# changelog

author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: yuboyun <yuboyun@huawei.com> - 1.26.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: jiazhenyuan <jiazhenyuan@uniontech.com> - 1.26.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix dbus-daemon error when systemd-resolved service was not enabled


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync from upstream, fix wrongly considering ipv6.may-fail for ipv4


author: zengwefeng <zwfeng@huawei.com> - 1.26.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix crash in nm_wildcard_match_check
         fix leak of NMOvsdbPrivate db_uuid


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnm: fix leak and return failures from nm_client_load_connections()


author: wangshuo <wangshuo@kylinos.cn> - 1.2.15-39.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Modify source1:SDL_config.h, add loongarch64 support


author: wangshuo <wangshuo@kylinos.cn> - 2.0.8-10.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Modify Source1: SDL_config.h, add loongarch64 support


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p05
changelog:
  - Type:NA
  - ID: Task#74655
  - SUG:NA
  - DESC:recover disk encrypt 
  - Add Patches:anaconda-33.19-kylin-0017-recover-disk-encrypt.patch


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p06
changelog:
  - Type:NA
  - ID: Task#81826
  - SUG:NA
  - DESC: add loongarch suppert 
  - Add Patches: anaconda-33.19-kylin-0018-add-loongarch64-support.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p07
changelog:
  - Type:bugfix
  - ID:Bug#9410
  - SUG:display the unknown page, maintain alignment with upstream communities
  - DESC:display the unknown page in manual partition ui
         and fix the bug that the user cannot quit from manual partition ui 
         when the partition is not be created


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p09
changelog:
  - Type:bugfix
  - ID:Bug#121227
  - SUG:NA
  - DESC:Remove the iso9660 label media from the unknown group, 
         and solve the problem that EFI partitions cannot be deleted during U disk installation


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p10
changelog:
  - Type:NA
  - ID: Task#91852
  - SUG:NA
  - DESC: add codes for pks group 
  - Add Patches: anaconda-33.19-kylin-0022-add-codes-for-pks-group.patch


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p11
changelog:
  - Type: bugfix
  - ID: BUG#126426 
  - SUG: NA
  - DESC: fix the bug for pks installation 
  - Add Patches: anaconda-33.19-kylin-0023-fix-pks-installation.patch


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p14
changelog:
  - Type: NA 
  - ID: TASK#106954
  - SUG: NA
  - DESC: disable the kernel audit 
  - Add Patches: anaconda-33.19-kylin-0026-disable-audit.patch


author: huangwenhua <huangwenhua@kylinos.cn> - 9100h-39.p01
changelog:
  - Type: update
  - ID: [Task#165758]
  - SUG: NA
  - DESC: revise the expression of sensitive words
  	fix regenerate dict.args.in


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: yixiangzhike <yixiangzhike007@163.com> - 3.0-4
changelog:
  - backport some patches
     Add missing call to free_interpretation_list
     fix 2 more issues found by fuzzing
     Fix an auparse memory leak caused in recent glibc
     Fix double free with corrupted logs
     Turn libaucommon into a libtool convenience library
     Fix the closing timing of audit_fd
     Fix some string length issues
     Move the free_config to success path
     Check for fuzzer induced invalid value
     error out if log is mangled
     Dont run off the end with corrupt logs
     Another hardening measure for corrupted logs
     Fix busy loop in normalizer when logs are corrupt
     Better fix for busy loop in normalizer when logs are corrupt
     flush uid gid caches when user group added deleted modified
     In auditd check if log_file is valid before closing handle
     Check ctime return code
     When interpreting if val is NULL return an empty string
     auditd.service Restart on failure ignoring some exit
     In auditd close the logging file descriptor when logging is suspended


author: wanghao <wanghao2@kylinos.cn> - 3.0-5.se.09
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec补丁
  -         add patch: audit-3.0.20200318-kysec.patch
  -       audit服务可以手动停止
  -         add patch: audit-3.0-systemctl-faied.patch
  -       修改auditd-config.c文件
  -         add patch: audit-3.0-modify-auditd-config.patch
  -       添加mips支持
  -         add patch: audit-3.0-adopt-mips.patch
  -       改进mips相关little_endian默认值设置为1
  -         add patch: audit-3.0-modify-mips.patch
  -       删除littlt-endian的判断
  -         add patch: audit-3.0-delete-littlt-endian.patch
  -       添加loongarch64相关支持
  -         add patch: audit-3.0-add-loongarch64.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-6.se.01
changelog:
  - Type: bugfix
  - ID:[Bug#113316]
  - SUG:NA
  - DESC: 将audit.log文件权限改为600，pidfild文件权限改为644
  -         add patch: audit-3.0-modify-logfile-and-pidfile-permissions.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-6.se.02
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: audit-3.0-fix-modify-or-del-audit-log-bug.patch


author: sunjin <sunjin@kylinos.cn> - 3.0-6.se.03
changelog:
  - Type:bugfix
  - ID:无
  - SUG:NA
  - DESC:
  -      解决ausyscall --dump看不到系统符号问题
  -      添加补丁audit-3.0-fix-syscall-error.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 1.12.0-1
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:Reduce the amount of memory needed to evaluate complex path expressions
    against large files,Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556),update gnulib to 91584ed6.


author: shenyangyang<shenyangyang4@huawei.com> - 5.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: licihua<licihua@huawei.com> - 5.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix quoted null string removal when using shell word expansion pattern operators


author: Xiao Zai<xiaozai@kylinos.cn> - 5.0-17.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: sync the spec change from  5.0-14.se.01.p01 to fix the bug#68292 for v10 sp1


author: wanghao <wanghao2@kylinos.cn> - 5.0-17.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec执行检查
  -         add patch: bash-5.0-check-kysec.patch
  -       优化source提示翻译
  -       修复source可以对白名单标记为unknown的脚本文件进行调用的问题
  -         add patch: bash-5.0-fix-source-exe-sh.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0-17.p01.se.02
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 将链接库的方式改为使用dlopen打开
  -         add patch:  bash-5.0-use-dlopen-libkysec.patch


author: Shi Jingying <shijingying@kylinos.cn> - 5.0-17.p02.se.02
changelog:
  - Type: update
  - ID: [Task#102285]
  - SUG: NA
  - DESC: recover the `history -c` operation of the non root user
  -        add patch1004 bash-5.0-recover-non-root-user-to-clear-history.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0-17.p01.se.03
changelog:
  - Type:update
  - ID:[Task#105711]
  - SUG:NA
  - DESC: 在kysec_execl_check之前添加kysec_status的状态检查，如果关闭,则不调用libkysec库
  -         add patch: bash-5.0-add-kysec-status-check.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0-17.p01.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#144176]
  - SUG:NA
  - DESC: 修复source可以执行标记为unknown的脚本文件
  -         add patch: bash-5.0-fix-source-execute-script-bug.patch


author: Xiang Gao <gaoxiang@kylinos.cn> - 0.15.0-0.p03
changelog:
  - Type:bug fix
  - ID:124741
  - SUB:NA
  - DESC: fix PT_REGS_IP assigned wrong paremeter in 
          0001-kylin-bcc-add-loongarch-support.patch


author: Xiang Gao <gaoxiang@kylinos.cn> - 0.15.0-0.p04
changelog:
  - Type:bug fix
  - ID:124756
  - SUB:NA
  - DESC: fix can not find libc.so by using initial soname in attach_uprobes.


author: yuanxin <yuanxin21@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch
  - SUG:NA
  - DESC:fix CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch


author: hanzhijun <hanzhijun1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the difference at the macro definition using clock gettime instead of gettimeofda


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: liangchangwei <liangchangwei@kylinos.cn> - 1.73.0-6-p01
changelog:
  - Type:compile
  - ID: [TASK#74801]
  - SUG:NA
  - DESC: Delete the content that needs to be copied and packaged *.so.1.72.* in the boost package spec file


author: huangmincai <huangmincai@kylinos.cn> - 3.1.3-1.se.04
changelog:
  - Type:bugfix
  - ID:[BUG# 122967,111929,122620]
  - SUG:NA
  - DESC:
  - 		1.修复因安全加固导致保护箱授权框认证失败问题;
  		2.更改快捷键,由ctrl改为alt;
  		3.去除冗余的提示信息.


author: huangmincai <huangmincai@kylinos.cn> - 3.1.3-1.se.05
changelog:
  - Type:bugfix
  - ID:[BUG# 116890, 122619]
  - SUG:NA
  - DESC:
  - 		1.修复首次创建保护箱及导入密钥时界面翻译错误问题;
  - 		2.修复锁定保护箱时不能关闭窗口问题;


author: zhaoyun <zhaoyun@kylinos.cn> - 4.0.3-1.se.01
changelog:
  - Type:update
  - ID:[Task#76232]
  - SUG:NA
  - DESC: 
  - 		1.初始化提交的包安装有问题，修改配置重新提交
  - 		2.sp3重新更新包版本，之前版本是根据桌面的版本
  - 		3.增加debuginfo相关的两个包
  - 		4.增加安全编译选项


author: huangmincai <huangmincai@kylinos.cn> - 4.0.3-1.se.02
changelog:
  - Type:bugfix
  - ID:[Bug#122627, 122621, 117189, 116998, 117040]
  - SUG:NA
  - DESC: 
  - 		1.修复因通过更改密钥后，无法打开保护箱问题;
  - 		2.屏蔽使用终端解锁保护箱时，冗余信息输出;
  - 		3.修复使用终端新建保护箱时，交互信息未翻译问题.


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-43.0.v2207
changelog:
  - KYLIN: selftests/net: enable lo.accept_local in psock_snd (luyun) [task:84718]
  - selftests/net: improve descriptions for XFAIL cases in psock_snd.sh (Po-Hsu Lin) [task:84718]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn) [bug:120181] {CVE-2022-30594}
  - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) [bug:120187] {CVE-2022-29581}
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou) [bug:120196] {CVE-2022-1734}
  - nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)
  - KYLIN: 3rd/sietium: sietium driver update (yangdeyi)
  - pwm:loongson: Perfect pwm-ls driver (lvyanbing)
  - ls2k1000: pwm: build as module support (suijingfeng)
  - pwm:loongson: fix up variable overflow (Yangyinglu)
  - Loongson2K: pwm: Pass PWM controller clock-frequency through device tree. (Ming Wang)
  - LoongArch: Set CONFIG_MEGARAID_SAS to m by default (Tianli Xiong)
  - gmac:The initial value of rx_watchdog is reduced to 5 (zhangtianyang)
  - LoongArch: LSVZ: fix pmu function (zhaotianrui)
  - LoongArch: module: Add plt section support (liweihao)
  - Revert "LoongArch: LSVZ: handle irq directly in kvm exception context" (王建兴)
  - LoongArch: Add vbios passed through ACPI table (liuyun)
  - LoongArch: Add gop support (liuyun)
  - LoongArch: Fix the usage of the suspend address (yangqiming)
  - Loongarch: fixup gcsr (Wang liupu)
  - loongarch: configs: make r8111G nic use r8168 driver use by default (Yinbo Zhu)
  - LoongArch: kprobe: Rewrite kprobe_handler implementation (Qing Zhang)
  - LoongArch: Remove relocations of REL type (Youling Tang)
  - objtool: LoongArch: Remove unused macro definitions (Youling Tang)
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port (Jianmin Lv)
  - KYLIN: config: Supports KAE engine drivers (pengcan) [bug:119799]
  - selftests/seccomp: allow clock_nanosleep instead of nanosleep (Thadeu Lima de Souza Cascardo) [task:69904]
  - KYLIN: arm64: use correct format characters (huhai)
  - KYLIN: Revert "optee: add ACPI support for Phytium" (huanfuxi) [task:84829]
  - net: phy: improve phy_init_hw (Heiner Kallweit) [bug:118542]
  - KYLIN: found-commit-all-deps: tips max_level correct (Jackie Liu)
  - KYLIN: config: enable kfence for x86 and arm64 (Jackie Liu) [task:68770]
  - KYLIN: mm/kfence: print disabling or re-enabling message (Jackie Liu)
  - kfence: allow use of a deferrable timer (Marco Elver) [task:68770]
  - kfence: test: try to avoid test_gfpzero trigger rcu_stall (Peng Liu) [task:68770]
  - kunit: make kunit_test_timeout compatible with comment (Peng Liu) [task:68770]
  - kunit: fix UAF when run kfence test case test_gfpzero (Peng Liu) [task:68770]
  - kfence: alloc kfence_pool after system startup (Tianchen Ding) [task:68770]
  - kfence: allow re-enabling KFENCE after system startup (Tianchen Ding) [task:68770]
  - mm/kfence: remove unnecessary CONFIG_KFENCE option (tangmeng) [task:68770]
  - net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet) [task:68770]
  - net: add skb_set_end_offset() helper (Eric Dumazet) [task:68770]
  - kfence: make test case compatible with run time set sample interval (Peng Liu) [task:68770]
  - kfence: fix memory leak when cat kfence objects (Baokun Li) [task:68770]
  - kfence: default to dynamic branch instead of static keys mode (Marco Elver) [task:68770]
  - kfence: always use static branches to guard kfence_alloc() (Marco Elver) [task:68770]
  - kfence: shorten critical sections of alloc/free (Marco Elver) [task:68770]
  - kfence: add note to documentation about skipping covered allocations (Marco Elver) [task:68770]
  - kfence: limit currently covered allocations when pool nearly full (Marco Elver) [task:68770]
  - kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver) [task:68770]
  - kfence: count unexpectedly skipped allocations (Marco Elver) [task:68770]
  - net: add and use skb_unclone_keeptruesize() helper (Eric Dumazet) [task:68770]
  - kfence: test: fail fast if disabled at boot (Marco Elver) [task:68770]
  - kfence: show cpu and timestamp in alloc/free info (Marco Elver) [task:68770]
  - kfence: fix is_kfence_address() for addresses below KFENCE_POOL_SIZE (Marco Elver) [task:68770]
  - kfence, x86: only define helpers if !MODULE (Marco Elver) [task:68770]
  - kfence: skip all GFP_ZONEMASK allocations (Alexander Potapenko) [task:68770]
  - kfence: move the size check to the beginning of __kfence_alloc() (Alexander Potapenko) [task:68770]
  - kfence: defer kfence_test_init to ensure that kunit debugfs is created (Weizhao Ouyang) [task:68770]
  - kfence: unconditionally use unbound work queue (Marco Elver) [task:68770]
  - kfence: use TASK_IDLE when awaiting allocation (Marco Elver) [task:68770]
  - kfence: use power-efficient work queue to run delayed work (Marco Elver) [task:68770]
  - kfence: maximize allocation wait timeout duration (Marco Elver) [task:68770]
  - kfence: await for allocation using wait_event (Marco Elver) [task:68770]
  - kfence: zero guard page after out-of-bounds access (Marco Elver) [task:68770]
  - kfence, x86: fix preemptible warning on KPTI-enabled systems (Marco Elver) [task:68770]
  - kfence: make compatible with kmemleak (Marco Elver) [task:68770]
  - kfence, slab: fix cache_alloc_debugcheck_after() for bulk allocations (Marco Elver) [task:68770]
  - kfence: add test suite (Marco Elver) [task:68770]
  - kfence, Documentation: add KFENCE documentation (Marco Elver) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLUB (Alexander Potapenko) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLAB (Alexander Potapenko) [task:68770]
  - kfence: use pt_regs to generate stack trace on faults (Marco Elver) [task:68770]
  - arm64, kfence: enable KFENCE for ARM64 (Marco Elver) [task:68770]
  - x86, kfence: enable KFENCE for x86 (Alexander Potapenko) [task:68770]
  - mm: add Kernel Electric-Fence infrastructure (Alexander Potapenko) [task:68770]
  - kunit: Don't fail test suites if one of them is empty (Andy Shevchenko)
  - kunit: remove timeout dependence on sysctl_hung_task_timeout_seconds (Alan Maguire) [task:68770]
  - kunit: allow kunit tests to be loaded as a module (Alan Maguire)
  - kunit: hide unexported try-catch interface in try-catch-impl.h (Alan Maguire)
  - kunit: move string-stream.h to lib/kunit (Alan Maguire)
  - kunit: fix failure to build without printk (Brendan Higgins)
  - MAINTAINERS: add entry for KUnit the unit testing framework (Brendan Higgins)
  - Documentation: kunit: add documentation for KUnit (Brendan Higgins)
  - kunit: defconfig: add defconfigs for building KUnit tests (Brendan Higgins)
  - kunit: tool: add Python wrappers for running KUnit tests (Felix Guo)
  - kunit: test: add tests for KUnit managed resources (Avinash Kondareddy)
  - kunit: test: add the concept of assertions (Brendan Higgins)
  - kunit: test: add tests for kunit test abort (Brendan Higgins)
  - kunit: test: add support for test abort (Brendan Higgins)
  - objtool: add kunit_try_catch_throw to the noreturn list (Brendan Higgins)
  - kunit: test: add initial tests (Brendan Higgins)
  - lib: enable building KUnit in lib/ (Brendan Higgins)
  - kunit: test: add the concept of expectations (Brendan Higgins)
  - kunit: test: add assertion printing library (Brendan Higgins)
  - kunit: test: add string_stream a std::stream like string builder (Brendan Higgins)
  - kunit: test: add test resource management API (Brendan Higgins)
  - kunit: test: add KUnit test runner core (Brendan Higgins)
  - include/linux/slab.h: fix sparse warning in kmalloc_type() (Vlastimil Babka)
  - string.h: Add str_has_prefix() helper function (Steven Rostedt (VMware))
  - mm/vmalloc.c: improve vfree() kerneldoc (Andrey Ryabinin)
  - mm, slab: shorten kmalloc cache names for large sizes (Vlastimil Babka)
  - mm, proc: add KReclaimable to /proc/meminfo (Vlastimil Babka)
  - mm: rename and change semantics of nr_indirectly_reclaimable_bytes (Vlastimil Babka)
  - dcache: allocate external names from reclaimable kmalloc caches (Vlastimil Babka)
  - mm, slab/slub: introduce kmalloc-reclaimable caches (Vlastimil Babka)
  - mm, slab: combine kmalloc_caches and kmalloc_dma_caches (Vlastimil Babka)
  - mm/slub.c: switch to bitmap_zalloc() (Andy Shevchenko)
  - selftests: gpio: restructure Makefile (Fathi Boudra) [task:83556]
  - KYLIN: ACPI: Limit max_cstate to 1 on Hygon platforms (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: use IDLE_POLL to disable c-state and idle routine" (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: Can not use IDLE_POLL in hyper" (huhai)
  - KYLIN: config: add support for test_bpf (xiaolinkui) [task:84711]
  - selftests/tls: Add MSG_WAITALL in recv() syscall (Vakul Garg) [task:84719]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-44.0.v2207
changelog:
  - selftest: txtimestamp: fix net ns entry logic (Paolo Pisati) [task:88343]
  - selftests: timestamping: Fix SIOCGSTAMP undeclared build failure (Shuah Khan) [task:88343]
  - selftests: fix timestamping Makefile (Deepa Dinamani) [task:88343]
  - selftests: add missing include unistd (Deepa Dinamani) [task:88343]
  - selftests/txtimestamp: Fix an equals vs assign bug (Dan Carpenter) [task:88343]
  - selftests: add txtimestamp kselftest (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with ipv6 dgram + raw and pf_packet (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with cmsg support (Willem de Bruijn) [task:88343]
  - KYLIN: fs/pipe: Solve the problem of LTP smoketest failure (yijiangshan) [bug:120350]
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)
  - crypto: api - Check spawn->alg under lock in crypto_drop_spawn (Herbert Xu)
  - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [bug:121496] {CVE-2022-1729}
  - floppy: disable FDRAWCMD by default (Willy Tarreau) [bug:121514] {CVE-2022-1836}
  - KYLIN: configs: disable ser_gigaset & gigaset (Jackie Liu)
  - KYLIN: security/kysec: fix code style issue (huanfuxi)
  - KYLIN: sync-stable: discard unwanted newlines (Jackie Liu)
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) [bug:112032] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Halil Pasic) [bug:112032] {CVE-2022-0854}
  - KYLIN: configs: disable CMA all platform default (Jackie Liu) [task:87802]
  - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie) [task:84035]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie) [task:84035]
  - scsi: iscsi: Fix endpoint reuse regression (Mike Christie) [task:84035]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie) [task:84035]
  - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie) [task:84035]
  - scsi: iscsi: Drop temp workq_name (Mike Christie) [task:84035]
  - scsi: iscsi: Use the session workqueue for recovery (Mike Christie) [task:84035]
  - scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding (Mike Christie) [task:84035]
  - scsi: iscsi: Remove iscsi_scan_finished() (Mike Christie) [task:84035]
  - scsi: iscsi: Speed up session unblocking and removal (Mike Christie) [task:84035]
  - scsi: iscsi: Fix recovery and unblocking race (Mike Christie) [task:84035]
  - scsi: iscsi: Fix set_param() handling (Mike Christie) [task:84035]
  - scsi: iscsi: Flush block work before unblock (Mike Christie) [task:84035]
  - scsi: iscsi: Fix in-kernel conn failure handling (Mike Christie) [task:84035]
  - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() (Mike Christie) [task:84035]
  - scsi: iscsi: Force immediate failure during shutdown (Mike Christie) [task:84035]
  - scsi: iscsi: Stop queueing during ep_disconnect (Mike Christie) [task:84035]
  - scsi: iscsi: Fix iSCSI cls conn state (Mike Christie) [task:84035]
  - scsi: iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [task:84035]
  - scsi: iscsi: Optimize work queue flush use (Mike Christie) [task:84035]
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu) [task:84035]
  - scsi: iscsi: Fix deadlock on recovery path during GFP_IO reclaim (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu) [task:84035]
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Perform connection failure entirely in kernel space (Bharath Ravi) [task:84035]
  - kselftest: Minimise dependency of get_size on C library interfaces (Siddhesh Poyarekar)
  - arm64: Make debug exception handlers visible from RCU (Masami Hiramatsu) [task:87978]
  - KYLIN: xfs: fix xfs shutdown filesystem by security_inode_alloc failed (Jackie Liu) [task:85662]
  - KYLIN: Revert "signal: fix kabi changes in struct task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix kabi broken in task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix UAF when free futex_exit_mutex in free_task()" (Jackie Liu)
  - KYLIN: Revert "pid: fix imbalanced calling of cgroup_threadgroup_change_begin/end()" (Jackie Liu)
  - KYLIN: Revert "pid: fix return value when copy_process() failed" (Jackie Liu)
  - KYLIN: gitmessage: drop branch name in patchs comment (Jackie Liu)
  - KYLIN: tools/test: fix arm64 rtnetlink.sh fail. (zhaochenguang) [task:84712]
  - KYLIN: selftesting: update kylinos generic defcfg (zhaochenguang) [task:84712]
  - KYLIN: Revert "bpf, tests: Add tail call test suite" (xiaolinkui) [task:84711]
  - KYLIN: Revert "bpf/tests: Fix error in tail call limit tests" (xiaolinkui) [task:84711]
  - KYLIN: x86: config: add support for test_bpf (xiaolinkui) [task:84711]
  - bpf: test_bpf: add init_net to dev for flow_dissector (Song Liu) [task:84711]
  - UBUNTU: SAUCE: selftests: net: fix "from" match test in fib_rule_tests.sh (Marcelo Henrique Cerri) [task:84716]
  - KYLIN: x86/configs: Align default configuration options based on CentOS and openEuler (leixiang) [task:64045]
  - selftests: Update fib_tests to handle missing ping6 (David Ahern)
  - fib_tests: Add tests for invalid metric on route (David Ahern) [task:84713]
  - fib_tests: Add tests for metrics on routes (David Ahern) [task:84713]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-45.0.v2207
changelog:
  - KYLIN: sync-stable: support setting level (Jackie Liu)
  - tcp: resalt the secret every 10 seconds (Eric Dumazet)
  - Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)
  - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye) [task:91469]
  - Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)
  - KYLIN: arm64: Add kernel parameter for CPU0 hotplug and remove config switch (yijiangshan) [bug:122008]
  - KYLIN: ngbe: Make use of cpumask_local_spread to improve RSS locality (xiaolinkui)
  - KYLIN: ngbe: enable cpumask for wangxun (xiaolinkui)
  - crypto: arm64/ghash-neon - bump priority to 150 (Ard Biesheuvel)
  - crypto: xts - simplify error handling in ->create() (Eric Biggers) [task:90975]
  - crypto: lrw - simplify error handling in create() (Eric Biggers) [task:90975]
  - crypto: arm64/gcm-ce - implement 4 way interleave (Ard Biesheuvel) [task:91194]
  - crypto: aes-generic - drop key expansion routine in favor of library version (Ard Biesheuvel)
  - KYLIN: crypto: zhaoxin-aes - switch to library version of key expansion routine (Jackie Liu)
  - crypto: arm64/aes-ce - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-ccm - switch to AES library (Ard Biesheuvel)
  - crypto: arm/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/ghash - switch to AES library (Ard Biesheuvel) [task:91194]
  - crypto: safexcel/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: cesa/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: padlock/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: x86/aes - drop scalar assembler implementations (Ard Biesheuvel)
  - crypto: x86/aes-ni - switch to generic for fallback and key routines (Ard Biesheuvel)
  - crypto: aes - create AES library based on the fixed time AES code (Ard Biesheuvel)
  - crypto: aes/fixed-time - align key schedule with other implementations (Ard Biesheuvel)
  - crypto: aes - rename local routines to prevent future clashes (Ard Biesheuvel)
  - crypto: arm/aes-ce - cosmetic/whitespace cleanup (Ard Biesheuvel)
  - crypto: arm64/ghash - register PMULL variants as separate algos (Ard Biesheuvel) [task:91194]
  - tcp: increase source port perturb table to 2^16 (Willy Tarreau) [bug:123678] {CVE-2022-32296}
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso) [bug:123674] {CVE-2022-1966}
  - KYLIN: loongarch/config: enable some filesystem for loongarch (wangxuewen) [bug:122374]
  - KYLIN: include: Added an arm64 macro to limit the cacheline (pengcan) [task:85182]
  - KYLIN: scripts: add a script to compile and check kabi automatically (Zhengyuan Liu)
  - KYLIN: lib/raid: check recv algo performance for test (Zhengyuan Liu) [task:90865]
  - lib/raid6: Include <asm/ppc-opcode.h> for VPERMXOR (Paul Menzel) [task:90865]
  - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel) [task:90865]
  - lib/raid6/test: fix multiple definition linking error (Dirk Müller) [task:90865]
  - lib/raid6: Use strict priority ranking for pq gen() benchmarking (Dirk Müller) [task:90865]
  - lib/raid6: skip benchmark of non-chosen xor_syndrome functions (Dirk Müller) [task:90865]
  - lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin) [task:90865]
  - lib/raid6/test: fix build on distros whose /bin/sh is not bash (Masahiro Yamada) [task:90865]
  - md/raid6: fix algorithm choice under larger PAGE_SIZE (Zhengyuan Liu) [task:90865]
  - raid6/test: fix a compilation warning (Zhengyuan Liu) [task:90865]
  - lib/raid6: fix unnecessary rebuild of vpermxor*.c (Masahiro Yamada) [task:90865]
  - lib/raid6: refactor unroll rules with pattern rules (Masahiro Yamada) [task:90865]
  - kbuild: remove redundant target cleaning on failure (Masahiro Yamada) [task:90865]
  - lib/raid6: remove duplicated CFLAGS_REMOVE_altivec8.o (Masahiro Yamada) [task:90865]
  - RAID/s390: remove invalid 'r' inline asm operand modifier (Vasily Gorbik) [task:90865]
  - lib/raid6: arm: optimize away a mask operation in NEON recovery routine (Ard Biesheuvel) [task:90865]
  - lib/raid6: use vdupq_n_u8 to avoid endianness warnings (ndesaulniers@google.com) [task:90865]
  - lib/raid6: add option to skip algo benchmarking (Daniel Verkamp) [task:90865]
  - lib/raid6: sort algos in rough performance order (Daniel Verkamp) [task:90865]
  - lib/raid6: check for assembler SSSE3 support (Daniel Verkamp) [task:90865]
  - lib/raid6: avoid __attribute_const__ redefinition (Daniel Verkamp) [task:90865]
  - lib/raid6: add missing include for raid6test (Daniel Verkamp) [task:90865]
  - Revert "md/raid6: fix algorithm choice under larger PAGE_SIZE" (Zhengyuan Liu) [task:90865]
  - crypto: algapi - make crypto_drop_spawn() a no-op on uninitialized spawns (Eric Biggers) [task:90975]
  - dm: do not use waitqueue for request-based DM (Ming Lei) [task:88844]
  - blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Ming Lei) [task:88844]
  - dm mpath: pass IO start time to path selector (Gabriel Krisman Bertazi) [task:88844]
  - dm rq: remove unused arguments from rq_completed() (Mike Snitzer) [task:88844]
  - blk-mq: change blk_mq_queue_busy() to blk_mq_queue_inflight() (Jens Axboe) [task:88844]
  - KYLIN: Revert "KYLIN: kabi: fix kabi for part->in_flight" (zhanggenjian) [task:88844]
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies) [task:84718]
  - selftests/net: remove min gso test in packet_snd (Dust Li) [task:84718]
  - net: be more gentle about silly gso requests coming from user (Eric Dumazet) [task:84718]
  - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
  - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (Wang Hai)
  - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz)
  - net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)
  - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari) [bug:122252]
  - KYLIN: Optimized unixbench tests of Kunpeng 920 (pengcan) [task:85182]
  - KYLIN: security/kysec: optimize process path getting in ppro monitor (yangzhao)
  - KYLIN: security/kysec: remove script checking in kysec_task_kill() (yangzhao) [bug:119471]
  - KYLIN: KYLIN-MAINTAINER: add kylinos maintainer map (Jackie Liu)
  - KYLIN: optee: add ACPI support for Phytium (huanfuxi) [task:84829]
  - KYLIN: sort-commit-by-upstream: fix output patch's format (Jackie Liu)
  - KYLIN: security/kysec: allow killed by itself in kysec_task_kill() (yangzhao)
  - KYLIN: Revert "KYLIN: security/kysec: fix can kill protect task" (yangzhao) [bug:119840]
  - KYLIN: security/kysec: optimize kysec module code (yangzhao) [task:83026]
  - KYLIN: security/kysec: modify inode security mutex to spinlock (yangzhao) [task:83026]
  - KYLIN: security/kysec: implementation of exectl func in bprm_check hook (yangzhao) [task:83026]
  - KYLIN: Loongarch/pci: Set default vga boot device (Zhenneng Li) [task:88294, bug:120253]
  - KYLIN: vga: move fixup_vga to common code (Zhenneng Li)
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt failed when encrypted size is 64KB. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM3 ccp. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: Only handle interrupts by completion, eliminating by empty queue. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP. (Yabin Li) [task:84397]
  - HYGON: newfeature: Crypto: ccp: Optimize the exchanging context data between crypto and driver. (Yabin Li) [task:84397]
  - KYLIN: sync-stable: add feature find fix commit (Jackie Liu)
  - KYLIN: found-commit-all-deps: Prevent circular lookup dependencies (Jackie Liu)
  - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID (Paolo Bonzini) [bug:121506] {CVE-2022-1789}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-46.0.v2207
changelog:
  - LOONGSON: drm/loongson: Resolve 7A2000 vbltest and pageflip errors (liweitao) [task:90934]
  - LOONGSON: drm/loongson: Fixed 7A1000 fbcon screen failure (liweitao) [task:90934]
  - LOONGSON: drm/loongson: loongson_fbdev_init() should called after hotplug works (Sui Jingfeng) [task:90934]
  - LOONGSON: drm/loongson: fix black screen on netboot install of loongnix (Sui Jingfeng) [task:90934]
  - bpf: Add BTF_KIND_FLOAT to uapi (Ilya Leoshkevich) [task:91016]
  - libbpf: Fix type compatibility check copy-paste error (Andrii Nakryiko) [task:91016]
  - libbpf: Implement enum value-based CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Implement type-based CO-RE relocations support (Andrii Nakryiko) [task:91016]
  - libbpf: Improve relocation ambiguity detection (Andrii Nakryiko) [task:91016]
  - libbpf: Clean up and improve CO-RE reloc logging (Andrii Nakryiko) [task:91016]
  - libbpf: Improve error logging for mismatched BTF kind cases (Andrii Nakryiko) [task:91016]
  - libbpf: Disable -Wswitch-enum compiler warning (Andrii Nakryiko) [task:91016]
  - libbpf: Ignore incompatible types with matching name during CO-RE relocation (Andrii Nakryiko) [task:91016]
  - libbpf: Fix realloc usage in bpf_core_find_cands (Andrii Nakryiko) [task:91016]
  - libbpf: Improve handling of failed CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Support CO-RE relocations for LDX/ST/STX instructions (Andrii Nakryiko) [task:91016]
  - libbpf: Support flexible arrays in CO-RE (Andrii Nakryiko)
  - KYLIN: security/kysec: remove unused variables in kysec_task_kill() (yangzhao)
  - KYLIN: security/kysec: fix bug with .viminfo is set to readonly label (yangzhao) [bug:120931]
  - xfs: Fix false positive lockdep warning with sb_internal & fs_reclaim (Waiman Long) [bug:120083]
  - xfs: rename the speculative block allocation reclaim toggle functions (Darrick J. Wong) [bug:120083]
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Haimin Zhang) [bug:112037] {CVE-2022-0494}
  - KYLIN: sync-stable: force reset author every time (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-47.0.v2207
changelog:
  - afs: Fix infinite loop found by xfstest generic/676 (David Howells)
  - sctp: use call_rcu to free endpoint (Xin Long) [bug:124648] {CVE-2022-20154}
  - mmc: block: fix read single on recovery logic (Christian Löhle) [bug:124636] {CVE-2022-20008}
  - io_uring: clean up ->files grabbing (Pavel Begunkov) [task:91386]
  - io_uring: don't rely on weak ->files references (Jens Axboe) [task:91386]
  - io_uring: enable task/files specific overflow flushing (Jens Axboe) [task:91386]
  - io_uring: return cancelation status from poll/timeout/files handlers (Jens Axboe) [task:91386]
  - io_uring: unconditionally grab req->task (Jens Axboe) [task:91386]
  - io_uring: move dropping of files into separate helper (Jens Axboe) [task:91386]
  - io_uring: allow timeout/poll/files killing to take task into account (Jens Axboe) [task:91386]
  - KYLIN: security/kysec: fix panic when 3adm opened and kysec disabled (yangzhao) [bug:124729]
  - KYLIN: security: fix soft lockup bug in security_socket_getpeersec_stream() when security closed (yangzhao) [bug:124559]
  - KYLIN: security/kysec: remove set default rule in module (huanfuxi) [task:91912, bug:124516, bug:109500]
  - KYLIN: Revert "KYLIN: fs/proc: add PKS marking into /proc/osinfo" (huanfuxi)
  - dma-direct: Force unencrypted DMA under SME for certain DMA masks (Tom Lendacky) [bug:122774]
  - dma-direct: Make DIRECT_MAPPING_ERROR viable for SWIOTLB (Robin Murphy) [bug:122774]
  - MIPS: Fix `dma_alloc_coherent' returning a non-coherent allocation (Maciej W. Rozycki) [bug:122774]
  - swiotlb: don't dip into swiotlb pool for coherent allocations (Christoph Hellwig) [bug:122774]
  - swiotlb: refactor swiotlb_map_page (Christoph Hellwig) [bug:122774]
  - swiotlb: use swiotlb_map_page in swiotlb_map_sg_attrs (Christoph Hellwig) [bug:122774]
  - swiotlb: merge swiotlb_unmap_page and unmap_single (Christoph Hellwig) [bug:122774]
  - swiotlb: remove the overflow buffer (Christoph Hellwig) [bug:122774]
  - dma-mapping: merge direct and noncoherent ops (Christoph Hellwig) [bug:122774]
  - dma-mapping: move the dma_coherent flag to struct device (Christoph Hellwig) [bug:122774]
  - KYLIN: osinfo: show working platform (Jackie Liu)
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (Eric Dumazet)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-48.0.v2207
changelog:
  - KYLIN: config: set yutai phy driver config to M. (zhaochenguang) [task:94950]
  - KYLIN: security/kysec: allow record audit log when kysec enabled (yangzhao)
  - faddr2line: Fix overlapping text section failures, the sequel (Josh Poimboeuf)
  - scripts/faddr2line: Fix overlapping text section failures (Josh Poimboeuf)
  - KYLIN: kysec: fix potential out-of-bounds access issues of name (Jackie Liu)
  - KYLIN: kysec: Use pr_debug instead of manual implementation (Jackie Liu)
  - KYLIN: kysec: Remove unnecessary zeroing (Jackie Liu)
  - KYLIN: kysec: use pr_fmt auto generate prefix (Jackie Liu)
  - KYLIN: kysec: adjust kysec disabled state of hooks (Jackie Liu)
  - KYLIN: kysec: exit the thread when kysec is closed (Jackie Liu)
  - KYLIN: osinfo: make uptime pretty for human beings (Jackie Liu)
  - x86/speculation/mmio: Print SMT warning (Josh Poimboeuf) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add another Alder Lake CPU to the Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - cpu/speculation: Add prototype for cpu_show_srbds() (Guenter Roeck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob (Sean Christopherson) [bug:125047]
  - KVM: VMX: fix crash cleanup when KVM wasn't used (Vitaly Kuznetsov) [bug:125047]
  - KVM: s390: vsie: Fix delivery of addressing exceptions (David Hildenbrand) [bug:125047]
  - KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (David Hildenbrand) [bug:125047]
  - KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support (Sean Christopherson) [bug:125047]
  - KVM: nVMX: Properly handle userspace interrupt window request (Sean Christopherson) [bug:125047]
  - KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (Sean Christopherson) [bug:125047]
  - KVM: x86: Allocate new rmap and large page tracking when moving memslot (Sean Christopherson) [bug:125047]
  - x86/cpu: Add Jasper Lake to Intel family (Zhang Rui) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Elkhart Lake to Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs (Sean Christopherson) [bug:125047]
  - KVM: VMX: Zero out *all* general purpose registers after VM-Exit (Sean Christopherson) [bug:125047]
  - KYLIN: phy:fix fiber and utp can't up at the same time (zhaochenguang) [task:69009]
  - KYLIN: crypto: add sm2 module (yushanshan) [bug:125310]
  - KYLIN: config: enable logitech wheels configuration and force feedback support (Jackie Liu) [task:94256]
  - KYLIN: kernel.spec: fix upgrade from SP1 to SP3 (Jackie Liu) [bug:124466]
  - xfs: cover the log during log quiesce (Brian Foster) [task:82242]
  - xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster) [task:82242]
  - xfs: make use of the l_targ field in struct xlog (Christoph Hellwig) [task:82242]
  - xfs: separate log cleaning from log quiesce (Brian Foster) [task:82242]
  - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [task:82242]
  - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [task:82242]
  - xfs: ratelimit unmount time per-buffer I/O error alert (Brian Foster) [task:82242]
  - KYLIN: mod-blacklist.sh: drop blacklist of nft_chain_*.ko (Jackie Liu)
  - KYLIN: backport-tools: add convert-to-lts tool (Jackie Liu)
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace (Michael Ellerman) [bug:124640] {CVE-2022-32981}
  - libbpf: Avoid false unuinitialized variable warning in bpf_core_apply_relo (Andrii Nakryiko) [task:93705]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-49.0.v2207
changelog:
  - fs: sysfs_emit: Remove PAGE_SIZE alignment check (Lucas Wei)
  - workqueue: Add RCU annotation for pwq list walk (Sebastian Andrzej Siewior)
  - xfs: fix unused log variable in xfs_log_cover() (Brian Foster)
  - netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name (Eric Dumazet) [task:95868]
  - netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup() (Qian Cai) [task:95868]
  - netfilter: nf_tables: fix infinite loop when expr is not available (Florian Westphal) [task:95868]
  - netfilter: nf_tables: autoload modules from the abort path (Pablo Neira Ayuso) [task:95868]
  - netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks (Florian Westphal) [task:95868]
  - rcu: Add support for consolidated-RCU reader checking (Joel Fernandes (Google))
  - rcu: Remove redundant debug_locks check in rcu_read_lock_sched_held() (Joel Fernandes (Google))
  - treewide: Rename rcu_dereference_raw_notrace() to _check() (Joel Fernandes (Google))
  - netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module (Pablo Neira Ayuso)
  - netfilter: nf_tables: force module load in case select_ops() returns -EAGAIN (Pablo Neira Ayuso)
  - netfilter: nf_tables: add nft_expr_type_request_module() (Pablo Neira Ayuso)
  - ftrace: Create new ftrace_internal.h header (Steven Rostedt (VMware))
  - KYLIN: sched: Improve spawn test of UnixBench (liwanwu) [bug:119995]
  - KYLIN: net: socket server performance optimization (luoqing) [bug:120014]
  - KYLIN: security/kysec: reduce repeated judgments in kysec_get_status() (yangzhao)
  - KYLIN: fs: Optimize unixbench's file copy test (pengcan) [bug:121719]
  - KYLIN: usb: Improves USB2.0 write performance for External HDD device(0x0b05:0x1932) (Hu Xiaoying) [task:89793]
  - sched/fair: Add document for burstable CFS bandwidth (Huaixin Chang) [task:94280]
  - sched/fair: Add cfs bandwidth burst statistics (Huaixin Chang) [task:94280]
  - sched/fair: Introduce the burstable CFS controller (Huaixin Chang) [task:94280]
  - sched: Defend cfs and rt bandwidth quota against overflow (Huaixin Chang) [task:94280]
  - KYLIN: add linux_headers_install.sh script to build out of tree modules (George Guo) [task:94951]
  - KYLIN: loongarch/config: support parport as module (wangxuewen) [task:95203]
  - KYLIN: io_uring: fix missing remove ITER_KVEC (Jackie Liu) [task:96351]
  - KYLIN: ft-hda: solve ft-hda losing when reboot (songxiebing) [task:93001]
  - hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu) [bug:56117]
  - io_uring: fix ignoring xa_store errors (Pavel Begunkov) [task:95530]
  - io_uring: Fix XArray usage in io_uring_add_task_file (Matthew Wilcox (Oracle)) [task:95530]
  - io_uring: don't run task work on an exiting task (Jens Axboe) [task:95530]
  - task_work: only grab task signal lock when needed (Jens Axboe) [task:95530]
  - io_uring: no need to call xa_destroy() on empty xarray (Jens Axboe) [task:96230]
  - tc-tests: test denial of 'goto chain' for exceed traffic in police.json (Davide Caratti)
  - xfs: don't reserve per-AG space for an internal log (Darrick J. Wong) [task:82242]
  - KYLIN: Revert "KYLIN: logo: Change YHKYLIN logo to KYLINSOFT." (Jackie Liu) [task:74569]
  - KYLIN: kysec: Optimize the operation of kysec under file paths (Jackie Liu)
  - KYLIN: kysec: Use static_key instead of unlikely to further optimize efficiency (Jackie Liu)
  - KYLIN: loongarch/config: Add support for two filesystems on loongarch (wangxuewen) [bug:122374]
  - xhci: Keep interrupt disabled in initialization until host is running. (Hongyu Xie) [task:95460]
  - KYLIN: kysec: Fix kysec crash due to kysec_is_disabled bug (Jackie Liu) [task:95345]
  - KYLIN: kysec: Optimize kysec_is_disabled branch prediction (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-50.0.v2207
changelog:
  - KYLIN: fix errors when run ./linux-headers-$version.sh (George Guo) [task:94951]
  - KYLIN: net: replace cpumask_equal with cpumask_subset (xiaolinkui) [task:97876]
  - KYLIN: loongarch: fix io_uring series system call exception (Enze Li) [bug:124889]
  - selftests/x86/mov_ss_trap: Fix the SYSENTER test (Andy Lutomirski)
  - KYLIN: x86: debug_defconfig: more netfilter test module (Jackie Liu)
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:94748]
  - io_uring: Convert advanced XArray uses to the normal API (Matthew Wilcox (Oracle)) [task:98126]
  - exec: Move io_uring_task_cancel after the point of no return (Eric W. Biederman) [task:97817]
  - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI (Thomas Gleixner) [task:87159]
  - clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu) [task:87159]
  - futex: Adjust absolute futex timeouts with per time namespace offset (Andrei Vagin) [task:87159]
  - arm64: vdso32: make vdso32 install conditional (Frank van der Linden) [task:87159]
  - ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd) [task:87159]
  - vdso/treewide: Add vdso_data pointer argument to __arch_get_hw_counter() (Thomas Gleixner) [task:87159]
  - timekeeping/vsyscall: Provide vdso_update_begin/end() (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow to add architecture-specific vdso data (Sven Schnelle) [task:87159]
  - arm64: enable time namespace support (Andrei Vagin) [task:87159]
  - arm64/vdso: Restrict splitting VVAR VMA (Andrei Vagin) [task:87159]
  - arm64/vdso: Handle faults on timens page (Andrei Vagin) [task:87159]
  - arm64/vdso: Add time namespace page (Andrei Vagin) [task:87159]
  - arm64/vdso: Zap vvar pages when switching to a time namespace (Andrei Vagin) [task:87159]
  - arm64/vdso: use the fault callback to map vvar pages (Andrei Vagin) [task:87159]
  - futex: Remove unused or redundant includes (André Almeida) [task:87159]
  - arm64: compat: Allow 32-bit vdso and sigpage to co-exist (Will Deacon) [task:87159]
  - mmap locking API: initial implementation as rwsem wrappers (Michel Lespinasse) [task:87159]
  - x86/vdso: Unbreak paravirt VDSO clocks (Thomas Gleixner) [task:87159]
  - lib/vdso: Provide sanity check for cycles (again) (Thomas Gleixner) [task:87159]
  - clocksource: Remove obsolete ifdef (Thomas Gleixner) [task:87159]
  - selftests/timens: handle a case when alarm clocks are not supported (Andrei Vagin) [task:87159]
  - arm64: vdso: Add --eh-frame-hdr to ldflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Add -fasynchronous-unwind-tables to cflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: use consistent 'map' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: use consistent 'abi' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: simplify arch_vdso_type ifdeffery (Mark Rutland) [task:87159]
  - arm64: vdso: remove aarch32_vdso_pages[] (Mark Rutland) [task:87159]
  - arm64: vdso: Add '-Bsymbolic' to ldflags (Vincenzo Frascino) [task:87159]
  - kbuild: fix DT binding schema rule again to avoid needless rebuilds (Masahiro Yamada) [task:87159]
  - x86/vdso/vdso2c: Convert iterators to unsigned (Dmitry Safonov) [task:87159]
  - x86/vdso/vdso2c: Correct error messages on file open (Dmitry Safonov) [task:87159]
  - vdso/datapage: Use correct clock mode name in comment (Christian Brauner) [task:87159]
  - proc, time/namespace: Show clock symbolic names in /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - arm64: vdso: don't free unallocated pages (Mark Rutland) [task:87159]
  - time/namespace: Add max_time_namespaces ucount (Dmitry Safonov) [task:87159]
  - time/namespace: Fix time_for_children symlink (Michael Kerrisk (man-pages)) [task:87159]
  - um: Fix header inclusion (Vincenzo Frascino) [task:87159]
  - lib/vdso: Enable common headers (Vincenzo Frascino) [task:87159]
  - x86/vdso: Enable x86 to use common headers (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/processor.h (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Code clean up (Vincenzo Frascino) [task:87159]
  - linux/elfnote.h: Replace elf.h with UAPI equivalent (Vincenzo Frascino) [task:87159]
  - common: Introduce processor.h (Vincenzo Frascino) [task:87159]
  - linux/ktime.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/jiffies.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time32.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/math64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/clocksource.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - x86: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - linux/limits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/bits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/const.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Fix syscall number of compat_clock_getres (Vincenzo Frascino) [task:87159]
  - selftests/timens: Remove duplicated include <time.h> (YueHaibing) [task:87159]
  - sys/sysinfo: Respect boottime inside time namespace (Cyril Hrubis) [task:87159]
  - kbuild: fix DT binding schema rule to detect command line changes (Masahiro Yamada) [task:87159]
  - clocksource/drivers/arm_arch_timer: Fix vDSO clockmode when vDSO disabled (Vincenzo Frascino) [task:87159]
  - lib/vdso: Allow architectures to provide the vdso data pointer (Christophe Leroy) [task:87159]
  - lib/vdso: Allow architectures to override the ns shift operation (Christophe Leroy) [task:87159]
  - lib/vdso: Allow fixed clock mode (Christophe Leroy) [task:87159]
  - lib/vdso: Move VCLOCK_TIMENS to vdso_clock_modes (Thomas Gleixner) [task:87159]
  - lib/vdso: Avoid highres update if clocksource is not VDSO capable (Thomas Gleixner) [task:87159]
  - lib/vdso: Cleanup clock mode storage leftovers (Thomas Gleixner) [task:87159]
  - ARM/arm64: vdso: Use common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Use generic VDSO clock mode storage (Thomas Gleixner) [task:87159]
  - clocksource: Add common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Move VDSO clocksource state tracking to callback (Thomas Gleixner) [task:87159]
  - clocksource: Cleanup struct clocksource and documentation (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow the high resolution parts to be compiled out (Thomas Gleixner) [task:87159]
  - x86/vdso: Mark the TSC clocksource path likely (Thomas Gleixner) [task:87159]
  - selftests: use LDLIBS for libraries instead of LDFLAGS (Dmitry Safonov)
  - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [task:87159]
  - MAINTAINERS: Correct path to time namespace source file (Dmitry Safonov) [task:87159]
  - MIPS: syscalls: fix indentation of the 'SYSNR' message (Alexander Lobakin) [task:87159]
  - lib/vdso: Update coarse timekeeper unconditionally (Thomas Gleixner) [task:87159]
  - lib/vdso: Make __arch_update_vdso_data() logic understandable (Thomas Gleixner) [task:87159]
  - lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - selftests/timens: Check for right timens offsets after fork and exec (Andrei Vagin) [task:87159]
  - selftests/timens: Add a simple perf test for clock_gettime() (Andrei Vagin) [task:87159]
  - selftests/timens: Add timer offsets test (Andrei Vagin) [task:87159]
  - selftests/timens: Add procfs selftest (Dmitry Safonov) [task:87159]
  - selftests/timens: Add a test for clock_nanosleep() (Andrei Vagin) [task:87159]
  - selftests/timens: Add a test for timerfd (Andrei Vagin) [task:87159]
  - selftests/timens: Add Time Namespace test for supported clocks (Dmitry Safonov) [task:87159]
  - fs/proc: Introduce /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - x86/vdso: Zap vvar pages when switching to a time namespace (Dmitry Safonov) [task:87159]
  - x86/vdso: On timens page fault prefault also VVAR page (Dmitry Safonov) [task:87159]
  - x86/vdso: Handle faults on timens page (Dmitry Safonov) [task:87159]
  - time: Allocate per-timens vvar page (Dmitry Safonov) [task:87159]
  - x86/vdso: Add time napespace page (Dmitry Safonov) [task:87159]
  - x86/vdso: Provide vdso_data offset on vvar_page (Dmitry Safonov) [task:87159]
  - lib/vdso: Prepare for time namespace support (Thomas Gleixner) [task:87159]
  - x86/vdso: Restrict splitting VVAR VMA (Dmitry Safonov) [task:87159]
  - fs/proc: Respect boottime inside time namespace for /proc/uptime (Dmitry Safonov) [task:87159]
  - posix-timers: Make clock_nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - hrtimers: Prepare hrtimer_nanosleep() for time namespaces (Andrei Vagin) [task:87159]
  - alarmtimer: Make nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - posix-timers: Make timer_settime() time namespace aware (Andrei Vagin) [task:87159]
  - timerfd: Make timerfd_settime() time namespace aware (Andrei Vagin) [task:87159]
  - time: Add do_timens_ktime_to_host() helper (Andrei Vagin) [task:87159]
  - posix-clocks: Wire up clock_gettime() with timens offsets (Andrei Vagin) [task:87159]
  - posix-timers: Use clock_get_ktime() in common_timer_get() (Andrei Vagin) [task:87159]
  - posix-clocks: Introduce clock_get_ktime() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Provide get_timespec() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Rename gettime() callback to get_ktime() (Andrei Vagin) [task:87159]
  - posix-clocks: Rename .clock_get_timespec() callbacks accordingly (Andrei Vagin) [task:87159]
  - posix-clocks: Rename the clock_get() callback to clock_get_timespec() (Andrei Vagin) [task:87159]
  - time: Add timens_offsets to be used for tasks in time namespace (Andrei Vagin) [task:87159]
  - ns: Introduce Time Namespace (Andrei Vagin) [task:87159]
  - lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin) [task:87159]
  - lib/vdso: Avoid duplication in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - lib/vdso: Add unlikely() hint into vdso_read_begin() (Andrei Vagin) [task:87159]
  - lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy) [task:87159]
  - x86/vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove checks on return value for 32 bit vDSO (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Build 32 bit specific functions in the right context (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Expose BUILD_VDSO32 (Vincenzo Frascino) [task:87159]
  - raid6/test: fix a compilation error (Zhengyuan Liu) [task:87159]
  - lib/vdso: Make __cvdso_clock_getres() static (Vincenzo Frascino) [task:87159]
  - y2038: vdso: change time_t to __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - y2038: add __kernel_old_timespec and __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - selftests: gen_kselftest_tar.sh: Do not clobber kselftest/ (Kees Cook) [task:87159]
  - selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [task:87159]
  - timekeeping/vsyscall: Update VDSO data unconditionally (Huacai Chen) [task:87159]
  - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [task:87159]
  - lib/vdso: Make clock_getres() POSIX compliant again (Thomas Gleixner) [task:87159]
  - selftests: Add kselftest-all and kselftest-install targets (Shuah Khan) [task:87159]
  - um: Fix VDSO compiler warning (Johannes Berg) [task:87159]
  - ipc: fix sparc64 ipc() wrapper (Arnd Bergmann) [task:87159]
  - timekeeping/vsyscall: Prevent math overflow in BOOTTIME update (Thomas Gleixner) [task:87159]
  - selftests: use "$(MAKE)" instead of "make" (Ilya Leoshkevich) [task:87159]
  - arm64: compat: vdso: Use legacy syscalls as fallback (Thomas Gleixner) [task:87159]
  - x86/vdso/32: Use 32bit syscall fallback (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Provide legacy syscall fallbacks (Thomas Gleixner) [task:87159]
  - lib/vdso: Move fallback invocation to the callers (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Remove inconsistent NULL pointer checks (Thomas Gleixner) [task:87159]
  - kselftest: save-and-restore errno to allow for %m formatting (Aleksa Sarai)
  - arm64: vdso: Cleanup Makefiles (Vincenzo Frascino) [task:87159]
  - arm64: vdso: fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - linux/bits.h: make BIT(), GENMASK(), and friends available in assembly (Masahiro Yamada) [task:87159]
  - x86/vdso: Fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - timekeeping/vsyscall: Use __iter_div_u64_rem() (Arnd Bergmann) [task:87159]
  - arm64: compat: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - arm64: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Make delta calculation work correctly (Thomas Gleixner) [task:87159]
  - arm64: compat: No need for pre-ARMv7 barriers on an ARMv8 system (Catalin Marinas) [task:87159]
  - arm64: vdso: Remove unnecessary asm-offsets.c definitions (Catalin Marinas) [task:87159]
  - vdso: Remove superfluous #ifdef __KERNEL__ in vdso/datapage.h (Catalin Marinas) [task:87159]
  - x86/vdso: Add clock_gettime64() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Add clock_getres() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Switch to generic vDSO implementation (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Enable vDSO compat support (Vincenzo Frascino) [task:87159]
  - arm64: compat: Get sigreturn trampolines from vDSO (Vincenzo Frascino) [task:87159]
  - arm64: elf: VDSO code page discovery (Vincenzo Frascino) [task:87159]
  - arm64: compat: VDSO setup for compat layer (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Refactor vDSO code (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Generate asm offsets for signals (Vincenzo Frascino) [task:87159]
  - arm64: compat: Expose signal related structures (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add missing syscall numbers (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Build vDSO with -ffixed-x18 (Peter Collingbourne) [task:87159]
  - arm64: vdso: Substitute gettimeofday() with C implementation (Vincenzo Frascino) [task:87159]
  - timekeeping: Provide a generic update_vsyscall() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Add compat support (Vincenzo Frascino) [task:87159]
  - lib/vdso: Provide generic VDSO implementation (Vincenzo Frascino) [task:87159]
  - vdso: Define standardized vdso_datapage (Vincenzo Frascino) [task:87159]
  - hrtimer: Split out hrtimer defines into separate header (Vincenzo Frascino) [task:87159]
  - clocksource/drivers/arm_arch_timer: Don't trace count reader functions (Julien Thierry) [task:87159]
  - selftests: vm: Fix test build failure when built by itself (Shuah Khan) [task:87159]
  - tests: fix pidfd-test compilation (Christian Brauner) [task:87159]
  - arm64: arch_timer: mark functions as __always_inline (Anders Roxell) [task:87159]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 223 (Thomas Gleixner) [task:87159]
  - selftests: Remove forced unbuffering for test running (Kees Cook) [task:87159]
  - arm64: vdso: Explicitly add build-id option (Laura Abbott) [task:87159]
  - selftests: fix bpf build/test workflow regression when KBUILD_OUTPUT is set (Shuah Khan) [task:87159]
  - selftests: fix install target to use default install path (Shuah Khan) [task:87159]
  - x86/vdso: Remove hpet_page from vDSO (Jia Zhang) [task:87159]
  - clocksource/arm_arch_timer: Use arch_timer_read_counter to access stable counters (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Remove use of workaround static key (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Drop use of static key in arch_timer_reg_read_stable (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Direcly assign set_next_event workaround (Marc Zyngier) [task:87159]
  - arm64: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - watchdog/sbsa: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - arm64: arch_timer: Ensure counter register reads occur with seqlock held (Will Deacon) [task:87159]
  - selftests: Add test plan API to kselftest.h and adjust callers (Kees Cook)
  - selftests: Move test output to diagnostic lines (Kees Cook)
  - selftests: Distinguish between missing and non-executable (Kees Cook)
  - selftests: Add plan line and fix result line syntax (Kees Cook)
  - selftests: Extract logic for multiple test runs (Kees Cook)
  - selftests: Use runner.sh for emit targets (Kees Cook)
  - selftests: Extract single-test shell logic from lib.mk (Kees Cook)
  - arm64: compat: Add KUSER_HELPERS config option (Vincenzo Frascino) [task:87159]
  - arm64: compat: Refactor aarch32_alloc_vdso_pages() (Vincenzo Frascino) [task:87159]
  - arm64: compat: Split kuser32 (Vincenzo Frascino) [task:87159]
  - arm64: compat: Alloc separate pages for vectors and sigpage (Vincenzo Frascino) [task:87159]
  - selftests: fix headers_install circular dependency (Shuah Khan) [task:87159]
  - x86/vdso: Rename variable to fix -Wshadow warning (Leonardo Brás) [task:87159]
  - arm64: vdso: Fix clock_getres() for CLOCK_REALTIME (Vincenzo Frascino) [task:87159]
  - arch: add pidfd and io_uring syscalls everywhere (Arnd Bergmann)
  - arm64: vdso: use $(LD) instead of $(CC) to link VDSO (Masahiro Yamada) [task:87159]
  - arm64: vdso: fix and clean-up Makefile (Masahiro Yamada) [task:87159]
  - perf tools: Update x86's syscall_64.tbl, no change in tools/perf behaviour (Arnaldo Carvalho de Melo) [task:87159]
  - linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h> (Masahiro Yamada) [task:87159]
  - linux/kernel.h: use 'short' to define USHRT_MAX, SHRT_MAX, SHRT_MIN (Masahiro Yamada) [task:87159]
  - selftests: add tests for pidfd_send_signal() (Christian Brauner)
  - checksyscalls: fix up mq_timedreceive and stat exceptions (Arnd Bergmann) [task:87159]
  - time: Add time_types.h (Deepa Dinamani) [task:87159]
  - sh: fix build error for invisible CONFIG_BUILTIN_DTB_SOURCE (Masahiro Yamada) [task:87159]
  - y2038: add 64-bit time_t syscalls to all 32-bit architectures (Arnd Bergmann)
  - socket: Add struct __kernel_sock_timeval (Deepa Dinamani) [task:87159]
  - arch: sparc: Override struct __kernel_old_timeval (Deepa Dinamani) [task:87159]
  - kbuild: add real-prereqs shorthand for $(filter-out FORCE,$^) (Masahiro Yamada) [task:87159]
  - kbuild: simplify rules of data compression with size appending (Masahiro Yamada) [task:87159]
  - alpha: add generic get{eg,eu,g,p,u,pp}id() syscalls (Arnd Bergmann)
  - alpha: add standard statfs64/fstatfs64 syscalls (Arnd Bergmann)
  - sparc64: fix sparc_ipc type conversion (Arnd Bergmann)
  - sh: remove duplicate unistd_32.h file (Arnd Bergmann)
  - arch: add pkey and rseq syscall numbers everywhere (Arnd Bergmann)
  - ipc: rename old-style shmctl/semctl/msgctl syscalls (Arnd Bergmann)
  - arch: add split IPC system calls where needed (Arnd Bergmann)
  - sh: add statx system call (Arnd Bergmann)
  - m68k: assign syscall number for seccomp (Arnd Bergmann)
  - ARM: add kexec_file_load system call number (Arnd Bergmann)
  - ARM: add migrate_pages() system call (Arnd Bergmann)
  - alpha: wire up io_pgetevents system call (Arnd Bergmann)
  - ia64: assign syscall numbers for perf and seccomp (Arnd Bergmann)
  - ia64: add statx and io_pgetevents syscalls (Arnd Bergmann)
  - alpha: update syscall macro definitions (Arnd Bergmann)
  - s390: fix system call tracing (Heiko Carstens) [task:87159]
  - arm64: asm-offsets: remove unused offsets (Andrew Murray) [task:87159]
  - s390: remove compat_wrapper.c (Arnd Bergmann)
  - s390: autogenerate compat syscall wrappers (Arnd Bergmann)
  - s390: use generic UID16 implementation (Arnd Bergmann)
  - ipc: introduce ksys_ipc()/compat_ksys_ipc() for s390 (Arnd Bergmann)
  - s390: open-code s390_personality syscall (Arnd Bergmann)
  - kbuild: remove unused baseprereq (Masahiro Yamada) [task:87159]
  - kbuild: clean up rule_dtc_dt_yaml (Masahiro Yamada) [task:87159]
  - tools headers uapi: Sync copy of asm-generic/unistd.h with the kernel sources (Arnaldo Carvalho de Melo) [task:87159]
  - arm64: compat: Hook up io_pgetevents() for 32-bit tasks (Will Deacon)
  - arm64: replace arm64-obj-* in Makefile with obj-* (Masahiro Yamada) [task:87159]
  - alpha: generate uapi header and syscall table header files (Firoz Khan)
  - alpha: add system call table generation support (Firoz Khan)
  - alpha: add __NR_syscalls along with NR_SYSCALLS (Firoz Khan)
  - alpha: remove CONFIG_OSF4_COMPAT flag from syscall table (Firoz Khan)
  - alpha: move __IGNORE* entries to non uapi header (Firoz Khan)
  - powerpc: add system call table generation support (Firoz Khan)
  - sh: add system call table generation support (Firoz Khan)
  - sh: add __NR_syscalls along with NR_syscalls (Firoz Khan)
  - mips: add system call table generation support (Firoz Khan)
  - seccomp, s390: fix build for syscall type change (Tycho Andersen)
  - kbuild: Add support for DT binding schema checks (Rob Herring) [task:87159]
  - parisc: add system call table generation support (Firoz Khan)
  - parisc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - asm-generic: add kexec_file_load system call to unistd.h (AKASHI Takahiro)
  - x86/vdso: Remove obsolete "fake section table" reservation (Sean Christopherson) [task:87159]
  - m68k: Add system call table generation support (Firoz Khan)
  - xtensa: add system call table generation support (Firoz Khan)
  - riscv: add asm/unistd.h UAPI header (David Abdurachmanov) [task:87159]
  - sparc: add system call table generation support (Firoz Khan)
  - sparc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - microblaze: add system call table generation support (Firoz Khan)
  - ia64: add system call table generation support (Firoz Khan)
  - builddeb: Fix inclusion of dtbs in debian package (Rob Herring) [task:87159]
  - tools arch uapi: Update asm-generic/unistd.h and arm64 unistd.h copies (Arnaldo Carvalho de Melo) [task:87159]
  - x86: convert vdso to use vm_fault_t (Matthew Wilcox) [task:87159]
  - mm: introduce vmf_insert_pfn_prot() (Matthew Wilcox) [task:87978]
  - mm: remove vm_insert_mixed() (Matthew Wilcox) [task:87978]
  - cramfs: convert to use vmf_insert_mixed (Nicolas Pitre) [task:87978]
  - mm: convert to use vm_fault_t (Souptick Joarder) [task:87978]
  - kbuild: remove unneeded link_multi_deps (Masahiro Yamada) [task:87159]
  - x86/vdso: Initialize the CPU/node NR segment descriptor earlier (Chang S. Bae) [task:87159]
  - x86/vdso: Introduce helper functions for CPU and node number (Chang S. Bae) [task:87159]
  - x86/segments/64: Rename the GDT PER_CPU entry to CPU_NUMBER (Chang S. Bae) [task:87159]
  - x86/vdso: Rearrange do_hres() to improve code generation (Andy Lutomirski) [task:87159]
  - x86/vdso: Document vgtod_ts better (Andy Lutomirski) [task:87159]
  - x86/vdso: Remove "memory" clobbers in the vDSO syscall fallbacks (Andy Lutomirski) [task:87159]
  - x66/vdso: Add CLOCK_TAI support (Thomas Gleixner) [task:87159]
  - x86/vdso: Move cycle_last handling into the caller (Thomas Gleixner) [task:87159]
  - x86/vdso: Simplify the invalid vclock case (Thomas Gleixner) [task:87159]
  - x86/vdso: Replace the clockid switch case (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse coarse functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse high resolution functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Introduce and use vgtod_ts (Thomas Gleixner) [task:87159]
  - x86/vdso: Use unsigned int consistently for vsyscall_gtod_data:: Seq (Thomas Gleixner) [task:87159]
  - x86/vdso: Enforce 64bit clocksource (Thomas Gleixner) [task:87159]
  - x86/time: Implement clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - clocksource: Provide clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - kbuild: consolidate Devicetree dtb build rules (Rob Herring) [task:87159]
  - nios2: use common rules to build built-in dtb (Rob Herring) [task:87159]
  - powerpc: build .dtb files in dts directory (Rob Herring) [task:87159]
  - nios2: build .dtb files in dts directory (Rob Herring) [task:87159]
  - scripts/dtc: Update to upstream version v1.4.7-14-gc86da84d30e4 (Rob Herring) [task:87159]
  - RISC-V: Request newstat syscalls (Guenter Roeck) [task:87159]
  - y2038: socket: Change recvmmsg to use __kernel_timespec (Arnd Bergmann) [task:87159]
  - y2038: Remove newstat family from default syscall set (Arnd Bergmann)
  - y2038: globally rename compat_time to old_time32 (Arnd Bergmann) [task:87978]
  - alpha: use alpha_ni_syscall only for syscall zero (Al Viro)
  - KYLIN: Revert "arm64: arch_timer: Disable CNTVCT_EL0 trap if workaround is enabled" (Jackie Liu)
  - KYLIN: Revert "arm64:vdso: Rewrite gettimeofday into C." (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: Ensure counter register reads occur with seqlock held" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: Fix clock_getres() for CLOCK_REALTIME" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: do cntvct workaround in the VDSO" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: move vdso_fix into struct vdso_data" (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: only do cntvct workaround on VDSO path on D05" (Jackie Liu)
  - KYLIN: Revert "KYLIN: arm/arch_timer: fix build missing CONFIG_HISILICON_ERRATUM_161010101" (Jackie Liu)
  - KYLIN: Revert "clocksource/drivers/arch_timer: Fix vdso_fix compile error for arm32" (Jackie Liu)
  - KYLIN: Revert "arm64:ilp32: add vdso-ilp32 and use for signal return" (Jackie Liu)
  - netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c. (David Wilder) [task:95566]
  - netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c. (David Wilder) [task:95566]
  - netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netns: restore ops before calling ops_exit_list (Li RongQing) [task:95566]
  - netns: add pre_exit method to struct pernet_operations (Eric Dumazet) [task:95566]
  - KYLIN: scsi: Add SCSI_DH* config for loongarch. (cuitao) [task:92151]
  - KYLIN: security/kysec: update kysec_mempro module (huanfuxi) [bug:128578]
  - drm/ast: Create the driver for ASPEED proprietory Display-Port (KuoHsiang Chou) [task:94616]
  - drm/ast: Create threshold values for AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Enable the supporting of wide screen on AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Create chip AST2600 (KuoHsiang Chou) [task:94616]
  - NETSWIFT :txgbe: update the driver to 1.3.2 (luoqing) [task:92912]
  - NETSWIFT :txgbe: FIX : fix compile in linux 3.10 (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: ADD : add flash unlock when upgrade image (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: FIX : fix some kr flow (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: fix bug when 1820 is in 1G sfp speed mode, link partner (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: FIX : fix vxlan/geneve port not set to hardware (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: update the driver to 1.2.2 (luoqing) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt 101 mode support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: FIX : fix compile in ubuntu 21.10 (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: busfix linkspeed setup failed when link is down (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: ADD-add-link-retry-switch-to-configure (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt8531s id support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: read flash from flash only in phy init (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: ADD : add retry use an err bit (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: CH : use sw configure efuse (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix phy set to force 100M autoneg off with partner (zhengzhenpeng) [task:92912]
  - WIREGUARD-LINUX-COMPAT: net: WireGuard secure network tunnel (Jason A. Donenfeld) [task:90253]
  - vt: drop old FONT ioctls (Jiri Slaby) [bug:128721] {CVE-2021-33656}
  - KYLIN: debug_defconfig: enable CONFIG_UBSAN (Jackie Liu)
  - KYLIN: sync-stable: fix wrong exit status when failed (Jackie Liu)
  - crypto: hisilicon delete invlaid api and config (Yu'an Wang) [bug:122239]
  - crypto: hisilicon - add CRYPTO_TFM_REQ_MAY_BACKLOG flag judge in sec_process() (Yu'an Wang) [bug:122239]
  - uacce: misc fixes (Yu'an Wang) [bug:122239]
  - misc/uacce: fixup out-of-bounds array write (Yu'an Wang) [bug:122239]
  - crypto/sec: add aead support for user-side (Yu'an Wang) [bug:122239]
  - UACCE: backport from mainline (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-Cap block size at 2^31 (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-hpre add req check when callback (Yu'an Wang) [bug:122239]
  - crypto: hisilicon- count send_ref when sending bd (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-enhancement of qm DFX (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-memory management optimization (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix packet loss for acc (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: modify driver to adapt dm-crypt (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: reinforce reset failure scene (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: fix decompress a empty file (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: dfx for IO operation and delay (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: Overall optimization of sec code (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize the maximum number of VF and delete invalid addr (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize set hw_reset flag logic for user (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup the problem of wrong judgement of used (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: Move all the same logic functions of hisilicon crypto to qm (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix the way judge whether q stop in user space (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup compilation dependency (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/rde: optimize debug regs clear logic (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: change sec_control reg config (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: add likely and unlikey in result judgement (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: optimize key process before free (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: remove invalid addr print (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: use offset fields in sqe to avoid SG_SPLIT (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix wrong number of sg elements after dma map (Yu'an Wang) [bug:122239]
  - uacce: Remove uacce mode 1 relatives (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon: Remove uacce mode 1 logic below hisilicon (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon/sec2: add initial configuration in sec_engine_init (Yu'an Wang) [bug:122239]
  - KYLIN:crypto/hisilicon: The driver version is aligned to the Euler kernel (liyouhong) [bug:122239]
  - EULER: memcg: update the child's qos_level synchronously in memcg_qos_write() (Jing Xiangfeng) [task:85149]
  - EULER: memcg: Add static key for memcg priority (Jing Xiangfeng) [task:85149]
  - EULER: memcg: fix kabi broken when enable CONFIG_MEMCG_QOS (Jing Xiangfeng) [task:85149]
  - EULER: memcg: support priority for oom (Jing Xiangfeng) [task:85149]
  - selftest: kvm: Reorder vcpu_load_state steps for AMX (gehao) [task:88336]
  - selftests: kvm: Fix set_regs fail (gehao) [task:88363]
  - selftests: kvm/evmcs_test: complete I/O before migrating guest state (gehao) [task:88363]
  - KVM: selftests: complete IO before migrating guest state (gehao) [task:88336]
  - KVM: selftests: disable stack protector for all KVM tests (Sean Christopherson) [task:88336]
  - KVM: selftests: explicitly disable PIE for tests (Sean Christopherson) [task:88336]
  - KVM: arm64: vgic-its: Change default outer cacheability for {PEND, PROP}BASER (Alexander Graf) [task:97316]
  - Bluetooth: stop proccessing malicious adv data (Pavel Skripkin) [task:97308]
  - io_uring: Fix use of XArray in __io_uring_files_cancel (Matthew Wilcox (Oracle))
  - Bluetooth: hci_event: Fix checking for invalid handle on error status (Luiz Augusto von Dentz) [task:96848]
  - Bluetooth: hci_event: Ignore multiple conn complete events (Soenke Huster) [task:96848]
  - KYLIN: arm64: debug_defconfig: disable debug kobject (Jackie Liu)
  - KYLIN: debug_defconfig: make kmemleak off default (Jackie Liu)
  - KYLIN: net: genric phy driver 'ethtool -i' display error. (zhaochenguang) [task:90223]
  - KYLIN: net: loongson gmac add 'ethtool -i' info. (zhaochenguang) [bug:120208]
  - KYLIN: sound/soc: add the CJC8988 driver provided by loongson (Yongzhen Zhang) [task:91306]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-51.0.v2207
changelog:
  - KYLIN: sched: reserve some field for sched_statistics (Zhengyuan Liu)
  - ext4: make variable "count" signed (Ding Xiang)
  - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko) [bug:129870] {CVE-2022-33744}
  - xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129843] {CVE-2022-33742}
  - xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129847] {CVE-2022-33741}
  - xen/netfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129851] {CVE-2022-33740}
  - xen/blkfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129856] {CVE-2022-26365}
  - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou) [bug:129862] {CVE-2022-2318}
  - ext4: avoid cycles in directory h-tree (Jan Kara) [bug:129812] {CVE-2022-1184}
  - ext4: verify dir block before splitting it (Jan Kara) [bug:129812] {CVE-2022-1184}
  - floppy: use a statically allocated error counter (Willy Tarreau) [bug:129818] {CVE-2022-1652}
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - xen/pvcalls: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Juergen Gross) [bug:129758] {CVE-2022-23042}
  - xen/9p: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/gnttab: fix gnttab_end_foreign_access() without page specified (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen: remove gnttab_query_foreign_access() (Juergen Gross)
  - xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross) [bug:129771] {CVE-2022-23039}
  - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129767] {CVE-2022-23036}
  - xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross) [bug:129783, bug:129767] {CVE-2022-23036, CVE-2022-23038}
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross) [bug:129763] {CVE-2022-23040}
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129783] {CVE-2022-23038}
  - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129779] {CVE-2022-23037}
  - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller) [bug:129866] {CVE-2022-2380}
  - HID: holtek: fix mouse probing (Benjamin Tissoires)
  - hamradio: improve the incomplete fix to avoid NPD (Lin Ma) [bug:129795] {CVE-2022-1195}
  - HID: google: add eel USB id (xiazhengqiao) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-prodikeys (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-chicony (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy on some USB HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: check for valid USB device for many HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: wacom: fix problems when device is not a valid USB device (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add hid_is_usb() function to make it simpler for USB detection (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - hamradio: remove needs_free_netdev to avoid UAF (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer 6pack kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer ax25 kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin) [bug:129795] {CVE-2022-1195}
  - HID: google: add don USB id (Shou-Chieh Hsu) [bug:129822] {CVE-2022-20132}
  - xen/xenbus: Fix granting of vmalloc'd memory (Simon Leiner)
  - xen-netfront: fix potential deadlock in xennet_remove() (Andrea Righi)
  - HID: google: add moonball USB id (Chen-Tsung Hsieh) [bug:129822] {CVE-2022-20132}
  - net_sched: fix a crash in tc_new_tfilter() (Cong Wang) [bug:129750] {CVE-2021-39713}
  - net: sched: make function qdisc_free_cb() static (Wei Yongjun)
  - net: sched: use Qdisc rcu API instead of relying on rtnl lock (Vlad Buslov) [bug:129750] {CVE-2021-39713}
  - net: sched: add helper function to take reference to Qdisc (Vlad Buslov)
  - net: sched: extend Qdisc with rcu (Vlad Buslov)
  - net: sched: rename qdisc_destroy() to qdisc_put() (Vlad Buslov)
  - net: core: netlink: add helper refcount dec and lock function (Vlad Buslov)
  - netlink: fix doc about nlmsg_parse/nla_validate (Nicolas Dichtel) [task:96091]
  - netlink: Fix nlmsg_parse as a wrapper for strict message parsing (David Ahern) [task:96091]
  - bpf: Add classid helper only based on skb->sk (Daniel Borkmann) [task:96091]
  - bpf: Allow to retrieve cgroup v1 classid from v2 hooks (Daniel Borkmann) [task:96091]
  - tcp_cubic: refactor code to perform a divide only when needed (Eric Dumazet) [task:96091]
  - tcp_cubic: make Hystart aware of pacing (Eric Dumazet) [task:96091]
  - tcp_cubic: tweak Hystart detection for short RTT flows (Eric Dumazet) [task:96091]
  - tcp_cubic: switch bictcp_clock() to usec resolution (Eric Dumazet) [task:96091]
  - tcp_cubic: remove one conditional from hystart_update() (Eric Dumazet) [task:96091]
  - tcp_cubic: optimize hystart_update() (Eric Dumazet) [task:96091]
  - net: relax SO_TXTIME CAP_NET_ADMIN check (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not call fq_peek() twice per packet (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: add horizon attribute (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: enable use of hrtimer slack (Eric Dumazet) [task:96091]
  - net_sched: do not reprogram a timer about to expire (Eric Dumazet) [task:96091]
  - net_sched: add qdisc_watchdog_schedule_range_ns() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: properly set sk->sk_pacing_status (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: remove one obsolete check in fq_dequeue() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: handle non connected flows (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not assume EDT packets are ordered (Eric Dumazet) [task:96091]
  - netlink: add strict parsing for future attributes (Johannes Berg) [task:96091]
  - netlink: re-add parse/validate functions in strict mode (Johannes Berg) [task:96091]
  - netlink: make validation more configurable for future strictness (Johannes Berg) [task:96091]
  - netlink: add NLA_MIN_LEN (Johannes Berg) [task:96091]
  - netlink: add validation function to policy (Johannes Berg) [task:96091]
  - netlink: add attribute range validation to policy (Johannes Berg) [task:96091]
  - net_sched: sch_fq: avoid calling ktime_get_ns() if not needed (Eric Dumazet) [task:96091]
  - bpf: make bpf_skb_ecn_set_ce callable from BPF_PROG_TYPE_SCHED_ACT (Peter Oskolkov) [task:96091]
  - bpf: sync bpf.h to tools and update bpf_helpers.h (brakmo) [task:96091]
  - net_sched: sch_fq: add dctcp-like marking (Eric Dumazet) [task:96091]
  - tcp: tsq: no longer use limit_output_bytes for paced flows (Eric Dumazet) [task:96091]
  - tcp: get rid of tcp_tso_should_defer() dependency on HZ/jiffies (Eric Dumazet) [task:96091]
  - net: support 64bit rates for getsockopt(SO_MAX_PACING_RATE) (Eric Dumazet) [task:96091]
  - tcp: cdg: use tcp high resolution clock cache (Eric Dumazet) [task:96091]
  - KYLIN: LoongArch/spiflash: fix ls_spiflash initialization code error (wangxuewen) [bug:120279]
  - KYLIN: x86/config: enable QOS_SCHED and QOS_SCHED_SMT_EXPELLER (Zhengyuan Liu) [task:97062]
  - KYLIN: arm64/config: enable QOS_SCHED (Zhengyuan Liu) [task:97062]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:97063]
  - EULER: sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down} (Zhang Qiao) [task:85149]
  - EULER: sched: Throttle offline task at tracehook_notify_resume() (Zhang Qiao) [task:85149]
  - EULER: sched/qos: Remove dependency CONFIG_x86 (Zhang Qiao) [task:85149]
  - EULER: sched/fair: Add qos_throttle_list node in struct cfs_rq (Zhang Qiao) [task:85149]
  - EULER: sched: Introduce handle priority reversion mechanism (Zheng Zucheng) [task:85149]
  - unicore32: Fix __ARCH_WANT_STAT64 definition (Arnd Bergmann) [task:98950]
  - asm-generic: unistd.h: fixup broken macro include. (Guo Ren) [task:98950]
  - ntp/y2038: Remove incorrect time_t truncation (Arnd Bergmann) [task:98950]
  - ipc: fix semtimedop for generic 32-bit architectures (Arnd Bergmann) [task:98950]
  - asm-generic: Make time32 syscall numbers optional (Arnd Bergmann) [task:98950]
  - asm-generic: Drop getrlimit and setrlimit syscalls from default list (Yury Norov) [task:98950]
  - csky: System Call (Guo Ren) [task:98950]
  - compat ABI: use non-compat openat and open_by_handle_at variants (Yury Norov) [task:98950]
  - y2038: rename old time and utime syscalls (Arnd Bergmann) [task:98950]
  - y2038: remove struct definition redirects (Arnd Bergmann) [task:98950]
  - y2038: use time32 syscall names on 32-bit (Arnd Bergmann) [task:98950]
  - vfs: replace current_kernel_time64 with ktime equivalent (Arnd Bergmann) [task:98950]
  - y2038: syscalls: rename y2038 compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: socket: Add compat_sys_recvmmsg_time64 (Arnd Bergmann) [task:98950]
  - y2038: futex: Add support for __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: signal: Add compat_sys_rt_sigtimedwait_time64 (Arnd Bergmann) [task:98950]
  - x86/x32: use time64 versions of sigtimedwait and recvmmsg (Arnd Bergmann) [task:98950]
  - timex: change syscalls to use struct __kernel_timex (Deepa Dinamani) [task:98950]
  - timex: use __kernel_timex internally (Deepa Dinamani) [task:98950]
  - sparc64: add custom adjtimex/clock_adjtime functions (Arnd Bergmann) [task:98950]
  - time: fix sys_timer_settime prototype (Arnd Bergmann) [task:98950]
  - time: Add struct __kernel_timex (Deepa Dinamani) [task:98950]
  - time: make adjtime compat handling available for 32 bit (Arnd Bergmann) [task:98950]
  - y2038: signal: Change rt_sigtimedwait to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: sched: Change sched_rr_get_interval to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: utimes: Rework #ifdef guards for compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: Compile utimes()/futimesat() conditionally (Arnd Bergmann) [task:98950]
  - y2038: Change sys_utimensat() to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - asm-generic: Remove empty asm/unistd.h (Arnd Bergmann) [task:98950]
  - asm-generic: Remove unneeded __ARCH_WANT_SYS_LLSEEK macro (Arnd Bergmann) [task:98950]
  - y2038: Remove stat64 family from default syscall set (Arnd Bergmann) [task:98950]
  - y2038: __get_old_timespec32() can be static (kbuild test robot) [task:98950]
  - KYLIN: x86: debug_defconfig: more kselftest modules (Jackie Liu)
  - KYLIN: x86: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: arm64: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: mm: fix free_pages_bootmem bug in loongarch when system booting (husong)
  - GNET: change gnet_speed_flg priv to fix problem when rebind gnet. (liusicong) [task:96195]
  - LoongArch: Add generic efi stub support (liuyun) [task:96195]
  - efi/libstub: Move the function prototypes to header file (Atish Patra) [task:96195]
  - efi/libstub: Move arm-stub to a common file (Atish Patra) [task:96195]
  - LoongArch: adjust memory space for module load (liweihao) [task:96195]
  - LoongArch:LSVZ: disable pv timer when vcpu is reset (Mao Bibo) [task:96195]
  - LoongArch: LSVZ: redefine hypercall service return code (Jianxing Wang) [task:96195]
  - LoongArch: LSVZ: import no_pvipi and no_pvtime setup param (Jianxing Wang) [task:96195]
  - fdt: Update CRC check for rng-seed (Hsin-Yi Wang) [task:97875]
  - include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap (Christian Borntraeger) [task:97875]
  - random: quiet urandom warning ratelimit suppression message (Jason A. Donenfeld) [task:97875]
  - random: schedule mix_interrupt_randomness() less often (Jason A. Donenfeld) [task:97875]
  - random: credit cpu and bootloader seeds by default (Jason A. Donenfeld) [task:97875]
  - random: account for arch randomness in bits (Jason A. Donenfeld) [task:97875]
  - random: mark bootloader randomness code as __init (Jason A. Donenfeld) [task:97875]
  - random: avoid checking crng_ready() twice in random_init() (Jason A. Donenfeld) [task:97875]
  - crypto: drbg - make reseeding from get_random_bytes() synchronous (Nicolai Stange) [task:97875]
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller) [task:97875]
  - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() (Nicolai Stange) [task:97875]
  - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() (Nicolai Stange) [task:97875]
  - crypto: drbg - prepare for more fine-grained tracking of seeding state (Nicolai Stange) [task:97875]
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller) [task:97875]
  - crypto: drbg - add FIPS 140-2 CTRNG for noise source (Stephan Mueller) [task:97875]
  - Revert "random: use static branch for crng_ready()" (Jason A. Donenfeld) [task:97875]
  - random: check for signals after page of pool writes (Jason A. Donenfeld) [task:97875]
  - random: wire up fops->splice_{read,write}_iter() (Jens Axboe) [task:97875]
  - random: convert to using fops->write_iter() (Jens Axboe) [task:97875]
  - random: move randomize_page() into mm where it belongs (Jason A. Donenfeld) [task:97875]
  - random: move initialization functions out of hot pages (Jason A. Donenfeld) [task:97875]
  - random: use proper return types on get_random_{int,long}_wait() (Jason A. Donenfeld) [task:97875]
  - random: remove extern from functions in header (Jason A. Donenfeld) [task:97875]
  - random: use static branch for crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: credit architectural init the exact amount (Jason A. Donenfeld) [task:97875]
  - random: handle latent entropy and command line from random_init() (Jason A. Donenfeld) [task:97875]
  - random: use proper jiffies comparison macro (Jason A. Donenfeld) [task:97875]
  - random: remove ratelimiting for in-kernel unseeded randomness (Jason A. Donenfeld) [task:97875]
  - random: avoid initializing twice in credit race (Jason A. Donenfeld) [task:97875]
  - random: use symbolic constants for crng_init states (Jason A. Donenfeld) [task:97875]
  - siphash: use one source of truth for siphash permutations (Jason A. Donenfeld) [task:97875]
  - random: help compiler out with fast_mix() by using simpler arguments (Jason A. Donenfeld) [task:97875]
  - random: do not use input pool from hard IRQs (Jason A. Donenfeld) [task:97875]
  - random: order timer entropy functions below interrupt functions (Jason A. Donenfeld) [task:97875]
  - random: do not pretend to handle premature next security model (Jason A. Donenfeld) [task:97875]
  - random: do not use batches when !crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: insist on random_get_entropy() existing in order to simplify (Jason A. Donenfeld) [task:97875]
  - xtensa: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - sparc: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - um: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - x86/tsc: Use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - nios2: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - arm: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - mips: use fallback for random_get_entropy() instead of just c0 random (Jason A. Donenfeld) [task:97875]
  - m68k: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - timekeeping: Add raw clock fallback for random_get_entropy() (Jason A. Donenfeld) [task:97875]
  - powerpc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - alpha: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - parisc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - s390: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - ia64: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - init: call time_init() before rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: fix sysctl documentation nits (Jason A. Donenfeld) [task:97875]
  - random: document crng_fast_key_erasure() destination possibility (Jason A. Donenfeld) [task:97875]
  - random: make random_get_entropy() return an unsigned long (Jason A. Donenfeld) [task:97875]
  - random: check for signals every PAGE_SIZE chunk of /dev/[u]random (Jason A. Donenfeld) [task:97875]
  - random: check for signal_pending() outside of need_resched() check (Jann Horn) [task:97875]
  - random: do not allow user to keep crng key around on stack (Jason A. Donenfeld) [task:97875]
  - random: do not split fast init input in add_hwgenerator_randomness() (Jan Varho) [task:97875]
  - random: mix build-time latent entropy into pool at init (Jason A. Donenfeld) [task:97875]
  - random: re-add removed comment about get_random_{u32,u64} reseeding (Jason A. Donenfeld) [task:97875]
  - random: treat bootloader trust toggle the same way as cpu trust toggle (Jason A. Donenfeld) [task:97875]
  - random: skip fast_init if hwrng provides large chunk of entropy (Jason A. Donenfeld) [task:97875]
  - random: check for signal and try earlier when generating entropy (Jason A. Donenfeld) [task:97875]
  - random: reseed more often immediately after booting (Jason A. Donenfeld) [task:97875]
  - random: make consistent usage of crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: use SipHash as interrupt entropy accumulator (Jason A. Donenfeld) [task:97875]
  - random: replace custom notifier chain with standard one (Jason A. Donenfeld) [task:97875]
  - random: don't let 644 read-only sysctls be written to (Jason A. Donenfeld) [task:97875]
  - random: give sysctl_random_min_urandom_seed a more sensible value (Jason A. Donenfeld) [task:97875]
  - random: do crng pre-init loading in worker rather than irq (Jason A. Donenfeld) [task:97875]
  - random: unify cycles_t and jiffies usage and types (Jason A. Donenfeld) [task:97875]
  - random: cleanup UUID handling (Jason A. Donenfeld) [task:97875]
  - random: only wake up writers after zap if threshold was passed (Jason A. Donenfeld) [task:97875]
  - random: round-robin registers as ulong, not u32 (Jason A. Donenfeld) [task:97875]
  - random: clear fast pool, crng, and batches in cpuhp bring up (Jason A. Donenfeld) [task:97875]
  - random: pull add_hwgenerator_randomness() declaration into random.h (Jason A. Donenfeld) [task:97875]
  - random: check for crng_init == 0 in add_device_randomness() (Jason A. Donenfeld) [task:97875]
  - random: unify early init crng load accounting (Jason A. Donenfeld) [task:97875]
  - random: do not take pool spinlock at boot (Jason A. Donenfeld) [task:97875]
  - random: defer fast pool mixing to worker (Jason A. Donenfeld) [task:97875]
  - random: rewrite header introductory comment (Jason A. Donenfeld) [task:97875]
  - random: group sysctl functions (Jason A. Donenfeld) [task:97875]
  - random: group userspace read/write functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy collection functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy extraction functions (Jason A. Donenfeld) [task:97875]
  - random: group initialization wait functions (Jason A. Donenfeld) [task:97875]
  - random: remove whitespace and reorder includes (Jason A. Donenfeld) [task:97875]
  - random: remove useless header comment (Jason A. Donenfeld) [task:97875]
  - random: introduce drain_entropy() helper to declutter crng_reseed() (Jason A. Donenfeld) [task:97875]
  - random: deobfuscate irq u32/u64 contributions (Jason A. Donenfeld) [task:97875]
  - random: add proper SPDX header (Jason A. Donenfeld) [task:97875]
  - random: remove unused tracepoints (Jason A. Donenfeld) [task:97875]
  - random: remove ifdef'd out interrupt bench (Jason A. Donenfeld) [task:97875]
  - random: tie batched entropy generation to base_crng generation (Jason A. Donenfeld) [task:97875]
  - random: zero buffer after reading entropy from userspace (Jason A. Donenfeld) [task:97875]
  - random: remove outdated INT_MAX >> 6 check in urandom_read() (Jason A. Donenfeld) [task:97875]
  - random: use hash function for crng_slow_load() (Jason A. Donenfeld) [task:97875]
  - random: absorb fast pool into input pool after fast load (Jason A. Donenfeld) [task:97875]
  - random: do not xor RDRAND when writing into /dev/random (Jason A. Donenfeld) [task:97875]
  - random: ensure early RDSEED goes through mixer on init (Jason A. Donenfeld) [task:97875]
  - random: inline leaves of rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: use RDSEED instead of RDRAND in entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: fix locking in crng_fast_load() (Dominik Brodowski) [task:97875]
  - random: remove batched entropy locking (Jason A. Donenfeld) [task:97875]
  - random: remove use_input_pool parameter from crng_reseed() (Eric Biggers) [task:97875]
  - random: make credit_entropy_bits() always safe (Jason A. Donenfeld) [task:97875]
  - random: always wake up entropy writers after extraction (Jason A. Donenfeld) [task:97875]
  - random: use linear min-entropy accumulation crediting (Jason A. Donenfeld) [task:97875]
  - random: simplify entropy debiting (Jason A. Donenfeld) [task:97875]
  - random: use computational hash for entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: only call crng_finalize_init() for primary_crng (Dominik Brodowski) [task:97875]
  - random: access primary_pool directly rather than through pointer (Dominik Brodowski) [task:97875]
  - random: continually use hwgenerator randomness (Dominik Brodowski) [task:97875]
  - random: simplify arithmetic function flow in account() (Jason A. Donenfeld) [task:97875]
  - random: access input_pool_data directly rather than through pointer (Jason A. Donenfeld) [task:97875]
  - random: cleanup fractional entropy shift constants (Jason A. Donenfeld) [task:97875]
  - random: prepend remaining pool constants with POOL_ (Jason A. Donenfeld) [task:97875]
  - random: de-duplicate INPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: remove unused OUTPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: rather than entropy_store abstraction, use global (Jason A. Donenfeld) [task:97875]
  - random: remove unused extract_entropy() reserved argument (Jason A. Donenfeld) [task:97875]
  - random: remove incomplete last_data logic (Jason A. Donenfeld) [task:97875]
  - random: cleanup integer types (Jason A. Donenfeld) [task:97875]
  - random: cleanup poolinfo abstraction (Jason A. Donenfeld) [task:97875]
  - random: fix typo in comments (Schspa Shi) [task:97875]
  - random: don't reset crng_init_cnt on urandom_read() (Jann Horn) [task:97875]
  - random: avoid superfluous call to RDRAND in CRNG extraction (Jason A. Donenfeld) [task:97875]
  - random: early initialization of ChaCha constants (Dominik Brodowski) [task:97875]
  - random: initialize ChaCha20 constants with correct endianness (Eric Biggers) [task:97875]
  - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs (Jason A. Donenfeld) [task:97875]
  - random: harmonize "crng init done" messages (Dominik Brodowski) [task:97875]
  - random: mix bootloader randomness into pool (Jason A. Donenfeld) [task:97875]
  - random: do not re-init if crng_reseed completes before primary init (Jason A. Donenfeld) [task:97875]
  - random: do not sign extend bytes for rotation when mixing (Jason A. Donenfeld) [task:97875]
  - random: use BLAKE2s instead of SHA1 in extraction (Jason A. Donenfeld) [task:97875]
  - random: remove unused irq_flags argument from add_interrupt_randomness() (Sebastian Andrzej Siewior) [task:97875]
  - random: document add_hwgenerator_randomness() with other input functions (Mark Brown) [task:97875]
  - crypto: blake2s - adjust include guard naming (Eric Biggers) [task:97875]
  - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> (Eric Biggers) [task:97875]
  - MAINTAINERS: co-maintain random.c (Jason A. Donenfeld) [task:97875]
  - random: remove dead code left over from blocking pool (Eric Biggers) [task:97875]
  - random: avoid arch_get_random_seed_long() when collecting IRQ randomness (Ard Biesheuvel) [task:97875]
  - random: add arch_get_random_*long_early() (Mark Rutland) [task:97875]
  - powerpc: Use bool in archrandom.h (Richard Henderson) [task:97875]
  - linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check (Richard Henderson) [task:97875]
  - linux/random.h: Use false with bool (Richard Henderson) [task:97875]
  - linux/random.h: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - s390: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - powerpc: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - x86: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - random: avoid warnings for !CONFIG_NUMA builds (Mark Rutland) [task:97875]
  - random: split primary/secondary crng init paths (Mark Rutland) [task:97875]
  - random: remove some dead code of poolinfo (Yangtao Li) [task:97875]
  - random: fix typo in add_timer_randomness() (Yangtao Li) [task:97875]
  - random: Add and use pr_fmt() (Yangtao Li) [task:97875]
  - random: convert to ENTROPY_BITS for better code readability (Yangtao Li) [task:97875]
  - random: remove unnecessary unlikely() (Yangtao Li) [task:97875]
  - random: remove kernel.random.read_wakeup_threshold (Andy Lutomirski) [task:97875]
  - random: delete code to pull data into pools (Andy Lutomirski) [task:97875]
  - random: remove the blocking pool (Andy Lutomirski) [task:97875]
  - random: fix crash on multiple early calls to add_bootloader_randomness() (Dominik Brodowski) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: make /dev/random be almost like /dev/urandom (Andy Lutomirski) [task:97875]
  - random: ignore GRND_RANDOM in getentropy(2) (Andy Lutomirski) [task:97875]
  - random: add GRND_INSECURE to return best-effort non-cryptographic bytes (Andy Lutomirski) [task:97875]
  - random: Add a urandom_read_nowait() for random APIs that don't warn (Andy Lutomirski) [task:97875]
  - random: Don't wake crng_init_wait when crng_init == 1 (Andy Lutomirski) [task:97875]
  - lib/crypto: sha1: re-roll loops to reduce code size (Jason A. Donenfeld) [task:97875]
  - lib/crypto: blake2s: move hmac construction into wireguard (Jason A. Donenfeld) [task:97875]
  - crypto: blake2s - generic C library implementation and selftest (Jason A. Donenfeld) [task:97875]
  - Revert "hwrng: core - Freeze khwrng thread during suspend" (Herbert Xu) [task:97875]
  - char/random: Add a newline at the end of the file (Borislav Petkov) [task:97875]
  - random: Use wait_event_freezable() in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - fdt: add support for rng-seed (Hsin-Yi Wang) [task:97875]
  - random: Support freezable kthreads in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - random: fix soft lockup when trying to read from an uninitialized blocking pool (Theodore Ts'o) [task:97875]
  - latent_entropy: avoid build error when plugin cflags are not set (Vasily Gorbik) [task:97875]
  - random: document get_random_int() family (George Spelvin) [task:97875]
  - random: move rand_initialize() earlier (Kees Cook) [task:97875]
  - random: only read from /dev/random after its pool has received 128 bits (Theodore Ts'o) [task:97875]
  - drivers/char/random.c: make primary_crng static (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: remove unused stuct poolinfo::poolbits (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: constify poolinfo_table (Rasmus Villemoes) [task:97875]
  - random: fix data race on crng init time (Eric Biggers) [task:97875]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: try to actively add entropy rather than passively wait for it (Linus Torvalds) [task:97875]
  - Revert "alinux: random: speed up the initialization of module" (huhai) [task:97875]
  - Revert "random: only read from /dev/random after its pool has received 128 bits" (huhai) [task:97875]
  - Revert "random: fix soft lockup when trying to read from an uninitialized blocking pool" (huhai) [task:97875]
  - uapi: rename ext2_swab() to swab() and share globally in swab.h (Yury Norov) [task:97875]
  - KYLIN: xhci: fix Etron controller reset device problem (xuping) [bug:123907]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.0.v2207
changelog:
  - KYLIN: kabi_whitelist: remove the indentation in front of each item (Zhengyuan Liu) [task:74080]
  - KYLIN: scripts/make-kabi: support items in whitelist begin with indentation (Zhengyuan Liu) [task:74080]
  - KYLIN: Module.kabi: update Module.kabi based on the new whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append redhat8's kabi items (Zhengyuan Liu) [task:74080]
  - KYLIN: x86/paravirt: fix build if !CONFIG_PARAVIRT_SPINLOCKS & CONFIG_PARAVIRT (Jackie Liu) [task:101368, task:101367]
  - sched/core: Convert vcpu_is_preempted() from macro to an inline function (Qian Cai) [task:101368, task:101367]
  - KYLIN: kabi_whitelist: append HuaWei's ultrapath symbol to whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append TianGou's symbol to whitelist (Zhengyuan Liu) [task:90224]
  - KYLIN: kabi_whitelist: simplify current whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: sort the kabi whitelist (Zhengyuan Liu) [task:74080]
  - net: sched: don't set tunnel for decap action (Vlad Buslov) [bug:128966]
  - net: sched: flower: only return error from hw offload if skip_sw (Vlad Buslov) [bug:128966]
  - xsk: Fix xsk_umem_xdp_frame_sz() (Björn Töpel) [bug:128966]
  - xdp: For Intel AF_XDP drivers add XDP frame_s (Jesper Dangaard Brouer) [bug:128966]
  - cls_api: add translator to flow_action representation (Pablo Neira Ayuso) [bug:128966]
  - net: sched: sample: allow accessing psample_group with rtnl (Vlad Buslov) [bug:128966]
  - net/sched: add police action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - net/sched: add sample action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - flow_offload: add wake-up-on-lan and queue to flow_action (Pablo Neira Ayuso) [bug:128966]
  - net/flow_dissector: add connection tracking dissection (Paul Blakey) [bug:128966]
  - KYLIN: fbdev/efifb: enable efifb for inno card by default (yangdeyi) [task:88651]
  - tcp: use alloc_large_system_hash() to allocate table_perturb (Muchun Song)
  - xhci: turn off port power in shutdown (Mathias Nyman) [task:99634]
  - xhci: stop polling roothubs after shutdown (Henry Lin) [task:99634]
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman) [task:99634]
  - xhci: bail out early if driver can't accress host in resume (Mathias Nyman) [task:99634]
  - tcp: drop the hash_32() part from the index calculation (Willy Tarreau) [task:99634]
  - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau) [task:99634]
  - tcp: add small random increments to the source port (Willy Tarreau) [task:99634]
  - tcp: use different parts of the port_offset for index and offset (Willy Tarreau) [task:99634]
  - tcp: add some entropy in __inet_hash_connect() (Eric Dumazet) [task:99634]
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin) [task:99634]
  - KYLIN: add graphics card priority for x86 (yangdeyi) [task:88651]
  - KYLIN: vga: add inno graphics card priority (yangdeyi) [task:88651]
  - KYLIN: 3rd/inno: add inno driver support (yangdeyi) [task:88651]
  - i40iw: Remove setting of VMA private data and use rdma_user_mmap_io (Shiraz Saleem) [bug:130467]
  - KYLIN: x86/paravirt: useless assignment instructions cause Unixbench full core performance degradation (chenke) [task:99415]
  - x86/module: Fix the paravirt vs alternative order (Peter Zijlstra) [task:99415]
  - x86/paravirt: Add new features for paravirt patching (Juergen Gross) [task:99415]
  - crypto: drbg - fix error return code in drbg_alloc_state() (Wei Yongjun) [task:101008]
  - lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO (Vincenzo Frascino)
  - arm64: vdso32: Remove jump label config option in Makefile (Vincenzo Frascino)
  - arm64: vdso32: Detect binutils support for dmb ishld (Vincenzo Frascino)
  - arm64: vdso: Remove stale files from old assembly implementation (Vincenzo Frascino)
  - arm64: vdso32: Fix broken compat vDSO build warnings (Vincenzo Frascino)
  - arm64: vdso: Fix Makefile regression (Vincenzo Frascino)
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [bug:120191] {CVE-2022-1679}
  - drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions (Joe Perches) [bug:124652] {CVE-2022-20166}
  - drivers/base/cpu: Simplify s*nprintf() usages (Takashi Iwai)
  - xfs: don't set bmapi total block req where minleft is (Brian Foster) [bug:128797]
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [bug:129113] {CVE-2022-34918}
  - f2fs: fix to do sanity check on segment/section count (Chao Yu) [task:98376] {CVE-2019-19449}
  - f2fs: fix wrong total_sections check and fsmeta check (Wang Xiaojun) [task:98376] {CVE-2019-19449}
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik) [task:98376] {CVE-2019-19448}
  - KYLIN: box: Fix Use-After-Free caused by parallel access (Jackie Liu) [task:98126, task:99088, task:99013]
  - KYLIN: sw64: fix incompatible pointer of __kernel_timex (Jackie Liu) [task:99336, task:99333]
  - mips: generate uapi header and system call table files (Firoz Khan) [task:99337, task:99334]
  - mips: remove unused macros (Firoz Khan) [task:99337, task:99334]
  - mips: add +1 to __NR_syscalls in uapi header (Firoz Khan) [task:99337, task:99334]
  - mips: rename scall64-64.S to scall64-n64.S (Firoz Khan) [task:99337, task:99334]
  - mips: add __NR_syscalls along with __NR_Linux_syscalls (Firoz Khan) [task:99334, task:99337]
  - mips: remove syscall table entries (Firoz Khan) [task:99337, task:99334]
  - io_uring: drop 'ctx' ref on task work cancelation (Jens Axboe)


author: huayadong <huayadong@kylinos.cn>-3.12.2-8.p05
changelog:
  - add Patch:kylin-brasero-fix-bug-42668-after-switching-the-language-to-English-the-name-is-still-Chinese.patch


author: cuiyudong <cuiyudong@kylinos.cn> - 6.1-1-p02
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Change the library patch from /usr/lib64/tcl8.6/brlapi- to dirctory of buildroot


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.10-8
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cachefilesd-fix-abort-in-decant_cull_table.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-T0ProcACK-fix-a-potential-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CmdGetSlotStatus-fix-potential-read-of-uninitialized.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-ReadUSB-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-IFDHSetProtocolParameters-handle-ATR_GetConvention-e.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-PPS_Match-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-dw2i-fix-potential-integer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.4.lns8
changelog:
  - Fix structure parameter passing error
  - Update vector builtins to keep it consistent with GCC
  - Support -fsanitize=<check> options


author: Liquor <lirui130@huawei.com> - 11-5
changelog:
  - Delete remaining references to the removed http pin
    Install cryptsetup and tpm2_pcrlist in the initramfs
    Add device TCTI library to the initramfs


author: Liang yangang <liangyangang@kylinos.cn> - 196.3-1.01.p01
changelog:
  - add mips64el arch support,
  - add Requires for storaged to support lvm: libblockdev libblockdev-devel libudisks2 udisk2-lvm2


author: Lihx <lihaoxiang@kylinos.cn> - 8.32-1.p03
changelog:
  - update to 8.32 for kylin
  - Migrate patch p01 and p02 to version 8.32-1
  - Add color display.zhangqiang <zhangqiang@kylinos.cn>
  - disable check.ouyangkang <ouyangkang@kylinos.cn>


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cryptsetup-add-sm4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wanghao <wanghao2@kylinos.cn> - 2.3.3-6.se.01
changelog:
  - Type: bugfix
  - ID: #104286
  - SUG: NA
  - DESC: cryptsetup增加sm4支持
  -         add patch: cryptsetup-add-sm4.patch


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: zhaoqingyou<zhaoqingyou@kylinos.com> - 1:1.12.16-19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#85132]
  - SUG:NA
  - DESC: Add Patch7000:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: Marian Csontos <mcsontos@redhat.com> - 0.8.5-3
changelog:
  - Remove obsolete pool-inactive option from thin_trim man page.
  - Check input file exists eralier, and prevent writing incorrect metadata.


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 
  CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 4.1-10
changelog:
  - backport patches to fix two memory leak problems, rename patch names,
    and set release num to 9 for CI.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.1-11
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-Fix-signed-integer-overflow-in-FSTART.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-Avoid-returning-deleted-directory-entries-as-labels.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Remove-long-file-name-when-changing-short-file-name.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-gcc-sprintf-length-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-fsck.fat-Fix-Year-2038-Bug.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-mkfs.fat-Fix-parsing-of-block-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-device_info-Fix-parsing-partition-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-Fix-memory-leaks-in-read_fat-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-Turn-label-in-struct-DOS_FS-into-char-array-from-poi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p01
changelog:
  - Type:updated
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  Modify to get the value of the kernel and BuildRequires:kernel-core


author: Wang Shuo <wangshuo@kylinos.cn> - 1.18.25-10.p02
changelog:
  - Set enable_dev_package = 1, enable dpkg-dev
  - Modify false date Mon Mar 16 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.18.25-10 to Sat Mar 16 2019 ...


author: panxiaohe <panxiaohe@huawei.com> - 050-5
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec设置relabel脚本
  -         add patch: dracut-kylin-add-relabel-scripts.patch
  -       将kysec_sync_notify改为kysec_sync_daemon
  -         add patch: dracut-change-kysec-sync-notify-to-kysec-sync-daemon.patch
  -       将3adm的enable改为和桌面一致
  -         add patch: dracut-change-3adm_enable-to-be-same-as-desktop.patch
  -       更改数据库文件属主
  -         add patch: dracut-change-chown-db.patch
  -       修复加载31-32policy
  -         add patch: dracut-fix-load-policy-31-or-32.patch
  -       添加kysec_tpm配置，grub未配置时，将配置文件中的状态写入内核
  -         add patch: dracut-add-kysec-tpm-status.patch
  -       将kylin-security.conf改名为kysec.conf
  -         add patch: dracut-change-libsecurity1-config-file-name.patch
  -       修改字体
  -         add patch: dracut-change-font.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.02
changelog:
  - Type:update
  - ID:[Task#81148]
  - SUG:NA
  - DESC: 从数据库中读取relabel_status，如果是0，修改数据库中的值为1
  -         add patch: dracut-set-relabel_status-1-after-read-relabel_status.patch
  - Type:update
  - ID:[Task#81149]
  - SUG:NA
  - DESC: 将dracut.conf中安全相关的配置移动到modules.d/98relable/security.conf中
  -         add patch: dracut-move-dracut.conf-security-configure-to-98relable-security.conf.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.03
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: dracut-fix-modify-or-del-audit-log-bug.patch


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: Xiao Zai<xiaozai@kylinos.cn> - 2.0.11-2.p01
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:replaced ebtables-save perl script by bash script to get rid of the perl requirement


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j8 V=1 VERBOSE=1 instead of make for building bootstrap


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: lvfei <lvfei@kylinos.com> - 1:27.1-6.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: zhaoyuxing <zhaoyuxing2@huawei.com> - 2.2.8-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: split aspell and voikko subpackage & backport patch that enchant2 use hunspell


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.1.2-4-p03
changelog:
  - modify file esc.desktop, smart card manager description chinese local
  - Add Comment[zh_CN]=企业安全客户端智能卡管理器


author: xiehongyu <xiehongyu@kylin.cn> - 3.30.1-4.01
changelog:
  - Add evince-3.30.1-kylin-perfect-Internationalization.patch
  - Fixed BUG #12046, #11966, perfect Internationalization


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: chenyanpanHW <chenyanpan@huawei.com> - 5.39-6
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-file-localmagic.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-improve-detection-of-static-pie-binaries.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-loongarch64-elf.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: xu_ping <xuping33@huawei.com> - 3.0.3.32900-9
changelog:
  - Fix connect linking to web database by modifying the firebird.conf items to make client and server compatible


author: lvfei <lvfei@huawei.com> - 3.0.3.32900-9.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: cuiyudong <cuiyudong@kylinos.cn> - 3.0.3.32900-9.p02
changelog:
  - Type:NA
  - ID:bug#134298
  - SUG:NA
  - DESC: Add Patch0009 for support loongarch and Same source code as other arch for solve bug 134298


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: huanghaitao <huanghaitao8@huawei.com> - 3.0.15-19
changelog:
  - Make help package requires by freeradius

   Aug 21 2020 yuboyun <yuboyun@huawei.com> - 3.0.15-18
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: release +1 for rebuild


author: chenyanpanHW <chenyanpan@huawei.com> - 1.0.5-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-segfault-on-some-weird-data-structures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: huayadong <huayadong@kylinos.cn> - 1:3.30.1-10.p01
changelog:
  - Type:	compile
  - ID: 	[TASK#75897]
  - SUG:	NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: liujilin <liujilin@kylinos.cn> - 4.0.20-5.p01
changelog:
  - modify spec for mips64el, "XLDFLAGS='-Wl,-z,relro   -Wl,-z,now -specs=/usr/lib/rpm/kylin/kylin-hardened-ld -m elf64ltsmip' "


author: huayadong <huayadong@kylinos.com> - 2.5.6-1.p01
changelog:
  - Type:bugfix
  - ID  :[bug#135451]
  - SUG :NA
  - DESC:add patch0: geoclue-2.5.6-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: gaihuiying <gaihuiying1@huawei.com> - 2.23.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-11008
  - SUG:NA
  - DESC:fix CVE-2020-11008
         credential: detect unrepresentable values when parsin urls
         fsck: detect gitmodules URLs with embedded newlines


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: yangcheng <yangcheng87@huawei.com> - 2.66.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESE:remove the installation dependency of the main pakage on the help package


author: lvfei <lvfei@kylinos.c> - 3.30.0-2.p01
changelog:
  - add patch:0001-update-the-package-name.patch
  - add patch:0002-fix-some-translate.patch 
  - add patch:0003-disable-popup-dialog-warning.patch


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: Liu Tao <tao1.liu@cs2c.com> - 3.32.1-2.08
changelog:
  - Modified spec file and patch100 for Network function
  - Add patch101 patch102 for Services function


author: anyunhao<anyunhao@kylinos.cn> - 3.6.14-7.p02
changelog:
  - Type:update
  - ID:[Task#85463]
  - SUG:NA
  - DESC:split package gnutls-utils,reduce main package installation dependencies


author: liufeng<liufeng@kylinos.cn> - 3.4-0.1.p01
changelog:
  - Type:compile
  - ID:[TASK#74803]
  - SUG:NA
  - DESC:avoid sticky problem with '-f - -f -'
         open Check


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.p01
changelog:
  - Type:bugfix/update
  - ID:task#74110
  - SUG:NA
  - DESC:Add Patch0356,Patch0357,Patch0358
  -      Add support for uboot
  -      Add Grub2 password


author: xieyuxing<xieyuxing@kylinos.cn> - 2.04-21.se.01.p04
changelog:
  - Type:update
  - ID:task#81649 121848,123751,88712
  - SUG:NA
  - DESC:Add and modify Kyee measure mod
  -      Add tpcm patches provided by haiguang


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p05
changelog:
  - Type:update
  - ID:task#96116
  - SUG:NA
  - DESC:backport PATCH0368, support BPI01002 and phy-addr BIOS
         backport PATCH0369, loongArch64 add FDT support
         add PATCH0370, loongArch64 fix undeclared errors


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p06
changelog:
  - Type:update
  - ID:bug#127107
  - SUG:NA
  - DESC:add PATCH0371, loongArch64 solve "out of memory" during PXE installation


author: kangyu<kangyu@kylinos.cn> - 2.04-21.se.01.p07
changelog:
  - Type:update
  - ID:bug#128022
  - SUG:NA
  - DESC:Remove the not find kyee prompt
         add press y to enter the system


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.01.p08
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for grub-boot-indeterminate.service


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: liqian <liqian@kylinos.cn> - 2.24.32-7.p01
changelog:
  - install gtk3-immodules need gtk2-immodules package 
  - modify spec file enable_immodules_package 1  build gtk2-immodules packages


author: GuoCe <guoce@kylinos.cn> 2.24.32-7.p02
changelog:
  - gtk/gtkscale.c (gtk_scale_class_init): Change Up, Down, Kp up, Kp down,
  - Page Up, Page Down, Kp page up, Kp page down, Left, Right, Kp left and Kp Right
  - bindings for logical movement.
  - add file gtk+-2.24.32-kylin-13336.patch


author: lvfei <lvfei@kylinos.cn> - 3.24.21-1.p01
changelog:
  - sync liqian spec modify code 
  - Handle the mouse block problem of virt-manager virtual machine
  - loss buildrequire packages libXcursor-devel 
  - Handle the mouse block problem of virt-manager virtual machine
  - modify gtk3 spec file enable_immodules_package 1


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: panzhe <panzhe@kylinos.cn> - 1.40.2-8.p01
changelog:
  - Type:bugfix/compile
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that coldplug does not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel 
  - Add Patch02, Fixed "Favorites" error in "My Computer".
  - Add Patch03, Solve the problem that usb flash drive sometimes fails to mount automatically.
  - Add Patch04, Solve the problem that the window displays "Network".


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p01
changelog:
  - Type:bugfix
  - ID:[Bug#114844]
  - SUG:NA
  - DESC:add patch1:hardinfo-kylin-fix-vendor-unknown-bug.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p02
changelog:
  - Type:bugfix
  - ID:[Bug#127017][Bug#127010]
  - SUG:NA
  - DESC:add patch2:hardinfo-0.6.1-kylin-solve-segment-error-and-survival-reporting-problems.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p03
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch3:hardinfo-0.6.1-kylin-change-x11-vendor.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p04
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch4:hardinfo-0.6.1-kylin-fix-the-segment-error-when-executing-hardinfo-without-display.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p05
changelog:
  - Type:bugfix
  - ID:[Bug#140774]
  - SUG:NA
  - DESC:add patch4:hardinfo-0.6.1-kylin-fix-core-file-appears-in-the-report-generation-function.patch


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: GuoCe <guoce@kylinos.cn> - 1.3.17-4.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: Modify spec to support loongarch
          Delete file *.cmxa and *.cmx because loongarch64
          does not support ocamlopt.


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-9.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: GuoCe <guoce@kylinos.cn> - 2.4.43-13.p02
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Copy config.guess and config.sub to compile environment for loongarch


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p03
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, change country and organization to kylin


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p04
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, according to the requirements , only  change country to CN


author: wangfengtu <wangfengtu@huawei.com> - 2.0.10-8
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: fix undefined reference to `service_arguments_free' in libisulad_img.so


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.10-11
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: fixed a bug that occurs when starting a container in host mode


author: wangshuo <wangshuo@kylinos.cn> - 2.0.1-20210521.095209.giteb4670a5.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Update Source0, add patch file to patch-loong64 directory
  -      Modify spec, apply the loong64 patch: 0001-Kylin-add-iSulad-img-2.0.1-loongarch64-support.patch


author: Simone Caronni <negativo17@gmail.com> - 3.8.3-47
changelog:
  - Use macros for build, install and setup.
  - Minor cleanups to SPEC file.
  - Use valid URL for Debian patches.


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: chengycehun <chengycehun1@huawei.com> - 5.5.0-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:lib/bpf:fix bpffs mount when /sys/fs/bpf exists
             tc/f_flower:fix port range parsing


author: wuchangsheng <wuchangsheng2@huawei.com> - 5.5.0-10
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:tc flowerr Fix buffer overflow on large labels
         q_cake allow changing to diffserv3


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-10.p01
changelog:
  - Type:bugfix
  - ID:[task#88672]
  - SUG:NA
  - DESC:fix remove namespace fail when netns have net_device


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-10.p02
changelog:
  - Type:bugfix
  - ID:[task#90176]
  - SUG:NA
  - DESC:add buildrequire libdb-devel to fix missing arpd program


author: Chris Leech <cleech@redhat.com> - 6.2.0.878-0.gitd791ce0
changelog:
  - 1761940 iSCSI CHAP authentication not function with FIPS enabled
  - Service file improvements forward ported from RHEL 7.8
  - various static analysis fixes from upstream


author: lixiang <lixiang172@huawei.com> - 0.9.4-14
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:Modify gen-version script and add changelog automatically


author: leizhongkai<leizhongkai@huawei.com> - 0.9.5-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:make `isula-build ctr-img images` display comfortably


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Switch to EA mode.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833.
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Require tzdata 2020f due to JDK-8259048
  - Require tzdata 2021a due to JDK-8260356
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.292.b10-8.1.8
changelog:
  - 版本升级，由jdk8u282-b08升级至jdk8u292-b10
  - SHA1/SHA256 Intrinsics优化，使得SPECjvm2008中的crypto.signverify项提升71%
  - AES Intrinsics优化，使得SPECjvm2008中的crypto.signverify项提升约6.14%
  - 优化C2中Rotation操作，使得SPECjvm2008中的crypto.signverify在LoongArch和MIPS上分别提升了4.3%和2.6%
  - 数组拷贝优化，使得SPECjvm2008中的serial项提升6.4%
  - 优化C2中一些立即数为0时的访存操作
  - 去除输入法跟随功能
  - jdk中不附带ChangeLog文件
  - 解决了一处解释器中由于乱序执行可能导致的随机崩溃问题
  - 修复DaCapo eclipse个别条件下随机崩溃问题
  - 修复NMT相关崩溃问题


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.302.b08-8.1.9
changelog:
  - 版本升级，由jdk8u292-b10升级至jdk8u302-b08
  - [LoongArch] 解决了一处在堆设置大于128G时可能触发的随机崩溃问题
  - [LoongArch] 实现trampoline stub，解决patch原子性问题


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.332.b09-8.1.11
changelog:
  - 版本升级，由8u312-b07升级至8u322-b06
  - 版本升级，由8u322-b06升级至8u332-b09
  - [LoongArch] C1和分层编译支持，优化性能
  - [LoongArch] C2向量指令优化
  - [LoongArch] 优化GC停顿时间
  - [LoongArch] CRC32 Intrinsics优化
  - 优化ArrayFill
  - [LoongArch] 优化Math.multiplyHigh
  - [LoongArch] AllocatePrefetch相关参数调优
  - [LoongArch] InlineSmallCode调优，默认值设为2000
  - [LoongArch] 使用cpucfg识别特性
  - 修复Redefine Class可能导致的偶发崩溃
  - 修复jvmti相关的随机错误
  - 修复push2/pop2入栈和出栈顺序问题
  - 修复Early Return可能导致浮点值恢复错误问题
  - 修复ori2s立即数越界问题


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.11.0+7
  - Update release notes to 11.0.11.0+7
  - Switch to EA mode for 11.0.11 pre-release builds.
  - Require tzdata 2020f to match upstream change JDK-8259048
  - Remove RH1868754 patch as this is now resolved upstream by JDK-8258833
  - Remove RH1868740 & RH1883849 patches as these are now resolved by JDK-8259319
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Switch to EA mode for 11.0.12 pre-release builds.
  - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  - Re-order source files to sync with Fedora.
  - Remove explicit compiler flags which should be handled by the upstream build
    (-std=gnu++98, -fno-delete-null-pointer-checks, -fno-lifetime-dse)
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: wanglianguo <wanglianguo@kylinos.cn> - 0.15-1.p01
changelog:
  - Type:compile
  - Id:NA
  - SUG:NA
  - DESC:
  1. 去掉BuildRequires:  ninja-build.
  2. cmake使用cmake-3.12.1.
  3. 增加Documentation
  4. 增加check


author: cuiyudong <cuiyudong@kylinos.cn> - 2.0.22-1.p04
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: patch3 : modify initramfs name use KDUMP_IMG_EXT
  -       patch4 : add option hardened_usercopy for capture kernel  
  -       patch5 : add 10M size when load kernel image because after unzip kernel image the memory space need larger   
  -       patch6 : add initrd memory code for solve the memory of initrad is so large but memory is small  
  -       patch7 : modify-lz-mode-and-add-23-26-support  
  -       add kdump-rescue.service for init 1 start for kdump function and add enable kdump-rescue.service when post for capture kernel start with init 1


author: cuiyudong <cuiyudong@kylinos.cn> - 2.0.22-1.p05
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: add requires(post) systemd for solve the problem of can not systemctl when install.


author: cuiyudong <cuiyudong@kylinos.cn> - 2.0.22-1.p06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: add patch08 for generate vmcore-dmesg.txt and modify patch07 for delete nr_cpus = 1.


author: cuiyudong <cuiyudong@kylinos.cn> - 2.0.22-1.p07
changelog:
  - Type:bugfix
  - ID:148704 and 136269
  - SUG:NA
  - DESC: add patch09 for modify kdump_kver and add patch10 for modify crash dir.


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.01
changelog:
  - Type: update
  - ID: #75532
  - SUG: NA
  - DESC: 移植kysec补丁
  -         add patch: kmod-27-kylin-security.patch
  -       添加kysec检查
  -         add patch: kmod-27-add-kysec-kmod-check.patch
  -       使用kysec检查函数
  -         add patch: kmod-27-using-kysec-check-kmod-func.patch


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.04
changelog:
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: KYLIN-kylin-security-daemon-fix-sql-inject-by-retrieve.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.05
changelog:
  - Type: update
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复kysec-sync-notify中的sub_3960函数存在命令注入漏洞
  -         add patch: kylin-security-daemon-fix-fix-notify-get-file-type.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.06
changelog:
  - Type: bugfix 
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kylin-security-daemon-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#147906]
  - SUG:NA
  - DESC: 修复文件保护无法添加含有特殊字符文件名的文件
  -         add patch: kylin-security-daemon-fix-fpro-not-add-special-character-file-name-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题 
  -         add patch: kylin-security-daemon-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#118414]
  - SUG:NA
  - DESC: 清空内核模块防卸载白名单，保留sm4_generic
  -         add patch: kysec-daemon-kmod-whlist-keep-sm4_generic.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.06
changelog:
  - Type: update
  - ID: [TASK#84294]
  - SUG:NA
  - DESC: 修复whlist_update_by_deb接口存在命令注入漏洞
  -         add patch: kysec-daemon-fix-popen-injection-command-leak.patch
  - Type: bugfix 
  - ID: [BUG#122953]
  - SUG:NA
  - DESC: 解决在龙芯机器上安全中心获取内核防卸载名单失败的问题 
  -         add patch: kysec-daemon-fix-ksc-defender-load-kmod-whlist-error.patch
  - Type: bugfix 
  - ID: [BUG#122688]BUG#122673]BUG#122671]BUG#122646]BUG#122644]
  - SUG:NA
  - DESC: 修复操作whlist数据库的SQL注入的问题
  -         add patch: kysec-daemon-fix-sql-inject-by-operate-whlist-database.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.07
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC:   kysec命令行改造，将security-switch模块设置逻辑下移到服务
  -         add patch: kysec-daemon-add-security-switch-module.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.08
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的服务接口
  -         add patch: kysec-daemon-add-chpolicy.patch
  - Type: bugfix
  - ID: [Bug#122953]
  - SUG:NA
  - DESC: 修复添加内核防卸载时，Qstring导致的乱码的问题
  -         add patch: kysec-daemon-fix-add-kmod-protect-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.09
changelog:
  - Type: bugfix
  - ID: [Bug#131435][Bug#131574]
  - SUG:NA
  - DESC: 修复security-switch加固后切换strict模式失败的问题
  -       修复strict模式下，切换selinux模式为permissive失败的问题
  -         add patch: kysec-daemon-fix-kysec-command-bug.patch
  - Type:update
  - ID: NA
  - SUG:NA
  - DESC: 将kysec-module的dbus通信移植到kysec-daemon
  -         add patch: kysec-daemon-modify-dbus-module-to-daemon.patch
  - Type: bugfix
  - ID: [bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.10
changelog:
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-daemon-fix-failed-to-remove-exectl.patch
  - Type: update 
  - ID: []
  - SUG:NA
  - DESC: netctl添加pkg path的dbus接口
  -         add patch: kysec-daemon-netctl-add-pkg-path-dbus-interface.patch 
  - Type: bugfix
  - ID: [Bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 1.0.10kord-se.06
changelog:
  - Add patch 0001-change-version-1.0.10.patch
    This patch only updated the tool's version to 1.0.10 from 1.0.7.


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.02
changelog:
  - netctl自动添加联网程序，并设置为拦截
  -   add patch: kysec-syc-daemon-netctl-auto-add-xml.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -          add patch: kysec-sync-daemon-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.04
changelog:
  - Type: bugfix 
  - ID:[bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题
  -       修复网络控制自动探测时程序不是rpm或者dpkg安装，导致包名不正确的问题
  -           add patch: kysec-sync-daemon-fix-netctl-auto-add-pkg-is-not-rpm-install.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.05
changelog:
  - Type: update
  - ID:[]
  - SUG:NA
  - DESC: 修改netctl自动探测，对于不是rpm包安装的,pkg填写全路径
  -         add patch: kysec-sync-daemon-modify-netctl-auto-add-whlist.patch
  - Type: bugfix
  - ID:[bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-sync-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#112677]
  - SUG:NA
  - DESC: 依据服务器部门提供的netctl白名单列表，修改网络控制xml文件
  -         add patch: kysec-utils-netctl-modify-xml-file.patch
  - Type: bugfix
  - ID:[BUG#106538]
  - SUG:NA
  - DESC: 修改kysec_check_exec()函数，解决sh执行脚本的问题
  -         add patch: kysec-utils-modify-kysec_check_exec-function.patch
  - Type: bugfix
  - ID:[BUG#118587]
  - SUG:NA
  - DESC: 修复当模块的标签是unknown是仍然可以insmod的问题
  -         add patch: kysec-utils-fix-insmod-seccuess-when-module-label-unknown.patch
  - Type: bugfix
  - ID:[BUG#122963]
  - SUG:NA
  - DESC: netctl为龙芯的机器添加龙芯浏览器白名单
  -         add patch: kysec-utils-netctl-xml-add-lbrowser-for-loongarch64.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 给安全加固程序加上kysoft标记，因为安全加固程序需要给配置文件打白名单，需要kysoft标记，否则没有权限
  -       add patch: kysec-utils-add-kysoft-label-to-security-reinforce.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.07
changelog:
  - Type: update
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-utils-fix-fortify.patch
  - Type: bugfix
  - ID:[Bug#121813]
  - SUG:NA
  - DESC: 在secadm_list列表中加入semodule程序，修复三权模式下，secadm用户安装，卸载策略模块失败的问题 
  -         add patch: kysec-utils-add-semodule-to-secadm_list.patch
  - Type: bugfix
  - ID:[Bug#122812]
  - SUG:NA
  - DESC: 修复sh执行可执行程序失败的问题，libkysecwhlist.so调用失败
  -         add patch: kysec-utils-fix-sh-execute-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.08
changelog:
  - Type: update
  - ID:[Task#90053]
  - SUG:NA
  - DESC: 修改kysec相关命令
  -         add patch: kysec-utils-modify-kysec-command.patch
  - Type: bugfix
  - ID:[Bug#128959][Bug#128809]
  - SUG:NA
  - DESC: sh执行没有标记的脚本，度量成功后，允许执行并打上verified的标记
  -         add patch: kysec-utils-fix-sh-execute-set-label.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.09
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的库接口
  -         add patch: kysec-utils-add-chpolicy.patch
  - Type: update
  - ID:[Task#90053][Bug#131756]
  - SUG:NA
  - DESC: 优化部分kysec相关命令, 解决软件包标签获取命令执行报错的问题
  -         add patch: kysec-utils-kysec-command-optimize-and-fix-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.10
changelog:
  - Type: update
  - ID:[Task#90053][Bug#128917][Bug#131796][Bug#131599][Bug#131594]
  - SUG:NA
  - DESC: 优化部分kysec相关命令
  -       修复进程开启情况下，设置防杀死标签，不生效，下次打开的进程才生效的问题
  -       修复kysec_set设置应用程序联网管控失败的问题
  -       修复strict模式下关闭kysec后root用户执行setenforce 0提示权限不够的问题
  -       修复strict模式下关闭kysec后secadm和auditadm用户仍存在的问题
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: kysec-utils-fix-kysec-command-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.11
changelog:
  - Type: update
  - ID: NA
  - SUG:NA
  - DESC: kysec检查接口还原p标记检查，先做hash值检查，再检查p标记
  -         add patch: kysec-utils-kysec-check-lib-restore-parent-label-check.patch
  - Type: bugfix
  - ID: [bug#135468]
  - SUG:NA
  - DESC: 修复kysec组件命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-command-inject-bug.patch
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-utils-fix-failed-to-remove-exectl.patch
  - Type: bugfix
  - ID: [Bug#138094]
  - SUG:NA
  - DESC: 旧版本接口兼容
  -         add patch: kysec-utils-add-old-version-interface-compatible.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.12
changelog:
  - Type: bugfix
  - ID: [BUG#140008]
  - SUG:NA
  - DESC: setstatus设置disable提示重启生效
  -         add patch: kysec-utils-setstaus-disable-prompt-reboot.patch
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-utils-fix-not-set-status-when-close-3adm.patch
  - Type: bugfix
  - ID: [BUG#142102]
  - SUG:NA
  - DESC: 修复非secadm用户不可查看当前安全状态的问题
  -         add patch: kysec-utils-delete-security-switch-from-secadm-list.patch
  - Type: update
  - ID: [TASK#113906]
  - SUG:NA
  - DESC: 从auditadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-auditadm-list.patch
  - Type: update
  - ID: [TASK#113152]
  - SUG:NA
  - DESC: 命令行注入分析及解决
  -         add patch: kysec-utils-command-line-injection.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#143767][BUG#143772][BUG#143803]
  - SUG:NA
  - DESC: 修复kysec_get module打印的帮助信息提示无效的参数
  -       修复kysec_set module(exectl\kmod\fpro\ppro)显示的不是子模块帮助信息
  -       修复kysec_set kmod -v allow -n nbd.ko.xz后有两个防卸载模块的问题
  -         add patch: kysec-utils-fix-kysec-command-prompt-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: kysec-utils-fix-security-switch-disable-after-force-reboot-bug.patch
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-utils-netctl-set-off.patch


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add new fields in config v2 and inspect to support modifications on iSulad


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-exec-Fix-setting-locale-for-util-calls.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-dm-Fix-memory-leak-in-the-DM-plugin-and-DM-logging-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-fs-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-kbd-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-lvm-dbus-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-mdraid-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-swap-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-vdo-Do-not-use-g_memdup-in-bd_vdo_stats_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Xiang Gao <gaoxiang@kylinos.cn> - 0.1.1-1.p01
changelog:
  - Type: Update
  - ID:NA
  - SUB:NA
  - DESC: 1. remove kernel header dependency for kylin linux kernel
          2. add loongarch support


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: xuhe <xuhe@kylinos.cn> - 5.3.28-36.p01
changelog:
  - Rebuild for Kylin
  - Add BuildRequires:  java       >= 1:1.6.0
  - Add BuildRequires:  java-devel <  1:1.11.0
  - Add BuildRequires:  java       <  1:1.11.0


author: GuoCe <guoce@kylinos.cn> - 0.48.0-4.p02
changelog:
  - Type:bugfix
  - ID:bug#112960
  - SUG:NA
  - DESC:Author:yueyuankun modify bugtracker url, "https://bugzilla.kylinos.cn"


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: panxiaohe <panxiaohe@huawei.com> - 2.1.12-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add debuginfo package and make ELF files stripped
         remove redundant ABI compatibility library


author: WangShuo<wangshuo@kylinos.cn> - 3.3-8.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch1, port-loongarch
  -      Modify BuildRequires dejagnu to gdb, fix check error


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: xiao yuliang <xiaoyuliang@kylinos.cn> - 1:1.40.2-13.p01
changelog:
  - Type: update
  - ID:   [TASK#74237]
  - SUG:  NA
  - DESC: add supermin.d-arm.tar.gz and supermin.d-x86.tar.gz from libguestfs-1.40.2-9.p03 to fix bug that guestfish can not use.
  -       remove Enable appliance because it interferes with the above functions.


author: wangshuo <wangshuo@kylinos.cn> - 1:1.40.2-13.p02
changelog:
  - Type: update
  - ID:   [TASK#78310]
  - SUG:  NA
  - DESC: Add Source5:supermin.d-loongarch.tar.gz and Patch0003:0001-Merge-Patch0003-0004-from-1.40.2-9.p06-for-loongarch.patch from libguestfs-1.40.2-9.p06.a.ky10


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: shenyangyang <shenyangyang4@huawei.com> - 1.6.4-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of gobject-introspection-devel to solve build problem


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: Guoshuai Sun <sunguoshuai@huawei.com> - 1.2.57-12
changelog:
  - ID:CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
  - SUG:restart
  - DESC:fix CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
    And we have check CVE-2014-9495 CVE-2011-3045 CVE-2008-3964 CVE-2015-8126 CVE-2015-0973 alreadyi been fixed before.
    And CVE-2016-3751 CVE-2013-6954 didn'd involved.


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 加入回文和相似性检查
  -         add patch: libpwquality-add-palindrome-similar-option.patch
  -       恢复pwquality.conf的默认配置
  -         add patch: libpwquality-restore-pwquality.conf-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.02
changelog:
  - Type:update
  - ID: [Task#91807]
  - SUG:NA
  - DESC: 恢复pwqprivate.h的默认配置
  -         add patch: libpwquality-restore-pwqprivate.h-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.03
changelog:
  - Type: Bugfix
  - ID: [Bug#118364]
  - SUG:NA
  - DESC: 回文检查配置项默认打开
  -         add patch: libpwquality-set-palindrome-default-on.patch


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: fuanan <fuanan3@huawei.com> - 1.12.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Fix:memory leaks
         Fix:lr_fastestmirror_prepare:Resource leaks
         Fix:lr_get_curl_handle:Check curl_easy handle before use
         lr_get_curl_handle:Strict check of curl_easy_setopt return code
         Remove "may be used uninitialized" compiler warnings


author: Shi Jingying <shijingying@kylinos.cn> - 2.10.1-10.p01
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify spec, custom files, and add file ureport.conf
         add Patch10001, rebrand


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.06
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.07
changelog:
  - Type:update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: libsecurity1-netctl-set-off.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1-4-se.01
changelog:
  - Type:update
  - ID:[Task#]
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks


author: hanhuijie <hanhuijie@qq.com> - 3.1-3.se.01
changelog:
  - Type:update
  - ID:[Task#76391]
  - SUG:NA
  - DESC:
  - 增加libsemanage补丁
  -         add patch: libsemanage-20200319.patch
  -       增加文件当前包含的作用户操作的模板


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    rhbz#1972249 rhbz#1972250 rhbz#1972252 rhbz#1972243


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: wangshuo <wangshuo@kylinos.cn> - 1.8.0-6.p01
changelog:
  - Type: compile
  - ID:   [TASK#78310]
  - SUG:  NA
  - DESC: Remove BuildRequires:valgrind and modify configure without mem-leak-test for loongarch64


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependecy on the help package from requires to recommends.


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:update
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - virDevMapperGetTargets: Don't ignore EBADF
  - virdevmapper: Don't cache device-mapper major
  - virdevmapper: Handle kernel without device-mapper support


author: wangshuo <wangshuo@kylinos.cn> - 6.2.0-16.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch0043, Kylin add libvirt-6.2.0 loongarch64 support
  -      Update loongson's libvirt-6.0.0 patch
            resolve check problem
            resolve undefined VIR_PCI_CONNECT_AUTOASSIGN problem
            compatible with both qemu and qemu-kvm
  -      Modify spec, add loongarch64 support
            loongarch64 define: qemu_kvm_arches, with_storage_zfs 0, with_numactl 0, with_numad 0
            add loongarch LOADERS define
            add loongson libvirt-6.0.0 configure command as comment, for backup


author: GuoCe <guoce@kylinos.cn> - 4.4.16-2.p01
changelog:
  - Type:Update
  - ID:NA
  - SUG:NA
  - DESC:Add patch9001 to adapt to the loongson browser.
         1.change the version of GLIBC to 2.27;
         2.Change the soname of the installed library to libcrypt.so.1 on loongarch64;


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: shenyangyang <shenyangyang4@huawei.com> - 2.9.10-3
changelog:
  - Fix-use-after-free-with-validating-reader and
    Never-expand-parameter-entities-in-text-declaration


author: zoulin <zoulin13@huawei.com> - 2.9.10-6
changelog:
  - Fix more quadratic runtime issues in HTML push parse
  - Fix reset HTML parser input before reporting error


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.9.10-10
changelog:
  - revert Don-t-try-to-handle-namespaces-when-building-HTML-do.patch.
    rubygem-nokogoro test case fail,because this patch remove xml namespace function.


author: openEuler Buildteam <buildteam@openeuler.org> - 1.3-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:change the directory of the license file and add the help package for libxshmfence


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.4.lns8
changelog:
  - [loongarch][assembler] Remove useless .mdebug.abilp64 section
  - [loongarch][assembler] Use '.section .bss' instead of '.bss' and fix 'harf' typo
  - [loongarch][assembler] Support inline asm 'z' extra code
  - [loongarch][assembler] Remove .module and fp related .set directives to align with GAS
  - [loongarch][codegen] Fix optimization error of signext
  - [loongarch][codegen] Support the read_register intrinsic
  - [loongarch][codegen] Sign extend the imm operand of lu12i.w according to the ISA
  - [loongarch][codegen] Refine vector registers and instructions definition
  - [loongarch][codegen] Update vector builtins to keep it consistent with GCC
  - [loongarch][codegen] Do not set cttz to legal for vector since lacking of instructions
  - [loongarch][disassembler] Fix offset decoding error of the B and BL instructions
  - [loongarch][NFC] Use llvm8 style inline license header


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.5.lns8
changelog:
  - [test][NFC] Add missing file llvm/test/MC/LoongArch/lit.local.cfg
  - Fix vector xor node merging error in debug mode
  - Add test cases for the vext2xv.* instruction and format LoongArchTargetTransformInfo.cpp files
  - [llvm] Code cleanup for lowerFCOPYSIGN and add test case
  - Optimizing scalar logic operations
  - [NFC] Fix typo XLP32 to LPX32
  - Optimize tail call
  - Fix the memory address in the atomic operation contains dirty data
  - Optimize redundant sign extension instructions
  - Fix atomic operation address calculation error
  - Add a missing imm0 to i8/i16 atomic instructions
  - [sancov][sanitizer-common] Correct sanitizer coverage point
  - [test] Simplify the regression test for the recent signext optimization bug fix


author: jenkins <jenkins@loongson.cn> - 8.0.1-1.6.lns8
changelog:
  - [loongarch] Optimize add and abs to [x]vadda.* on vector values
  - [loongarch] Optimize immediate loading and mul-to-add-sub transformation
  - [loongarch] Optimize scalar and vector logic operations
  - [loongarch] Optimize vector data shuffling and 8x8 matrix operations
  - [loongarch] Check immediate range for branch instructions in assembler
    and fix the bug of decoding branch target in disassembler
  - [ObjectYAML] Add LoongArch support
  - [Backport][SCEV][LSR] Prevent using undefined value in binops


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-improve-NVMe-device-parsing-and-make-WWN-printing-fo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-lsscsi-wwn-number-output-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hexiaole <hexiaole@kylinos.cn> - 8:2.03.09-12.p01
changelog:
  - Type:compile
  - ID:[任务#74797]
  - SUG:NA
  - DESC:Patch18:0018-LD_LIBRARY_PATH-add-extra-dir.patch:add patch to resolve running-time error of test/unit/unit-test: error while loading shared libraries: libdevmapper-event.so.1.02: cannot open shared object file: No such file or directory


author: wangshuo <wangshuo@kylinos.cn> - 4.0.3-2021122701.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch0036: 0001-Kylin-add-lxc-4.0.3-loongarch64-support.patch


author: huayadong <huayadong@kylin.cn> - 1.16.1-4
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: GuoCe <guoce@kylinos.cn> - 1.12.1-1.p01
changelog:
  - Add patch: mate-media-1.12.1-1kord24~rc1-kylin-tooltip-shows-error.patch
  - Disable tooltips display of speaker.


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: mengchaoming<mengchaoming@kylinos.cn> 1.24.0-1.p01
changelog:
  --add patch:mate-system-monitor-1.24.0-kylin-del-help.patch
  --add patch:mate-system-monitor-1.24.0-kylin-adjust-proc-spacing.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 168-2
changelog:
  - The "cc:command not found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the --syslog option while executing mdadm --scan command in mdmonitor.service


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: Zhenneng Li <lizhenneng@kylinos.cn> - 20.1.4-1.p05
changelog:
  - Type:BUG
  - ID:[BUG#95676]
  - SUG:NA
  - DESC: add loongarch patch to fix sigment fault when running glxgears


author: chengguipeng <chengguipeng11@huawei.com> - 8.3.0-14
changelog:
  - BuildRequires:add libglvnd-devel, libXext-devel and remove mesa-libGLES-devel to solve compilation failture.


author: liyunqing <liyunqing@kylinos.cn> - 2:0.93-2.p01
changelog:
  - Type:bugfix
  - ID:[Task#93368],[Task#93369]
  - SUG:NA
  - DESC: 1.fix mtr gui program can't start;
  	2.add patch01-03 to fix gui program can't change dst_ip;


author: wangshuo <wangshuo@kylinos.cn> - 2.3-8.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch0003:0001-Kylin-add-mvapich2-2.3-loongarch64-support.patch
         Add BuildRequires:infiniband-diags-devel


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: liyunqing<liyunqing@kylinos.cn>--1.18.22-4.p10
changelog:
  - Type:BUG
  - ID:[BUG#135567、BUG#53964]
  - SUG:NA
  - DESC:sync patch from loongarch, fix bug135567 and bug53964 for loongarch64 only


author: zengwefeng<zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:enable check while building
         parser_bison memleak symbol redefinition
         segtree memleaks in interval_map_decompose
         json Combining terse with json has no effect
         evaluate Reject quoted strings containing only wildcard
         Solves Bug 1462 nft j list set does not show counters
         json Fix memleak in set_dtype_json
         mnl reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE


author: gaihuiying <gaihuiying1@huawei.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate disallow ct original s d ddr from maps
         evaluate disallow ct original s d ddr from concatena


author: Like <like@kylinos.cn> - 1:1.16.1-9.p01
changelog:
  -Type:bugfix 
  -ID:BugID#74947
  -DESC:set with_mailcap_mimetypes 1 to fix nginx conflicts with mailcap


author: wangshuo <wangshuo@kylinos.cn> - 4.26.0-2.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch2, 0001-Kylin-add-nspr-4.26.0-loongarch64-support.patch


author: cuiyudong <cuiyudong@kylinos.cn> - 3.54-2.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:solve compile error because of low version for nspr-devel(/usr/include/nspr4/prlog.h)


author: wangshuo<wangshuo@kylinos.cn> - 1.16.5-6.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch3, 0001-Kylin-add-numpy-1.16.5-loongarch-support.patch
  -      Modify spec, remove openblas for loongarch64 check problem


author: guochao <guochao@kylinos.cn> -4.07.0-7p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:cp and use system config.guess and config.sub; modify spec mips64el not build  native_compiler


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangshuo <wangshuo@kylinos.cn> - 3.10.0-2.p01
changelog:
  - Type:compile
  - ID:[TASK#103838]
  - SUG:NA
  - DESC:Add --disable-locks flags for loongarch64 compile, no using libitm-devel


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 5.2.122-20
changelog:
  - Suppressed the dependency on SCons (as autotools are used instead)
  - Fixed the generated version minor number (from 127 to 122)
  - Fixed the target include directory


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p02
changelog:
  - Type: update
  - ID: [Task#67548]
  - SUG: NA
  - DSEC: support national cryptographic standard algorithm feature


author: anyunhao <anyunhao@kylinos.cn> - 1:1.1.1f-15.p03
changelog:
  - Type: update
  - ID: [TASK#85463]
  - SUG: NA
  - DSEC: split package openssl-perl,reduce main package installation dependencies


author: wangshuo <wangshuo@kylinos.cn> - 1:1.1.1f-15.p04
changelog:
  - Type: update
  - ID: [TASK#78310]
  - SUG: NA
  - DESC: Add Patch85, Kylin add openssl loongarch64 support
  -       Modify spec, Kylin modify configure command for build on loongarch64


author: Xu Xiangyu <xuxiangyu@hygon.cn> - 1:1.1.1f-15.p05
changelog:
  - Type: update
  - ID: [Task#84503]
  - SUG: NA
  - DSEC: add hygoncpp engine and speed test for openssl support hygon cipher coprocessor hardware


author: shenyangyang <shenyangyang4@huawei.com> - 2019.4-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add the version and release of ostree-libs(loongarch64-64)


author: wulei <wulei80@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Do not run testcase test-libarchive-import, because selinux is off.


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: pam-login-check-same-uid.patch


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.02
changelog:
  - Type: bugfix
  - ID:[BUG#136126]
  - SUG:NA
  - DESC: 对于相同的uid的两个账户，允许uid和username匹配的账户登录
  -       add patch: pam-fix-right-uid-not-login-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 0.80-9.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  -         add patch: passwd-0.80-add-security-check.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-pcsc-lite-change-to-use-python3-for-pcsc-spy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-Do-not-possibly-lock-a-reader-if-allocating-hCard-fa.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-a-hang-in-SCardTransmit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-ATRDecodeAtr-always-initialize-the-return-values.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-EHUnregisterClientForEvent-correctly-handle-EHTryToU.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: wangshuo <wangshuo@kylinos.cn> - 1.21-2.p02
changelog:
  - Type:compile
  - ID:[Task#103838]
  - SUG:NA
  - DESC:Add Patch0, enable test except mariadb_server_prepare_disable_fallback=1


author: WangShuo <wangshuo@kylinos.cn> - 3.04-6.p01
changelog:
  - Add 'export PERL_CANARY_STABILITY_NOPROMPT=1' before perl Makefile.PL
  - Skip the Canary::Stability COMPATIBILITY AND SUPPORT CHECK prompt


author: shenyangyang <shenyangyang4@huawei.com> - 1.88-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl-Test-Warn and perl-Test-Exception


author: Paul Howarth <paul@city-fan.org> - 0.59-3
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Simplify find command using -empty
    - Make %files list more explicit


author: Shen Yangyang <shenyangyang4@huawei.com> - 4:5.28.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete provide of perl-macros that actually provided by openEuler-rpm-config


author: wanghao<wanghao2@kylinos.cn> - 4:5.28.3-7.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec执行控制检查
  -         add patch: perl-5.28.3-add-kysec-exectl-check.patch


author: xuhe <xuhe@kylinos.cn> - 0.9.5-2.p01
changelog:
  - Rebuild for Kylin
  - Migrates patch from v10sp2 to v10sp3 to fix default theme on FT-1500A platform


author: mengchaoming<mengchaoming@kylinos.cn> -3.1-7.p01
changelog:
  -Type:bugfix
  -ID:14829
  -SUG: Language Sinicization
  -DESC:sp2 patch to sp3:0001-Kylin-policycoreutils-2.8-14.2-kylin-fix-bug-14829.patch


author: panxiaohe <panxiaohe@huawei.com> - 0.116-9
changelog:
  - Fix CVE-2021-4034

  - Tue Jun 22 2021 Hugel <gengqihu1@huawei.com> - 0.116-8
  - Port polkit to mozjs78


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: Like<like@kylinos.cn> - 5.3.0-17.p01
changelog:
  - Type:cves
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: Kevin Fenzi <kevin@scrye.com> - 2.0.0-7
changelog:
  - Review fixes: drop python3 dep, Update obsoletes, add python_provide
  - Review fixes: Use pypi_source, fixed files globbing.


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05
changelog:
  - Type: bugfix
  - ID:[Task#84294][BUG#124545][BUG#124543][BUG#122720]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python3-fix-parameter-c-or-m-kysec-exectl.patch


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Use gdbm_count for dbm_length if possible
         Don't override PYTHONPATH which is already set by the user


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: wanghao<wanghao2@kylinos.cn> - 3.7.9-18.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#104619]
  - SUG:NA
  - DESC: python3添加kysec检查
  -         add patch: Python3-judge-python-file-run.patch


author: wangshuo<wangshuo@kylinos.cn> - 3.7.9-18.se.01.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch9003, 0001-Kylin-add-python-3.7.9-loongarch64-support.patch
         Add Patch9004, 0001-Merge-3.7.4-8.p05-Patch317-318-fix-random.patch
         Add Patch9005, 0002-Python3-kysec-check-exec-for-import-modules.patch
  -      Modify spec for loongarch64,
            remove BuildRequies valgrind-devel
            remove --with-valgrind from configure command
            skip check


author: wanghao<wanghao2@kylinos.com> - 3.7.9-18.se.03.p01
changelog:
  - Type: bugfix
  - ID:[Task#84294][BUG#124545][BUG#124543][BUG#122720]
  - SUG:NA
  - DESC: 修复python3加-c或者-m参数时kysec无法管控的问题
  -         add patch: python3-fix-parameter-c-or-m-kysec-exectl.patch


author: GuoCe <guoce@kylinos.cn>
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Synchronize
  Author:Tue Dec 21 2021 imxcc <xingchaochao@huawei.com>
  Add patch0334 to add Phytium's CPU models: FT-2000+ and Tengyun-S2500
  Author:Thu Mar 31 2022 wangguochun <wangguochun@kylinos.cn>
  add patch KYLIN-virt-qemu-enable-qxl-for-aarch64.patch
  KYLIN: virt/qemu: enable qxl for aarch64
  - add patch change_cipher_name_from_sm4-128_to_sm4.patch
  Change the cipher name from sm4_128 to sm4
  - add patch support_sm4_encrypted_disk.patch
  Add sm4 disk encryption function
  - add patch KYLIN-virt-qemu-remove-the-useless-virtio_gpu_proces.patch
  After long-term tracking, no new command was found to be processed during the poll, so it was deleted to reduce the call overhead.
  - add patch H264-ENCODING-SUPPORT
  1) Add h264-encoding-support to qemu
  2) Support for the video codes parameter in the - Spice configuration item is added to QEMU. You can enable the H264 encoding of spice by setting the parameter to gstreamer:h264;
  3) Eg. -spice image-compression=auto_glz,jpeg-wan-compression=always,streaming-video=filter,video-codecs=gstreamer:h264
  - add KYLIN-Virtio-GPU-Spice-Display-Optimization.patch
  When the QEMU virtual machine uses virtio-gpu and spice protocol to send the cloud desktop to the remote end, the remote cloud desktop will tear the screen when dragging the window, affecting the user experience.In addition, the QEMU virtual machine based on virtio-gpu cannot successfully trigger the video streaming mode of spice server when playing video
  The reason for the above problem is that when QEMU processes the frame picture of virtio GPU, in order to reduce data transmission, it will only transmit the changed image area, resulting in multiple image segments with a width of 32 pixels in one frame picture
  This patch is dedicated to the following functions:
  1) Integrate the image segments generated for the same frame in QEMU. Under the condition of ensuring little change in the amount of image transmission data, integrate the image segments generated for the same frame into one or two image segments and send them to spice as far as possible, so as to avoid the image fragmentation problem of cloud desktop
  2) When QEMU virtual machine plays video, it forms image segments with stable size and position and sends them to spice to ensure that the video streaming mechanism of spice server can be triggered
  - add patch KYLIN-virt-qemu-optimize-the-interval-of-fence-poll-.patch
  The fence poll timer's timeout period is fixed at 10ms, which is too long
  for modern high-performance graphics cards and will cause performance loss.
  Here, an incremental time interval is used instead to improve the rendering
  efficiency of the virtio gpu.
  - add patch KYLIN-virtio-gpu-fix-spelling-mistakes-in-virtio_gpu.patch
  Fixed misspelling of function names: qemu_clock_get_ms modified to qemu_clock_get_ns
  - add patch KYLIN-Virtio-Gpu-Optimization.patch
  This patch is used to optimize the remote performance of virtio-gpu based on EGL headless, and the main idea is to reduce the impact of calling the glReaPixels function on the performance of the host GPU
  1) Synchronized dpy_refresh function and dpy_gl_update function ensures that a new image to be updated is generated through the dpy_gl_update function only after the dpy_refresh function has sent the previous image to the spice server.In this way, the number of calls to glReaPixels can be reduced;
  2) The area where the image may change in the next frame is predicted, so that only the image data of the area where the image may change is read into the memory from the video memory. This reduces the amount of image data that needs to be copied from video memory to memory each time glReaPixels is called
  - add patch KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix.patch KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix-2.patch
  1) KYLIN-Virtio-Gpu-Optimization.patch can improve the performance of virtio GPU,but it has a bug:when the resolution of the virtual machine is switched, the virtual machine may crash
  2) This patch is used to fix the crash problem during resolution switching
  - add patch KYLIN-virt-qemu-enable-sync-thread-for-virglrenderer.patch
  Enable the synchronization thread to improve the rendering efficiency of virglrenderer
  - add patch KYLIN-virt-qemu-add-more-fence-polling.patch
  Since synchronous threads are enabled, the cost of fence poll becomes very low, so we can poll fence in more places
  - add patch KYLIN-virt-qemu-create-fewer-fences-in-virtio-gpu.patch
  Considering that the creation and polling of fences are relatively expensive, so each time the command queue is processed, only one fence is created at most.
  - add patch KYLIN-virt-qemu-move-gui_update-to-a-separate-thread.patch
  The gui_update() function is very time-consuming and will seriously affect the operation of the qemu timer subsystem. Since the processing of the timer subsystem and the virtual device is located in the main thread, it also affects the response speed of the virtual device.
  - add patch KYLIN-virt-qemu-remove-repeated-context-switching-fo.patch
  The SUBMIT_3D command internally switches the context by itself,which can be simplified here.
  Author:Wed Apr 6 2022 wangguochun <wangguochun@kylinos.cn>
  add patch 0001-KYLIN-0001-KYLIN-VIRTIO-GPU-Optimization-2.patch
  1) This patch aims to further improve the 3D performance of virtiogpu
  2) The changes include:
          a.When qemu received VIRTIO_GPU_ CMD_ SUBMIT_3D command, if the command length does not exceed the size of an IOV, the data in the IOV will no longer be copied to the buf, but directly point the *buf to the IOV, so as to reduce the data replication overhead during command execution
          b.By analyzing the 3D command, the screen area refreshed in this frame is obtained, so that when outputting the screen picture in each frame, there is no need to obtain the screen area to be refreshed by comparing the data difference between the previous and subsequent frames, so as to reduce the CPU overhead. In addition, when calling glreadpixels to obtain the frame cache picture, the obtained screen area can also be used to reduce the amount of frame cache picture data that glreadpixels needs to copy, further reducing the GPU overhead of glreadpixels
          c. Change the initial timing call time of virtio_gpu_virgl_fence_poll command to 1US to ensure that the execution of 3D command can be fed back in time
  3) by this patch,the 3D performance of virtiogpu can be improved by about 10%
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix-3.patch
  1) the processing steps of function egl_fb_read are adjusted.
  2) the new process is more reasonable,and can solve the programe of
  system crash when entering the commandline display(by ctrl+alt+F1)
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Bug-Fix-FOR-KYLIN-SERV.patch
  1) The previous virtio GPU optimizations were based on the desktop version of kylin system, when applied to the server version of Kirin system, there will be problems that the screen refresh is not timely and the output screen size cannot be changed.
  2) The reason for the above problems lies in the difference between the desktop graphics processing mechanism of the server version and the desktop version: each refresh of the desktop version is the whole desktop, so one of the optimization measures is to analyze and obtain the actual refresh area from the 3D command; The refresh operation of the server version is to directly send the actual refresh area to virtio GPU, so it needs to be handled differently.so in egl-headless, when egl_scanout_flush find that the flush area is not the whole desktop,it will call change_update_rect to update rect area.
  3) In addition, this bugfix also fixes an error in scanout operation, which will lead to the inconsistency between the screen area recorded by virtio GPU and the actual screen area, resulting in the problem of the screen size presented by the client


author: GuoCe <guoce@kylinos.cn>
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Add patch415~422
         1. Add ich9 controller device;
         2. Supoort gdb use hw breakpoint;
         3. Currently the minimum memory size is 1024M, change it with 512M;
         4. Add fdt support;
         5. Set vga memory base address with unified method;
         6. Support the CPU hotplug;
         7. Update bios to latest;


author: wangshuo <wangshuo@kylinos.cn>
changelog:
  - Type:update
  - ID:[TASK#86454]
  - SUG:NA
  - DESC:Add Provides qemu-kvm,qemu-kvm-core,qemu-kvm-block-rbd,qemu-kvm-block-ssh,
  	for openstack-nova-compute Requires.


author: GuoCe <guoce@kylinos.cn> - 4.1.0-63.p05
changelog:
  - Type:bugfix
  - ID:[BUG#126134]
  - SUG:NA
  - DESC:Modify spec file to add enable-virglrender and enable-spice of configure


author: GuoCe <guoce@kylinos.cn> - 4.1.0-63.p06
changelog:
  - Type:bugfix
  - ID:[BUG#127273]
  - SUG:NA
  - DESC:Modify spec file to add enable-opengl to support glmark2.


author: lijiaan <lijiaan@kylinos.cn> - 4.0.2-2.p01
changelog:
  - modify  cp -a /usr/lib64/libqrencode.so.3* /builddir/build/BUILDROOT/qrencode-4.0.2-2.p01.a.ky10.loongarch64/usr/lib64  to cp -a /usr/lib64/libqrencode.so.4* /builddir/build/BUILDROOT/qrencode-4.0.2-2.p01.a.ky10.loongarch64/usr/lib64


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: wangshuo <wangshuo@kylinos.cn> - 35.0-3.p01
changelog:
  - Type:compile
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Remove BuildRequires valgrind-devel for loongarch64
  -      No files libefa.so.*, libmlx5.so.*, libmlx4.so.* on loongarch64


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: Yeqing Peng <pengyeqing@huawei.com> - 6.5-1
changelog:
  - since 6.6, jitterentropy-library is independed from rng-tools,
    no any entropy source will lead to rng-tools service fail.


author: WangShuo <wangshuo@kylinos.cn> - 0.14.6-1.3.p01
changelog:
  - Add Patch0, Kylin add loong64 support
  - Add Patch1, Kylin add go1.15 support for rootlesskit-0.14.6


author: yueyuankun<yueyuankun@kylinos.cn> - 8.2006.0-7.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - DESC:solve the problem of duplicate logs in /var/log/messages after restarting the system


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: Xu Jin <jinxu@kylinos.cn> - 1.10.0-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Gen ffi-1.10.0.gem for loongarch64 and replace SOURCES/ffi-1.10.0.gem file


author: xiaojuan Zhai <zhaixiaojuan@loongson.com> - 1.41.1-3
changelog:
  - Support loongarch
  - Update LA gs464 to la464
  - This version is consistent with lnd.3 and is only used to solve the version conflict problem of gerritos when building


author: lunankun <lunankun@huawei.com> - 4.11.12-3
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: xihaochen <xihaochen@huawei.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.16-25
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Reversed "Removed Python 2 bindings"


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.04
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220608.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.05
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220615.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[TASK#97459]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0707）
  -	修正上一个版本遗留的bug，包括密码有效期对root生效，普通用户也有操作模板权限等
  -       添加补丁security-reinforce-update-20220707.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.07
changelog:
  - Type:update
  - ID:[TASK#90956]
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug,包括加固与还原项数不一致的bug，适配新版kysec的接口等
  -       添加补丁security-reinforce-update-20220713.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.08
changelog:
  - Type:update
  - ID:[TASK#100149]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0721）
  -	修正上一个版本遗留的bug,包括密码期限还原失效，gsetting加固未生效，其权限用户无法操作模板等bug
  -       添加补丁security-reinforce-update-20220721.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.09
changelog:
  - Type:update
  - ID:[TASK#99843][Bug#134347][Bug#134228][Bug#130320][Bug#119204][Bug#132763]
  - SUG:NA
  - DESC: 安全加固命令行功能优化
  -       修复security-reinforce 帮助手册与实际不符的问题
  -       修复还原操作，界面与命令行上次操作结果内容不一致的问题
  -       修复单字母用户名的用户不适用口令更改最小间隔天数策略的问题
  -       修复加固后的完成加固项数与还原后的上次加固项数不一致的问题
  -       修复选择模板后返回时提示无效的选项请重新选择的问题
  -       添加补丁security-reinforce-update-20220811.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.10
changelog:
  - Type:update
  - ID:[TASK#105459][Bug#135048][Bug#134148][Bug#133979][Bug#135646][Bug#129410]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0818）
  -       【安全加固】【终端命令】default模式root用户只能扫描无法加固
  -       【安全加固】【终端命令】三级项范围与全部项一样
  -       【安全加固】【终端命令】扫描过程中是用快捷键ctrl+d，扫描继续且异常
  -       【安全加固】【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       【安全加固】【系统设置】安全加固后系统ctrl+alt+del组合键未禁用
  -       添加补丁security-reinforce-update-20220818.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.11
changelog:
  - Type:update
  - ID:[TASK#108128][Bug#136311][Bug#136809][Bug#135646][Bug#136207]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0907）
  -       调整阻止root通过telnet登录的加固方法
  -       【安全加固】【终端命令】多个用户开启终端命令，其中一个进行扫描\加固\还原时，其他用户终端会同步输出
  -       【安全加固】【终端命令】命令行选择模板后无提示信息并且模板菜单连续出现两次
  -       【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       调试 strict模式下，cvs服务未禁用加固项加固失败
  -       修改vsftp禁止root登录的加固方法，将配置文件/etc/ftpusers修改为/etc/vsftpd/ftpuser
  -       将用到vector的类在每次扫描前进行情况操作，放置获取的是之前扫描的数据
  -       修复日志文件非全局可写加固测试，日志文件权限都为600时依旧需要加固的bug
  -       psacct判断服务修改与grub判断修改 
  -       安全加固sp1\sp2\sp3同源改造
  -       添加补丁security-reinforce-update-20220906.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.12
changelog:
  - Type:update
  - ID:[Bug#122949][Bug#129235]
  - SUG:NA
  - DESC:
  -     【安全加固】【密码强度】密码复杂度策略检测--加固后需要四种字符类型可以修改成功
  -     【安全加固】【密码强度】密码复杂度策略安全加固后未恢复最佳策略
  -      同步主机加固安全bug，将硬盘所有分区修改为根分区使用率的扫描
  -      同步主机加固安全bug，修复最小口令长度加固无效bug
  -      同步修复v10问题
  -      添加补丁security-reinforce-update-20221009.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.13
changelog:
  - Type:update
  - ID:[TASK#119587][Bug#146522][Bug#146702]
  - SUG:NA
  - DESC:去掉安全加固子项-应用联网控制
  -     【安全加固】环境进行过多次安全加固，切换成普通用户，无法进行安全加固
  -     【安全加固】【系统审计】检查是否记录用户对设备的操作加固报告显示异常
  -      添加补丁security-reinforce-update-20221103.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.09
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:彻底删除auto-resetpw选项
  -      添加补丁security-switch-delete-auto-resetpw-completely.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#145103]
  - SUG:NA
  - DESC: 关闭kysec后,不重启机器的情况下，在root用户下使用security-switch切换strict模式，保证kysec-daemon的启动用户是secadm
  -         add patch: security-switch-fix-not-reboot-set-strict-when-kysec-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: security-switch-fix-security-switch-disable-after-force-reboot-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#147592]
  - SUG:NA
  - DESC: 解决切换模式失败后，无法再次切换的问题
  -       add patch: security-switch-fix-can-not-excute-after-switch-failed.patch


author: hanjinpeng <hanjinpen@kylinos.cn> - 8.16.1-5.p01
changelog:
  - Type:bugfix
  - ID:26848
  - SUG:NA
  - DESC: add procmail requires. merge 8.15.2-33.p01 , 
          modified spec, sendmail.mc from "include(`cf/m4/cf.m4')dnl"
          to "include(`/usr/share/sendmail-cf/m4/cf.m4')dnl"


author: haowenchao <haowenchao@huawei.com> - 1.45-4
changelog:
  - Fix grammar problems caused by patch
    0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.45-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-sg3_utils-1.37-rescan-scsi-findremapped-enhance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-sg3_utils-1.37-rescan-downpress.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-bugfix-sg3_utils-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-sg3_utils-fix-memset-coredump.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-sg3_utils-rescan-scsi-bus-list-all-LUNs-in-one-line.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-fix-bash-syntax-error-and-format-output.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-add-skiptype-shell-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hexiaole <hexiaole@kylinos.cn> - 1.45-7.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 
  - Patch6:0006-fix-bash-syntax-error-and-format-output.patch:fix bash syntax error and format output from 1.45-0.p01:9004-sg3_utils-1.45-fix-shell-syntax-error.patch
  - Patch7:0007-add-skiptype-shell-option.patch:add skiptype shell option from 1.45-0.p02:10002-add-skip-specified-devices-option.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch


author: wangqiang <wangqaing1@kylinos.cn> - 1.1.0-8.dev.git63085f5.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add patch: 0001-skopeo-1.1.0-kylin-add-loongarch64-support.patch


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: fu.lin <fulin10@huawei.com> - 5.6-2
changelog:
  - build: fix build error when the strace is builded in the environment with io_uring feature kernel devel package


author: wangqiang <wangqiang1@kylinos.cn> - 5.6-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: Add patch: 0001-strace-5.6-kylin-add-loongarch64-support.patch
  		Add basic support for loongarch64.


author: XuFei <xufei30@huawei.com> - 0.3.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:modify docs,modify testcases and clear clippy warnings for updating rust 1.51.0


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-3
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: openEuler Buildteam <buildteam@openeuler.org> - 1.4-23
changelog:
  - Modify spec error information

   Sat Sep 07 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.4-22
  - Package init


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-fix-error-func-call.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hexiaole <hexiaole@kylinos.cn> - 2.1.0-32.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:0010-fix-error-func-call.patch:fix error func call from backport patch based on sysfsutils-2.1.1


author: yangmingtai <yangmingtai@huawei.com> - 243-52
changelog:
  - fix some issue: 1.fix set blkio.bfq.weight 
                    2.udevadm fix --tag-match
                    3.fix check of Listen* arguments


author: caiyinan <caiyinan@kylinos.cn> - 243-55.p01
changelog:
  -- add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
     Change NTP server.
  -- add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
     Modify ctrl+alt+F2 switch to init5 stuck problem
  -- add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
     fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: wangshuo <wangshuo@kylinos.cn> - 243-55.p02
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch10004:0001-Kylin-add-systemd-243-loongarch64-support.patch
  -      Add Patch10005:0002-Kylin-fix-ctrl-alt-F2-switch-to-init5-stuck-problem-.patch
  -      Modify spec, set -Dgnu-efi=false, skip ninja_test and efi files for loongarch64


author: wanghao <wanghao2@kylinos.cn> - 243-55.p02.se.01
changelog:
  - Type:update
  - ID:[Task#84355]
  - SUG:NA
  - DESC: 修复了当LSM堆叠启用时systemctl的selinux拒绝错误
  -         add patch: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: Shi Jingying <shijingying@kylinos.cn> - 1.10.1-5.p01
changelog:
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error
  - add patch 102: tigervnc-1.10.1-kylin-xstart1.patch
  - the autokill parameter cannot creat port


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 0.6-2
changelog:
  - The"cc:No such file or directroy"error message is displayed during compilation.Therefore,add buildrequires gcc.
    The macro unitdir is used.Therefore,add buildrequires systemd


author: wangshuo <wangshuo@kylinos.cn> 2:2.14.1-51.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch19, 0001-Kylin-add-pegasus-2.14.1-loongarch64-support.patch
  -      Modify spec, define PEGASUS_HARDWARE_PLATFORM LINUX_LOONGARCH64_GNU for loongarch64


author: wangjie<wangjie294@huawei.com> -1.4.48-15
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependency on the help package from requires to recommends


author: Yue Jiayuan <yuejiayuan@kylinos.cn> - 5.0-3.p02
changelog:
  - Type:update 
  - ID:[84598]
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-1.p01
changelog:
  - Type:update
  - ID:84598
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 012-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-usbmisc-initialize-string-buffer-before-reading-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-sys-bus-usb-devices-dir-format-is-a-b.c-modify-read_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 012-5.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Backport one patch to solve kylin BUG#4342:lsusb display usb device error


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memleak in fdisk_script_read_file
         Fix heap-buffer-overflow in fdisk_partname
         Fix integer overflow in partno_from_devname


author: likai01 <likai01@kylinos.cn> - 2:8.2-58.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-4
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangshuo <wangshuo@kylinos.cn> - 2.4.0-6.p01
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:For loongarch64: add Patch3, add ExclusiveArch, modify configure command
  -      Modify Requires for Version required error


author: yeah_wang<wangye70@huawei.com> - 1.20.8-4
changelog:
  - Type:CVE
  - Id:CVE-2020-14347 CVE-2020-14360 CVE-2020-25712
  - SUG:NA
  - DESC:fix CVE-2020-14347CVE-2020-14360CVE-2020-25712


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p03
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: chengguipeng<chengguipeng1@huawei.com> - 7.7-29
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly X11 cannot support keycodes above 255


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


