact
  - tcp: Delete unnecessary parameters
  - Add zfsslower support
  - Add zfsdist support
  - Add funcslower support
  - signal: fix undefined behavior of signal handler
  - commons: Simplified time_since_start function
  - Add tcpaccept support
  - Makefile: fix compile error for bpflist
  - Add tcpretrans support
  - ttysnoop: Implement new way for CO-RE
  - libbpf: rewrite kprobe.multi filter with available_filter_functions
  - Add funccount support
  - Resolve compilation errors on loongarch
  - libbpf: support record count of functions has been traced
  - Makefile: bpflist: remove unnecessary compilation dependencies
  - libbpf: filter by available functions
  - Add vfscount support and cleanup unused variable
  - Add README
  - Add filesnoop support
  - Add bpflist support
  - Add stacksnoop support
  - Add writeback support
  - vfsstat: fix exit value when SIGINT
  - Add threadsnoop support
  - trace_helpers: fix proc maps with [uprobes] entry
  - Add syncsnoop support
  - Cleanup vmlinux and others
  - loads: register perf event on all cpus
  - klockstat: fix running on un-implement down_read_interruptible kernel
  - loads: Remove unnecessary assign 0 operations
  - readahead: fix CO-RE on running without fentry
  - memleak: fix kmalloc and kmalloc_node's hook running on old kernel
  - Makefile: fix foo.bpf.o build without foo.h
  - libbpf-tools: Add loongarch support
  - libbpf-tools: use fentry in funclatency
  - libbpf-tools: Filter with kprobe blacklist for kprobe_exists() api.
  - libbpf-tools/memleak: support ksyms and syms_cache
  - libbpf-tools/memleak: make it run on old kernel
  - change storage type of helper err to int
  - libbpf-tools/memleak: remove unused arg "PERCPU"
  - libbpf-tools/memleak: fix 'show allocs'
  - Makefile: fix binary depends on includes file update
  - ttysnoop: fix co-re on struct iov_iter hasn't ubuf
  - loads: sample_period works on ns, convert to second
  - Add setuids support
  - Sync upstream bpftool libbpf blazesym without submodules
  - Redefine the global name of the project and its representative meanings
  - Add ttysnoop support
  - Move various tracing programs to his directory
  - Move binary to ./bin directory
  - Spit includes and libs into directory
  - Add pidpersec support
  - Add naptime support
  - Add cpuwalk support
  - Add dcsnoop support
  - Add loads support
  - Add swapin support
  - Add tcppktlat support
  - Add javagc support
  - Add tcpstates support
  - Add tcprtt support
  - Add tcplife support
  - tcpconnect: Drop unused ts_us
  - Add tcpconnect support
  - Fix some string features must be done in _GNU_SOURCE
  - Fix potential early exit of the program
  - Add tcpsynbl support
  - Add tcptop support
  - Add tcptracer support
  - Use strftime_now for cleanup
  - Add vfsstat support
  - Use BPF_CORE_READ_STR_INTO to instead of bpf_probe_read_kernel_str
  - Add syscount support
  - Merge changes If1eb510b,I220234bb
  - tcpconnlat: Remove entries from map in all cases
  - execsnoop: add execveat support
  - Fix load of ringbuffer is not support
  - Add tcpconnlat support
  - Add statsnoop support
  - Add solisten support
  - Add support slabratetop
  - Add sigsnoop support
  - Add support readahead
  - Add opensnoop support
  - update submodules url into gitee.com
  - Add support oomkill
  - Add support mountsnoop
  - Use argp_parse_pid and do_process_running wrapper for cleanup
  - memleak: use blazesym for show symbols
  - Add support blazesym
  - Makefile: Generate a symlink for different ebpf programs
  - Add support memleak
  - Add support mdflush
  - Update submodules
  - Add support llcstat
  - Add support ksnoop
  - rename bpf_map_lookup_and_delete to bpf_map_lookup_and_delete_elem
  - Add support klockstat
  - biostacks: fix wrong function name of __blk_account_io_start
  - biosnoop.bpf: fix run by inline functions
  - cpufreq: fix typo from raw_btf to raw_tp
  - biostacks: support run on kernel without btf
  - offcputime: work on kernel without btf
  - fsdist: fix crash on kernel without bss support
  - cpufreq: work on kernel without btf
  - bitesize: fix run on kernel without btf
  - biosnoop: support kernel without fentry
  - numamove: fix initial of num and latency
  - Add fsslower support
  - Drop libbpf_set_strict_mode() calls
  - Add support fsdist
  - bitesize: add missing partitions__load
  - Add support filetop
  - Use bpf_get_current_ns_pid_tgid for WSL or container
  - Add support filelife
  - Add support exitsnoop
  - Add drsnoop support
  - Add support capable
  - Add support cachestat
  - Add support bitesize
  - Add support biostacks
  - Add support biosnoop
  - Add support biopattern
  - Add support biolatency
  - Add support bindsnoop
  - Add support cpufreq
  - Add biotop support
  - Add support funclatency
  - Add gethostlatency support
  - Add bash readline support
  - numamove: only work for numa node > 1
  - runqlen: Add run queue length support
  - execsnoop: convert to use bpf_core_read_xxx
  - Add numasched support
  - execsnoop: works on !(tracepoint/syscalls)
  - numamove: fixes BPF_KRETPROBE for kretprobe
  - update vmlinux.h
  - Add numamove support
  - Fix wrong patch of uapi/linux/bpf.h
  - Add wakeuptime support
  - Add execsnoop support
  - Add support offcputime
  - Add support cpudist
  - Add support runqueue-latency
  - Add support hardirqs
  - use warning instead of fprintf stderr
  - Add softirqs support
  - runqslower support thread id
  - Add .gitreview for git-review
  - Add README.md for build binary
  - Add runqslower tools
  - Init submodules
  - Initial LICENSE


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-2
changelog:
  - softirqs: Fix the naming error
  - Revert "ksnoop: use bpf_get_func_ip() where helper is available"
  - Add criticalstat support
  - ttysnoop: fix iov_iter.ubuf CO-RE mismatch
  - libbpf-tools/gethostlatency: Resolve the path of libc for different namespaces
  - libbpf-tools: Fix misaligned pointer accesses in exitsnoop
  - libbpf-tools/filelife: Fix error tracking caused by failed unlink
  - Added support for f2fs to fsdist and fsslower tools.
  - libbpf-tools: Check biolatency tracepoints using BTF
  - libbpf-tools: Add s390x support
  - libbpf-tools: Fix bindsnoop types usage
  - libbpf-tools: Fix -Wformat errors for 32bit systems
  - ksnoop: use bpf_get_func_ip() where helper is available
  - use tid instead of tgid
  - Add sofdsnoop support
  - spec: mark ketones need clang >= 10
  - package ketones for RPM


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-3
changelog:
  - Add adaptive readahead support
  - Add wqlat support
  - libbpf-tools: fix syscall tracepoints
  - Fix bashreadline
  - libbpf-tools/offcputime, futexctn: Fix incorrect DSO information in stacktrace
  - libbpf-tools/memleak: Add verbose option
  - libbpf: Some advanced features customized for ketones
  - Update libbpf to 1.4.0
  - Add netqtop support
  - Add kvmexit support
  - Add dddos support
  - cpuunclaimed: Add cpuunclaimed support
  - libbpf-tools/ksnoop: perf buffer fix unnecessary junk bits output
  - libbpf-tools: Fix bindsnoop for kernel v6.6+
  - libbpf-tools: Fix trace_helper symbol search bug
  - libbpf-tools/biotop: Add PID filter support
  - libbpf-tools: Fix misaligned pointer accesses in drsnoop
  - libbpf-tools: Fix misaligned pointer accesses in tcptracer
  - libbpf-tools: Fix misaligned pointer accesses in tcpstates
  - libbpf-tools: Fix misaligned pointer accesses in filegone
  - libbpf-tools: Fix misaligned pointer accesses in tcplife
  - libbpf-tools: Fix misaligned pointer accesses in tcpconnect
  - libbpf-tools: Fix misaligned pointer accesses in statsnoop
  - libbpf-tools: Fix misaligned pointer accesses in runqslower
  - libbpf-tools: Fix misaligned pointer accesses in opensnoop
  - libbpf-tools: Fix misaligned pointer accesses in gethostlatency
  - libbpf-tools: Fix misaligned pointer accesses in fsslower
  - libbpf-tools: Fix misaligned pointer accesses in filelife
  - libbpf-tools: Fix misaligned pointer accesses in biosnoop
  - Add futexctn support
  - libbpf-tools/memleak: correct key size of memptrs
  - Sync ketones.spec to v1.0-2


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-4
changelog:
  - tcpmemory: Fix -P filter
  - trace: Fix Segmentation fault
  - icstat: Fix -i error
  - softirqs: Fix compilation optimization issues
  - Correct copyright statements across multiple files
  - retsnoop: capture call stacks of kernel functions that return errors
  - Use kfunc bpf_log2l instead
  - softirqs: Fix R1 unbounded memory access
  - ugc: Fix usdt: no USDT notes section (.note.stapsdt) found in '/usr/bin/python3.11'
  - uflow: Fix get binary file path failed
  - ucalls: Fix get binary file path failed
  - ustat: Fix get binary file path failed
  - ustat: Ability to add Python3
  - provide string helpers
  - Update errno functions
  - Use newer version log2 function
  - Update .clang-format
  - fslatency: Use bpf buffer for compatibility with perf and ring buffer
  - Add fslatency support


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-6
changelog:
  - blk-glitch: Add IO glitch detection function
  - offcpureason: Add tool to trace off-CPU reasons
  - wqlat: Add target function
  - wqlat: Fix the data missing issue
  - compiler: add __must_nonnull attribute and apply to bpf_buffer functions
  - compiler_types.h: add "auto" as a macro for "__auto_type"
  - chmodsnoop: Add tool to trace chmod() syscalls
  - fsdist/fslatency/fsslower: Add fuse support
  - trace_helpers: Use legacy probe attach mode for better compatibility
  - readahead: Fix eBPF program loading and attachment mismatch
  - Add funcratio support
  - filesnoop: improve code quality and fix bugs
  - tcplife: refactor port filtering with inline helper function
  - build: add compile_commands.json generation support
  - syscall_helpers: Update syscall_names_x86_64
  - sofdsnoop: fix BPF verifier error and refactor code
  - execsnoop: improve code quality and formatting consistency
  - udpdrop: Delete unused judgments
  - build: avoid creating empty binary file when cargo is missing
  - udpdrop: Fix the issue where qdisc packet loss has no stack trace
  - tcpdrop: Fix the issue where qdisc packet loss has no stack trace
  - build: streamline build system and improve maintainability
  - build: refactor library system to use static archive
  - build: optimize compilation performance and binary size
  - dddos: Fix dddos no-data issue
  - deadlock: Add lock/unlock name set
  - trace_helpers: Fix double free bug
  - build: add static compilation support with STATIC=1 flag
  - bpflist: replace strncpy with snprintf to fix truncation warning
  - wakeuptime: optimize argument parsing and error handling
  - string_helpers: cleanup and modernize code
  - memory_helpers: refactor ensure_mem function
  - btf_helpers: refactor with C99 features and improve code clarity
  - argp_helpers: simplify parsing functions and improve error handling
  - uprobe_helpers: modernize code with GNU C features and cleanup attributes
  - pattern_helpers: modernize resource management with automatic cleanup
  - vector: replace realloc with reallocarray for overflow protection
  - numa_helpers: replace sscanf with manual parsing for complex NUMA formats
  - trace_helpers: apply RAII and GNU99 optimizations
  - git-review: drop obsolete .gitreview config
  - filesnoop: add missing Makefile for symlink definitions
  - bpflist: reimplement using BPF iterator for accurate process tracking
  - bpftop: refactor BPF program type classification system
  - memleak: migrate allocation tracking to vector.h
  - vector: introduce vector.h and migrate multiple tools to use it
  - tcpdrop/udpdrop: add fentry support with runtime detection
  - system_helpers: move detect_language function for better modularity
  - commons: add variadic support to INIT_TOOL_COMPONENTS macro
  - commons: integrate skeleton cleanup into INIT_TOOL_COMPONENTS
  - udpdrop: add UDP packet drop tracing tool
  - reset-trace: Fix the infinite loop
  - include: Fix list_syscalls() prototype return type
  - opensnoop: add creation-only filtering support
  - build: rename ARCH to Arch in config.mk
  - softirqslower: add Rust-based eBPF tool for softirq latency monitoring
  - build: improve Rust tool detection and cargo availability handling
  - nfssnoop: Add more prominent error log prompts
  - ksnoop: Remove useless and white lines
  - ksnoop: Fix two invalid access to map value (#5361)
  - runqslower: add -c option to filter by process name prefix
  - ttysnoop: clean up and optimize code structure
  - runqueue-latency: clean up argument parsing and error handling
  - funcslower: refactor probe function generation using unroll macro
  - runqslower: simplify error handling and remove unnecessary cleanup logic
  - retsnoop-rs: add root privilege check before main execution
  - retsnoop: simplify Linux source path detection
  - retsnoop: revert incorrect use of bpf_map__set_max_entries()
  - execsnoop: switch from perf buffer to bpf_buffer
  - bpf: use min_t macros for histogram slot boundary checking
  - bpf: optimize string comparison with unified compat_bpf_strncmp
  - retsnoop-rs: implement professional kernel symbol resolution and stack formatting
  - stack: refactor time calibration to use OnceLock and functional style
  - build: fix BPF tool compilation dependency order
  - retsnoop-rs: implement complete BPF tracing system with dual comm support
  - build: add Rust tool support and retsnoop-rs integration
  - nfssnoop: migrate to CO-RE compatible BTF structures
  - core_fixes: improve code style and formatting consistency
  - intrusiondetec: Fix bpf_program__attach_xdp failed
  - dirwatch: Fix missing attach_mode setting in the BPF function for vfs_open
  - deadlock: Add lib set
  - libs: Fix the mismatch error
  - strings: add unified boolean-to-string and plural helpers
  - nfssnoop: add NFS client operations tracing tool
  - retsnoop: fix uninitialized a2l causing invalid free in addr2line__free
  - Add udppktlat support
  - tcplinks: add automatic PID correction for TCP connections
  - Add iowait support
  - tcplinks: simplify TCP connection tracking implementation
  - tcplinks: update man page to reflect current functionality
  - tcplinks: enhance TCP connection monitoring with complete state machine
  - bpftop: optimize TUI rendering performance and fix header display
  - tcplinks: rewrite as interactive TUI monitoring tool
  - bpftop: simplify TUI rendering logic and remove redundant color handling
  - bpftop: enhance program type detection with detailed categorization
  - bpftop: optimize filtering and sorting algorithms for better performance
  - bpftop: fix memory corruption caused by mismatched array sizes
  - man: add manual page for bpftop
  - bpftop: improve graph scaling logic for data visualization
  - bpftop: fix initial sorting with optimized baseline sampling
  - bpftop: remove non-TUI mode and filtering system to simplify architecture
  - bpftop: implement intelligent sort pausing during navigation
  - bpftop: implement comprehensive graph mode with time-series visualization
  - bpftop: add interactive TUI mode with UTF-8 support
  - bpftop: add real-time eBPF program monitoring tool
  - zombiememcgstat: Fix R8 invalid mem access 'scalar'
  - KYLIN: update the man page of mptcpify
  - docs: update development environment requirements in contributing guides
  - opensnoop: add caller stack trace functionality
  - opensnoop: implement single-event full-path reconstruction
  - KYLIN: update mptcp tool
  - docs: add contributing guides in both English and Chinese
  - license: correct LICENSE and debian/copyright to LGPL-3+
  - debian: update build and runtime dependencies
  - build: preserve BPF skeleton files for debugging purposes
  - deb: fix the issue preventing binary .deb generation on LoongArch platforms
  - trace_helpers: replace manual ELF symbol parsing with libdw interface
  - offcputime: add support for multiple PIDs and TIDs
  - offcputime: rewrite BPF program using tracepoint sched:sched_switch
  - log2: modernize implementation with type-safe dispatch and clang compatibility
  - compiler_types: simplify attribute macro definitions
  - system: implement variadic strftime_now with automatic buffer sizing
  - tcprtt: modernize BTF usage and improve exit handling
  - numamove: adopt modern resource management and runtime BSS detection
  - libs: fix resource leaks in FILE pointer operations
  - refactor: consolidate header files and improve code organization
  - libs: refactor commons.h by extracting helper functions to dedicated modules
  - bpf_buffer: add macro overloading for bpf_buffer__new function
  - tcpdrop: add support for dumping TCP drop reasons
  - libbpf-tools: sigsnoop: display target process's comm
  - tools: unify component initialization with INIT_TOOL_COMPONENTS
  - include: enhance signal handling with type safety and compilation checks
  - commons: introduce modular initialization macros for system tools
  - futexslower: implement new eBPF tool for tracing slow futex operations
  - commons: remove DEFINE_SKEL_OBJECT macro and improve resource management
  - memleak: Extract print_headers
  - biotop: Use dump_hash for map processing
  - map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  - dirtop: refactor directory tree traversal using shared filesystem helpers
  - errno_helpers: standardize error code format with negative prefix
  - bpf: extract filesystem target directory checking into common helper
  - opensnoop: add full path reconstruction capability
  - build: improve output path display in build messages
  - bpf: remove duplicate network constant definitions
  - clangd: add configuration to disable unused include warnings
  - bpf_buffer: refactor compat layer to bpf_buffer abstraction
  - constants.h: extract common constants into unified header file
  - refactor: unify min/max macros and improve header organization
  - Makefile: move vmlinux headers to src directory and update build config
  - debian: enhance packaging documentation and fix build targets
  - deb: create separate ketones-doc package for man pages
  - rpm: add comprehensive man pages and create ketones-doc package
  - build: complete migration to modern modular build system
  - retsnoop: comprehensive modernization and optimization
  - filetop,filelife: add directory filtering support and man pages
  - dirwatch: Add directory file operations monitoring tool
  - blkalgn: add block device alignment analysis tool
  - libs: remove DWARF debug support
  - Add deadlock support
  - tcprst: Correct a typo
  - uprobe_helpers.c: Fix the issue of unreleased resources
  - llcstat: Fix error: redefinition of 'key_info' on aarch64
  - drsnoop: Fix typo
  - syscall_helpers.c: Fix incorrect syscall name
  - syscall_helpers.c: support loongarch64 and add more generic syscall
  - Add dynamic switching congestion support
  - README: Add some dependencies
  - rdmaucma: add RDMA userspace connection manager tracer
  - btf: Replace ensure_core_btf with guard(btf_open_opts)
  - btf: Introduce RAII mechanism for BTF resource management
  - libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  - capable: optimize PID namespace and process tracking logic
  - libbpf-tools/profile: Add support for PID-namespacing
  - libbpf-tools: support to find symbols in different mount namespace
  - bpf: Replace version checks with BTF detection for cap_capable
  - bpf: Replace kernel version check with BTF detection for block tracepoints
  - Replace PERF_POLL_TIMEOUT_MS with POLL_TIMEOUT_MS
  - numasched: Convert to use bpf_buffer instead of perf_buffer
  - fsslower: Convert to use bpf_buffer instead of perf_buffer
  - gethostlatency: Convert to use bpf_buffer instead of perf_buffer
  - exitsnoop: Convert to use bpf_buffer instead of perf_buffer
  - runqslower: Convert to use bpf_buffer instead of perf_buffer
  - drsnoop: update to use bpf_buffer instead of perf_buffer
  - capable: update to use bpf_buffer instead of perf_buffer
  - bindsnoop: update to use bpf_buffer instead of perf_buffer
  - bashreadline: update to use bpf_buffer instead of perf_buffer
  - sofdsnoop: update to use bpf_buffer instead of perf_buffer
  - mdflush: update to use bpf_buffer instead of perf_buffer
  - filelife: switch from perf_buffer to bpf_buffer
  - biosnoop: switch from perf_buffer to bpf_buffer
  - block: refactor block_rq_* tracepoint parameter detection
  - btf: Use __free attribute for automatic btf object cleanup
  - zombiememcgstat: add new tool to track zombie memory cgroups
  - statsnoop: Missing dirfd check
  - klockstat: Don't crash on NULL ksym when looping over stack
  - klockstat: Track IOCTL numbers
  - memleak: Change the start message to match memleak python
  - memleak: Allocate map and calculate statistics only when -C option is used
  - memleak: Fix output error for invalid stackid when using combined-only mode
  - biosnoop: Fix biosnoop dependency on kernel version
  - statsnoop: Support fstat(2) and parse fd/dirfd in userspace
  - klockstat: Track netlink message types when taking locks
  - statsnoop: Display syscall name with -s
  - Add intrusiondetec support
  - Add jbdrunstat support
  - loads: simplify perf event sampling and CPU handling
  - inject: refactor call depth tracking with unroll macro
  - irq_storm: implement interrupt storm detection tool
  - trace: optimize code structure and string handling
  - trace_helpers: refactor kprobe attachment logic
  - trace: unify pattern parsing across all tools
  - trace_helpers: add DWARF debug info support for symbol resolution
  - common: refactor NUMA helpers and linker flags
  - Add kctxlatency support
  - softirqs: add target_cpu for softirqs
  - hardirqs: add target_cpu for hardirqs
  - profile,flamegraph: improve C++ symbol handling in flame graph
  - profile: add flame graph visualization support
  - offcputime: improve SVG output option handling
  - offcputime: add flamegraph support for visualizing off-CPU time
  - offcputime: add detailed stack printing functions
  - bitesize: use BTF to detect block_rq_issue tracepoint parameters
  - bitesize: enhance I/O statistics and improve code structure
  - wqlat: Add extra activation time
  - runqueue-latency: Add CPU display and sorting functions
  - softirqs: Optimize output information and increase CPU display and sorting
  - hardirqs: Optimize output information and increase CPU display and sorting
  - Add biofullpathlatency support
  - ttysnoop: use CO-RE to handle ITER_UBUF value changes
  - ttysnoop: enhance error handling and resource management
  - biolatency: improve code documentation and error handling
  - bindsnoop: improve code documentation and resource management
  - bashreadline: improve code documentation
  - adaptive-readahead: improve code documentation and error handling
  - biostacks: enhance error handling and statistics
  - biotop: improve error handling and thread safety
  - bpf: Use DEFINE_FREE for automatic cleanup of BPF skeletons
  - bashreadline: Use __free attribute for automatic cleanup
  - trace_helpers: Use AUTO and __free attributes for resource management
  - signoop: Support real-time signals
  - memleak: add mremap uprobe
  - klockstat: Search for correct stack offset in userspace
  - trace_helpers/partitions: Add __free attribute for partitions
  - trace_helpers/ksyms: Add __free attribute for ksyms
  - syms_cache: Add cleanup support for syms_cache
  - Replace explicit bpf_is_root checks with CHECK_ROOT_CONSTRUCTOR macro
  - Use __free macro for automatic resource cleanup
  - Use __free macro for automatic bpf_buffer cleanup
  - Add cleanup macros and refactor code for better resource management
  - trace: Update demangling_cplusplus_function to use cplus_demangle


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-7
changelog:
  - blkalgn: Fix segmentation fault in blkalgn -t
  - schedtrace: refactor userspace code for clarity and maintainability
  - schedtrace: add per-CPU scheduling latency statistics
  - numasched: modernize codebase and improve BPF efficiency
  - dirwatch: Fix the issue where mkdir has no output
  - solisten: Fix failed to get map info bug
  - jbdrunstat: Add more elegant error messages
  - numamove: Fix the segmentation fault
  - netfilter: Fix the bug where packet loss detection fails
  - schedtrace: add timeslice analysis and refactor codebase
  - schedtrace: add BPF-based scheduling delay tracker
  - offcputime: Fix the unit conversion error


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01:kdelibs4support-5.113.0-kylin-mg-word-modification.patch


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-plasma-5.113.0-2.p00.ky11.x86_64" /usr/bin/cmake --install "x86_64-kylin-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-sonnet-5.113.0-2.p00.ky11.x86_64" /usr/bin/cmake --install "x86_64-kylin-linux-gnu" to fix build failure


author: duanhongtao <duanhongtao@kylinos.cn> 1.0.0.0-0k3.5
changelog:
  - Type:update
  - ID:BUG#498623/498837/498991/498843/499175/498587/498567/498649/498853/499077/498877/499211
  - SUG:NA
  - DESC: 配置修改后未重启服务导致功能异常
          dga服务状态判断调整
          设置服务状态后增加状态值检查
  	普通用户置灰ai相关ui


author: litianhao <litianhao@kylinos.cn> - 30-4.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG: NA
  - DESC: 合入kysec补丁
  -       kmod-add-kysec-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 30-4.se.02
changelog:
  - Type: update
  - ID: [BUG#346402]
  - SUG: NA
  - DESC: 去除kmod 插入模块时 kysec的检查
  -       kmod-remove-insmod-kysec-check.patch


author: fuhuanzhang <fuhuanzhang@kylinos.cn> - 1.21.2-20.p01
changelog:
  - [BUG#560223] krb5包安全漏洞【['CVE-2026-40356']】【银河麒麟高级服务器操作系统 V11 2603】
  - backport kylin patch: Add krb5-kycompat subpackage.[TASK#424795]
  - backport kylin patch: Fix code scan logic warning.[TASK#596097]


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.02
changelog:
  - Type:update
  - ID:[BUG#295657] [v11-B14] [外设管控] 系统初始环境，/var/log/下存在txt格式文本文件
  - SUG:NA
  - DESC: 修改审计应用日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 相关的轮替功能操作由logrotate来管理，提供默认转存配置
          增加fuzz测试
          合规性整改移除ksaf_config


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#474839] 【v11 2503】审计包功能优化
        [任务#471091] 【安全红线】整改自研组件第一轮Fortify问题-ksaf-audit-daemon
  - SUG: NA
  - DESC: 优化审计，和内核相关的定义从class-def.conf获取
          合规性整改
          没启动ksaf_main模块，不启动审计日志服务


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#490381] 【v11 2503】优化ksaf-audit-daemon相关功能
  - SUG: NA
  - DESC: 去除掉配置文件，不允许修改日志文件名


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-06
changelog:
  - Type: bugfix
  - ID: [BUG#439759]【V11-6.6.0-32.9】【龙芯3C5000L】龙芯3C5000L从selinux切换到off失败
  - SUG: NA
  - DES: 注释掉标记变更发布与订阅功能，该功能暂时未用到
         解决/opt目录下文件未打标的问题,使用宏定义将全盘打标时要跳过的目录与桌面版本区分开


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-07
changelog:
  - Type: bugfix
  - ID: [BUG#455411]【20251021update内网源测试】【loongarch/x86-v11 2503】提测软件包增量升级后，执行yum -y update核心转储
        [任务#553743]安全编译参数整改 / ksaf-label-manager安全编译参数整改
  - SUG: NA
  - DES: 解决动态库中dbus连接没有关闭文件描述符的问题
         修改软件包安装后脚本，解决软件包更新后服务进程身份错误问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-05
changelog:
  - Type: update
  - ID: [任务#595273]完成ksaf-label-manager模糊测试和ci对接
  - SUG: NA
  - DES: 添加模糊测试与CI平台对接代码，并提高测试覆盖率


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-06
changelog:
  - Type: bugfix
  - ID: [BUG#499477]【2603-B09】模糊测试ksaf-label-manager组件，10个小时打印了82G的日志，导致磁盘打满资源耗尽，出现了48个Hang，请分析修改
  - SUG: NA
  - DES:


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-07
changelog:
  - Type: bugfix
  - ID: [BUG#502817]【2603-B12】模糊测试ksaf-label-manager组件过程中，出现两个crash，提示stack-overflow栈溢出，请分析修复
  - SUG: NA
  - DES:


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-08
changelog:
  - Type: bugfix
  - ID: [BUG#505691]【B13】【需求59243】【文件防篡改】将软件包加入防篡改列表，卸载软件包后备份系统，安装软件包后还原系统，软件包相关的文件未被删除
  - SUG: NA
  - DES:


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-10
changelog:
  - Type: bugfix
  - ID: [BUG#629777]ksaf-label-manager包安全漏洞【KVE-2026-0589】【银河麒麟高级服务器操作系统 V11 2603】
  - SUG: NA
  - DES:


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-11
changelog:
  - Type: update
  - ID: [任务#636647]dbus接口安全检查
  -     [任务#635569]【授权不当问题整改】-V11-2603问题整改
  - SUG: NA
  - DES:


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 去掉ksafpolicy服务，因和dbus启动的服务冗余
          去除注释的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#487477] 【V11】【内核特性】内核启动时间调优 / 【安全】initrd裁剪-安全的脚本ksaf
        [bug#338197] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0302
        [bug#338196] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0301
  - SUG:NA
  - DESC: 新增ksaf-policy-sync-init只下发初始化策略
          修复脉诊漏洞


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 库修复，之前不是链接


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-02
changelog:
  - Type:update
  - ID: [任务#590181] 安全合规整改
        [任务#575963] 进行ksaf-policy的持续优化
  - SUG:NA
  - DESC: 添加自动化测试代码，对接平台
          策略优化


author: lengchunying <lengchunying@kylinos.cn> 1.0.2-06
changelog:
  - Type:update
  - ID: [bug#499207] 【2603-B09】【模糊测试】ksaf-policy-interpreter件fuzzing时，出现crash，稳定复现
  - SUG:NA
  - DESC: 修改参数校验，去掉无效代码


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-08
changelog:
  - Type:update
  - ID: [Bug#583521] 修复KVE-2026-0429
  - SUG:NA
  - DESC: 同步桌面的白盒测试和模糊测试
          ksaf-policy.log改权限为640
          去掉dbus接口sendInitPolicy和clearAllPolicy
          去掉策略库接口sendInitPolicy
          日志中去掉文件名和行数


author: lichenguang <lichenguang@kylinos.cn> - 1.0.2-4
changelog:
  - Type: update
  - ID: [TASK#593001] [TASK#595565]
  - SUG: NA
  - DESC: 
  - 1. 威胁分析整改: 新增审计日志防篡改机制 [TASK#593001] 
  - 2. kyldop模糊测试整改：完善模糊测试代码，提升测试覆盖率。[TASK#595565]


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p26
changelog:
  - Type: update
  - ID:[TASK#554091][BUG#481523]
  - SUG: NA
  - DESC: unified logger and configuration file
          support for displaying versions in multiple languages


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p27.06
changelog:
  - Type: bugfix
  - ID:[BUG#502191][BUG#501583]
  - SUG: NA
  - DESC: fix KVE-2026-0105
          optimizate secret key activation failure prompt


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p27.07
changelog:
  - Type: bugfix
  - ID:[BUG#503743][BUG#503739][BUG#504233]
  - SUG: NA
  - DESC: fix set autoactivated failed for kms 
          add check for dbus func write_common_log


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.10-6.p27.08
changelog:
  - Type: update
  - ID: [TASK#620581]
  - SUG: NA
  - DESC: Bump version for unified source across all four architectures
          fix bug#539315


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-calendar-4.10.0.0-ok2.16k0.12
          upstream commtid:33a3c76c0b50b9058fdebd352de5229ce21d71bb


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#250111]
  - SUG : NA
  - DESC: Patch0002: kylin-calendar-4.10.0.0-kylin-update-zh_HK-translation.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-calendar-4.10.0.0-Single-instance-addition-of-DISPLAY-judgment.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: fix vulnerabilities found by white-box test and memory leak


author: huayadong <huayadong@kylinos.cn> - 3.24.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#424335]
  - SUG:  NA
  - DESC: update version to 3.24.0.0-0k0.35
          fix KVE-2024-1102


author: peijiankang <peijiankang@kylinos.cn> - 3.24.0.0-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#289223]
  - SUG:  NA
  - DESC: add kylin-device-daemon-3.24.0.0-fix-coredump-when-quit.patch


author: ganjianqing <ganjianqing@kylinos.cn> - 1.2.0.0-1
changelog:
  - Initial kylin-disk-encryption code  based on  desktop 1.2.0.0-1k1.35~1 version of bugfix/yhkylin/v11 brach


author: kangyu <ganjianqing@kylinos.cn> - 1.2.0.0-1.se.04
changelog:
  - Types:update
  - ID:BUG#501283 BUG#500985 BUG#500945 BUG#500597
  - SUG:NA
  - DESC:modify auto mount after umount and fuser error


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#437383]
  - SUG: NA
  - DESC: kylin-nm-4.10.0.0-kylin-fix-closing-network-segment.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch5: kylin-nm-4.10.0.0-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#500277]
  - SUG : NA
  - DESC: Disabled all network cards when wired switch is off


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#504491]
  - SUG : NA
  - DESC: Fixed network connection when network adapter is disabled


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok6k0.3


author: peijiankang <peijiankang@kylinos.cn> - 4.0.0.0-1.p03
changelog:
  - Type: compile
  - ID  : [TASK#620945]
  - SUG : NA
  - DESC: rebuild for all arch and add copyright info


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: kylin-process-manager-daemon-4.10.0.0-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-process-manager-4.10.0.0-ok1.33k1.5
          upstream commtid:0038ddf0249de1761514d30db39c7730dc0a1242


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#452549]
  - SUG : NA
  - DESC: remove kylin-process-manager core functionality


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#473473]
  - SUG : NA
  - DESC: kylin-process-manager fix sonarqube hotpoints


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#583449]
  - SUG : NA
  - DESC: Fix coredump when starting daemon while service is already running


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-4
changelog:
  - Type:update
  - ID:[task#553845] [任务#554043] [task#554041] 
  - SUG:NA
  - DESC:1. 新增系统健康检查与诊断工具; 
         2. 新增文件监控功能; 
         3. 新增进程数线程数监控


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-5
changelog:
  - Type:update
  - ID:[task#581335] [task#554087] [task#581331] [task#581333] [task#581327] [task#553849]
  - SUG:NA
  - DESC:1. 新增网络监控模块;
         2. 新增oom诊断;
         3. 新增进程资源监控;
         4. 新增进程资源监控分析;
         5. 新增基线配置与检测功能;
         6. 新增内存泄漏模块


author: andy <liuyang01@kylinos.cn> - 3.0-6
changelog:
  - Type:update
  - ID:[task#587971] [task#597175] [task#597175] [task#597175]
  - SUG:NA
  - DESC:1. 新增进程监控;
         2. 新增进程信息查询;
         3. 新增系统周期性信息查询功能;
         4. 安全合规整改;
         5. fortify高风险问题整改;
         6. 代码注释率问题整改;


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-7
changelog:
  - Type:update
  - ID:[bug#494845] [task#597175]
  - SUG:NA
  - DESC:1. 修复KVE-2026-0208漏洞;
         2. fortify高风险问题整改


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-8
changelog:
  - Type:update
  - ID:[bug#500733] [bug$500641] [bug#501867] [task#553847] [task#597175]
  - SUG:NA
  - DESC:1. 修复进程状态监控报错;
         2. 文件监控功能日志支持结构化输出;
         3. 网络监控探测点修改;
         4. 修复网络监控目录问题;
         5. 安全合规整改


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-9
changelog:
  - Type:update
  - ID:[bug#592851] [bug$598565]
  - SUG:NA
  - DESC:1. 修复CPU空闲率检查idle值一直是0;
         2. 修复网络分析打印问题


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-theme-4.10.0.0-0k0.13
          upstream commtid:dc0ff06586aca10e1729d9b7a4aa2c5f138c72fa


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#495463]
  - SUG : NA
  - DESC: adapt kysp-editor and security-reinforce icons name


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [TASK#599375][BUG#498103]
  - SUG : NA
  - DESC: add copyright head and add kybox icons


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.3kord-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.3kord-ok6.13k0.13
          upstream commitid: f1439f4f99b8afd4691d8a401861442be40ca815


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586739]
  - SUG : NA
  - DESC: sync code from desktop kylin-usb-creator-1.2.0.3kord-ok6.13k0.21


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p03
changelog:
  - Type: update
  - ID  : [TASK#586739]
  - SUG : NA
  - DESC: update upstream version to 1.2.0.3kord-ok6.13k0.54 and fixed empty plugin version info


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#491479]
  - SUG : NA
  - DESC: Skip MD5 check for ISO images missing md5sum.txt


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-ukui-control-center-jump-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: update kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#385929]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-shortcut-info.patch


author: zuohsh <zuohongsheng@kylinos.cn> -2.0.1-1
changelog:
  - Type:Task
  - ID:457822
  - SUG:NA
  - DESC: kylin_warm_revert_patch-taget_definition_compatible_with_all_hotpatches.patch


author: qiaojijun <qiaojijun@kylinos.cn> -2.0.2-1
changelog:
  - Type:Task
  - ID:564289
  - SUG:NA
  - DESC: delete rust vendor deps and libcare-plus dep,use cargo proxy


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-wayland-compositor-1.3.1.0-0k0.5
          upstream commtid:1e12b35019a7339c27fabc4c88c6cee50f566461


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p03
changelog:
  - Type: update
  - ID: [TASK#596701] kysdk-netflow-control 合规整改
  - SUG: NA
  - DESC: 修复sonarqube安全热点及增加单元测试覆盖率


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p05
changelog:
  - Type: update
  - ID: [BUG#504093] [BUG#504103] [BUG#504107]
  - SUG: NA
  - DESC:
  -       添加补丁 kysdk-netflow-control-fix-kve.patch
  -       [BUG#504093] 【V11-2603】【B09】【漏洞挖掘】kysdk-netflow-control组件存在KVE-2026-0312漏洞
  -       [BUG#504103] 【V11-2603】【B09】【漏洞挖掘】kysdk-netflow-control组件存在KVE-2026-0313漏洞
  -       [BUG#504107] 【V11-2603】【B09】【漏洞挖掘】kysdk-netflow-control组件存在KVE-2026-0314漏洞


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p06
changelog:
  - Type: update
  - ID: [BUG#507379]
  - SUG: NA
  - DESC: 细化接口调用审计日志，增加权限不足时的日志记录
  -       添加补丁 kysdk-netflow-control-modify-log-record.patch
  -       [BUG#507379] 【V11 2603】【B14】【流量管控】 【威胁消减】 dbus服务威胁-普通用户调用策略调整接口，调用失败时日志信息不全


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p07
changelog:
  - Type: update
  - ID: [BUG#588233]
  - SUG: NA
  - DESC: 调整dbus配置文件增加策略，拦截非授权的接口调用
  -       [BUG#588233] kysdk-netflow-control包安全漏洞【KVE-2026-0567】【银河麒麟高级服务器操作系统 V11 2603】


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p08
changelog:
  - Type: update
  - ID: [BUG#600561]
  - SUG: NA
  - DESC: 调整dbus内部权限校验调整为程序白名单机制
  -       添加补丁 kysdk-netflow-control-fix-dbus-issue.patch
  -       [BUG#600561] 【v11 2603】【B16】【流量监控】安全中心流量管控开关权限不对


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-1.p04
changelog:
  - Type: TASK
  - ID: [TASK#598185]kysdk-netflow-monitor 自研代码提升评估
  - SUG: NA
  - DESC: Delete bpf bcc 安装依赖，使用pcap机制


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p01
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;Bugfix496401 
  - SUG: NA
  - DESC: 增加指针链表回收、删除未使用的HIGH问题函数内容；删除python3安装依赖；rpm包名获取不到时返回“-”


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p02
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;
  - SUG: NA
  - DESC: 添加单元测试代码tests文件夹；修复安全热点问题


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p04
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;
  - SUG: NA
  - DESC:
  -       添加模糊测试代码
  -       修改配置文件为600
  -       增加之前的对应CI时自动新建模糊测试输出out文件夹
  -       删除未使用的decpcap的单元测试代码文件


author: hanzhengyun<hanzhengyun@kylinos.cn>-1.0.0.1-4.p05
changelog:
  - Type: update
  - ID: [任务#616297]
  - SUG: NA
  - DESC:
  -       添加补丁 kysdk-netflow-monitor-add-interface-permission-check-and-audit.patch
  -       [任务#616297] 根据评审意见修改详设


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p06
changelog:
  - Type: update
  - ID: [任务#587951]
  - SUG: NA
  - DESC:
  -       添加补丁 fix-dbus-conf-policy.patch
  -       [任务#587951] kysdk-netflow-monitor包安全漏洞【KVE-2026-0570】【银河麒麟高级服务器操作系统 V11 2603】


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p07
changelog:
  - Type: update
  - ID: [BUG#600561]
  - SUG: NA
  - DESC:
  -       添加补丁 20260608_change_dbus_permission_adm_2_wheel.patch
  -       [BUG#600561]【v11 2603】【B16】【流量监控】安全中心流量管控开关权限不对


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-05
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 增加获取指定目录下所有子文件和子目录接口,逐级获取接口,增加获取指定目录下文件和目录,仅指定目录层级
  -     kysec-common-add-get-path-api.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.3.1-02
changelog:
  - Type: update
  - ID: [TASK#597481][BUG#492821]
  - SUG: NA
  - DESC: 1.完成kysec-common模糊测试和ci对接；2.修复kysec-common组件存在KVE-2026-0206漏洞
  -       kysec-common-add-sonar-and-fuzz-test-code.patch
  -       kysec-common-fix-KVE-2026-0206.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.3.1-03
changelog:
  - Type: update
  - ID: [TASK#599237]
  - SUG: NA
  - DESC: 1.完成valgrind测试和CI对接;
  -       kysec-common-add-valgrind-test.patch


author: wangshengye <wangshengye@kylinos.cn> - 1.3.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#498255]
  - SUG: NA
  - DESC: 1.优化判断文件是否为内核模块和动态库的判断逻辑
  -       kysec-common-optimize-the-identification-methods-for-kernel-modules-and-dynamic-libraries.patch


author: wangshengye <wangshengye@kylinos.cn> - 1.3.1-05
changelog:
  - Type: update
  - ID: [TASK#604821]
  - SUG: NA
  - DESC: 1.ksaf通用基础库消减措施整改
  -       kysec-common-threat-analysis-and-rectification.patch


author: wanghao <wanghao2@kylinos.cn> - 1.3.1-06
changelog:
  - Type: update
  - ID: [TASK#618137]
  - SUG: NA
  - DESC: 添加security-switch、kysec_set、kysec_get添加日志type
  -         kysec-common-add-some-cmdline-log-type.patch


author: maxu <maxu@kylinos.cn> - 1.3.1-07
changelog:
  - Type: update
  - ID: [BUG#585729][BUG#585727][BUG#585739][BUG#585735]
  - SUG: NA
  - DESC: 结合KVE-2026-0503、KVE-2026-0504
  -         kysec-common-fix-KVE-2026-0503-and-0504.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-02
changelog:
  - Type: update
  - ID: [task#598013]
  - SUG: NA
  - DESC: 修复arm架构grub.cfg文件缺少resume参数，导致切换模式失败的问题
  -         kysec-daemon-fix-arm-grub-lack-resume-parameter-set-kysec-status-failed.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 3.0.0-3
changelog:
  - Type: update
  - ID: [task#589493]
  - SUG: NA
  - DESC: 更新安全容器接口，完成与服务器容器客户端联调
  -       [其它]添加麒麟软件许可证，解决门禁合规问题
  -       kysec-daemon-update-container-interfaces.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-04
changelog:
  - Type: bugfix
  - ID: [BUG#498047][BUG#496697][BUG#496675][BUG#497801][BUG#497819]
  -     [BUG#497817][BUG#497653][BUG#497987][BUG#497951][BUG#497559]
  -     [BUG#498333]
  - SUG: NA
  - DESC: 修复使用命令更新联网管控的策略失败,修改spec文件,安装时创建配置文件[BUG#498047]
  -       【内核模块防加载】添加被损坏的内核模块无错误提示信息[BUG#496697]
  -       【内核模块防加载】添加普通文件无错误提示信息[BUG#496675]
  -       【文件防篡改】界面添加文件夹的授权管理失败[BUG#497801]
  -       【文件保护】手动创建目录添加\删除\查看例外程序-例外程序为软件包不显示[BUG#497819]
  -       【文件保护】手动创建目录添加例外程序-例外程序为路径，-L 查询不显示[BUG#497817]
  -       开启ksaf子模块开启后，重启机器，开主开关，重启机器，其他子模块无法开启[BUG#497653]
  -       【文件保护】\删除例外路径\包不存在，提示信息错误[BUG#497987]
  -       【文件保护】删除例外路径\包不存在,提示信息错误[BUG#497951]
  -       【模式切换】执行命令“security-switch --set strict” off切strict，default切strict失败[BUG#497559]
  -       sm-example安装失败，无法进行套件授权测试[BUG#498333]
  -         kysec-daemon-fix-some-bug-1.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#498333][BUG#498557]
  - SUG: NA
  - DESC: 修复开启sm后，未重启后，多次开启sm报错的问题[BUG#498333]
  -       【执行控制】添加\修改\查看白名单-文件-二进制-kysec_set 输出显示异常[BUG#498557] 
  -         kysec-daemon-fix-repetition-set-sm-status-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#499949][BUG#500135][BUG#499939][BUG#499953][BUG#500289][BUG#500427]
  - SUG: NA
  - DESC: 设备管控不显示连接状态[BUG#499949]
  -       设备管控未自动生成策略[BUG#500135]
  -       【执行控制】二进制-kysec_set,设置unknown标记后kysec_get exectl -f不显示文件路径[BUG#499939]
  -       设备管控多次开关设备权限控制的usb接口，出现一个麦克风[BUG#499953]
  -       【联网管控】kysec_set 设置联网策略后，查新显示异常[BUG#500289]
  -       【文件防篡改】文件夹添加应用授权后无法取消授权[BUG#500427] 
  -       修复当GRUB_CMDLINE_LINUX_SECURITY=”“是空时无法添加lsm=ksaf的错误
  -       修改spec文件，优化目录不存在的脚本判断语句
  -           kysec-daemon-fix-dev-get-60-day-records-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#501289][BUG#502527][BUG#501285][BUG#501257][BUG#501243][TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 【设备安全】设备连接策略-导入策略显示导入0行策略[BUG#501289]
  -       【进程防护】删除-路径添加的例外递归目录失败[BUG#502527]
  -       【设备安全】光驱的连接记录不显示[BUG#501285]
  -       【设备安全】设备权限控制-光驱管控开启关闭测试（外置光驱），不符合策略[BUG#501257]
  -       【设备安全】设备权限控制-USB接口控制功能验证-禁用USB接口仅U盘生效，光驱和网卡可读[BUG#501243]
  -       修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         kysec-daemon-fix-dev-add-multi-policy-return-0-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-08
changelog:
  - Type: update
  - ID: [TASK#605711]
  - SUG: NA
  - DESC: 设备管控加入开机和关机的时候自动更新设备连接记录的功能
  -         kysec-daemon-dev-add-auto-add-record.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 3.0.0-09
changelog:
  - Type: update
  - ID: [TASK#605473]
  - SUG: NA
  - DESC: sdk优化问题自查及修复
  -       kysec-daemon-fix-gvariant-unref-issue.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-10
changelog:
  - Type: update
  - ID: [TASK#612781]
  - SUG: NA
  - DESC: 修复当切换状态重启时,最后一次切换状态不生效的问题
  -         kysec-daemon-fix-switch-status-bug-when-not-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-11
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         kysec-daemon-add-dbus-control-yaml-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#587961][BUG#587963]
  - SUG: NA
  - DESC: 设置壁纸只允许图片设置[KVE-2026-05105][BUG#587963]
  -       查询userid的接口, 不显示无三员标记的文件[KVE-2026-05104][BUG#587961]
  -         kysec-daemon-enhance-dbus-function.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-13
changelog:
  - Type: bugfix
  - ID: [BUG#619091]
  - SUG: NA
  - DESC: 修复切换strict模式慢的问题[BUG#619091]
  -       接口权限检查增加风险环境变量的检查
  -         kysec-daemon-fixed-the-bug-of-slow-switch-to-strict-mode.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-16
changelog:
  - Type: update
  - ID: [BUG#450991]
  - SUG: NA
  - DESC: 【安全套件】文件防护功能函数优化，对目录添加保护后子目录仍然能够被删除移动
  -	  kysec-utils-add-dir-protect.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-17
changelog:
  - Type: update
  - ID: [TASK#578567]
  - SUG: NA
  - DESC: 删除命令行中应用执行管控的例外管理
  -	  kysec-utils-del-exec-except.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-02
changelog:
  - Type: bugfix
  - ID: [BUG#494997]
  - SUG: NA
  - DESC: 隐藏apparmor相关功能, 修复apparmor当前状态与切换状态一致时提示重启的bug[BUG#494997]
  -       修复kysec_policy查询exec目录中的文件是否可执行显示错误的问题
  -         kysec-utils-fix-some-bug-1.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-03
changelog:
  - Type: bugfix
  - ID: [BUG#500643][BUG#500289][BUG#500619][BUG#499945]
  - SUG: NA
  - DESC: 【内核模块保护】添加未加载的模块到保护列表-kysec_set 失败[BUG#500643]
  -       【联网管控】kysec_set 设置联网策略后，查新显示异常[BUG#500289]
  -       【内核模块保护】删除保护策略-模块路径-kysec_set后依然能查询到结果[BUG#500619]
  -       【执行控制】添加\删除\查看\更新白名单-包-kysec_set,参数错误 建议优化提示[BUG#499945]
  -           kysec-utils-fix-kmod-add-uninsmod-ko-error.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-04
changelog:
  - Type: update
  - ID: [TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         kysec-utils-add-fuzz-test.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 5.0.0-05
changelog:
  - Type: update
  - ID: [TASK#595475]
  - SUG: NA
  - DESC: 增加模糊测试，增加单元测试[TASK#595475]
  -       kysec-utils-fix-fuzz-test.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#500069][BUG#500559][BUG#500579][BUG#500543]
  - SUG: NA
  - DESC: 【执行控制】对象不存在-kysec_set（包）提示信息错误[BUG#500069]
  -       【进程防护】添加\删除的进程\进程号不存在-kysec_policy提示信息错误[BUG#500559]
  -       【进程防护】重复删除进程\进程号保护策略-kysec_set缺少提示信息[BUG#500579]
  -       【进程防护】添加\删除的进程号不存在-kysec_set无提示信息[BUG#500543]
  -         kysec-utils-fix-kysec_set-prompt-info-error.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-07
changelog:
  - Type: update
  - ID: [TASK#618137]
  - SUG: NA
  - DESC: 添加操作日志[TASK#618137]
  -         kysec-utils-add-operation-log.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#584519]
  - SUG: NA
  - DESC: 修复kysec_policy命令中net模块日志信息错误的问题
  -         kysec-utils-fix-net-log-error.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#612195]
  - SUG: NA
  - DESC: 修复strict模式下secadm用户使用kysec_policy disalbe是的提示错误
  -         kysec-utils-fix-in-strict-mode-disable-kysec-prompted-error.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#488491][BUG#497461][BUG#497547]
  - SUG: NA
  - DESC: 1.修复插件状态设置不生效和文件保护例外程序不生效的问题。
  -       2.kysec2-control-module-sync-policy-interface-changed.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [BUG#498345]
  - SUG: NA
  - DESC: 1.解决首次切换default模式时，自保护策略不生效问题.
  -       2.移除audit.log相关自保护策略，移动到ksafdefault.policy中实现
  -       3.post脚本中添加重新加载插件库命令
  -       kysec2-control-module-fix-kysec-self-protect-not-enable.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#497793][BUG#497957]
  - SUG: NA
  - DESC: 1.删除文件保护信任策略（除安全和系统安装包相关的）.
  -       kysec2-control-module-fix-filectl-trust-policy.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [BUG#500529]
  - SUG: NA
  - DESC: 1.修改进程管控的插件层枚举参数kysec_scene_resource_type，解决因为数值问题造成例外包程序无法添加;


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-01.se.01
changelog:
  - Type: update
  - ID: [任务#420435]【ksaf】安全编译选项整改-kysec2-rbac-utils和审计
  - SUG:NA
  - DESC: 优化spec文件
          不能删除最后一条用户配置
          移除rpath


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [Bug#352562] 【20250513update内网源测试】【v11-2409】kysec2-rbac-utils卸载失败，提示错误信息
  - SUG: NA
  - DESC:	未开启ksaf不用同步内核策略


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#471093] 【安全红线】整改自研组件第一轮Fortify问题-kysec2-rbac-utils
  - SUG: NA
  - DESC: fortify整改
          同步fuzz代码


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [BUG#379211]
  - SUG: NA 
  - DESC: 修复通过pid获取容器内进程的路径不正确
  -    kysec2-scene-fix-get-program-path-by-pid-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: 修复缺kmodctl.h文件中缺失的对scene_common.h的引用问题
  -    kysec2-scene-fix-missing-header-file.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-17
changelog:
  - Type: update
  - ID: [TASK#501697]
  - SUG: NA 
  - DESC: 修复：根据PID获取进程路径时，路径中大写字母强制转成小写字母，导致授权程序异常
  -    kysec2-scene-fix-get-path-case-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-18
changelog:
  - Type: update
  - ID: [BUG#383859]
  - SUG: NA 
  - DESC: 【通用用例安全适配】开启strcit后 secadm无权限执行 setsebool ftpd_full_access on
  -    kysec2-scene-fix-strict-not-exec-setsebool.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-19
changelog:
  - Type: update
  - ID: [BUG#416485]
  - SUG: NA 
  - DESC: 解决下发静态度量策略不生效问题
  -    kysec2-scene-fix-static_measurement-not-effective.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-20
changelog:
  - Type: update
  - ID: [BUG#418689]
  - SUG: NA 
  - DESC: 升级软件包时，即时生效策略
  -    kysec2-scene-add-update-rpm-sync-policy.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-21
changelog:
  - Type: update
  - ID: [TASK#549749]
  - SUG: NA
  - DESC: 移除setfattr命令特权
  -    kysec2-scene-remove-setfattr-permit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.1-02
changelog:
  - Type: update
  - ID: [task#596819]
  - SUG: NA
  - DESC: 添加单元测试 fuzz valgrind 代码
  -  add path: kysec2-scene-add-unit-fuzz-valgrind-code.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.1-03
changelog:
  - Type: update
  - ID: [BUG#640911]
  - SUG: NA
  - DESC: 同步桌面代码,去除合并策略时的debug信息打印
  -  add path: kysec2-scene-sync-desktop-code-01.patch


author: fuwei <fuwei@kylinos.cn> 1.0.0-02
changelog:
  - Type:update
  - ID:[Task#596259] [BUG#494093] [BUG#493959] [BUG#493943] [BUG#493929] [BUG#493921] [BUG#493569] [BUG#493491] [BUG#493487] [BUG#492853] [BUG#492113] [BUG#491859]
  - PATCH: version_1.0.0-01_02.patch
  - DESC:
  - 1. 优化获取版本号的策略
  - 2. cmake接入qt翻译，不再直接依赖qm文件，通过ts解析动态生成
  - 3. 安全合规整改相关改动，打通项目上传sonarqube的流程
  - 4. 修复部分翻译问题以及子窗体不居中的问题
  - 5. 优化安全编译参数


author: fuwei <fuwei@kylinos.cn> 1.0.0-03
changelog:
  - Type:update
  - ID:[BUG#493851] [BUG#493855]
  - PATCH: version_1.0.0-02_03.patch
  - DESC:
  - 1. cmakelist & rpm build优化
  - 2. 部分bug修复


author: fuwei <fuwei@kylinos.cn> 1.0.0-04
changelog:
  - Type:update
  - ID:[BUG#500675] [BUG#500673]
  - PATCH: version_1.0.0-03_04.patch
  - DESC:
  - 1. bug#500675【V11 2603】【需求66345】【本地安全策略编辑器】【威胁分析】只有root进程能够访问dbus接口未实现且无日志 cmakelist & rpm build优化
  - 2. bug#500673【V11 2603】【需求66345】【本地安全策略编辑器】【威胁分析】普通用户无权限使用策略编辑器，无日志


author: fuwei <fuwei@kylinos.cn> 1.0.0-05
changelog:
  - Type:update
  - ID:[BUG#500675]
  - PATCH: version_1.0.0-04_05.patch
  - DESC:
  - 1. bug#500675 dbus接口禁止访问时，需要有日志写入到/.log/kysp-editor-daemon.log


author: fuwei <fuwei@kylinos.cn> 1.0.0-06
changelog:
  - Type:update
  - ID:[BUG#585003]
  - PATCH: version_1.0.0-05_06.patch
  - DESC:
  -- 整改spec依赖，区分编译与运行依赖
  -- cmake整改，统一依赖查找、去掉重复定义，新增注释保证cmakelist可读性
  -- BUG: #585003


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 2:1.2.2-11.p02
changelog:
  - Type:bugfix
  - ID:Task#621837
  - SUG:NA
  - DESC:Fix PT_REGS macro definition being overwritten in sw_64


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: yangzhao <yangzhao@kylinos.cn> 2.69-5.p02
changelog:
  - Type:update
  - ID:[task#535767]
  - SUG:NA
  - DESC: Backport upstream patch to address some static analysis observations


author: songjuntao <songjuntao@kylinos.cn> - 1.10.2-3.p01
changelog:
  - Type:update
  - ID:TASK#599077
  - SUG:NA
  - DESC:fix use weak random while using rsa crt private operation


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: wuxiaolei <wuxiaolei@kylinos.cn> - 1.4.0-7.p01
changelog:
  - Type: update
  - ID: [TASK#529389]
  - SUG:NA
  - DESC: sync patches and spec changes from previous release 
          Spec changes: Remove redundancy symbol link /usr/lib64/fipscheck/libkcapi.so.1.hmac,
                        since system might boot failed due to wrong symbol link,
                        or applications might start failed due to wrong symbol link. 
                        And comment kcapi-hasher to pass the compile.
          patch: libkcapi-1.4.0-Match-the-name-of-the-kernel-algorithm.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-10
changelog:
  - Type:update
  - ID: [Bug#382843] 【出厂测试】【v11 2503】【需求41775】【内核模块防卸载】内核模块添加防卸载保护后卸载成功
  - SUG:NA
  - DESC: 文件写入强制落盘，防止断电丢失
          下发初始化策略，无策略二进制文件或无二进制策略目录均返回成功


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [任务#553741] 安全编译参数整改 / libksaf-policy-sync安全编译参数整改
  - SUG:NA
  - DESC: 将安全编译栈保护参数改为-fstack-protector-strong


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-08
changelog:
  - Type:update
  - ID: [Bug#583521] 修复KVE-2026-0429
  - SUG:NA
  - DESC: 同步桌面的白盒测试和模糊测试
          ksaf-policy.log改权限为640
          日志中去掉文件名和行数


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-20
changelog:
  - Type:update
  - ID:[BUG#353894] 【v11 2503】【B11】【需求44504】【x86\arm】【动态度量】不指定设备时，开启PCR策略命令执行失败
  - SUG:NA
  - DESC: 优化命令提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-21
changelog:
  - Type:update
  - ID:[TASK#471063] 【安全红线】整改自研组件第一轮Fortify问题-libkydima
  - SUG:NA
  - DESC: 修复server.cpp中 文件打开后存在句柄不释放的问题


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-22
changelog:
  - Type:update
  - ID: [BUG#369787] 【v11-2503】【B15】【需求44504】【动态度量】动态度量总开关关闭，无法获取子开关状态
  - SUG:NA
  - DESC: 修改kydima_get关闭状态显示信息
    	调整kydima_set用户执行权限


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-23
changelog:
  - Type:update
  - ID: [BUG#385507]【出厂测试】【v11-2503】【B20】【需求44504】【动态度量】帮助信息描述不对
  - SUG:NA
  - DESC: 优化命令帮助信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-24
changelog:
  - Type:update
  - ID: [BUG#408605]【自动化update内网源测试】【SP3-2403】libkydim包kydima_set命令设置周期可为负数
  - SUG:NA
  - DESC: 增加参数容错告警，修复后台服务无意义告警信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC:
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-26~RC0
changelog:
  - Type:update
  - ID: [TASK#595487]完成libkydima模糊测试和ci对接
  - SUG:NA
  - DESC:
  	添加ci平台模糊测试支持
  	添加ci平台单元覆盖率测试支持


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-27
changelog:
  - Type:update
  - ID: [BUG#499553] 【2603-B09】kydima_get命令fuzzing过程中出现crash，非100%复现，请分析确认
  - SUG:NA
  - DESC:
  	优化对系统文件读取时的格式限位校验


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-28
changelog:
  - Type:update
  - ID: [BUG#502811]【V11 2503】【B12】【威胁消减】【动态度量】default模式下，kydima-daemon.service关闭后无法启
  - SUG:NA
  - DESC:
  	增加后台服务禁止重复启动限制


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p38.03
changelog:
  - Type:bugfix
  - ID:[BUG#488739][BUG#488629]
  - SUG:NA
  - Desc: fix get network time
          fix ukey activate


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.08
changelog:
  - Type: bugfix
  - ID:[BUG#501717][BUG#501583]
  - SUG: NA
  - DESC: fix the issue of activation check for regular users
          optimizate secret key activation failure prompt


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.09
changelog:
  - Type: bugfix
  - ID:[BUG#503743][BUG#503739][BUG#503973]
  - SUG: NA
  - DESC: fix set autoactivated failed for kms and add subscribe check


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.10
changelog:
  - Type: bugfix
  - ID:[BUG#506061]
  - SUG: NA
  - DESC: optimize the JSON data of the obtained operating system version


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p38.11
changelog:
  - Type: update
  - ID: [TASK#620581]
  - SUG: NA
  - DESC: Bump version for unified source across all four architectures


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.12
changelog:
  - Type: bugfix
  - ID: [BUG#587861]
  - SUG: NA
  - DESC: fix the issue of inaccurate detection for regular users
  	fix KVE-2026-05155


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.13
changelog:
  - Type: bugfix
  - ID: [BUG#599397]
  - SUG: NA
  - DESC: optimize the activation logic for KMS privatization
          security hardening


author: huayadong<huayadong@kylinos.cn> 2.5.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch:libkysdk-applications-2.5.1.0-kylin-fix-compile-error-of-STB_IMAGE.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.2.0-0k0.16


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add libkysdk-applications-2.5.1.0-fix-sonarqube-security-hotspots.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#352900]
  - SUG : NA
  - DESC: fix klabel problem displaying multiple line text


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#586743]
  - SUG : NA
  - DESC: add kysdk-ukuiwindowhelper and update themeController code
          add copyright head info


author: huayadong<huayadong@kylinos.cn> - 2.5.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: chnage libkysdk-gsetting Requires for delete glib2-devel


author: peijiankang<peijiankang@kylinos.cn> - 2.5.1.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add libkysdk-base-2.5.1.0-fix-sync-dbus-server-strcmp-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.0-0k1.6


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.5.1.0-1.p09
changelog:
  - Type: updates
  - ID  : [TASK#619873]
  - SUG : NA
  - DESC: fix add processing the user.db file for the user dbus


author: peijiankang <peijiankang@kylinos.cn> - 2.3.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop libkysdk-desktop-2.3.1.0-0k0.7


author: peijiankang <peijiankang@kylinos.cn> - 2.3.1.0-1.p03
changelog:
  - Type: cves & bugfix
  - ID  : KVE-2026-0781 KVE-2026-07119 KVE-2026-07120 KVE-2026-07121 KVE-2026-07122 KVE-2026-07123
  - SUG : NA
  - DESC: fix KVE-2026-0781 KVE-2026-07119 KVE-2026-07120 KVE-2026-07121 KVE-2026-07122 KVE-2026-07123
          fix libkysdk-desktop security self-check


author: houhongxun <houhongxun@kylinos.cn> - 2.3.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.3.1.0-0k0.8


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.2-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.2-0k4.22


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p04
changelog:
  - Type: update
  - ID  : [TASK#474331]
  - SUG : NA
  - DESC: add libkysdk-system-2.5.1.2-kylin-fix-fortity.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p06
changelog:
  - Type: cves
  - ID  : KVE-2025-259872293 KVE-2025-0703 KVE-2025-0704 KVE-2025-0705 KVE-2025-0706 KVE-2025-0707 KVE-2025-0801 KVE-2025-1001
  - SUG : NA
  - DESC: KVE-2025-259872293、KVE-2025-0703、KVE-2025-0704、KVE-2025-0705、
          KVE-2025-0706、KVE-2025-0707、KVE-2025-0801、KVE-2025-1001


author: wuguanghao <wuguanghao3@huawei.com> - 5.0.2-1
changelog:
  - upgrade to 5.0.2:
    - fix double free in nfs3_pread_mcb()
    - Multithread support for Linux and Windows
    - fix NFS4 behavior of chmod/chown/utimes
    - Add nfs_umount() to NFSv3
    - Add nfs_statvfs64()
    - NFSv4 fix for directory handling
    - NFSv4 support
    - lockf() support(NFSv4 only)
    - fcntl() support (FNSv4 only)
    - Added nfs-fh: a simple utility to print the filehandle for a nfs file


author: liyunqing <liyunqing@kylinos.cn> - 14:1.10.4-5.p02
changelog:
  - Type: BugFix
  - ID: [TASK#628895]
  - SUG: NA
  - DESC: Fix libpcap BPF optimizer dominator recomputation after and/or pullup


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: litenglong <litenglong@kylinos.cn> - 1.4.5.p01
changelog:
  - Type:update
  - ID:[task#327351]
  - SUG:NA
  - DESC:Synchronize the SP3 patch:Disallow root from setting weak passwords and resolve localization issue.


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.4.5.p01.se.01
changelog:
  - Type:update
  - ID:[task#329817]
  - SUG:NA
  - DESC: 1.【账户保护】libpwquality包合入回文和相似性检查补丁
          2. 支持香港繁体字 
      add patch:libpwquality-add-palindrome-similar-option.patch
                libpwquality-add-zh_HK.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.4.5-3.p01.se.01
changelog:
  - Type:update
  - ID:[TASK#533695]
  - SUG:NA
  - DESC: backport upstream patch to remove redundant inclusion of libintl.h


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-35789.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-44235.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-44236.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: tiandongdong <tiandongdong@kylinos.cn> - 3.5-4.se.01
changelog:
  - Type:update
  - ID:[Task#533985] v11补丁移植
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks
  -         add patch: libselinux-keep-getpeercon-errorno.patch


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: peijiankang <peijiankang@kylinos.cn> - 2.74.3-10.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 2.74.3-4.p04(fix CVE-2025-4945 and Failed to fix websocket-test case)


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-10.p03
changelog:
  - Type: cves
  - ID:   [BUG#538961]
  - SUG:  NA
  - DESC: fix CVE-2026-0716 CVE-2026-1760 CVE-2026-5119 CVE-2025-14523
              CVE-2026-0719 CVE-2026-1467 CVE-2026-1801 CVE-2026-2369
              CVE-2026-1761 CVE-2026-1539


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: jiayuzhe <jiayuzhe@kylinos.cn> - 1.11.0-8
changelog:
  - Type:CVE
  - CVE:CVE-2026-66032,CVE-2026-66033,CVE-2026-66034
  - SUG:NA
  - DESC:fix CVE-2026-66032,CVE-2026-66033,CVE-2026-66034


author: zhangjun <zhangjun@kylinos.cn> - 1.10.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Prevent files from being skipped if the output buffer is too small


author: Jia Yuzhe <jiayuzhe@kylinos.cn> - 1.0.2
changelog:
  - Type: update
  - ID: TASK#587105
  - SUG: NA
  - DESC: Update module disk, network, software and soundcard


author: Qin Fandong <qinfandong@kylinos.cn> - 1.0.5-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Make a better RPM SPEC
  -       Return N/A if device serial number is empty 
  -       Use dmidecode to get processor vendor 
  -       Get processor model name from /proc filesystem 
  -       Only report real nic devices
  -       Only report real disks 
  -       Return N/A for unknown memory attrs 
  -       Use lsblk to get disk SN 
  -       Use lsblk to get disk model


author: Jia Yuzhe <jiayuzhe@kylinos.cn> -1.0.5-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix following bug:
  -	Return correct soundcard model
  -	Statistics of CPU Core Count and Offline Status
  -	Return the correct number of threads per core


author: Jia Yuzhe <jiayuzhe@kylinos.cn> -1.0.5-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix following bug:
  -       Fix test unit related disk and memory


author: Jia Yuzhe <jiayuzhe@kylinos.cn> -1.0.5-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix following bug:
  -       Fix fuzz unit related disk and network
  -	Add valgrind
  -       Memory data width underflow
  -       Fix sound card model and bus address mismatch for multiple sound cards
  -       Remove logical device info from response 
  -       Return correct soundcard model 
  -       Statistics of CPU Core Count and Offline Status
  -       Return the correct number of threads per core


author: Jia Yuzhe <jiayuzhe@kylinos.cn> - 1.0.5-6
changelog:
  - Type: update
  - ID: TASK#631783
  - SUG: NA
  - DESC: Add D-Bus service control config and conf2 whitelist enforcement


author: chenyanpanHW <chenyanpan@huawei.com> - 1:1.1.1-26
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-pp_sharp_mod-calculation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-fix-underlinking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-png_sizeof-no-longer-available-since-libpng.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-CVE-2024-56431.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2026-5673.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yubo <yubo1@kylinos.cn> - 0.9.5-4.p01
changelog:
  - Type:update
  - ID:[任务#223921]
  - SUG:NA
  - DESC:add support to tpm2-00-permall update and disable sm4 in configure


author: hy-euler <eulerstoragemt@huawei.com> - 1.0.22-3
changelog:
  - delete -Sgit in 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-descriptor-Fix-two-memory-safety-bugs-in-malformed-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: fangyi <eric.fangyi@huawei.com> - 9.10.0-15
changelog:
  - cpu-Add-new-Dharma-CPU-model.patch
  - qemu-cvm-support-uefi-boot-by-rom.patch
  - iommufd-Support-configuring-iommufd-backends-for-qem.patch
  - vdpa-iommufd-Support-associating-iommufd-with-vDPA-h.patch
  - capabilities-add-fun-to-determine-if-binary-is-strat.patch
  - qemu_command-unsupport-command-line-will-not-built-f.patch
  - chardev-use-path-instead-of-fd-for-stratovirt.patch
  - Revert-qemu-command-Delegate-qemuBuildDriveStr-to-SD.patch
  - Revert-qemu-Remove-pre-blockdev-PFLASH-setup.patch
  - qemu_command-get-disk-alias-from-disk-instead-of-nod.patch


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p01
changelog:
  - Type: Update
  - ID:   [TASK#534467]
  - SUG:  NA
  - DESC: Backport V11-2503 patch
  -   Enable netcf support
  -   Fix several iface-related translation issues
  -   Fix some translation errors of common functions.
  -   Support Phytium S5000c
  -   Add a path in DEFAULT_LOADER_NVRAM to solve the issue of not being able to find UEFI firmware in x86 architecture
  -   Support host-model for arm, solve core dump when libvirtd starts on Phytium,solve compile error with modify xml in the test dir
  -   Disconnect libvirt's dependency on rbd and install it when the user needs to support it
  -   Fix the translation problem of libvirtd.policy's prompts
  -   Support MCE error alert and optimization the function that locates VMs affected by MCE errors
  -   Fix virtual machine save and restore failure issue when CPU model is configured as host model mode


author: lijunwei <lijunwei@kylinos.cn> - 9.10.0-16.p04
changelog:
  - Type: Update
  - ID:   [TASK#554389]
  - SUG:  NA
  - DESC: Add support for Arm UEFI pflash vm internal snapshot


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p06
changelog:
  - Type: Update
  - ID:   [TASK#588425]
  - SUG:  NA
  - DESC: Disconnect libvirt's dependency on rbd and glusterfs


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p07
changelog:
  - Type: cves
  - ID:   CVE-2025-12748/CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: wangdi <wangdi@kylinos.cn> - 9.10.0-16.p08
changelog:
  - Type: update
  - ID:   [TASK#652209]
  - SUG:  NA
  - DESC: Add support for Kunpeng 920-V1/V2 950-V1 cpu models


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.11.9-6.p01
changelog:
  - Type: update
  - ID: [TASK#529389]
  - SUG:NA
  - DESC: Sync kycompat patches from previous release
         0001-kylin-compat-support-V1.0-for-libxml2.patch
         0002-kylin-compat-support-V1.1-for-libxml2.patch


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-41
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.2
  - add a small patch for backport testcase issue fix


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-43
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.3


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-44
changelog:
  - [ICP] Enable promotion of more targets
  - [bugfix] Constant folding for long double type lib call is only supported for logl.
  - switch to gcc build for bootstrap building failure


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-45
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.4
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.4


author: wangqiang <wangqiang1@kylinos.cn> -17.0.6-45.p03
changelog:
  - Type:update
  - ID:[task#553653]
  - SUG:NA
  - DESC:Backport kylin-llvm-backport-avoid-neg-instructions-when-lowering.patch


author: wangqiang <wangqiang1@kylinos.cn> -17.0.6-45.p04
changelog:
  - Type:update
  - ID:[task#553653]
  - SUG:NA
  - DESC:Backport LoopVersionLICM-move-pipeline-to-benefit-from-vectorization.patch


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-45.p05
changelog:
  - Type:update
  - ID:[task#603663]
  - SUG:NA
  - DESC:sync source code, add mcjit/RuntimeDyld support on loongarch, enable all target on sw_64


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.7.2-29.p03
changelog:
  - Type: NA
  - ID: [TASK#634083]
  - SUG: NA
  - DESC: fix stack buffer overflows in mbchar and path handling


author: lipengyu <lipengyu@kylinos.cn> - 8.5.0-3.p01
changelog:
  - Type: bugfix
  - ID: [TASK#634075]
  - SUG: NA
  - DESC: Fix off-by-one heap buffer overflow in _glmWriteMTL


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: wangzhiqiang <wangzhiqiang95@huawei.com> - 0.9.5-1
changelog:
  - upgrade version to 0.9.5:
    - add requires libmount and libmount-devel
    - add multipath.conf multipathc and libmpathutil.so
    - delete README.alua


author: kouwenqi <kouwenqi@kylinos.cn> - 0.9.5-7.p03
changelog:
  - Type:Bugfix
  - ID:[Task#656447]
  - SUG:NA
  - DESC:kpartx: check slice size before looking for partition to remove


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: chenyanpanHW <chenyanpan@huawei.com> - 4.9.3-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6842.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6843.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-6.p01
changelog:
  - Type: update
  - ID: [TASK#532891]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-6.p03
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-6.p04
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-6.p08
changelog:
  - Type: cves
  - ID: CVE-2026-42055 CVE-2026-42533 CVE-2026-56434 CVE-2026-60005
  - SUG: NA
  - DESC: fix CVE-2026-42055 CVE-2026-42533 CVE-2026-56434 CVE-2026-60005


author: majianhan <majianhan@kylinos.cn> - 2:7.94-7.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC:[kylin] skip some testcases which need access internet


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: songliyang <songliyang@kylinos.cn> - 1:20.18.2-7.p01
changelog:
  - Type: updates
  - ID:   [BUG#528049]
  - SUG:  NA
  - DESC: 1.Upgrade to fix followup CVEs:
            CVE-2025-55130 CVE-2025-55131 CVE-2025-55132 CVE-2025-59465
            CVE-2025-59466 CVE-2026-21637 CVE-2026-21710 CVE-2026-21713
            CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 CVE-2026-21717
          2.Fix a build error on sw_64


author: wangkai <13474090681@163.com> - 2:2022.10.3-4
changelog:
  - Fix CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-46569,
    CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-56135, CVE-2026-56136


author: Qiang Wei <qiang.wei@suse.com> - 2.2.1-1
changelog:
  - Update to version 2.2.1.
    * Remove 0001-bash-Fix-nvme-completion.patch, it is fixed in upstream.
    * backport upstream patch: Bash completion: move global declare into function.


author: kouwenqi <kouwenqi@kylinos.cn> - 2.8-1.p01
changelog:
  - Type: bugfix
  - ID: [TASK#631623]
  - SUG: NA
  - DESC: do not issue warning when nvme_core module is not loaded


author: chenyanpanHW <chenyanpan@huawei.com> - 0.100-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-logging-fix-segfault-on-an-underflow-with-an-input-s.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-Fix-issue-in-error-path-causing-double-free.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: liuming <liuming@kylinos.cn> - 9.6p1-5.p12.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: jiaocong <jiaocong@kylinos.cn> - 9.6p1-5.p16.se.01
changelog:
  - Type:update
  - ID:TASK#608701
  - SUG:NA
  - DESC:add StrictScpCheck option in sshd_config.
         add comment for StrictScpCheck option in sshd_config.


author: liuming <liuming@kylinos.cn> - 9.6p1-5.p17.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2026-59995 CVE-2026-59996 CVE-2026-59997 CVE-2026-59998 CVE-2026-59999 CVE-2026-60000 CVE-2026-60001
  - SUG:NA
  - DESC:fix CVE-2026-59995 CVE-2026-59996 CVE-2026-59997 CVE-2026-59998 CVE-2026-59999 CVE-2026-60000 CVE-2026-60001


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p07
changelog:
  - Type:update
  - ID:TASK#533697
  - SUG:NA
  - DESC:add add-support-for-sw_64-architecture.patch and fix sw_64 _libdir


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p09
changelog:
  - Type:cves
  - ID:BUG#497061
  - SUG:NA
  - DESC: fix CVE-2025-15467,CVE-2025-69418,CVE-2025-69419,CVE-2025-69420,
              CVE-2025-69421,CVE-2026-22795,CVE-2026-22796,CVE-2025-68160


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p10
changelog:
  - Type:update
  - ID:TASK#599075
  - SUG:NA
  - DESC: fix negative input length in EVP_EncryptUpdate function


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p11
changelog:
  - Type:cves
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-31790,CVE-2026-31789,CVE-2026-28390,
             CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p12
changelog:
  - Type:cves
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-34182,
             CVE-2026-42766,CVE-2026-42767,CVE-2026-42770,CVE-2026-45445,
             CVE-2026-45446,CVE-2026-45447


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: jiaocong <jiaocong@kylinos.cn> - 2.6.9-6.p04
changelog:
  - Type: cves
  - ID: CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117 CVE-2026-13122 CVE-2026-13698
  - SUG: NA
  - DESC: fix CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117 CVE-2026-13122 CVE-2026-13698


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: Xibo.Wang <wangxb12@chinatelecom.cn> - 2.7.6-20
changelog:
  - Skip "ed" test when the ed utility is not installed
  - Abort when cleaning up fails
  - Don't crash when RLIMIT_NOFILE is set to RLIM_INFINITY
  - Avoid invalid memory access in context format diffs
  - Fix failed assertion 'outstate->after_newline'
  - Add missing-section tests to context-format test case
  - Fix test for presence of BASH_LINENO[0]


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#352389]
  - SUG : NA
  - DESC: fix for copying long name file to file safe box


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#497725]
  - SUG : NA
  - DESC: fix copying files that with specific symbols name


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add peony-share Requires: samba samba-client


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok2k1.3
          upstream commitid: c2238e7f6811fe1e1faa5a9fde637c32b2d785bd


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-fix-peony-share.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#352174]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-add-uncompress-type.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: update
  - ID  : [TASK#586391]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#584613]
  - SUG : NA
  - DESC: reference gvolume object if we used after(rebuild after peony fix)


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: songliyang <songlyang@kylinos.cn> - 0.123-4.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100 Patch101 to fix BUG#243579 and BUG#260533. Author: huayadong
          3.Backport Patch102 to fix BUG#499255. Author: zhoukangyu


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p01
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: update to 15.17 (fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p02
changelog:
  - Type: updates
  - ID: [BUG#556223],[BUG#546389]
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2025-8713, CVE-2025-8714


author: liuying <liuying03@kylinos.cn> - 15.18-1.p01
changelog:
  - Type: cves
  - ID: CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: songliyang <songliyang@kylinos.cn> - 4.0.4-8.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Upgrade to sync for 4 architectures
          2.Backport Patch100 to fix w print by utmp show info when systemd get tty failed. Author: litenglong
          3.Backport a commit to skip test_pids in check for sw_64 as there is an issue on koji when building. Author: liuming03


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: chenjianhu <chenjianhu@kylinos.cn> - 3.11.6-39.p02
changelog:
  - Type:CVE
  - CVE:CVE-2026-6879
  - SUG:NA
  - DESC:fix CVE-2026-6879: avoid quadratic behavior in xml.etree.ElementPath index predicates


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p04
changelog:
  - Type: Bugfix
  - ID:   [BUG#464097]
  - SUG:  NA
  - DESC: fix can not use virsh command to get host capabilities on phytium cpu


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p05
changelog:
  - Type: Bugfix
  - ID:   [BUG#471289]
  - SUG:  NA
  - DESC: Enable disk encrypt function and fix compile error


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-37.p07
changelog:
  - Type: Update
  - ID:   [TASK#583973]
  - SUG:  NA
  - DESC: Add the PASUEOPT instruction to the ZHAOXIN chip.


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-37.p08
changelog:
  - Type: Update
  - ID:   [TASK#586391]
  - SUG:  NA
  - DESC: Disconnect qemu's dependency on qatzip-devel and intel-qpl-devel


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-37.p10
changelog:
  - Type: Bugfix
  - ID:   [BUG#466883]
  - SUG:  NA
  - DESC: Align VIRT_GED_CPUHP_ADDR to 4 bytes to fix cpu hotplug failure on loongarch64


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p11
changelog:
  - Type: cves
  - ID:   CVE-2025-14876
  - SUG:  NA
  - DESC: FIX CVE-2025-14876 qemu-kvm: Unbounded allocation in virtio-crypto


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p12
changelog:
  - Type: cves
  - ID:   CVE-2025-12464
  - SUG:  NA
  - DESC: FIX CVE-2025-12464 qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-37.p14
changelog:
  - Type: cves
  - ID:   CVE-2024-8354 CVE-2026-2243
  - SUG:  NA
  - DESC: Sync fix CVE-2024-8354 usb: assertion failure in usb_ep_get()
                   CVE-2026-2243 Heap buffer out-of-bounds read in VMDK compressed grain parsing


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p15
changelog:
  - Type: cves
  - ID:   [BUG#525397]
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-37.p16
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763 
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-37.p17
changelog:
  - Type: cves
  - ID:   CVE-2026-5761
  - SUG:  NA
  - DESC: Fix CVE-2026-5761  virtio-blk: fix zone report buffer out-of-memory


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p19
changelog:
  - Type: cves
  - ID:   CVE-2026-48914
  - SUG:  NA
  - DESC: Fix CVE-2026-48914 heap buffer overflow in virtio-blk scsi request handling


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p20
changelog:
  - Type: cves
  - ID:   CVE-2026-48003 CVE-2026-3886
  - SUG:  NA
  - DESC: ui/vnc: fix OOB read updating VNC update frequency stats(CVE-2026-48003)
          virtio-gpu: fix overflow check when allocating 2d image(CVE-2026-3886)


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p21
changelog:
  - Type: cves
  - ID:   CVE-2026-0665
  - SUG:  NA
  - DESC: Fix CVE-2026-0665 hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p22
changelog:
  - Type: cves
  - ID:   CVE-2026-16043 CVE-2026-15578 CVE-2026-8348 CVE-2026-15705 CVE-2026-63319 CVE-2026-9238 CVE-2026-48002 CVE-2026-61475 CVE-2022-36648
  - SUG:  NA
  - DESC: Fix CVE-2026-16043/CVE-2026-15578/CVE-2026-8348/CVE-2026-15705/CVE-2026-63319
              CVE-2026-9238/CVE-2026-48002/CVE-2026-61475
          Fix CVE-2022-36648


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p02
changelog:
  - Type: update
  - ID  : [TASK#587039]
  - SUG : NA
  - DESC: Patch1002:qtbase-5.15.10-work-around-pyside2-brokenness.patch
          适配pyside2


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#485611]
  - SUG : NA
  - DESC: Patch1003:CVE-2025-5455-qtbase-5.15.patch
          修复CVE-2025-5455


author: lizequan<lizequan@kylinos.cn> - 5.15.10-11.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#504703]
  - SUG : NA
  - DESC: Patch1004:qt5-base-fix-coredump-missing-display-env-in-ssh.patch


author: peijiankang<peijiankang@kylinos.cn> - 5.15.10-11.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#507841]
  - SUG : NA
  - DESC: add sw_64 QT_ARCH to fix kylin-aiassistant build error


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop qt5-ukui-platformtheme-4.10.0.0-ok52k0.18
          upstream commtid:723df8376ab0c104ef9b4e5612fee9012cad4fc9


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: qt5-ukui-platformtheme remove libqt5-gesture-extensions


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#500213]
  - SUG : NA
  - DESC: add Patch05: qt5-ukui-platformtheme-4.10.0.0-kylin-fix-QLabel-Text.patch
          修复AI模块管理界面显示与预期不符配


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangchaorui <zhangchaorui@kylinos.cn> -3.2.2-152.p01
changelog:
  - Type:cves
  - ID:CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257
  - SUG:NA
  - DESC:fix CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257


author: songliyang <songlyang@kylinos.cn> - 1.4.5-2.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Sync for 4 architectures
          2.Skip part of check test error on sw_64 and aarch64


author: xinghe <xingheyd@163.com> - 4.19.3-9
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: xinghe <xingheyd@163.com> - 4.19.3-10
changelog:
  - Type:cves
  - ID:CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222
  - SUG:NA
  - DESC:fix CVE-2026-6949 CVE-2026-58224 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221 CVE-2026-58222


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: liyunqing <liyunqing@kylinos.cn> - 4.19.3-6.p02
changelog:
  - Type:cves
  - ID:TASK#594565 TASK#594587 TASK#595621 TASK#595973 CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: litianhao <litianhao@kylinos.cn> - 1.2.1-2.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG:NA
  - DESC: 合入sm设备管控补丁
          sane-backends-add-sm-devctl.patch


author: zhubing <zhubing@kylinos.cn> - 1.2.1-2.p01.se.02
changelog:
  - Type: update
  - ID: [TASK#427527] 增加ksaf补丁
  - SUG:NA
  - DESC: 移除sm设备管控代码，合入ksaf devctl补丁
          sane-backends-remove-sm-devctl.patch
          sane-backends-add-ksaf-devctl-hook.patch


author: sunjin <sunjin@kylinos.cn> 3.0.0-06
changelog:
  - Type:update
  - ID:[TASK#600263][BUG#499333]
  - SUG:NA
  - DESC:
  - 优化开始菜单图标模糊的问题
  - 增加dbus接口权限检查
  - 修正错误的命令行信息
  - 【B10】【V11-2503】【安全加固】【非交互命令】自定义参数导入测试-确保设置空闲超时锁屏时间未生效
  - 添加补丁security-reinforce-update-20260310.patch


author: zhaoyun <zhaoyun@kylinos.cn> 3.0.0-07
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260428.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 3.0.0-08
changelog:
  - Type: update
  - ID: [TASK#633053]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532237]
  -       修复安全漏洞[KVE-2026-0420][BUG#541241]
  -       dbus管控整改
  -       security-reinforce-update-20260521.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 3.0.0-09
changelog:
  - Type: update
  - ID: [TASK#636621]
  - SUG: NA
  - DESC: 授权不当脚本整改
  -       增强dbus接口调用输入参数的检查
  -       security-reinforce-update-20260530.patch


author: litianhao <litianhao@kylinos.cn> - 1.3.1-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       security-switch-add-license.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#457138]
  - SUG: NA
  - DESC: 对于security-switch命令的新参数需求 变更产品化版本
  -    security-switch-new-parameter-20250508.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653]
  - SUG: NA
  - DESC: 更新security-switch命令的help信息和关闭状态时get的返回值（none -> off）
  -	  security-switch-new-help-info.patch
  -	修复调用reboot命令执行错误的问题[BUG#352649][BUG#352653]
  -	  security-switch-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: bugfix 
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -       无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -         security-switch-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: bugfix 
  - ID: NA
  - SUG: NA
  - DESC: 修复缺少此设置将使系统失去安全防护，极大增加系统安全风险提示的问题,桌面bug#360683
  -	  -- security-switch-fix-error-with-missing-prompt-message.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-02
changelog:
  - Type: update
  - ID: [TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         security-switch-add-fuzz-test.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-03
changelog:
  - Type: bugfix
  - ID: [BUG#504759]
  - SUG: NA
  - DESC: 【模式切换】default切换off，未提示重启生效[BUG#504759]
  -         security-switch-default-to-off-prompt-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#507971]
  - SUG: NA
  - DESC: 修改安全模式切换到off状态时的提示
  -         security-switch-modify-security-mode-to-off-tips.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-05
changelog:
  - Type: update
  - ID: [TASK#618137]
  - SUG: NA
  - DESC: 添加操作日志[TASK#618137]
  -         security-switch-add-operation-log.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-06
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         security-switch-add-dbus-control-yaml-file.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.4-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#239817]
  - SUG:  NA
  - DESC: add fix-peony-filetype-not-translate-issue.patch


author: huayadong <huayadong@kylinos.cn> - 2.4-2.p01
changelog:
  - Type: update
  - ID:   [TASK#425693]
  - SUG:  NA
  - DESC: update to 2.4-2
          Remove locale files rather than exclude them
          fix build with libxml 2.12


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-16.p05
changelog:
  - Type:cve;bugfix
  - ID:[BUG#585405]
  - SUG:NA
  - DESC: fix CVE-2025-69421, CVE-2026-22796, CVE-2026-28388, CVE-2026-28389
          allow debuginfo to be installed alone without pulling in the debugsource package


author: litianhao <litianhao@kylinos.cn> - 1.1.1-10
changelog:
  - Type: update
  - ID: [BUG#382501]
  - SUG: NA
  - DESC: 修复remove pvid接口调用失败的问题
  -       sm-enhancement-fix-devctl-perm-when-remove-pvid.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 服务开机启动时，调用add_inf_policy add_device_policy add_usb_policy接口失败
  -       sm-enhancement-fix-return-incorrect-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-12
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 修改一处遗漏的返回值处理逻辑
  -       sm-enhancement-optimize-interface-return-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-13
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA
  - DESC: 同步桌面Bug#434735修复补丁
  -       sm-enhancement-sync-desktop-bug-434735.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-14
changelog:
  - Type: NA
  - ID: [TASK#589931]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-resolve-hotspot-issue.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [BUG#485723]
  - SUG: NA
  - DESC: 添加打印信息
  -       sm-enhancement-add-print-info.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#502831] [BUG#503699]
  - SUG: NA
  - DESC: 修改打印信息
  -       sm-enhancement-modify-the-prompt-message.patch


author: duanhongtao <duanhongtao@kylinos.cn> - 5.9.10-4.p05
changelog:
  - Type:CVE
  - CVE:CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.0.0-5
changelog:
  - Type:update
  - ID:[TASK#592971]
  - SUG:NA
  - Desc: update BpfManager::loadObjectByPath with isValidElfPath


author: fuanan <fuanan3@h-partners.com> - 255-42
changelog:
  - backport: sync patches from systemd community
    add backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch


author: lijian<lijian01@kylinos.cn> - 255-44.p01
changelog:
  - Type: update
  - ID:   [TASK#529381]
  - SUG:  NA
  - DESC:  1  systemd-udev package contain kernel-install
           2  add Patch: 0001-Change-the-NTP-server.patch
              Change NTP server.
           3  add Patch: 0001-basic-add-missing-PIDFS-magic.patch
              Fix missing PIDFS magic issue when compile
           4 add Patch: 0001-basic-add-missing-BCACHEFS-magic.patch
              Fix missing BCACHEFS magic issue when compile
           5 Add 0001-rc-local-change-order-after-network-online.target.patch
              Change rc-local order after network-online.target, fix service or process start failed issue
  		 6 Revert patch to fix test performance regression
  		 7 Add zombie process recycling module component
  		 8 Add process monitoring, process self-healing and automatic pull up


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p05
changelog:
  - Type: update
  - ID:   [TASK#600247]
  - SUG:  NA
  - DESC: Optimize the code of the sysprocess-manage zombie process module,
          fix security vulnerabilities such as null pointer dereferences,
          and memory deallocation issues.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p06
changelog:
  - Type: update
  - ID:   [TASK#603661]
  - SUG:  NA
  - DESC: Unified source to support sw64/x86_64/aarch64/loongarch64


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p07
changelog:
  - Type: update
  - ID:   [TASK#568027]
  - SUG:  NA
  - DESC: fix CVE-2026-4105
          fix CVE-2026-29111
          fix CVE-2026-40226


author: huayadong <huayadong@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type: update
  - ID:   [TASK#327372]
  - SUG:  NA
  - DESC: add tigervnc-1.13.1-kylin-vncpasswd-add-pwquality-check-and-translation.patch
  	add tigervnc-1.13.1-kylin-add-pwquality-check-and-translation.patch
  	add BuildRequires:libpwquality-devel  Requires:libpwquality


author: jinlun <jinlun@huawei.com> - 4.0.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 4.0.1
    - Fix CVE-2023-22745
    - TPM version 1.59 support
    - libmu soname from 0:0:0 to 0:1:0.
    - tss2-sys soname from 1:0:0 to 1:1:0
    - FAPI ignores vendor properties on Fapi_GetInfo
    - FAPI Event Logging JSON format
    - Dead struct TPMS_ALGORITHM_DESCRIPTION
    - Dead field intelPttProperty from TPMU_CAPABLITIES
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal


author: bianxiuning <bianxiuning@kylinos.cn> - 4.0.1-4.p01
changelog:
  - Type:update
  - ID:TASK#424681
  - SUG:NA
  - DESC: 1.Hygon patch for rounds
          2.fix issues for integreation test of fapi PCR-sm3_256 bank


author: huayadong <huayadong@kylinos.cn> 4.1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: delete Requires:glib2-devel gsettings-qt-devel


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.8
          upstream commitid: e244d03cbbaa55bff8777acce8145a0b09f20f6a


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.11
          upstream commitid: 8f91b3ac9f0c054dffc5d12daf0ae419909d1d54


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch02: ukui-biometric-auth-4.10.0.0-kylin-add-KylinUserDatePtr-for-root.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: cves & bugfix
  - ID  : KVE-2026-0742 KVE-2026-0744 KVE-2026-0745 KVE-2026-0746 KVE-2026-07175 KVE-2026-07176 KVE-2026-07206 KVE-2026-07207
  - SUG : NA
  - DESC: add Patch10:fix KVE
          安全增强
          威胁分析整改


author: huayadong<huayadong@kylinos.cn> 4.10.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: delete Requires: kf5-bluez-qt-devel kf5-bluez-qt


author: peijiankang<peijiankang@kylinos.cn> 4.10.1.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add ukui-bluetooth-add-copyright.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.1.0-ok3.2k0.10


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-bluetooth-4.10.1.0-ok3.2k0.14
          upstream commtid:1dddb5543c1a61b7a19a412f73da010effd59666


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p50
changelog:
  - Type: bugfix
  - ID  : [BUG#481277][BUG#482067]
  - SUG : NA
  - DESC: show register number when system activated
          don't show activate button when system activated on main about page


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p51
changelog:
  - Type: bugfix
  - ID  : [BUG#483057]
  - SUG : NA
  - DESC: fix the check when system activation is expired


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p52
changelog:
  - Type: cves
  - ID  : [TASK#589295]
  - SUG : NA
  - DESC: fix KVE-2026-0104, encode password when used as command argument


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p53
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch53: ukui-control-center-4.10.0.0-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p54
changelog:
  - Type: bugfix
  - ID  : [Bug#485195]
  - SUG : NA
  - DESC: activate button shouldn't named "Extend" when system is not activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p55
changelog:
  - Type: bugfix
  - ID  : [Bug#500581][BUG#500383]
  - SUG : NA
  - DESC: Fixed defaultapp invalid when clicked reset button
          Fixed excessive password prompts when adding group members


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p56
changelog:
  - Type: bugfix
  - ID  : [Bug#500531]
  - SUG : NA
  - DESC: add Patch57:ukui-control-center-4.10.0.0-kylin-change-png.patch
          更换帮助手册图片.


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p58
changelog:
  - Type: cves
  - ID  : KVE-2026-0405 KVE-2026-0406
  - SUG : NA
  - DESC: fix KVE-2026-0405 and KVE-2026-0406


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p62
changelog:
  - Type: update
  - ID  : NA
  - SUG : NA
  - DESC: add Patch64 Patch65 Patch66 Patch67 Patch68 Patch69
          hardening dbus interface


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p63
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add Patch70
          hardening dbus interface for polkit


author: douyan<douyan@kylinos.cn> 4.10.3.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch ukui-file-metadata-4.10.3.1-kylin-change-lib-to-lib64.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.3.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.3.1-ok4k0.3


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.1-1.p05
changelog:
  - Type: update
  - ID  : [TASK#637941]
  - SUG : NA
  - DESC: 优化ukui-file-metadata对文件头参数的安全校验，增强ukui-file-metadata数据处理能力


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch6: ukui-greeter-4.10.0.0-kylin-remove-power-Button.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#294017]
  - SUG : NA
  - DESC: Patch7: ukui-greeter-4.10.0.0-kylin-fix-the-font-too-large.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-greeter-4.10.0.0-ok5.1k0.7
          upstream commtid:ba4854458f270994721d1348c774b8b41d2f8b0f


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#334467] [BUG#292059]
  - SUG : NA
  - DESC: fix greeterwindow and loginwindow translate bugs


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add ukui-greeter-4.10.0.0-fix-sonarqube-security-hotspots.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: delete file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: cves
  - ID  : KVE-2026-05100 KVE-2026-05102
  - SUG : NA
  - DESC: fix ukui-greeter KVE-2026-05100 and KVE-2026-05102


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: ukui-input-gather-4.1.0.0-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#289223]
  - SUG : NA
  - DESC: add ukui-input-gather-4.1.0.0-fix-coredump-about-ukuiinputgatherclient.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop ukui-interface-4.10.0.0-ok1k0.4


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok1k0.10
          upstream commitid: 1a9e6bbc2ee562d89d4cebfcc5fb2244b3e35513


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#504657]
  - SUG : NA
  - DESC: add Patch03:ukui-media-4.10.0.0-kylin-add-check-for-display.patch
          添加DISPLAY检测，修复KVE-2026-0320


author: huayadong <huayadong@kylinos.cn> - 4.10.2.12-1.p05
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: add patch4:ukui-menu-4.10.2.12-chnage-uninstall-rule.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.2.12-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#344202]
  - SUG: NA
  - DESC: add patch5:fix-chinese-translation-problem.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#347730] [BUG#347734]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-add-3adm.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#353097]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-update-3adm-appinfo.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#366591]
  - SUG : NA
  - DESC: add Patch08:ukui-menu-4.10.2.12-kylin-remove-kylin-process-manager.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#429765]
  - SUG : NA
  - DESC: remove argv --help-all
  	add Patch09:ukui-menu-4.10.2.12-kylin-remove-argv-help-all.patch
  	删除无用参数 --help-all


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p11
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch10:ukui-menu-4.10.2.12-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: houhongxun <houhongxun@kylinos.cn> - 4.10.2.12-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#494961]
  - SUG : NA
  - DESC: don't show firewall-config menu for unprivileged users


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#499903][BUG#499883]
  - SUG : NA
  - DESC: add Patch1001: ukui-menu-4.10.2.12-kylin-update-to-4.10.2.12-ok0.2k0.12.patch
          修复全屏模式切换到最后一个功能名，高亮显示错误问题.
          修复全屏模式下字母排序模式从A切换到Z，开始菜单卡死.


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p14
changelog:
  - Type: update
  - ID  : [TASK#636669]
  - SUG : NA
  - DESC: 移除ReloadSecurityConfig()废弃方法，减少dbus接口暴露，保障ukui-menu功能正常


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-notification-4.10.1.5-ok0.1k0.6
          upstream commtid:c54c60447b72e60f90fb0e80cfc9ceacc8d6177e


author: mengchaoming<mengchaoming@kylinos.cn> - 4.10.1.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#334491]
  - SUG : NA
  - DESC: add Patch2:ukui-notification-4.10.1.5-add-zh_HK.ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-fix-ukui-notification-server-no-quit-when-ukui-session-quit.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-kylin-fix-ukui-notification-server-coredump-SIGABRT-when-logout.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#499247]
  - SUG : NA
  - DESC: disable search switch when ukui-search not installed


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [BUG#294119]
  - SUG : NA
  - DESC: add ukui-power-manager-4.10.0.0-kylin-remove-ukui-control-center-Suspend-and-Hibernate-and-wakeUpDisplay-no-passwd.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: ukui-power-manager-kylin-4.10.0.0-hide-shutdown.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-power-manager-4.10.0.0-ok1.34k2.0
          upstream commtid:cc25d6a66a8e679daef437d0f5d243116752e994


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#636667]
  - SUG : NA
  - DESC: 增强ukui-power-manager功能，添加参数校验，保障ukui-power-manager功能正常


author: houhongxun <houhongxun@kylinos.cn> - 4.10.8.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.8.1-ok0k0.9


author: peijiankang<peijiankang@kylinos.cn> 4.10.8.1-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-quick-4.10.8.1-kylin-fix-runcommand-invalid.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.8.1-1.p03
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add  Patch2 Patch3 Patch4 Patch5 Patch6 Patch7 Patch8 Patch9:安全增强


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p24
changelog:
  - Type: bugfix
  - ID  : [BUG#498405]
  - SUG : NA
  - DESC: Patch25: ukui-screensaver-4.10.0.0-add-dbus-signal-lock-for-session-tools.patch
          修复从电源管理器锁定屏幕没有lock dbus信号发出问题


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p29
changelog:
  - Type: cves
  - ID  : KVE-2026-0622
  - SUG : NA
  - DESC: 修复KVE-2026-0622，优化socketname单例逻辑，增强ukui-screensaver单例功能


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-add-application-with-DISPLAY.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#349212]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-ukui-menu-empty.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.13.0-1.p05
changelog:
  - Type:update
  - ID:[Task#482359]
  - SUG:NA
  - DESC: add ukui-search-4.10.13.0-kylin-remove-sensitive.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223][BUG#369841]
  - SUG : NA
  - DESC: update ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch
          add ukui-search-4.10.13.0-kylin-ukui-search-app-data-service-sql-exec-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370275]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-GetDesktopFileByPid-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.13.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [TASK#601833]
  - SUG : NA
  - DESC: Patch10: ukui-search-4.10.13.0-kylin-correction-of-ambiguous-description.patch
          修复字典文件的错误字符


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: huayadong <huayadong@kylinos.cn> - 4.0.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add Patch09:威胁分析整改:防止动态库劫持
          add Patch10:安全增强
          add Patch11:D-bus安全增强


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#291269]
  - SUG : NA
  - DESC: ukui-settings-daemon-4.10.0.0-fix-targetBrightness-to-100.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: add Patch5:ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.18k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch
          add ukui-settings-daemon-4.10.0.0-add-copyright-info.cpp


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#379967]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch
          add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: update
  - ID  : [TASK#635561]
  - SUG : NA
  - DESC: add Patch13:ukui-settings-daemon-4.10.0.0-1-kylin-Remove-the-write-permissions-of-files-and-folders.patch
          安全性提升


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: update
  - ID  : [TASK#637935]
  - SUG : NA
  - DESC: 新增基于inode的白名单校验机制，增强ukui-settings-daemon D-Bus访问控制。


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix & cves
  - ID  : KVE-2026-0777
  - SUG : NA
  - DESC: add Patch16:安全增强
          add Patch17:fix KVE-2026-0777


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: cves
  - ID  : KVE-2026-07257 KVE-2026-07256 KVE-2026-07268 KVE-2026-07295
  - SUG : NA
  - DESC: add Patch18 Patch19:fix KVE


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.5-ok1.1k0.7


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-sni-4.10.0-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-sni-4.10.0-fix-ukui-sni-watcher-no-quit-when-ukui-session-quit.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.5-1.p06
changelog:
  - Type: cves
  - ID  : KVE-2026-0622
  - SUG : NA
  - DESC: 修复KVE-2026-0622，优化socketname单例逻辑，增强ukui-sni单例功能


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.5-1.p07
changelog:
  - Type: cves & bugfix
  - ID  : KVE-2026-07180 KVE-2026-07266
  - SUG : NA
  - DESC: fix KVE-2026-07180 KVE-2026-07266
          ukui-sni组件功能增强


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-system-monitor-4.10.0.0-ok5.20k0.3
          upstream commtid:0638cd951b12292ef9338a4de83a846366fba69f


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: houzhiwei <houzhiwei@kylinos.cn> - 1.17.1-16.p01
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.39.1-35.p01
changelog:
  - Type: update
  - ID: [TASK#604531]
  - SUG:  NA
  - DESC: 1.fix check error
         2.author:  litenglong <litenglong@kylinos.cn>
           support enable-raw
         3.sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
         4.sync patch 9400-set-locale-for-supporting-utf-8.patch
         5.fix_loongarch_test_error.patch
         6.sync patch 9401-libblkid-xfs-external-log-check-for-ceph_bluestore.patch


author: zhangtao <zhangtao@kylinos.cn> - 2.39.1-35.p02
changelog:
  - Type:cves
  - ID:CVE-2026-27456
  - SUG:NA
  - DESC: backport to fix symlink traversal vulnerability in loop device setup


author: songliyang <songliyang@kylinos.cn> - 2:9.0.2092-22.p01
changelog:
  - Type:update
  - ID:[task#512917]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-32.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: update to 9.0.2092-33 and fix CVE-2026-42307 CVE-2026-44656 CVE-2026-45130


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p02
changelog:
  - Type:update
  - ID:[#bug617491]
  - SUG:NA
  - DESC: fix CVE-2026-43961 CVE-2026-46483 CVE-2026-47162 CVE-2026-47167 CVE-2026-52858 CVE-2026-52859 CVE-2026-52860


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p04
changelog:
  - Type:CVE
  - ID:[#bug626207]
  - SUG:NA
  - DESC: fix CVE-2026-57452 CVE-2026-57455 CVE-2026-57456 CVE-2026-59856 CVE-2026-59857 CVE-2026-59858


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0.2092-33.p05
changelog:
  - Type:update
  - ID:[task#655139]
  - SUG:NA
  - DESC: Productized modifications for vim help information.


author: chenyanpan <chenyanpan@xfusion.com> - 1.21.4-4
changelog:
  - Fix CVE-2026-15146
  - Fix CVE-2026-58469
  - Fix CVE-2026-58470
  - Fix CVE-2026-58471
  - Fix CVE-2026-58472


author: liuhuan01 <liuhuan01@kylinos.cn> - 6.6.0-7.p02
changelog:
  - Type: BugFix
  - ID: [TASK#604469]
  - SUG: NA
  - DESC: mkfs: fix the issue of maxpct set to 0 not taking effect


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p08
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083, CVE-2024-9632


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p11
changelog:
  - Type: CVE
  - ID:   [BUG#605117]
  - SUG:  NA
  - DESC: fix CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261


author: HouHongxun <houhongxun@kylinos.cn> - 4.0.12kord1p18
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation-for-desktop-file.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}19
changelog:
  - Type: update
  - ID: [TASK#185224]
  - SUG: NA
  - DESC: add 0001-add-zh_HK-translate.patch 0001-add-zh_HK-qss-file.patch
          0001_backup_store_hk_png.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}21
changelog:
  - Type: buffix
  - ID: [BUG#215689]
  - SUG: NA
  - DESC: add 0001_add_ok_images.patch 0001-add-ok_btn-hk-translate.patch


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p22
changelog:
  - Type: bugfix
  - ID:   [BUG#469873]
  - SUG:  NA
  - DESC: add patch20: yhkylin-backup-tools-4.0.12-kylin-backup-management-add-selectable.patch
  	备份管理添加可选中.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p23
changelog:
  - Type: bugfix
  - ID:   [BUG#473555][BUG#473915]
  - SUG:  NA
  - DESC: add patch21: yhkylin-backup-tools-4.0.12-kylin-fix-an-empty-backup-size.patch
          add Patch22: yhkylin-backup-tools-4.0.12-kylin-update-UI.patch
          add Patch23: yhkylin-backup-tools-4.0.12-kylin-fix-log-file-could-not-be-created.patch
          修复备份管理中备份大小字段为零.
          更改UI使用窗口管理器接管所有窗口.
          修复日志文件/var/log/backup.txt无法创建.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p24
changelog:
  - Type: bugfix
  - ID:   [BUG#474743]
  - SUG:  NA
  - DESC: add patch24: yhkylin-backup-tools-4.0.12-kylin-update-translate.patch
          更新翻译文件.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p25
changelog:
  - Type: bugfix
  - ID:   [TASK#583377]
  - SUG:  NA
  - DESC: add Patch25:yhkylin-backup-tools-4.0.12-kylin-fix-command-line-functionality-unavailable.patch
          add Patch26:yhkylin-backup-tools-4.0.12-kylin-update-Copyright.patch
          修复命令行备份还原功能不可用问题.


author: huayadong <huayadong@kylinos.cn> - 4.0.12-1.0.9kord1.p30
changelog:
  - Type: update
  - ID  : [TASK#636663]
  - SUG : NA
  - DESC: Patch28:yhkylin-backup-tools-4.0.12-kylin-change-policy-and-conf.patch
          加固dbus服务接口权限限制


author: huayadong <huayadong@kylinos.cn> - 4.0.12-1.0.9kord1.p31
changelog:
  - Type: bugfix
  - ID  : [BUG#588817][BUG#530051]
  - SUG : NA
  - DESC: Patch29:yhkylin-backup-tools-4.0.12-kylin-optimizing-process-wait-logic.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.21-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#223306]
  - SUG:  NA
  - DESC: add 0002-fix-blank-of-youker-assistant-3.1.4.21.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.21-1.p02
changelog:
  - Type: update
  - ID:   [TASK#335765]
  - SUG:  NA
  - DESC: add youker-assistant-3.1.4.21-add-check-lshw-installinfo.patch
          remove Requires: lshw


author: huayadong <huayadong@kylinos.cn> - 3.1.4.21-1.p04
changelog:
  - Type: update
  - ID:   [TASK#591331]
  - SUG:  NA
  - DESC: add Patch05: youker-assistant-3.1.4.21-kylin-remove-useless-comments.patch
          删除无用的Python代码


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: zengjianqi <zengjianqi@kylinos.cn> - 1.5.5-2.p01
changelog:
  - Type: update
  - ID: [TASK#424795]
  - SUG: NA
  - DESC: Build with ZSTD_LIB_DEPRECATED?=1.
          Add zstd-kycompat subpackage.
          Supply follow symbols to solve the ABI compatibility issue:
            ZSTD_getSequences
          Update kywrapper KYLIN_SUPPLY_LIB.


