# changelog

author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> 2.4.3-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: yuboyun <yuboyun@huawei.com> - 1.26.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: jiazhenyuan <jiazhenyuan@uniontech.com> - 1.26.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix dbus-daemon error when systemd-resolved service was not enabled


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync from upstream, fix wrongly considering ipv6.may-fail for ipv4


author: zengwefeng <zwfeng@huawei.com> - 1.26.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix crash in nm_wildcard_match_check
         fix leak of NMOvsdbPrivate db_uuid


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnm: fix leak and return failures from nm_client_load_connections()


author: liujilin <liujilin@kylinos.cn> - 0.6.54-2.p01
changelog:
  - add patch0:accountsservice-0.6.54-kylin-1000-users-issue.patch
  - 1000-users-issue will not show correct users in control-center and login.


author: openEuler Buildteam <buildteam@openeuler.org> -20190730-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Increase the ability to provide adobe-mappings-cmap-deprecated


author: liutao <liutao1@kylinos.cn> - 3.37.2-2.p01
changelog:
  - Move modification from 3.32.0-1.p02.ky10:
    Add Patch6002: Fixed icon/Adwaita distortion in mips machine installion


author: Shi Jingying <shijingying@kylinos.cn> - 3.37.2-2.p02
changelog:
  - Type:bugfix
  - ID:[BUG#127059]
  - SUG:NA
  - DESC: fix loongarch64 icons display
          add patch6003:0002-adwaita-icon-theme-3.37.2-fix-loongarch64-icons.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p05
changelog:
  - Type:NA
  - ID: Task#74655
  - SUG:NA
  - DESC:recover disk encrypt 
  - Add Patches:anaconda-33.19-kylin-0017-recover-disk-encrypt.patch


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p06
changelog:
  - Type:NA
  - ID: Task#81826
  - SUG:NA
  - DESC: add loongarch suppert 
  - Add Patches: anaconda-33.19-kylin-0018-add-loongarch64-support.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p07
changelog:
  - Type:bugfix
  - ID:Bug#9410
  - SUG:display the unknown page, maintain alignment with upstream communities
  - DESC:display the unknown page in manual partition ui
         and fix the bug that the user cannot quit from manual partition ui 
         when the partition is not be created


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p09
changelog:
  - Type:bugfix
  - ID:Bug#121227
  - SUG:NA
  - DESC:Remove the iso9660 label media from the unknown group, 
         and solve the problem that EFI partitions cannot be deleted during U disk installation


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p10
changelog:
  - Type:NA
  - ID: Task#91852
  - SUG:NA
  - DESC: add codes for pks group 
  - Add Patches: anaconda-33.19-kylin-0022-add-codes-for-pks-group.patch


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p11
changelog:
  - Type: bugfix
  - ID: BUG#126426 
  - SUG: NA
  - DESC: fix the bug for pks installation 
  - Add Patches: anaconda-33.19-kylin-0023-fix-pks-installation.patch


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-31.p14
changelog:
  - Type: NA 
  - ID: TASK#106954
  - SUG: NA
  - DESC: disable the kernel audit 
  - Add Patches: anaconda-33.19-kylin-0026-disable-audit.patch


author: Omair Majid <omajid@redhat.com> - 3.1.100-0.4.preview3
changelog:
  - Update to .NET Core Runtime 3.1.0-preview3.19553.2 and SDK 3.1.100-preview3-014645
  - Resolves: RHBZ#1711405


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: Shijie Luo<luoshijie1@huawei.com> - 2.4.48-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix error condition of while loop 
         in 0001-bypass-wrong-output-when-enabled-selinux.patch.


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: yixiangzhike <yixiangzhike007@163.com> - 3.0-4
changelog:
  - backport some patches
     Add missing call to free_interpretation_list
     fix 2 more issues found by fuzzing
     Fix an auparse memory leak caused in recent glibc
     Fix double free with corrupted logs
     Turn libaucommon into a libtool convenience library
     Fix the closing timing of audit_fd
     Fix some string length issues
     Move the free_config to success path
     Check for fuzzer induced invalid value
     error out if log is mangled
     Dont run off the end with corrupt logs
     Another hardening measure for corrupted logs
     Fix busy loop in normalizer when logs are corrupt
     Better fix for busy loop in normalizer when logs are corrupt
     flush uid gid caches when user group added deleted modified
     In auditd check if log_file is valid before closing handle
     Check ctime return code
     When interpreting if val is NULL return an empty string
     auditd.service Restart on failure ignoring some exit
     In auditd close the logging file descriptor when logging is suspended


author: wanghao <wanghao2@kylinos.cn> - 3.0-5.se.09
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec补丁
  -         add patch: audit-3.0.20200318-kysec.patch
  -       audit服务可以手动停止
  -         add patch: audit-3.0-systemctl-faied.patch
  -       修改auditd-config.c文件
  -         add patch: audit-3.0-modify-auditd-config.patch
  -       添加mips支持
  -         add patch: audit-3.0-adopt-mips.patch
  -       改进mips相关little_endian默认值设置为1
  -         add patch: audit-3.0-modify-mips.patch
  -       删除littlt-endian的判断
  -         add patch: audit-3.0-delete-littlt-endian.patch
  -       添加loongarch64相关支持
  -         add patch: audit-3.0-add-loongarch64.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-6.se.01
changelog:
  - Type: bugfix
  - ID:[Bug#113316]
  - SUG:NA
  - DESC: 将audit.log文件权限改为600，pidfild文件权限改为644
  -         add patch: audit-3.0-modify-logfile-and-pidfile-permissions.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-6.se.02
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: audit-3.0-fix-modify-or-del-audit-log-bug.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 1.12.0-1
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:Reduce the amount of memory needed to evaluate complex path expressions
    against large files,Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556),update gnulib to 91584ed6.


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: lijian <lijian1@kylinos.cn> - 0.31.1-53.p00
changelog:
  - Type:compile
  - ID:BUG#131973
  - SUG:NA
  - DESC:fix bug#131973 rebuild in tag v10-sp3;
  -      add version differentit from the sp2 version with install error.


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: shenyangyang<shenyangyang4@huawei.com> - 5.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: licihua<licihua@huawei.com> - 5.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix quoted null string removal when using shell word expansion pattern operators


author: Xiao Zai<xiaozai@kylinos.cn> - 5.0-17.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: sync the spec change from  5.0-14.se.01.p01 to fix the bug#68292 for v10 sp1


author: wanghao <wanghao2@kylinos.cn> - 5.0-17.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec执行检查
  -         add patch: bash-5.0-check-kysec.patch
  -       优化source提示翻译
  -       修复source可以对白名单标记为unknown的脚本文件进行调用的问题
  -         add patch: bash-5.0-fix-source-exe-sh.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0-17.p01.se.02
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 将链接库的方式改为使用dlopen打开
  -         add patch:  bash-5.0-use-dlopen-libkysec.patch


author: Shi Jingying <shijingying@kylinos.cn> - 5.0-17.p02.se.02
changelog:
  - Type: update
  - ID: [Task#102285]
  - SUG: NA
  - DESC: recover the `history -c` operation of the non root user
  -        add patch1004 bash-5.0-recover-non-root-user-to-clear-history.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0-17.p01.se.03
changelog:
  - Type:update
  - ID:[Task#105711]
  - SUG:NA
  - DESC: 在kysec_execl_check之前添加kysec_status的状态检查，如果关闭,则不调用libkysec库
  -         add patch: bash-5.0-add-kysec-status-check.patch


author: yuejiayan<yuejiayan@huawei.com> - 1:2.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:completions/Makefile: Fix check-local in VPATH builds
         __load_completion: Avoid bad array subscript on "commands" ending wit…
         _xspecs: Declare as global on bash >= 4.2
         completions/Makefile.am: Use install-data-hook, not install-data-local
         man: Fix completion when failglob option is enabled (#225)
         _longopt: don't complete --no-* with file/dirname arg


author: Rolf Fokkens <rolf@rolffokkens.nl> - 1.1-0
changelog:
  - Changed upstream to git://git.kernel.org/pub/scm/linux/kernel/git/colyli/bcache-tools.git
  - Updated to 1.1


author: hanzhijun <hanzhijun1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the difference at the macro definition using clock gettime instead of gettimeofda


author: jinshuaiyu <jinshuaiyu@kylinos.com> - 9.11.21-10.p02
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177
  - SUG:NA
  - DESC:fix CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: yueyuankun <yueyuankun@kylinos.cn> - 2.34-19.p01
changelog:
  - Type:bugfix
  - ID:task#108856
  - SUG:NA
  - DESC:rebuild libbfd.a libiberty.a libopcodes.a with -fPIC for inclusion into shared libraries


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: liuxin <liuxin264@huawei.com> - 3.2.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix allocate_partitions threw an exception while adding /boot to RAID disk


author: yanan <yanan@huawei.com> - 3.2.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Convert LVM filter lists to sets
         Remove action device from LVM reject list


author: yanan <yanan@huawei.com> - 3.2.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the failure of not a valid name for this device while the hostname is setted as 63 maxlen


author: Xiao Zai <xiaozai@kylinos.cn> - 3.2.2-8.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the two patches from python-blivet-3.2.2-3.p02 
  - Add Patches: 0001-add-support-for-mips64el-and-change-gpt-msdos-for-u-.patch  
  - Add Patches: blivet-3.2.2-kylin-fix-zh_CN-swap-part-failed.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.2.2-8.p03
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Add Patch10004, Kylin add python-blivet-3.2.2 loongarch64 support


author: yueyuankun<yueyuankun@kylinos.cn> - 3.2.2-8.p04
changelog:
  - Type:update
  - ID:bug#118182
  - SUG:test with a ddf disk
  - DESC:Do not crash when a disk populator doesn't return kwargs


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-23
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-jhash-fix-annoying-gcc-fall-through-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-btt-devs-silence-warning-on-sprintf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-btt-Fix-overlapping-IO-stats.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-blktrace-don-t-stop-tracer-if-not-setup-trace-succes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-blkparse-remove-duplicated-entry-for-flag-M.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-btt-make-device-devno-use-PATH_MAX-to-avoid-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-make-btt-scripts-python3-ready.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-btreplay-fix-device-IO-remap-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-blkparse-split-off-the-timestamp-correction-code-in-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-blkparse-fix-absolute-timestamp-when-reading-from-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-btt_plot.py-Use-with-open-as-.-context-manager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-blkparse-Fix-device-in-event-tracking-error-messages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-blkparse-Allow-request-tracking-on-non-md-dm-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-blkparse-Initialize-and-test-for-undefined-request-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-fix-parallel-build-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-parallel-build-of-btt-and-blkiomon.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: liangchangwei <liangchangwei@kylinos.cn> - 1.73.0-6-p01
changelog:
  - Type:compile
  - ID: [TASK#74801]
  - SUG:NA
  - DESC: Delete the content that needs to be copied and packaged *.so.1.72.* in the boost package spec file


author: huangmincai <huangmincai@kylinos.cn> - 3.1.3-1.se.04
changelog:
  - Type:bugfix
  - ID:[BUG# 122967,111929,122620]
  - SUG:NA
  - DESC:
  - 		1.修复因安全加固导致保护箱授权框认证失败问题;
  		2.更改快捷键,由ctrl改为alt;
  		3.去除冗余的提示信息.


author: huangmincai <huangmincai@kylinos.cn> - 3.1.3-1.se.05
changelog:
  - Type:bugfix
  - ID:[BUG# 116890, 122619]
  - SUG:NA
  - DESC:
  - 		1.修复首次创建保护箱及导入密钥时界面翻译错误问题;
  - 		2.修复锁定保护箱时不能关闭窗口问题;


author: zhaoyun <zhaoyun@kylinos.cn> - 4.0.3-1.se.01
changelog:
  - Type:update
  - ID:[Task#76232]
  - SUG:NA
  - DESC: 
  - 		1.初始化提交的包安装有问题，修改配置重新提交
  - 		2.sp3重新更新包版本，之前版本是根据桌面的版本
  - 		3.增加debuginfo相关的两个包
  - 		4.增加安全编译选项


author: huangmincai <huangmincai@kylinos.cn> - 4.0.3-1.se.02
changelog:
  - Type:bugfix
  - ID:[Bug#122627, 122621, 117189, 116998, 117040]
  - SUG:NA
  - DESC: 
  - 		1.修复因通过更改密钥后，无法打开保护箱问题;
  - 		2.屏蔽使用终端解锁保护箱时，冗余信息输出;
  - 		3.修复使用终端新建保护箱时，交互信息未翻译问题.


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-43.0.v2207
changelog:
  - KYLIN: selftests/net: enable lo.accept_local in psock_snd (luyun) [task:84718]
  - selftests/net: improve descriptions for XFAIL cases in psock_snd.sh (Po-Hsu Lin) [task:84718]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn) [bug:120181] {CVE-2022-30594}
  - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) [bug:120187] {CVE-2022-29581}
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou) [bug:120196] {CVE-2022-1734}
  - nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)
  - KYLIN: 3rd/sietium: sietium driver update (yangdeyi)
  - pwm:loongson: Perfect pwm-ls driver (lvyanbing)
  - ls2k1000: pwm: build as module support (suijingfeng)
  - pwm:loongson: fix up variable overflow (Yangyinglu)
  - Loongson2K: pwm: Pass PWM controller clock-frequency through device tree. (Ming Wang)
  - LoongArch: Set CONFIG_MEGARAID_SAS to m by default (Tianli Xiong)
  - gmac:The initial value of rx_watchdog is reduced to 5 (zhangtianyang)
  - LoongArch: LSVZ: fix pmu function (zhaotianrui)
  - LoongArch: module: Add plt section support (liweihao)
  - Revert "LoongArch: LSVZ: handle irq directly in kvm exception context" (王建兴)
  - LoongArch: Add vbios passed through ACPI table (liuyun)
  - LoongArch: Add gop support (liuyun)
  - LoongArch: Fix the usage of the suspend address (yangqiming)
  - Loongarch: fixup gcsr (Wang liupu)
  - loongarch: configs: make r8111G nic use r8168 driver use by default (Yinbo Zhu)
  - LoongArch: kprobe: Rewrite kprobe_handler implementation (Qing Zhang)
  - LoongArch: Remove relocations of REL type (Youling Tang)
  - objtool: LoongArch: Remove unused macro definitions (Youling Tang)
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port (Jianmin Lv)
  - KYLIN: config: Supports KAE engine drivers (pengcan) [bug:119799]
  - selftests/seccomp: allow clock_nanosleep instead of nanosleep (Thadeu Lima de Souza Cascardo) [task:69904]
  - KYLIN: arm64: use correct format characters (huhai)
  - KYLIN: Revert "optee: add ACPI support for Phytium" (huanfuxi) [task:84829]
  - net: phy: improve phy_init_hw (Heiner Kallweit) [bug:118542]
  - KYLIN: found-commit-all-deps: tips max_level correct (Jackie Liu)
  - KYLIN: config: enable kfence for x86 and arm64 (Jackie Liu) [task:68770]
  - KYLIN: mm/kfence: print disabling or re-enabling message (Jackie Liu)
  - kfence: allow use of a deferrable timer (Marco Elver) [task:68770]
  - kfence: test: try to avoid test_gfpzero trigger rcu_stall (Peng Liu) [task:68770]
  - kunit: make kunit_test_timeout compatible with comment (Peng Liu) [task:68770]
  - kunit: fix UAF when run kfence test case test_gfpzero (Peng Liu) [task:68770]
  - kfence: alloc kfence_pool after system startup (Tianchen Ding) [task:68770]
  - kfence: allow re-enabling KFENCE after system startup (Tianchen Ding) [task:68770]
  - mm/kfence: remove unnecessary CONFIG_KFENCE option (tangmeng) [task:68770]
  - net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet) [task:68770]
  - net: add skb_set_end_offset() helper (Eric Dumazet) [task:68770]
  - kfence: make test case compatible with run time set sample interval (Peng Liu) [task:68770]
  - kfence: fix memory leak when cat kfence objects (Baokun Li) [task:68770]
  - kfence: default to dynamic branch instead of static keys mode (Marco Elver) [task:68770]
  - kfence: always use static branches to guard kfence_alloc() (Marco Elver) [task:68770]
  - kfence: shorten critical sections of alloc/free (Marco Elver) [task:68770]
  - kfence: add note to documentation about skipping covered allocations (Marco Elver) [task:68770]
  - kfence: limit currently covered allocations when pool nearly full (Marco Elver) [task:68770]
  - kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver) [task:68770]
  - kfence: count unexpectedly skipped allocations (Marco Elver) [task:68770]
  - net: add and use skb_unclone_keeptruesize() helper (Eric Dumazet) [task:68770]
  - kfence: test: fail fast if disabled at boot (Marco Elver) [task:68770]
  - kfence: show cpu and timestamp in alloc/free info (Marco Elver) [task:68770]
  - kfence: fix is_kfence_address() for addresses below KFENCE_POOL_SIZE (Marco Elver) [task:68770]
  - kfence, x86: only define helpers if !MODULE (Marco Elver) [task:68770]
  - kfence: skip all GFP_ZONEMASK allocations (Alexander Potapenko) [task:68770]
  - kfence: move the size check to the beginning of __kfence_alloc() (Alexander Potapenko) [task:68770]
  - kfence: defer kfence_test_init to ensure that kunit debugfs is created (Weizhao Ouyang) [task:68770]
  - kfence: unconditionally use unbound work queue (Marco Elver) [task:68770]
  - kfence: use TASK_IDLE when awaiting allocation (Marco Elver) [task:68770]
  - kfence: use power-efficient work queue to run delayed work (Marco Elver) [task:68770]
  - kfence: maximize allocation wait timeout duration (Marco Elver) [task:68770]
  - kfence: await for allocation using wait_event (Marco Elver) [task:68770]
  - kfence: zero guard page after out-of-bounds access (Marco Elver) [task:68770]
  - kfence, x86: fix preemptible warning on KPTI-enabled systems (Marco Elver) [task:68770]
  - kfence: make compatible with kmemleak (Marco Elver) [task:68770]
  - kfence, slab: fix cache_alloc_debugcheck_after() for bulk allocations (Marco Elver) [task:68770]
  - kfence: add test suite (Marco Elver) [task:68770]
  - kfence, Documentation: add KFENCE documentation (Marco Elver) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLUB (Alexander Potapenko) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLAB (Alexander Potapenko) [task:68770]
  - kfence: use pt_regs to generate stack trace on faults (Marco Elver) [task:68770]
  - arm64, kfence: enable KFENCE for ARM64 (Marco Elver) [task:68770]
  - x86, kfence: enable KFENCE for x86 (Alexander Potapenko) [task:68770]
  - mm: add Kernel Electric-Fence infrastructure (Alexander Potapenko) [task:68770]
  - kunit: Don't fail test suites if one of them is empty (Andy Shevchenko)
  - kunit: remove timeout dependence on sysctl_hung_task_timeout_seconds (Alan Maguire) [task:68770]
  - kunit: allow kunit tests to be loaded as a module (Alan Maguire)
  - kunit: hide unexported try-catch interface in try-catch-impl.h (Alan Maguire)
  - kunit: move string-stream.h to lib/kunit (Alan Maguire)
  - kunit: fix failure to build without printk (Brendan Higgins)
  - MAINTAINERS: add entry for KUnit the unit testing framework (Brendan Higgins)
  - Documentation: kunit: add documentation for KUnit (Brendan Higgins)
  - kunit: defconfig: add defconfigs for building KUnit tests (Brendan Higgins)
  - kunit: tool: add Python wrappers for running KUnit tests (Felix Guo)
  - kunit: test: add tests for KUnit managed resources (Avinash Kondareddy)
  - kunit: test: add the concept of assertions (Brendan Higgins)
  - kunit: test: add tests for kunit test abort (Brendan Higgins)
  - kunit: test: add support for test abort (Brendan Higgins)
  - objtool: add kunit_try_catch_throw to the noreturn list (Brendan Higgins)
  - kunit: test: add initial tests (Brendan Higgins)
  - lib: enable building KUnit in lib/ (Brendan Higgins)
  - kunit: test: add the concept of expectations (Brendan Higgins)
  - kunit: test: add assertion printing library (Brendan Higgins)
  - kunit: test: add string_stream a std::stream like string builder (Brendan Higgins)
  - kunit: test: add test resource management API (Brendan Higgins)
  - kunit: test: add KUnit test runner core (Brendan Higgins)
  - include/linux/slab.h: fix sparse warning in kmalloc_type() (Vlastimil Babka)
  - string.h: Add str_has_prefix() helper function (Steven Rostedt (VMware))
  - mm/vmalloc.c: improve vfree() kerneldoc (Andrey Ryabinin)
  - mm, slab: shorten kmalloc cache names for large sizes (Vlastimil Babka)
  - mm, proc: add KReclaimable to /proc/meminfo (Vlastimil Babka)
  - mm: rename and change semantics of nr_indirectly_reclaimable_bytes (Vlastimil Babka)
  - dcache: allocate external names from reclaimable kmalloc caches (Vlastimil Babka)
  - mm, slab/slub: introduce kmalloc-reclaimable caches (Vlastimil Babka)
  - mm, slab: combine kmalloc_caches and kmalloc_dma_caches (Vlastimil Babka)
  - mm/slub.c: switch to bitmap_zalloc() (Andy Shevchenko)
  - selftests: gpio: restructure Makefile (Fathi Boudra) [task:83556]
  - KYLIN: ACPI: Limit max_cstate to 1 on Hygon platforms (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: use IDLE_POLL to disable c-state and idle routine" (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: Can not use IDLE_POLL in hyper" (huhai)
  - KYLIN: config: add support for test_bpf (xiaolinkui) [task:84711]
  - selftests/tls: Add MSG_WAITALL in recv() syscall (Vakul Garg) [task:84719]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-44.0.v2207
changelog:
  - selftest: txtimestamp: fix net ns entry logic (Paolo Pisati) [task:88343]
  - selftests: timestamping: Fix SIOCGSTAMP undeclared build failure (Shuah Khan) [task:88343]
  - selftests: fix timestamping Makefile (Deepa Dinamani) [task:88343]
  - selftests: add missing include unistd (Deepa Dinamani) [task:88343]
  - selftests/txtimestamp: Fix an equals vs assign bug (Dan Carpenter) [task:88343]
  - selftests: add txtimestamp kselftest (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with ipv6 dgram + raw and pf_packet (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with cmsg support (Willem de Bruijn) [task:88343]
  - KYLIN: fs/pipe: Solve the problem of LTP smoketest failure (yijiangshan) [bug:120350]
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)
  - crypto: api - Check spawn->alg under lock in crypto_drop_spawn (Herbert Xu)
  - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [bug:121496] {CVE-2022-1729}
  - floppy: disable FDRAWCMD by default (Willy Tarreau) [bug:121514] {CVE-2022-1836}
  - KYLIN: configs: disable ser_gigaset & gigaset (Jackie Liu)
  - KYLIN: security/kysec: fix code style issue (huanfuxi)
  - KYLIN: sync-stable: discard unwanted newlines (Jackie Liu)
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) [bug:112032] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Halil Pasic) [bug:112032] {CVE-2022-0854}
  - KYLIN: configs: disable CMA all platform default (Jackie Liu) [task:87802]
  - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie) [task:84035]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie) [task:84035]
  - scsi: iscsi: Fix endpoint reuse regression (Mike Christie) [task:84035]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie) [task:84035]
  - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie) [task:84035]
  - scsi: iscsi: Drop temp workq_name (Mike Christie) [task:84035]
  - scsi: iscsi: Use the session workqueue for recovery (Mike Christie) [task:84035]
  - scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding (Mike Christie) [task:84035]
  - scsi: iscsi: Remove iscsi_scan_finished() (Mike Christie) [task:84035]
  - scsi: iscsi: Speed up session unblocking and removal (Mike Christie) [task:84035]
  - scsi: iscsi: Fix recovery and unblocking race (Mike Christie) [task:84035]
  - scsi: iscsi: Fix set_param() handling (Mike Christie) [task:84035]
  - scsi: iscsi: Flush block work before unblock (Mike Christie) [task:84035]
  - scsi: iscsi: Fix in-kernel conn failure handling (Mike Christie) [task:84035]
  - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() (Mike Christie) [task:84035]
  - scsi: iscsi: Force immediate failure during shutdown (Mike Christie) [task:84035]
  - scsi: iscsi: Stop queueing during ep_disconnect (Mike Christie) [task:84035]
  - scsi: iscsi: Fix iSCSI cls conn state (Mike Christie) [task:84035]
  - scsi: iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [task:84035]
  - scsi: iscsi: Optimize work queue flush use (Mike Christie) [task:84035]
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu) [task:84035]
  - scsi: iscsi: Fix deadlock on recovery path during GFP_IO reclaim (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu) [task:84035]
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Perform connection failure entirely in kernel space (Bharath Ravi) [task:84035]
  - kselftest: Minimise dependency of get_size on C library interfaces (Siddhesh Poyarekar)
  - arm64: Make debug exception handlers visible from RCU (Masami Hiramatsu) [task:87978]
  - KYLIN: xfs: fix xfs shutdown filesystem by security_inode_alloc failed (Jackie Liu) [task:85662]
  - KYLIN: Revert "signal: fix kabi changes in struct task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix kabi broken in task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix UAF when free futex_exit_mutex in free_task()" (Jackie Liu)
  - KYLIN: Revert "pid: fix imbalanced calling of cgroup_threadgroup_change_begin/end()" (Jackie Liu)
  - KYLIN: Revert "pid: fix return value when copy_process() failed" (Jackie Liu)
  - KYLIN: gitmessage: drop branch name in patchs comment (Jackie Liu)
  - KYLIN: tools/test: fix arm64 rtnetlink.sh fail. (zhaochenguang) [task:84712]
  - KYLIN: selftesting: update kylinos generic defcfg (zhaochenguang) [task:84712]
  - KYLIN: Revert "bpf, tests: Add tail call test suite" (xiaolinkui) [task:84711]
  - KYLIN: Revert "bpf/tests: Fix error in tail call limit tests" (xiaolinkui) [task:84711]
  - KYLIN: x86: config: add support for test_bpf (xiaolinkui) [task:84711]
  - bpf: test_bpf: add init_net to dev for flow_dissector (Song Liu) [task:84711]
  - UBUNTU: SAUCE: selftests: net: fix "from" match test in fib_rule_tests.sh (Marcelo Henrique Cerri) [task:84716]
  - KYLIN: x86/configs: Align default configuration options based on CentOS and openEuler (leixiang) [task:64045]
  - selftests: Update fib_tests to handle missing ping6 (David Ahern)
  - fib_tests: Add tests for invalid metric on route (David Ahern) [task:84713]
  - fib_tests: Add tests for metrics on routes (David Ahern) [task:84713]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-45.0.v2207
changelog:
  - KYLIN: sync-stable: support setting level (Jackie Liu)
  - tcp: resalt the secret every 10 seconds (Eric Dumazet)
  - Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)
  - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye) [task:91469]
  - Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)
  - KYLIN: arm64: Add kernel parameter for CPU0 hotplug and remove config switch (yijiangshan) [bug:122008]
  - KYLIN: ngbe: Make use of cpumask_local_spread to improve RSS locality (xiaolinkui)
  - KYLIN: ngbe: enable cpumask for wangxun (xiaolinkui)
  - crypto: arm64/ghash-neon - bump priority to 150 (Ard Biesheuvel)
  - crypto: xts - simplify error handling in ->create() (Eric Biggers) [task:90975]
  - crypto: lrw - simplify error handling in create() (Eric Biggers) [task:90975]
  - crypto: arm64/gcm-ce - implement 4 way interleave (Ard Biesheuvel) [task:91194]
  - crypto: aes-generic - drop key expansion routine in favor of library version (Ard Biesheuvel)
  - KYLIN: crypto: zhaoxin-aes - switch to library version of key expansion routine (Jackie Liu)
  - crypto: arm64/aes-ce - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-ccm - switch to AES library (Ard Biesheuvel)
  - crypto: arm/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/ghash - switch to AES library (Ard Biesheuvel) [task:91194]
  - crypto: safexcel/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: cesa/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: padlock/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: x86/aes - drop scalar assembler implementations (Ard Biesheuvel)
  - crypto: x86/aes-ni - switch to generic for fallback and key routines (Ard Biesheuvel)
  - crypto: aes - create AES library based on the fixed time AES code (Ard Biesheuvel)
  - crypto: aes/fixed-time - align key schedule with other implementations (Ard Biesheuvel)
  - crypto: aes - rename local routines to prevent future clashes (Ard Biesheuvel)
  - crypto: arm/aes-ce - cosmetic/whitespace cleanup (Ard Biesheuvel)
  - crypto: arm64/ghash - register PMULL variants as separate algos (Ard Biesheuvel) [task:91194]
  - tcp: increase source port perturb table to 2^16 (Willy Tarreau) [bug:123678] {CVE-2022-32296}
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso) [bug:123674] {CVE-2022-1966}
  - KYLIN: loongarch/config: enable some filesystem for loongarch (wangxuewen) [bug:122374]
  - KYLIN: include: Added an arm64 macro to limit the cacheline (pengcan) [task:85182]
  - KYLIN: scripts: add a script to compile and check kabi automatically (Zhengyuan Liu)
  - KYLIN: lib/raid: check recv algo performance for test (Zhengyuan Liu) [task:90865]
  - lib/raid6: Include <asm/ppc-opcode.h> for VPERMXOR (Paul Menzel) [task:90865]
  - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel) [task:90865]
  - lib/raid6/test: fix multiple definition linking error (Dirk Müller) [task:90865]
  - lib/raid6: Use strict priority ranking for pq gen() benchmarking (Dirk Müller) [task:90865]
  - lib/raid6: skip benchmark of non-chosen xor_syndrome functions (Dirk Müller) [task:90865]
  - lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin) [task:90865]
  - lib/raid6/test: fix build on distros whose /bin/sh is not bash (Masahiro Yamada) [task:90865]
  - md/raid6: fix algorithm choice under larger PAGE_SIZE (Zhengyuan Liu) [task:90865]
  - raid6/test: fix a compilation warning (Zhengyuan Liu) [task:90865]
  - lib/raid6: fix unnecessary rebuild of vpermxor*.c (Masahiro Yamada) [task:90865]
  - lib/raid6: refactor unroll rules with pattern rules (Masahiro Yamada) [task:90865]
  - kbuild: remove redundant target cleaning on failure (Masahiro Yamada) [task:90865]
  - lib/raid6: remove duplicated CFLAGS_REMOVE_altivec8.o (Masahiro Yamada) [task:90865]
  - RAID/s390: remove invalid 'r' inline asm operand modifier (Vasily Gorbik) [task:90865]
  - lib/raid6: arm: optimize away a mask operation in NEON recovery routine (Ard Biesheuvel) [task:90865]
  - lib/raid6: use vdupq_n_u8 to avoid endianness warnings (ndesaulniers@google.com) [task:90865]
  - lib/raid6: add option to skip algo benchmarking (Daniel Verkamp) [task:90865]
  - lib/raid6: sort algos in rough performance order (Daniel Verkamp) [task:90865]
  - lib/raid6: check for assembler SSSE3 support (Daniel Verkamp) [task:90865]
  - lib/raid6: avoid __attribute_const__ redefinition (Daniel Verkamp) [task:90865]
  - lib/raid6: add missing include for raid6test (Daniel Verkamp) [task:90865]
  - Revert "md/raid6: fix algorithm choice under larger PAGE_SIZE" (Zhengyuan Liu) [task:90865]
  - crypto: algapi - make crypto_drop_spawn() a no-op on uninitialized spawns (Eric Biggers) [task:90975]
  - dm: do not use waitqueue for request-based DM (Ming Lei) [task:88844]
  - blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Ming Lei) [task:88844]
  - dm mpath: pass IO start time to path selector (Gabriel Krisman Bertazi) [task:88844]
  - dm rq: remove unused arguments from rq_completed() (Mike Snitzer) [task:88844]
  - blk-mq: change blk_mq_queue_busy() to blk_mq_queue_inflight() (Jens Axboe) [task:88844]
  - KYLIN: Revert "KYLIN: kabi: fix kabi for part->in_flight" (zhanggenjian) [task:88844]
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies) [task:84718]
  - selftests/net: remove min gso test in packet_snd (Dust Li) [task:84718]
  - net: be more gentle about silly gso requests coming from user (Eric Dumazet) [task:84718]
  - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
  - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (Wang Hai)
  - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz)
  - net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)
  - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari) [bug:122252]
  - KYLIN: Optimized unixbench tests of Kunpeng 920 (pengcan) [task:85182]
  - KYLIN: security/kysec: optimize process path getting in ppro monitor (yangzhao)
  - KYLIN: security/kysec: remove script checking in kysec_task_kill() (yangzhao) [bug:119471]
  - KYLIN: KYLIN-MAINTAINER: add kylinos maintainer map (Jackie Liu)
  - KYLIN: optee: add ACPI support for Phytium (huanfuxi) [task:84829]
  - KYLIN: sort-commit-by-upstream: fix output patch's format (Jackie Liu)
  - KYLIN: security/kysec: allow killed by itself in kysec_task_kill() (yangzhao)
  - KYLIN: Revert "KYLIN: security/kysec: fix can kill protect task" (yangzhao) [bug:119840]
  - KYLIN: security/kysec: optimize kysec module code (yangzhao) [task:83026]
  - KYLIN: security/kysec: modify inode security mutex to spinlock (yangzhao) [task:83026]
  - KYLIN: security/kysec: implementation of exectl func in bprm_check hook (yangzhao) [task:83026]
  - KYLIN: Loongarch/pci: Set default vga boot device (Zhenneng Li) [task:88294, bug:120253]
  - KYLIN: vga: move fixup_vga to common code (Zhenneng Li)
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt failed when encrypted size is 64KB. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM3 ccp. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: Only handle interrupts by completion, eliminating by empty queue. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP. (Yabin Li) [task:84397]
  - HYGON: newfeature: Crypto: ccp: Optimize the exchanging context data between crypto and driver. (Yabin Li) [task:84397]
  - KYLIN: sync-stable: add feature find fix commit (Jackie Liu)
  - KYLIN: found-commit-all-deps: Prevent circular lookup dependencies (Jackie Liu)
  - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID (Paolo Bonzini) [bug:121506] {CVE-2022-1789}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-46.0.v2207
changelog:
  - LOONGSON: drm/loongson: Resolve 7A2000 vbltest and pageflip errors (liweitao) [task:90934]
  - LOONGSON: drm/loongson: Fixed 7A1000 fbcon screen failure (liweitao) [task:90934]
  - LOONGSON: drm/loongson: loongson_fbdev_init() should called after hotplug works (Sui Jingfeng) [task:90934]
  - LOONGSON: drm/loongson: fix black screen on netboot install of loongnix (Sui Jingfeng) [task:90934]
  - bpf: Add BTF_KIND_FLOAT to uapi (Ilya Leoshkevich) [task:91016]
  - libbpf: Fix type compatibility check copy-paste error (Andrii Nakryiko) [task:91016]
  - libbpf: Implement enum value-based CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Implement type-based CO-RE relocations support (Andrii Nakryiko) [task:91016]
  - libbpf: Improve relocation ambiguity detection (Andrii Nakryiko) [task:91016]
  - libbpf: Clean up and improve CO-RE reloc logging (Andrii Nakryiko) [task:91016]
  - libbpf: Improve error logging for mismatched BTF kind cases (Andrii Nakryiko) [task:91016]
  - libbpf: Disable -Wswitch-enum compiler warning (Andrii Nakryiko) [task:91016]
  - libbpf: Ignore incompatible types with matching name during CO-RE relocation (Andrii Nakryiko) [task:91016]
  - libbpf: Fix realloc usage in bpf_core_find_cands (Andrii Nakryiko) [task:91016]
  - libbpf: Improve handling of failed CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Support CO-RE relocations for LDX/ST/STX instructions (Andrii Nakryiko) [task:91016]
  - libbpf: Support flexible arrays in CO-RE (Andrii Nakryiko)
  - KYLIN: security/kysec: remove unused variables in kysec_task_kill() (yangzhao)
  - KYLIN: security/kysec: fix bug with .viminfo is set to readonly label (yangzhao) [bug:120931]
  - xfs: Fix false positive lockdep warning with sb_internal & fs_reclaim (Waiman Long) [bug:120083]
  - xfs: rename the speculative block allocation reclaim toggle functions (Darrick J. Wong) [bug:120083]
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Haimin Zhang) [bug:112037] {CVE-2022-0494}
  - KYLIN: sync-stable: force reset author every time (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-47.0.v2207
changelog:
  - afs: Fix infinite loop found by xfstest generic/676 (David Howells)
  - sctp: use call_rcu to free endpoint (Xin Long) [bug:124648] {CVE-2022-20154}
  - mmc: block: fix read single on recovery logic (Christian Löhle) [bug:124636] {CVE-2022-20008}
  - io_uring: clean up ->files grabbing (Pavel Begunkov) [task:91386]
  - io_uring: don't rely on weak ->files references (Jens Axboe) [task:91386]
  - io_uring: enable task/files specific overflow flushing (Jens Axboe) [task:91386]
  - io_uring: return cancelation status from poll/timeout/files handlers (Jens Axboe) [task:91386]
  - io_uring: unconditionally grab req->task (Jens Axboe) [task:91386]
  - io_uring: move dropping of files into separate helper (Jens Axboe) [task:91386]
  - io_uring: allow timeout/poll/files killing to take task into account (Jens Axboe) [task:91386]
  - KYLIN: security/kysec: fix panic when 3adm opened and kysec disabled (yangzhao) [bug:124729]
  - KYLIN: security: fix soft lockup bug in security_socket_getpeersec_stream() when security closed (yangzhao) [bug:124559]
  - KYLIN: security/kysec: remove set default rule in module (huanfuxi) [task:91912, bug:124516, bug:109500]
  - KYLIN: Revert "KYLIN: fs/proc: add PKS marking into /proc/osinfo" (huanfuxi)
  - dma-direct: Force unencrypted DMA under SME for certain DMA masks (Tom Lendacky) [bug:122774]
  - dma-direct: Make DIRECT_MAPPING_ERROR viable for SWIOTLB (Robin Murphy) [bug:122774]
  - MIPS: Fix `dma_alloc_coherent' returning a non-coherent allocation (Maciej W. Rozycki) [bug:122774]
  - swiotlb: don't dip into swiotlb pool for coherent allocations (Christoph Hellwig) [bug:122774]
  - swiotlb: refactor swiotlb_map_page (Christoph Hellwig) [bug:122774]
  - swiotlb: use swiotlb_map_page in swiotlb_map_sg_attrs (Christoph Hellwig) [bug:122774]
  - swiotlb: merge swiotlb_unmap_page and unmap_single (Christoph Hellwig) [bug:122774]
  - swiotlb: remove the overflow buffer (Christoph Hellwig) [bug:122774]
  - dma-mapping: merge direct and noncoherent ops (Christoph Hellwig) [bug:122774]
  - dma-mapping: move the dma_coherent flag to struct device (Christoph Hellwig) [bug:122774]
  - KYLIN: osinfo: show working platform (Jackie Liu)
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (Eric Dumazet)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-48.0.v2207
changelog:
  - KYLIN: config: set yutai phy driver config to M. (zhaochenguang) [task:94950]
  - KYLIN: security/kysec: allow record audit log when kysec enabled (yangzhao)
  - faddr2line: Fix overlapping text section failures, the sequel (Josh Poimboeuf)
  - scripts/faddr2line: Fix overlapping text section failures (Josh Poimboeuf)
  - KYLIN: kysec: fix potential out-of-bounds access issues of name (Jackie Liu)
  - KYLIN: kysec: Use pr_debug instead of manual implementation (Jackie Liu)
  - KYLIN: kysec: Remove unnecessary zeroing (Jackie Liu)
  - KYLIN: kysec: use pr_fmt auto generate prefix (Jackie Liu)
  - KYLIN: kysec: adjust kysec disabled state of hooks (Jackie Liu)
  - KYLIN: kysec: exit the thread when kysec is closed (Jackie Liu)
  - KYLIN: osinfo: make uptime pretty for human beings (Jackie Liu)
  - x86/speculation/mmio: Print SMT warning (Josh Poimboeuf) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add another Alder Lake CPU to the Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - cpu/speculation: Add prototype for cpu_show_srbds() (Guenter Roeck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob (Sean Christopherson) [bug:125047]
  - KVM: VMX: fix crash cleanup when KVM wasn't used (Vitaly Kuznetsov) [bug:125047]
  - KVM: s390: vsie: Fix delivery of addressing exceptions (David Hildenbrand) [bug:125047]
  - KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (David Hildenbrand) [bug:125047]
  - KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support (Sean Christopherson) [bug:125047]
  - KVM: nVMX: Properly handle userspace interrupt window request (Sean Christopherson) [bug:125047]
  - KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (Sean Christopherson) [bug:125047]
  - KVM: x86: Allocate new rmap and large page tracking when moving memslot (Sean Christopherson) [bug:125047]
  - x86/cpu: Add Jasper Lake to Intel family (Zhang Rui) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Elkhart Lake to Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs (Sean Christopherson) [bug:125047]
  - KVM: VMX: Zero out *all* general purpose registers after VM-Exit (Sean Christopherson) [bug:125047]
  - KYLIN: phy:fix fiber and utp can't up at the same time (zhaochenguang) [task:69009]
  - KYLIN: crypto: add sm2 module (yushanshan) [bug:125310]
  - KYLIN: config: enable logitech wheels configuration and force feedback support (Jackie Liu) [task:94256]
  - KYLIN: kernel.spec: fix upgrade from SP1 to SP3 (Jackie Liu) [bug:124466]
  - xfs: cover the log during log quiesce (Brian Foster) [task:82242]
  - xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster) [task:82242]
  - xfs: make use of the l_targ field in struct xlog (Christoph Hellwig) [task:82242]
  - xfs: separate log cleaning from log quiesce (Brian Foster) [task:82242]
  - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [task:82242]
  - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [task:82242]
  - xfs: ratelimit unmount time per-buffer I/O error alert (Brian Foster) [task:82242]
  - KYLIN: mod-blacklist.sh: drop blacklist of nft_chain_*.ko (Jackie Liu)
  - KYLIN: backport-tools: add convert-to-lts tool (Jackie Liu)
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace (Michael Ellerman) [bug:124640] {CVE-2022-32981}
  - libbpf: Avoid false unuinitialized variable warning in bpf_core_apply_relo (Andrii Nakryiko) [task:93705]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-49.0.v2207
changelog:
  - fs: sysfs_emit: Remove PAGE_SIZE alignment check (Lucas Wei)
  - workqueue: Add RCU annotation for pwq list walk (Sebastian Andrzej Siewior)
  - xfs: fix unused log variable in xfs_log_cover() (Brian Foster)
  - netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name (Eric Dumazet) [task:95868]
  - netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup() (Qian Cai) [task:95868]
  - netfilter: nf_tables: fix infinite loop when expr is not available (Florian Westphal) [task:95868]
  - netfilter: nf_tables: autoload modules from the abort path (Pablo Neira Ayuso) [task:95868]
  - netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks (Florian Westphal) [task:95868]
  - rcu: Add support for consolidated-RCU reader checking (Joel Fernandes (Google))
  - rcu: Remove redundant debug_locks check in rcu_read_lock_sched_held() (Joel Fernandes (Google))
  - treewide: Rename rcu_dereference_raw_notrace() to _check() (Joel Fernandes (Google))
  - netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module (Pablo Neira Ayuso)
  - netfilter: nf_tables: force module load in case select_ops() returns -EAGAIN (Pablo Neira Ayuso)
  - netfilter: nf_tables: add nft_expr_type_request_module() (Pablo Neira Ayuso)
  - ftrace: Create new ftrace_internal.h header (Steven Rostedt (VMware))
  - KYLIN: sched: Improve spawn test of UnixBench (liwanwu) [bug:119995]
  - KYLIN: net: socket server performance optimization (luoqing) [bug:120014]
  - KYLIN: security/kysec: reduce repeated judgments in kysec_get_status() (yangzhao)
  - KYLIN: fs: Optimize unixbench's file copy test (pengcan) [bug:121719]
  - KYLIN: usb: Improves USB2.0 write performance for External HDD device(0x0b05:0x1932) (Hu Xiaoying) [task:89793]
  - sched/fair: Add document for burstable CFS bandwidth (Huaixin Chang) [task:94280]
  - sched/fair: Add cfs bandwidth burst statistics (Huaixin Chang) [task:94280]
  - sched/fair: Introduce the burstable CFS controller (Huaixin Chang) [task:94280]
  - sched: Defend cfs and rt bandwidth quota against overflow (Huaixin Chang) [task:94280]
  - KYLIN: add linux_headers_install.sh script to build out of tree modules (George Guo) [task:94951]
  - KYLIN: loongarch/config: support parport as module (wangxuewen) [task:95203]
  - KYLIN: io_uring: fix missing remove ITER_KVEC (Jackie Liu) [task:96351]
  - KYLIN: ft-hda: solve ft-hda losing when reboot (songxiebing) [task:93001]
  - hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu) [bug:56117]
  - io_uring: fix ignoring xa_store errors (Pavel Begunkov) [task:95530]
  - io_uring: Fix XArray usage in io_uring_add_task_file (Matthew Wilcox (Oracle)) [task:95530]
  - io_uring: don't run task work on an exiting task (Jens Axboe) [task:95530]
  - task_work: only grab task signal lock when needed (Jens Axboe) [task:95530]
  - io_uring: no need to call xa_destroy() on empty xarray (Jens Axboe) [task:96230]
  - tc-tests: test denial of 'goto chain' for exceed traffic in police.json (Davide Caratti)
  - xfs: don't reserve per-AG space for an internal log (Darrick J. Wong) [task:82242]
  - KYLIN: Revert "KYLIN: logo: Change YHKYLIN logo to KYLINSOFT." (Jackie Liu) [task:74569]
  - KYLIN: kysec: Optimize the operation of kysec under file paths (Jackie Liu)
  - KYLIN: kysec: Use static_key instead of unlikely to further optimize efficiency (Jackie Liu)
  - KYLIN: loongarch/config: Add support for two filesystems on loongarch (wangxuewen) [bug:122374]
  - xhci: Keep interrupt disabled in initialization until host is running. (Hongyu Xie) [task:95460]
  - KYLIN: kysec: Fix kysec crash due to kysec_is_disabled bug (Jackie Liu) [task:95345]
  - KYLIN: kysec: Optimize kysec_is_disabled branch prediction (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-50.0.v2207
changelog:
  - KYLIN: fix errors when run ./linux-headers-$version.sh (George Guo) [task:94951]
  - KYLIN: net: replace cpumask_equal with cpumask_subset (xiaolinkui) [task:97876]
  - KYLIN: loongarch: fix io_uring series system call exception (Enze Li) [bug:124889]
  - selftests/x86/mov_ss_trap: Fix the SYSENTER test (Andy Lutomirski)
  - KYLIN: x86: debug_defconfig: more netfilter test module (Jackie Liu)
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:94748]
  - io_uring: Convert advanced XArray uses to the normal API (Matthew Wilcox (Oracle)) [task:98126]
  - exec: Move io_uring_task_cancel after the point of no return (Eric W. Biederman) [task:97817]
  - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI (Thomas Gleixner) [task:87159]
  - clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu) [task:87159]
  - futex: Adjust absolute futex timeouts with per time namespace offset (Andrei Vagin) [task:87159]
  - arm64: vdso32: make vdso32 install conditional (Frank van der Linden) [task:87159]
  - ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd) [task:87159]
  - vdso/treewide: Add vdso_data pointer argument to __arch_get_hw_counter() (Thomas Gleixner) [task:87159]
  - timekeeping/vsyscall: Provide vdso_update_begin/end() (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow to add architecture-specific vdso data (Sven Schnelle) [task:87159]
  - arm64: enable time namespace support (Andrei Vagin) [task:87159]
  - arm64/vdso: Restrict splitting VVAR VMA (Andrei Vagin) [task:87159]
  - arm64/vdso: Handle faults on timens page (Andrei Vagin) [task:87159]
  - arm64/vdso: Add time namespace page (Andrei Vagin) [task:87159]
  - arm64/vdso: Zap vvar pages when switching to a time namespace (Andrei Vagin) [task:87159]
  - arm64/vdso: use the fault callback to map vvar pages (Andrei Vagin) [task:87159]
  - futex: Remove unused or redundant includes (André Almeida) [task:87159]
  - arm64: compat: Allow 32-bit vdso and sigpage to co-exist (Will Deacon) [task:87159]
  - mmap locking API: initial implementation as rwsem wrappers (Michel Lespinasse) [task:87159]
  - x86/vdso: Unbreak paravirt VDSO clocks (Thomas Gleixner) [task:87159]
  - lib/vdso: Provide sanity check for cycles (again) (Thomas Gleixner) [task:87159]
  - clocksource: Remove obsolete ifdef (Thomas Gleixner) [task:87159]
  - selftests/timens: handle a case when alarm clocks are not supported (Andrei Vagin) [task:87159]
  - arm64: vdso: Add --eh-frame-hdr to ldflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Add -fasynchronous-unwind-tables to cflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: use consistent 'map' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: use consistent 'abi' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: simplify arch_vdso_type ifdeffery (Mark Rutland) [task:87159]
  - arm64: vdso: remove aarch32_vdso_pages[] (Mark Rutland) [task:87159]
  - arm64: vdso: Add '-Bsymbolic' to ldflags (Vincenzo Frascino) [task:87159]
  - kbuild: fix DT binding schema rule again to avoid needless rebuilds (Masahiro Yamada) [task:87159]
  - x86/vdso/vdso2c: Convert iterators to unsigned (Dmitry Safonov) [task:87159]
  - x86/vdso/vdso2c: Correct error messages on file open (Dmitry Safonov) [task:87159]
  - vdso/datapage: Use correct clock mode name in comment (Christian Brauner) [task:87159]
  - proc, time/namespace: Show clock symbolic names in /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - arm64: vdso: don't free unallocated pages (Mark Rutland) [task:87159]
  - time/namespace: Add max_time_namespaces ucount (Dmitry Safonov) [task:87159]
  - time/namespace: Fix time_for_children symlink (Michael Kerrisk (man-pages)) [task:87159]
  - um: Fix header inclusion (Vincenzo Frascino) [task:87159]
  - lib/vdso: Enable common headers (Vincenzo Frascino) [task:87159]
  - x86/vdso: Enable x86 to use common headers (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/processor.h (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Code clean up (Vincenzo Frascino) [task:87159]
  - linux/elfnote.h: Replace elf.h with UAPI equivalent (Vincenzo Frascino) [task:87159]
  - common: Introduce processor.h (Vincenzo Frascino) [task:87159]
  - linux/ktime.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/jiffies.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time32.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/math64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/clocksource.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - x86: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - linux/limits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/bits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/const.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Fix syscall number of compat_clock_getres (Vincenzo Frascino) [task:87159]
  - selftests/timens: Remove duplicated include <time.h> (YueHaibing) [task:87159]
  - sys/sysinfo: Respect boottime inside time namespace (Cyril Hrubis) [task:87159]
  - kbuild: fix DT binding schema rule to detect command line changes (Masahiro Yamada) [task:87159]
  - clocksource/drivers/arm_arch_timer: Fix vDSO clockmode when vDSO disabled (Vincenzo Frascino) [task:87159]
  - lib/vdso: Allow architectures to provide the vdso data pointer (Christophe Leroy) [task:87159]
  - lib/vdso: Allow architectures to override the ns shift operation (Christophe Leroy) [task:87159]
  - lib/vdso: Allow fixed clock mode (Christophe Leroy) [task:87159]
  - lib/vdso: Move VCLOCK_TIMENS to vdso_clock_modes (Thomas Gleixner) [task:87159]
  - lib/vdso: Avoid highres update if clocksource is not VDSO capable (Thomas Gleixner) [task:87159]
  - lib/vdso: Cleanup clock mode storage leftovers (Thomas Gleixner) [task:87159]
  - ARM/arm64: vdso: Use common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Use generic VDSO clock mode storage (Thomas Gleixner) [task:87159]
  - clocksource: Add common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Move VDSO clocksource state tracking to callback (Thomas Gleixner) [task:87159]
  - clocksource: Cleanup struct clocksource and documentation (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow the high resolution parts to be compiled out (Thomas Gleixner) [task:87159]
  - x86/vdso: Mark the TSC clocksource path likely (Thomas Gleixner) [task:87159]
  - selftests: use LDLIBS for libraries instead of LDFLAGS (Dmitry Safonov)
  - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [task:87159]
  - MAINTAINERS: Correct path to time namespace source file (Dmitry Safonov) [task:87159]
  - MIPS: syscalls: fix indentation of the 'SYSNR' message (Alexander Lobakin) [task:87159]
  - lib/vdso: Update coarse timekeeper unconditionally (Thomas Gleixner) [task:87159]
  - lib/vdso: Make __arch_update_vdso_data() logic understandable (Thomas Gleixner) [task:87159]
  - lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - selftests/timens: Check for right timens offsets after fork and exec (Andrei Vagin) [task:87159]
  - selftests/timens: Add a simple perf test for clock_gettime() (Andrei Vagin) [task:87159]
  - selftests/timens: Add timer offsets test (Andrei Vagin) [task:87159]
  - selftests/timens: Add procfs selftest (Dmitry Safonov) [task:87159]
  - selftests/timens: Add a test for clock_nanosleep() (Andrei Vagin) [task:87159]
  - selftests/timens: Add a test for timerfd (Andrei Vagin) [task:87159]
  - selftests/timens: Add Time Namespace test for supported clocks (Dmitry Safonov) [task:87159]
  - fs/proc: Introduce /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - x86/vdso: Zap vvar pages when switching to a time namespace (Dmitry Safonov) [task:87159]
  - x86/vdso: On timens page fault prefault also VVAR page (Dmitry Safonov) [task:87159]
  - x86/vdso: Handle faults on timens page (Dmitry Safonov) [task:87159]
  - time: Allocate per-timens vvar page (Dmitry Safonov) [task:87159]
  - x86/vdso: Add time napespace page (Dmitry Safonov) [task:87159]
  - x86/vdso: Provide vdso_data offset on vvar_page (Dmitry Safonov) [task:87159]
  - lib/vdso: Prepare for time namespace support (Thomas Gleixner) [task:87159]
  - x86/vdso: Restrict splitting VVAR VMA (Dmitry Safonov) [task:87159]
  - fs/proc: Respect boottime inside time namespace for /proc/uptime (Dmitry Safonov) [task:87159]
  - posix-timers: Make clock_nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - hrtimers: Prepare hrtimer_nanosleep() for time namespaces (Andrei Vagin) [task:87159]
  - alarmtimer: Make nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - posix-timers: Make timer_settime() time namespace aware (Andrei Vagin) [task:87159]
  - timerfd: Make timerfd_settime() time namespace aware (Andrei Vagin) [task:87159]
  - time: Add do_timens_ktime_to_host() helper (Andrei Vagin) [task:87159]
  - posix-clocks: Wire up clock_gettime() with timens offsets (Andrei Vagin) [task:87159]
  - posix-timers: Use clock_get_ktime() in common_timer_get() (Andrei Vagin) [task:87159]
  - posix-clocks: Introduce clock_get_ktime() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Provide get_timespec() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Rename gettime() callback to get_ktime() (Andrei Vagin) [task:87159]
  - posix-clocks: Rename .clock_get_timespec() callbacks accordingly (Andrei Vagin) [task:87159]
  - posix-clocks: Rename the clock_get() callback to clock_get_timespec() (Andrei Vagin) [task:87159]
  - time: Add timens_offsets to be used for tasks in time namespace (Andrei Vagin) [task:87159]
  - ns: Introduce Time Namespace (Andrei Vagin) [task:87159]
  - lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin) [task:87159]
  - lib/vdso: Avoid duplication in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - lib/vdso: Add unlikely() hint into vdso_read_begin() (Andrei Vagin) [task:87159]
  - lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy) [task:87159]
  - x86/vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove checks on return value for 32 bit vDSO (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Build 32 bit specific functions in the right context (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Expose BUILD_VDSO32 (Vincenzo Frascino) [task:87159]
  - raid6/test: fix a compilation error (Zhengyuan Liu) [task:87159]
  - lib/vdso: Make __cvdso_clock_getres() static (Vincenzo Frascino) [task:87159]
  - y2038: vdso: change time_t to __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - y2038: add __kernel_old_timespec and __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - selftests: gen_kselftest_tar.sh: Do not clobber kselftest/ (Kees Cook) [task:87159]
  - selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [task:87159]
  - timekeeping/vsyscall: Update VDSO data unconditionally (Huacai Chen) [task:87159]
  - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [task:87159]
  - lib/vdso: Make clock_getres() POSIX compliant again (Thomas Gleixner) [task:87159]
  - selftests: Add kselftest-all and kselftest-install targets (Shuah Khan) [task:87159]
  - um: Fix VDSO compiler warning (Johannes Berg) [task:87159]
  - ipc: fix sparc64 ipc() wrapper (Arnd Bergmann) [task:87159]
  - timekeeping/vsyscall: Prevent math overflow in BOOTTIME update (Thomas Gleixner) [task:87159]
  - selftests: use "$(MAKE)" instead of "make" (Ilya Leoshkevich) [task:87159]
  - arm64: compat: vdso: Use legacy syscalls as fallback (Thomas Gleixner) [task:87159]
  - x86/vdso/32: Use 32bit syscall fallback (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Provide legacy syscall fallbacks (Thomas Gleixner) [task:87159]
  - lib/vdso: Move fallback invocation to the callers (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Remove inconsistent NULL pointer checks (Thomas Gleixner) [task:87159]
  - kselftest: save-and-restore errno to allow for %m formatting (Aleksa Sarai)
  - arm64: vdso: Cleanup Makefiles (Vincenzo Frascino) [task:87159]
  - arm64: vdso: fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - linux/bits.h: make BIT(), GENMASK(), and friends available in assembly (Masahiro Yamada) [task:87159]
  - x86/vdso: Fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - timekeeping/vsyscall: Use __iter_div_u64_rem() (Arnd Bergmann) [task:87159]
  - arm64: compat: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - arm64: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Make delta calculation work correctly (Thomas Gleixner) [task:87159]
  - arm64: compat: No need for pre-ARMv7 barriers on an ARMv8 system (Catalin Marinas) [task:87159]
  - arm64: vdso: Remove unnecessary asm-offsets.c definitions (Catalin Marinas) [task:87159]
  - vdso: Remove superfluous #ifdef __KERNEL__ in vdso/datapage.h (Catalin Marinas) [task:87159]
  - x86/vdso: Add clock_gettime64() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Add clock_getres() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Switch to generic vDSO implementation (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Enable vDSO compat support (Vincenzo Frascino) [task:87159]
  - arm64: compat: Get sigreturn trampolines from vDSO (Vincenzo Frascino) [task:87159]
  - arm64: elf: VDSO code page discovery (Vincenzo Frascino) [task:87159]
  - arm64: compat: VDSO setup for compat layer (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Refactor vDSO code (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Generate asm offsets for signals (Vincenzo Frascino) [task:87159]
  - arm64: compat: Expose signal related structures (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add missing syscall numbers (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Build vDSO with -ffixed-x18 (Peter Collingbourne) [task:87159]
  - arm64: vdso: Substitute gettimeofday() with C implementation (Vincenzo Frascino) [task:87159]
  - timekeeping: Provide a generic update_vsyscall() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Add compat support (Vincenzo Frascino) [task:87159]
  - lib/vdso: Provide generic VDSO implementation (Vincenzo Frascino) [task:87159]
  - vdso: Define standardized vdso_datapage (Vincenzo Frascino) [task:87159]
  - hrtimer: Split out hrtimer defines into separate header (Vincenzo Frascino) [task:87159]
  - clocksource/drivers/arm_arch_timer: Don't trace count reader functions (Julien Thierry) [task:87159]
  - selftests: vm: Fix test build failure when built by itself (Shuah Khan) [task:87159]
  - tests: fix pidfd-test compilation (Christian Brauner) [task:87159]
  - arm64: arch_timer: mark functions as __always_inline (Anders Roxell) [task:87159]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 223 (Thomas Gleixner) [task:87159]
  - selftests: Remove forced unbuffering for test running (Kees Cook) [task:87159]
  - arm64: vdso: Explicitly add build-id option (Laura Abbott) [task:87159]
  - selftests: fix bpf build/test workflow regression when KBUILD_OUTPUT is set (Shuah Khan) [task:87159]
  - selftests: fix install target to use default install path (Shuah Khan) [task:87159]
  - x86/vdso: Remove hpet_page from vDSO (Jia Zhang) [task:87159]
  - clocksource/arm_arch_timer: Use arch_timer_read_counter to access stable counters (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Remove use of workaround static key (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Drop use of static key in arch_timer_reg_read_stable (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Direcly assign set_next_event workaround (Marc Zyngier) [task:87159]
  - arm64: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - watchdog/sbsa: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - arm64: arch_timer: Ensure counter register reads occur with seqlock held (Will Deacon) [task:87159]
  - selftests: Add test plan API to kselftest.h and adjust callers (Kees Cook)
  - selftests: Move test output to diagnostic lines (Kees Cook)
  - selftests: Distinguish between missing and non-executable (Kees Cook)
  - selftests: Add plan line and fix result line syntax (Kees Cook)
  - selftests: Extract logic for multiple test runs (Kees Cook)
  - selftests: Use runner.sh for emit targets (Kees Cook)
  - selftests: Extract single-test shell logic from lib.mk (Kees Cook)
  - arm64: compat: Add KUSER_HELPERS config option (Vincenzo Frascino) [task:87159]
  - arm64: compat: Refactor aarch32_alloc_vdso_pages() (Vincenzo Frascino) [task:87159]
  - arm64: compat: Split kuser32 (Vincenzo Frascino) [task:87159]
  - arm64: compat: Alloc separate pages for vectors and sigpage (Vincenzo Frascino) [task:87159]
  - selftests: fix headers_install circular dependency (Shuah Khan) [task:87159]
  - x86/vdso: Rename variable to fix -Wshadow warning (Leonardo Brás) [task:87159]
  - arm64: vdso: Fix clock_getres() for CLOCK_REALTIME (Vincenzo Frascino) [task:87159]
  - arch: add pidfd and io_uring syscalls everywhere (Arnd Bergmann)
  - arm64: vdso: use $(LD) instead of $(CC) to link VDSO (Masahiro Yamada) [task:87159]
  - arm64: vdso: fix and clean-up Makefile (Masahiro Yamada) [task:87159]
  - perf tools: Update x86's syscall_64.tbl, no change in tools/perf behaviour (Arnaldo Carvalho de Melo) [task:87159]
  - linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h> (Masahiro Yamada) [task:87159]
  - linux/kernel.h: use 'short' to define USHRT_MAX, SHRT_MAX, SHRT_MIN (Masahiro Yamada) [task:87159]
  - selftests: add tests for pidfd_send_signal() (Christian Brauner)
  - checksyscalls: fix up mq_timedreceive and stat exceptions (Arnd Bergmann) [task:87159]
  - time: Add time_types.h (Deepa Dinamani) [task:87159]
  - sh: fix build error for invisible CONFIG_BUILTIN_DTB_SOURCE (Masahiro Yamada) [task:87159]
  - y2038: add 64-bit time_t syscalls to all 32-bit architectures (Arnd Bergmann)
  - socket: Add struct __kernel_sock_timeval (Deepa Dinamani) [task:87159]
  - arch: sparc: Override struct __kernel_old_timeval (Deepa Dinamani) [task:87159]
  - kbuild: add real-prereqs shorthand for $(filter-out FORCE,$^) (Masahiro Yamada) [task:87159]
  - kbuild: simplify rules of data compression with size appending (Masahiro Yamada) [task:87159]
  - alpha: add generic get{eg,eu,g,p,u,pp}id() syscalls (Arnd Bergmann)
  - alpha: add standard statfs64/fstatfs64 syscalls (Arnd Bergmann)
  - sparc64: fix sparc_ipc type conversion (Arnd Bergmann)
  - sh: remove duplicate unistd_32.h file (Arnd Bergmann)
  - arch: add pkey and rseq syscall numbers everywhere (Arnd Bergmann)
  - ipc: rename old-style shmctl/semctl/msgctl syscalls (Arnd Bergmann)
  - arch: add split IPC system calls where needed (Arnd Bergmann)
  - sh: add statx system call (Arnd Bergmann)
  - m68k: assign syscall number for seccomp (Arnd Bergmann)
  - ARM: add kexec_file_load system call number (Arnd Bergmann)
  - ARM: add migrate_pages() system call (Arnd Bergmann)
  - alpha: wire up io_pgetevents system call (Arnd Bergmann)
  - ia64: assign syscall numbers for perf and seccomp (Arnd Bergmann)
  - ia64: add statx and io_pgetevents syscalls (Arnd Bergmann)
  - alpha: update syscall macro definitions (Arnd Bergmann)
  - s390: fix system call tracing (Heiko Carstens) [task:87159]
  - arm64: asm-offsets: remove unused offsets (Andrew Murray) [task:87159]
  - s390: remove compat_wrapper.c (Arnd Bergmann)
  - s390: autogenerate compat syscall wrappers (Arnd Bergmann)
  - s390: use generic UID16 implementation (Arnd Bergmann)
  - ipc: introduce ksys_ipc()/compat_ksys_ipc() for s390 (Arnd Bergmann)
  - s390: open-code s390_personality syscall (Arnd Bergmann)
  - kbuild: remove unused baseprereq (Masahiro Yamada) [task:87159]
  - kbuild: clean up rule_dtc_dt_yaml (Masahiro Yamada) [task:87159]
  - tools headers uapi: Sync copy of asm-generic/unistd.h with the kernel sources (Arnaldo Carvalho de Melo) [task:87159]
  - arm64: compat: Hook up io_pgetevents() for 32-bit tasks (Will Deacon)
  - arm64: replace arm64-obj-* in Makefile with obj-* (Masahiro Yamada) [task:87159]
  - alpha: generate uapi header and syscall table header files (Firoz Khan)
  - alpha: add system call table generation support (Firoz Khan)
  - alpha: add __NR_syscalls along with NR_SYSCALLS (Firoz Khan)
  - alpha: remove CONFIG_OSF4_COMPAT flag from syscall table (Firoz Khan)
  - alpha: move __IGNORE* entries to non uapi header (Firoz Khan)
  - powerpc: add system call table generation support (Firoz Khan)
  - sh: add system call table generation support (Firoz Khan)
  - sh: add __NR_syscalls along with NR_syscalls (Firoz Khan)
  - mips: add system call table generation support (Firoz Khan)
  - seccomp, s390: fix build for syscall type change (Tycho Andersen)
  - kbuild: Add support for DT binding schema checks (Rob Herring) [task:87159]
  - parisc: add system call table generation support (Firoz Khan)
  - parisc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - asm-generic: add kexec_file_load system call to unistd.h (AKASHI Takahiro)
  - x86/vdso: Remove obsolete "fake section table" reservation (Sean Christopherson) [task:87159]
  - m68k: Add system call table generation support (Firoz Khan)
  - xtensa: add system call table generation support (Firoz Khan)
  - riscv: add asm/unistd.h UAPI header (David Abdurachmanov) [task:87159]
  - sparc: add system call table generation support (Firoz Khan)
  - sparc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - microblaze: add system call table generation support (Firoz Khan)
  - ia64: add system call table generation support (Firoz Khan)
  - builddeb: Fix inclusion of dtbs in debian package (Rob Herring) [task:87159]
  - tools arch uapi: Update asm-generic/unistd.h and arm64 unistd.h copies (Arnaldo Carvalho de Melo) [task:87159]
  - x86: convert vdso to use vm_fault_t (Matthew Wilcox) [task:87159]
  - mm: introduce vmf_insert_pfn_prot() (Matthew Wilcox) [task:87978]
  - mm: remove vm_insert_mixed() (Matthew Wilcox) [task:87978]
  - cramfs: convert to use vmf_insert_mixed (Nicolas Pitre) [task:87978]
  - mm: convert to use vm_fault_t (Souptick Joarder) [task:87978]
  - kbuild: remove unneeded link_multi_deps (Masahiro Yamada) [task:87159]
  - x86/vdso: Initialize the CPU/node NR segment descriptor earlier (Chang S. Bae) [task:87159]
  - x86/vdso: Introduce helper functions for CPU and node number (Chang S. Bae) [task:87159]
  - x86/segments/64: Rename the GDT PER_CPU entry to CPU_NUMBER (Chang S. Bae) [task:87159]
  - x86/vdso: Rearrange do_hres() to improve code generation (Andy Lutomirski) [task:87159]
  - x86/vdso: Document vgtod_ts better (Andy Lutomirski) [task:87159]
  - x86/vdso: Remove "memory" clobbers in the vDSO syscall fallbacks (Andy Lutomirski) [task:87159]
  - x66/vdso: Add CLOCK_TAI support (Thomas Gleixner) [task:87159]
  - x86/vdso: Move cycle_last handling into the caller (Thomas Gleixner) [task:87159]
  - x86/vdso: Simplify the invalid vclock case (Thomas Gleixner) [task:87159]
  - x86/vdso: Replace the clockid switch case (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse coarse functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse high resolution functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Introduce and use vgtod_ts (Thomas Gleixner) [task:87159]
  - x86/vdso: Use unsigned int consistently for vsyscall_gtod_data:: Seq (Thomas Gleixner) [task:87159]
  - x86/vdso: Enforce 64bit clocksource (Thomas Gleixner) [task:87159]
  - x86/time: Implement clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - clocksource: Provide clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - kbuild: consolidate Devicetree dtb build rules (Rob Herring) [task:87159]
  - nios2: use common rules to build built-in dtb (Rob Herring) [task:87159]
  - powerpc: build .dtb files in dts directory (Rob Herring) [task:87159]
  - nios2: build .dtb files in dts directory (Rob Herring) [task:87159]
  - scripts/dtc: Update to upstream version v1.4.7-14-gc86da84d30e4 (Rob Herring) [task:87159]
  - RISC-V: Request newstat syscalls (Guenter Roeck) [task:87159]
  - y2038: socket: Change recvmmsg to use __kernel_timespec (Arnd Bergmann) [task:87159]
  - y2038: Remove newstat family from default syscall set (Arnd Bergmann)
  - y2038: globally rename compat_time to old_time32 (Arnd Bergmann) [task:87978]
  - alpha: use alpha_ni_syscall only for syscall zero (Al Viro)
  - KYLIN: Revert "arm64: arch_timer: Disable CNTVCT_EL0 trap if workaround is enabled" (Jackie Liu)
  - KYLIN: Revert "arm64:vdso: Rewrite gettimeofday into C." (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: Ensure counter register reads occur with seqlock held" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: Fix clock_getres() for CLOCK_REALTIME" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: do cntvct workaround in the VDSO" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: move vdso_fix into struct vdso_data" (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: only do cntvct workaround on VDSO path on D05" (Jackie Liu)
  - KYLIN: Revert "KYLIN: arm/arch_timer: fix build missing CONFIG_HISILICON_ERRATUM_161010101" (Jackie Liu)
  - KYLIN: Revert "clocksource/drivers/arch_timer: Fix vdso_fix compile error for arm32" (Jackie Liu)
  - KYLIN: Revert "arm64:ilp32: add vdso-ilp32 and use for signal return" (Jackie Liu)
  - netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c. (David Wilder) [task:95566]
  - netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c. (David Wilder) [task:95566]
  - netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netns: restore ops before calling ops_exit_list (Li RongQing) [task:95566]
  - netns: add pre_exit method to struct pernet_operations (Eric Dumazet) [task:95566]
  - KYLIN: scsi: Add SCSI_DH* config for loongarch. (cuitao) [task:92151]
  - KYLIN: security/kysec: update kysec_mempro module (huanfuxi) [bug:128578]
  - drm/ast: Create the driver for ASPEED proprietory Display-Port (KuoHsiang Chou) [task:94616]
  - drm/ast: Create threshold values for AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Enable the supporting of wide screen on AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Create chip AST2600 (KuoHsiang Chou) [task:94616]
  - NETSWIFT :txgbe: update the driver to 1.3.2 (luoqing) [task:92912]
  - NETSWIFT :txgbe: FIX : fix compile in linux 3.10 (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: ADD : add flash unlock when upgrade image (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: FIX : fix some kr flow (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: fix bug when 1820 is in 1G sfp speed mode, link partner (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: FIX : fix vxlan/geneve port not set to hardware (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: update the driver to 1.2.2 (luoqing) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt 101 mode support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: FIX : fix compile in ubuntu 21.10 (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: busfix linkspeed setup failed when link is down (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: ADD-add-link-retry-switch-to-configure (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt8531s id support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: read flash from flash only in phy init (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: ADD : add retry use an err bit (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: CH : use sw configure efuse (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix phy set to force 100M autoneg off with partner (zhengzhenpeng) [task:92912]
  - WIREGUARD-LINUX-COMPAT: net: WireGuard secure network tunnel (Jason A. Donenfeld) [task:90253]
  - vt: drop old FONT ioctls (Jiri Slaby) [bug:128721] {CVE-2021-33656}
  - KYLIN: debug_defconfig: enable CONFIG_UBSAN (Jackie Liu)
  - KYLIN: sync-stable: fix wrong exit status when failed (Jackie Liu)
  - crypto: hisilicon delete invlaid api and config (Yu'an Wang) [bug:122239]
  - crypto: hisilicon - add CRYPTO_TFM_REQ_MAY_BACKLOG flag judge in sec_process() (Yu'an Wang) [bug:122239]
  - uacce: misc fixes (Yu'an Wang) [bug:122239]
  - misc/uacce: fixup out-of-bounds array write (Yu'an Wang) [bug:122239]
  - crypto/sec: add aead support for user-side (Yu'an Wang) [bug:122239]
  - UACCE: backport from mainline (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-Cap block size at 2^31 (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-hpre add req check when callback (Yu'an Wang) [bug:122239]
  - crypto: hisilicon- count send_ref when sending bd (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-enhancement of qm DFX (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-memory management optimization (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix packet loss for acc (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: modify driver to adapt dm-crypt (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: reinforce reset failure scene (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: fix decompress a empty file (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: dfx for IO operation and delay (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: Overall optimization of sec code (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize the maximum number of VF and delete invalid addr (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize set hw_reset flag logic for user (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup the problem of wrong judgement of used (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: Move all the same logic functions of hisilicon crypto to qm (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix the way judge whether q stop in user space (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup compilation dependency (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/rde: optimize debug regs clear logic (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: change sec_control reg config (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: add likely and unlikey in result judgement (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: optimize key process before free (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: remove invalid addr print (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: use offset fields in sqe to avoid SG_SPLIT (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix wrong number of sg elements after dma map (Yu'an Wang) [bug:122239]
  - uacce: Remove uacce mode 1 relatives (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon: Remove uacce mode 1 logic below hisilicon (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon/sec2: add initial configuration in sec_engine_init (Yu'an Wang) [bug:122239]
  - KYLIN:crypto/hisilicon: The driver version is aligned to the Euler kernel (liyouhong) [bug:122239]
  - EULER: memcg: update the child's qos_level synchronously in memcg_qos_write() (Jing Xiangfeng) [task:85149]
  - EULER: memcg: Add static key for memcg priority (Jing Xiangfeng) [task:85149]
  - EULER: memcg: fix kabi broken when enable CONFIG_MEMCG_QOS (Jing Xiangfeng) [task:85149]
  - EULER: memcg: support priority for oom (Jing Xiangfeng) [task:85149]
  - selftest: kvm: Reorder vcpu_load_state steps for AMX (gehao) [task:88336]
  - selftests: kvm: Fix set_regs fail (gehao) [task:88363]
  - selftests: kvm/evmcs_test: complete I/O before migrating guest state (gehao) [task:88363]
  - KVM: selftests: complete IO before migrating guest state (gehao) [task:88336]
  - KVM: selftests: disable stack protector for all KVM tests (Sean Christopherson) [task:88336]
  - KVM: selftests: explicitly disable PIE for tests (Sean Christopherson) [task:88336]
  - KVM: arm64: vgic-its: Change default outer cacheability for {PEND, PROP}BASER (Alexander Graf) [task:97316]
  - Bluetooth: stop proccessing malicious adv data (Pavel Skripkin) [task:97308]
  - io_uring: Fix use of XArray in __io_uring_files_cancel (Matthew Wilcox (Oracle))
  - Bluetooth: hci_event: Fix checking for invalid handle on error status (Luiz Augusto von Dentz) [task:96848]
  - Bluetooth: hci_event: Ignore multiple conn complete events (Soenke Huster) [task:96848]
  - KYLIN: arm64: debug_defconfig: disable debug kobject (Jackie Liu)
  - KYLIN: debug_defconfig: make kmemleak off default (Jackie Liu)
  - KYLIN: net: genric phy driver 'ethtool -i' display error. (zhaochenguang) [task:90223]
  - KYLIN: net: loongson gmac add 'ethtool -i' info. (zhaochenguang) [bug:120208]
  - KYLIN: sound/soc: add the CJC8988 driver provided by loongson (Yongzhen Zhang) [task:91306]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-51.0.v2207
changelog:
  - KYLIN: sched: reserve some field for sched_statistics (Zhengyuan Liu)
  - ext4: make variable "count" signed (Ding Xiang)
  - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko) [bug:129870] {CVE-2022-33744}
  - xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129843] {CVE-2022-33742}
  - xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129847] {CVE-2022-33741}
  - xen/netfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129851] {CVE-2022-33740}
  - xen/blkfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129856] {CVE-2022-26365}
  - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou) [bug:129862] {CVE-2022-2318}
  - ext4: avoid cycles in directory h-tree (Jan Kara) [bug:129812] {CVE-2022-1184}
  - ext4: verify dir block before splitting it (Jan Kara) [bug:129812] {CVE-2022-1184}
  - floppy: use a statically allocated error counter (Willy Tarreau) [bug:129818] {CVE-2022-1652}
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - xen/pvcalls: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Juergen Gross) [bug:129758] {CVE-2022-23042}
  - xen/9p: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/gnttab: fix gnttab_end_foreign_access() without page specified (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen: remove gnttab_query_foreign_access() (Juergen Gross)
  - xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross) [bug:129771] {CVE-2022-23039}
  - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129767] {CVE-2022-23036}
  - xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross) [bug:129783, bug:129767] {CVE-2022-23036, CVE-2022-23038}
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross) [bug:129763] {CVE-2022-23040}
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129783] {CVE-2022-23038}
  - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129779] {CVE-2022-23037}
  - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller) [bug:129866] {CVE-2022-2380}
  - HID: holtek: fix mouse probing (Benjamin Tissoires)
  - hamradio: improve the incomplete fix to avoid NPD (Lin Ma) [bug:129795] {CVE-2022-1195}
  - HID: google: add eel USB id (xiazhengqiao) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-prodikeys (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-chicony (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy on some USB HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: check for valid USB device for many HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: wacom: fix problems when device is not a valid USB device (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add hid_is_usb() function to make it simpler for USB detection (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - hamradio: remove needs_free_netdev to avoid UAF (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer 6pack kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer ax25 kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin) [bug:129795] {CVE-2022-1195}
  - HID: google: add don USB id (Shou-Chieh Hsu) [bug:129822] {CVE-2022-20132}
  - xen/xenbus: Fix granting of vmalloc'd memory (Simon Leiner)
  - xen-netfront: fix potential deadlock in xennet_remove() (Andrea Righi)
  - HID: google: add moonball USB id (Chen-Tsung Hsieh) [bug:129822] {CVE-2022-20132}
  - net_sched: fix a crash in tc_new_tfilter() (Cong Wang) [bug:129750] {CVE-2021-39713}
  - net: sched: make function qdisc_free_cb() static (Wei Yongjun)
  - net: sched: use Qdisc rcu API instead of relying on rtnl lock (Vlad Buslov) [bug:129750] {CVE-2021-39713}
  - net: sched: add helper function to take reference to Qdisc (Vlad Buslov)
  - net: sched: extend Qdisc with rcu (Vlad Buslov)
  - net: sched: rename qdisc_destroy() to qdisc_put() (Vlad Buslov)
  - net: core: netlink: add helper refcount dec and lock function (Vlad Buslov)
  - netlink: fix doc about nlmsg_parse/nla_validate (Nicolas Dichtel) [task:96091]
  - netlink: Fix nlmsg_parse as a wrapper for strict message parsing (David Ahern) [task:96091]
  - bpf: Add classid helper only based on skb->sk (Daniel Borkmann) [task:96091]
  - bpf: Allow to retrieve cgroup v1 classid from v2 hooks (Daniel Borkmann) [task:96091]
  - tcp_cubic: refactor code to perform a divide only when needed (Eric Dumazet) [task:96091]
  - tcp_cubic: make Hystart aware of pacing (Eric Dumazet) [task:96091]
  - tcp_cubic: tweak Hystart detection for short RTT flows (Eric Dumazet) [task:96091]
  - tcp_cubic: switch bictcp_clock() to usec resolution (Eric Dumazet) [task:96091]
  - tcp_cubic: remove one conditional from hystart_update() (Eric Dumazet) [task:96091]
  - tcp_cubic: optimize hystart_update() (Eric Dumazet) [task:96091]
  - net: relax SO_TXTIME CAP_NET_ADMIN check (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not call fq_peek() twice per packet (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: add horizon attribute (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: enable use of hrtimer slack (Eric Dumazet) [task:96091]
  - net_sched: do not reprogram a timer about to expire (Eric Dumazet) [task:96091]
  - net_sched: add qdisc_watchdog_schedule_range_ns() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: properly set sk->sk_pacing_status (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: remove one obsolete check in fq_dequeue() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: handle non connected flows (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not assume EDT packets are ordered (Eric Dumazet) [task:96091]
  - netlink: add strict parsing for future attributes (Johannes Berg) [task:96091]
  - netlink: re-add parse/validate functions in strict mode (Johannes Berg) [task:96091]
  - netlink: make validation more configurable for future strictness (Johannes Berg) [task:96091]
  - netlink: add NLA_MIN_LEN (Johannes Berg) [task:96091]
  - netlink: add validation function to policy (Johannes Berg) [task:96091]
  - netlink: add attribute range validation to policy (Johannes Berg) [task:96091]
  - net_sched: sch_fq: avoid calling ktime_get_ns() if not needed (Eric Dumazet) [task:96091]
  - bpf: make bpf_skb_ecn_set_ce callable from BPF_PROG_TYPE_SCHED_ACT (Peter Oskolkov) [task:96091]
  - bpf: sync bpf.h to tools and update bpf_helpers.h (brakmo) [task:96091]
  - net_sched: sch_fq: add dctcp-like marking (Eric Dumazet) [task:96091]
  - tcp: tsq: no longer use limit_output_bytes for paced flows (Eric Dumazet) [task:96091]
  - tcp: get rid of tcp_tso_should_defer() dependency on HZ/jiffies (Eric Dumazet) [task:96091]
  - net: support 64bit rates for getsockopt(SO_MAX_PACING_RATE) (Eric Dumazet) [task:96091]
  - tcp: cdg: use tcp high resolution clock cache (Eric Dumazet) [task:96091]
  - KYLIN: LoongArch/spiflash: fix ls_spiflash initialization code error (wangxuewen) [bug:120279]
  - KYLIN: x86/config: enable QOS_SCHED and QOS_SCHED_SMT_EXPELLER (Zhengyuan Liu) [task:97062]
  - KYLIN: arm64/config: enable QOS_SCHED (Zhengyuan Liu) [task:97062]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:97063]
  - EULER: sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down} (Zhang Qiao) [task:85149]
  - EULER: sched: Throttle offline task at tracehook_notify_resume() (Zhang Qiao) [task:85149]
  - EULER: sched/qos: Remove dependency CONFIG_x86 (Zhang Qiao) [task:85149]
  - EULER: sched/fair: Add qos_throttle_list node in struct cfs_rq (Zhang Qiao) [task:85149]
  - EULER: sched: Introduce handle priority reversion mechanism (Zheng Zucheng) [task:85149]
  - unicore32: Fix __ARCH_WANT_STAT64 definition (Arnd Bergmann) [task:98950]
  - asm-generic: unistd.h: fixup broken macro include. (Guo Ren) [task:98950]
  - ntp/y2038: Remove incorrect time_t truncation (Arnd Bergmann) [task:98950]
  - ipc: fix semtimedop for generic 32-bit architectures (Arnd Bergmann) [task:98950]
  - asm-generic: Make time32 syscall numbers optional (Arnd Bergmann) [task:98950]
  - asm-generic: Drop getrlimit and setrlimit syscalls from default list (Yury Norov) [task:98950]
  - csky: System Call (Guo Ren) [task:98950]
  - compat ABI: use non-compat openat and open_by_handle_at variants (Yury Norov) [task:98950]
  - y2038: rename old time and utime syscalls (Arnd Bergmann) [task:98950]
  - y2038: remove struct definition redirects (Arnd Bergmann) [task:98950]
  - y2038: use time32 syscall names on 32-bit (Arnd Bergmann) [task:98950]
  - vfs: replace current_kernel_time64 with ktime equivalent (Arnd Bergmann) [task:98950]
  - y2038: syscalls: rename y2038 compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: socket: Add compat_sys_recvmmsg_time64 (Arnd Bergmann) [task:98950]
  - y2038: futex: Add support for __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: signal: Add compat_sys_rt_sigtimedwait_time64 (Arnd Bergmann) [task:98950]
  - x86/x32: use time64 versions of sigtimedwait and recvmmsg (Arnd Bergmann) [task:98950]
  - timex: change syscalls to use struct __kernel_timex (Deepa Dinamani) [task:98950]
  - timex: use __kernel_timex internally (Deepa Dinamani) [task:98950]
  - sparc64: add custom adjtimex/clock_adjtime functions (Arnd Bergmann) [task:98950]
  - time: fix sys_timer_settime prototype (Arnd Bergmann) [task:98950]
  - time: Add struct __kernel_timex (Deepa Dinamani) [task:98950]
  - time: make adjtime compat handling available for 32 bit (Arnd Bergmann) [task:98950]
  - y2038: signal: Change rt_sigtimedwait to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: sched: Change sched_rr_get_interval to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: utimes: Rework #ifdef guards for compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: Compile utimes()/futimesat() conditionally (Arnd Bergmann) [task:98950]
  - y2038: Change sys_utimensat() to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - asm-generic: Remove empty asm/unistd.h (Arnd Bergmann) [task:98950]
  - asm-generic: Remove unneeded __ARCH_WANT_SYS_LLSEEK macro (Arnd Bergmann) [task:98950]
  - y2038: Remove stat64 family from default syscall set (Arnd Bergmann) [task:98950]
  - y2038: __get_old_timespec32() can be static (kbuild test robot) [task:98950]
  - KYLIN: x86: debug_defconfig: more kselftest modules (Jackie Liu)
  - KYLIN: x86: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: arm64: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: mm: fix free_pages_bootmem bug in loongarch when system booting (husong)
  - GNET: change gnet_speed_flg priv to fix problem when rebind gnet. (liusicong) [task:96195]
  - LoongArch: Add generic efi stub support (liuyun) [task:96195]
  - efi/libstub: Move the function prototypes to header file (Atish Patra) [task:96195]
  - efi/libstub: Move arm-stub to a common file (Atish Patra) [task:96195]
  - LoongArch: adjust memory space for module load (liweihao) [task:96195]
  - LoongArch:LSVZ: disable pv timer when vcpu is reset (Mao Bibo) [task:96195]
  - LoongArch: LSVZ: redefine hypercall service return code (Jianxing Wang) [task:96195]
  - LoongArch: LSVZ: import no_pvipi and no_pvtime setup param (Jianxing Wang) [task:96195]
  - fdt: Update CRC check for rng-seed (Hsin-Yi Wang) [task:97875]
  - include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap (Christian Borntraeger) [task:97875]
  - random: quiet urandom warning ratelimit suppression message (Jason A. Donenfeld) [task:97875]
  - random: schedule mix_interrupt_randomness() less often (Jason A. Donenfeld) [task:97875]
  - random: credit cpu and bootloader seeds by default (Jason A. Donenfeld) [task:97875]
  - random: account for arch randomness in bits (Jason A. Donenfeld) [task:97875]
  - random: mark bootloader randomness code as __init (Jason A. Donenfeld) [task:97875]
  - random: avoid checking crng_ready() twice in random_init() (Jason A. Donenfeld) [task:97875]
  - crypto: drbg - make reseeding from get_random_bytes() synchronous (Nicolai Stange) [task:97875]
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller) [task:97875]
  - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() (Nicolai Stange) [task:97875]
  - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() (Nicolai Stange) [task:97875]
  - crypto: drbg - prepare for more fine-grained tracking of seeding state (Nicolai Stange) [task:97875]
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller) [task:97875]
  - crypto: drbg - add FIPS 140-2 CTRNG for noise source (Stephan Mueller) [task:97875]
  - Revert "random: use static branch for crng_ready()" (Jason A. Donenfeld) [task:97875]
  - random: check for signals after page of pool writes (Jason A. Donenfeld) [task:97875]
  - random: wire up fops->splice_{read,write}_iter() (Jens Axboe) [task:97875]
  - random: convert to using fops->write_iter() (Jens Axboe) [task:97875]
  - random: move randomize_page() into mm where it belongs (Jason A. Donenfeld) [task:97875]
  - random: move initialization functions out of hot pages (Jason A. Donenfeld) [task:97875]
  - random: use proper return types on get_random_{int,long}_wait() (Jason A. Donenfeld) [task:97875]
  - random: remove extern from functions in header (Jason A. Donenfeld) [task:97875]
  - random: use static branch for crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: credit architectural init the exact amount (Jason A. Donenfeld) [task:97875]
  - random: handle latent entropy and command line from random_init() (Jason A. Donenfeld) [task:97875]
  - random: use proper jiffies comparison macro (Jason A. Donenfeld) [task:97875]
  - random: remove ratelimiting for in-kernel unseeded randomness (Jason A. Donenfeld) [task:97875]
  - random: avoid initializing twice in credit race (Jason A. Donenfeld) [task:97875]
  - random: use symbolic constants for crng_init states (Jason A. Donenfeld) [task:97875]
  - siphash: use one source of truth for siphash permutations (Jason A. Donenfeld) [task:97875]
  - random: help compiler out with fast_mix() by using simpler arguments (Jason A. Donenfeld) [task:97875]
  - random: do not use input pool from hard IRQs (Jason A. Donenfeld) [task:97875]
  - random: order timer entropy functions below interrupt functions (Jason A. Donenfeld) [task:97875]
  - random: do not pretend to handle premature next security model (Jason A. Donenfeld) [task:97875]
  - random: do not use batches when !crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: insist on random_get_entropy() existing in order to simplify (Jason A. Donenfeld) [task:97875]
  - xtensa: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - sparc: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - um: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - x86/tsc: Use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - nios2: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - arm: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - mips: use fallback for random_get_entropy() instead of just c0 random (Jason A. Donenfeld) [task:97875]
  - m68k: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - timekeeping: Add raw clock fallback for random_get_entropy() (Jason A. Donenfeld) [task:97875]
  - powerpc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - alpha: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - parisc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - s390: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - ia64: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - init: call time_init() before rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: fix sysctl documentation nits (Jason A. Donenfeld) [task:97875]
  - random: document crng_fast_key_erasure() destination possibility (Jason A. Donenfeld) [task:97875]
  - random: make random_get_entropy() return an unsigned long (Jason A. Donenfeld) [task:97875]
  - random: check for signals every PAGE_SIZE chunk of /dev/[u]random (Jason A. Donenfeld) [task:97875]
  - random: check for signal_pending() outside of need_resched() check (Jann Horn) [task:97875]
  - random: do not allow user to keep crng key around on stack (Jason A. Donenfeld) [task:97875]
  - random: do not split fast init input in add_hwgenerator_randomness() (Jan Varho) [task:97875]
  - random: mix build-time latent entropy into pool at init (Jason A. Donenfeld) [task:97875]
  - random: re-add removed comment about get_random_{u32,u64} reseeding (Jason A. Donenfeld) [task:97875]
  - random: treat bootloader trust toggle the same way as cpu trust toggle (Jason A. Donenfeld) [task:97875]
  - random: skip fast_init if hwrng provides large chunk of entropy (Jason A. Donenfeld) [task:97875]
  - random: check for signal and try earlier when generating entropy (Jason A. Donenfeld) [task:97875]
  - random: reseed more often immediately after booting (Jason A. Donenfeld) [task:97875]
  - random: make consistent usage of crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: use SipHash as interrupt entropy accumulator (Jason A. Donenfeld) [task:97875]
  - random: replace custom notifier chain with standard one (Jason A. Donenfeld) [task:97875]
  - random: don't let 644 read-only sysctls be written to (Jason A. Donenfeld) [task:97875]
  - random: give sysctl_random_min_urandom_seed a more sensible value (Jason A. Donenfeld) [task:97875]
  - random: do crng pre-init loading in worker rather than irq (Jason A. Donenfeld) [task:97875]
  - random: unify cycles_t and jiffies usage and types (Jason A. Donenfeld) [task:97875]
  - random: cleanup UUID handling (Jason A. Donenfeld) [task:97875]
  - random: only wake up writers after zap if threshold was passed (Jason A. Donenfeld) [task:97875]
  - random: round-robin registers as ulong, not u32 (Jason A. Donenfeld) [task:97875]
  - random: clear fast pool, crng, and batches in cpuhp bring up (Jason A. Donenfeld) [task:97875]
  - random: pull add_hwgenerator_randomness() declaration into random.h (Jason A. Donenfeld) [task:97875]
  - random: check for crng_init == 0 in add_device_randomness() (Jason A. Donenfeld) [task:97875]
  - random: unify early init crng load accounting (Jason A. Donenfeld) [task:97875]
  - random: do not take pool spinlock at boot (Jason A. Donenfeld) [task:97875]
  - random: defer fast pool mixing to worker (Jason A. Donenfeld) [task:97875]
  - random: rewrite header introductory comment (Jason A. Donenfeld) [task:97875]
  - random: group sysctl functions (Jason A. Donenfeld) [task:97875]
  - random: group userspace read/write functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy collection functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy extraction functions (Jason A. Donenfeld) [task:97875]
  - random: group initialization wait functions (Jason A. Donenfeld) [task:97875]
  - random: remove whitespace and reorder includes (Jason A. Donenfeld) [task:97875]
  - random: remove useless header comment (Jason A. Donenfeld) [task:97875]
  - random: introduce drain_entropy() helper to declutter crng_reseed() (Jason A. Donenfeld) [task:97875]
  - random: deobfuscate irq u32/u64 contributions (Jason A. Donenfeld) [task:97875]
  - random: add proper SPDX header (Jason A. Donenfeld) [task:97875]
  - random: remove unused tracepoints (Jason A. Donenfeld) [task:97875]
  - random: remove ifdef'd out interrupt bench (Jason A. Donenfeld) [task:97875]
  - random: tie batched entropy generation to base_crng generation (Jason A. Donenfeld) [task:97875]
  - random: zero buffer after reading entropy from userspace (Jason A. Donenfeld) [task:97875]
  - random: remove outdated INT_MAX >> 6 check in urandom_read() (Jason A. Donenfeld) [task:97875]
  - random: use hash function for crng_slow_load() (Jason A. Donenfeld) [task:97875]
  - random: absorb fast pool into input pool after fast load (Jason A. Donenfeld) [task:97875]
  - random: do not xor RDRAND when writing into /dev/random (Jason A. Donenfeld) [task:97875]
  - random: ensure early RDSEED goes through mixer on init (Jason A. Donenfeld) [task:97875]
  - random: inline leaves of rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: use RDSEED instead of RDRAND in entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: fix locking in crng_fast_load() (Dominik Brodowski) [task:97875]
  - random: remove batched entropy locking (Jason A. Donenfeld) [task:97875]
  - random: remove use_input_pool parameter from crng_reseed() (Eric Biggers) [task:97875]
  - random: make credit_entropy_bits() always safe (Jason A. Donenfeld) [task:97875]
  - random: always wake up entropy writers after extraction (Jason A. Donenfeld) [task:97875]
  - random: use linear min-entropy accumulation crediting (Jason A. Donenfeld) [task:97875]
  - random: simplify entropy debiting (Jason A. Donenfeld) [task:97875]
  - random: use computational hash for entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: only call crng_finalize_init() for primary_crng (Dominik Brodowski) [task:97875]
  - random: access primary_pool directly rather than through pointer (Dominik Brodowski) [task:97875]
  - random: continually use hwgenerator randomness (Dominik Brodowski) [task:97875]
  - random: simplify arithmetic function flow in account() (Jason A. Donenfeld) [task:97875]
  - random: access input_pool_data directly rather than through pointer (Jason A. Donenfeld) [task:97875]
  - random: cleanup fractional entropy shift constants (Jason A. Donenfeld) [task:97875]
  - random: prepend remaining pool constants with POOL_ (Jason A. Donenfeld) [task:97875]
  - random: de-duplicate INPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: remove unused OUTPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: rather than entropy_store abstraction, use global (Jason A. Donenfeld) [task:97875]
  - random: remove unused extract_entropy() reserved argument (Jason A. Donenfeld) [task:97875]
  - random: remove incomplete last_data logic (Jason A. Donenfeld) [task:97875]
  - random: cleanup integer types (Jason A. Donenfeld) [task:97875]
  - random: cleanup poolinfo abstraction (Jason A. Donenfeld) [task:97875]
  - random: fix typo in comments (Schspa Shi) [task:97875]
  - random: don't reset crng_init_cnt on urandom_read() (Jann Horn) [task:97875]
  - random: avoid superfluous call to RDRAND in CRNG extraction (Jason A. Donenfeld) [task:97875]
  - random: early initialization of ChaCha constants (Dominik Brodowski) [task:97875]
  - random: initialize ChaCha20 constants with correct endianness (Eric Biggers) [task:97875]
  - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs (Jason A. Donenfeld) [task:97875]
  - random: harmonize "crng init done" messages (Dominik Brodowski) [task:97875]
  - random: mix bootloader randomness into pool (Jason A. Donenfeld) [task:97875]
  - random: do not re-init if crng_reseed completes before primary init (Jason A. Donenfeld) [task:97875]
  - random: do not sign extend bytes for rotation when mixing (Jason A. Donenfeld) [task:97875]
  - random: use BLAKE2s instead of SHA1 in extraction (Jason A. Donenfeld) [task:97875]
  - random: remove unused irq_flags argument from add_interrupt_randomness() (Sebastian Andrzej Siewior) [task:97875]
  - random: document add_hwgenerator_randomness() with other input functions (Mark Brown) [task:97875]
  - crypto: blake2s - adjust include guard naming (Eric Biggers) [task:97875]
  - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> (Eric Biggers) [task:97875]
  - MAINTAINERS: co-maintain random.c (Jason A. Donenfeld) [task:97875]
  - random: remove dead code left over from blocking pool (Eric Biggers) [task:97875]
  - random: avoid arch_get_random_seed_long() when collecting IRQ randomness (Ard Biesheuvel) [task:97875]
  - random: add arch_get_random_*long_early() (Mark Rutland) [task:97875]
  - powerpc: Use bool in archrandom.h (Richard Henderson) [task:97875]
  - linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check (Richard Henderson) [task:97875]
  - linux/random.h: Use false with bool (Richard Henderson) [task:97875]
  - linux/random.h: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - s390: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - powerpc: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - x86: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - random: avoid warnings for !CONFIG_NUMA builds (Mark Rutland) [task:97875]
  - random: split primary/secondary crng init paths (Mark Rutland) [task:97875]
  - random: remove some dead code of poolinfo (Yangtao Li) [task:97875]
  - random: fix typo in add_timer_randomness() (Yangtao Li) [task:97875]
  - random: Add and use pr_fmt() (Yangtao Li) [task:97875]
  - random: convert to ENTROPY_BITS for better code readability (Yangtao Li) [task:97875]
  - random: remove unnecessary unlikely() (Yangtao Li) [task:97875]
  - random: remove kernel.random.read_wakeup_threshold (Andy Lutomirski) [task:97875]
  - random: delete code to pull data into pools (Andy Lutomirski) [task:97875]
  - random: remove the blocking pool (Andy Lutomirski) [task:97875]
  - random: fix crash on multiple early calls to add_bootloader_randomness() (Dominik Brodowski) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: make /dev/random be almost like /dev/urandom (Andy Lutomirski) [task:97875]
  - random: ignore GRND_RANDOM in getentropy(2) (Andy Lutomirski) [task:97875]
  - random: add GRND_INSECURE to return best-effort non-cryptographic bytes (Andy Lutomirski) [task:97875]
  - random: Add a urandom_read_nowait() for random APIs that don't warn (Andy Lutomirski) [task:97875]
  - random: Don't wake crng_init_wait when crng_init == 1 (Andy Lutomirski) [task:97875]
  - lib/crypto: sha1: re-roll loops to reduce code size (Jason A. Donenfeld) [task:97875]
  - lib/crypto: blake2s: move hmac construction into wireguard (Jason A. Donenfeld) [task:97875]
  - crypto: blake2s - generic C library implementation and selftest (Jason A. Donenfeld) [task:97875]
  - Revert "hwrng: core - Freeze khwrng thread during suspend" (Herbert Xu) [task:97875]
  - char/random: Add a newline at the end of the file (Borislav Petkov) [task:97875]
  - random: Use wait_event_freezable() in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - fdt: add support for rng-seed (Hsin-Yi Wang) [task:97875]
  - random: Support freezable kthreads in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - random: fix soft lockup when trying to read from an uninitialized blocking pool (Theodore Ts'o) [task:97875]
  - latent_entropy: avoid build error when plugin cflags are not set (Vasily Gorbik) [task:97875]
  - random: document get_random_int() family (George Spelvin) [task:97875]
  - random: move rand_initialize() earlier (Kees Cook) [task:97875]
  - random: only read from /dev/random after its pool has received 128 bits (Theodore Ts'o) [task:97875]
  - drivers/char/random.c: make primary_crng static (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: remove unused stuct poolinfo::poolbits (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: constify poolinfo_table (Rasmus Villemoes) [task:97875]
  - random: fix data race on crng init time (Eric Biggers) [task:97875]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: try to actively add entropy rather than passively wait for it (Linus Torvalds) [task:97875]
  - Revert "alinux: random: speed up the initialization of module" (huhai) [task:97875]
  - Revert "random: only read from /dev/random after its pool has received 128 bits" (huhai) [task:97875]
  - Revert "random: fix soft lockup when trying to read from an uninitialized blocking pool" (huhai) [task:97875]
  - uapi: rename ext2_swab() to swab() and share globally in swab.h (Yury Norov) [task:97875]
  - KYLIN: xhci: fix Etron controller reset device problem (xuping) [bug:123907]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.0.v2207
changelog:
  - KYLIN: kabi_whitelist: remove the indentation in front of each item (Zhengyuan Liu) [task:74080]
  - KYLIN: scripts/make-kabi: support items in whitelist begin with indentation (Zhengyuan Liu) [task:74080]
  - KYLIN: Module.kabi: update Module.kabi based on the new whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append redhat8's kabi items (Zhengyuan Liu) [task:74080]
  - KYLIN: x86/paravirt: fix build if !CONFIG_PARAVIRT_SPINLOCKS & CONFIG_PARAVIRT (Jackie Liu) [task:101368, task:101367]
  - sched/core: Convert vcpu_is_preempted() from macro to an inline function (Qian Cai) [task:101368, task:101367]
  - KYLIN: kabi_whitelist: append HuaWei's ultrapath symbol to whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append TianGou's symbol to whitelist (Zhengyuan Liu) [task:90224]
  - KYLIN: kabi_whitelist: simplify current whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: sort the kabi whitelist (Zhengyuan Liu) [task:74080]
  - net: sched: don't set tunnel for decap action (Vlad Buslov) [bug:128966]
  - net: sched: flower: only return error from hw offload if skip_sw (Vlad Buslov) [bug:128966]
  - xsk: Fix xsk_umem_xdp_frame_sz() (Björn Töpel) [bug:128966]
  - xdp: For Intel AF_XDP drivers add XDP frame_s (Jesper Dangaard Brouer) [bug:128966]
  - cls_api: add translator to flow_action representation (Pablo Neira Ayuso) [bug:128966]
  - net: sched: sample: allow accessing psample_group with rtnl (Vlad Buslov) [bug:128966]
  - net/sched: add police action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - net/sched: add sample action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - flow_offload: add wake-up-on-lan and queue to flow_action (Pablo Neira Ayuso) [bug:128966]
  - net/flow_dissector: add connection tracking dissection (Paul Blakey) [bug:128966]
  - KYLIN: fbdev/efifb: enable efifb for inno card by default (yangdeyi) [task:88651]
  - tcp: use alloc_large_system_hash() to allocate table_perturb (Muchun Song)
  - xhci: turn off port power in shutdown (Mathias Nyman) [task:99634]
  - xhci: stop polling roothubs after shutdown (Henry Lin) [task:99634]
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman) [task:99634]
  - xhci: bail out early if driver can't accress host in resume (Mathias Nyman) [task:99634]
  - tcp: drop the hash_32() part from the index calculation (Willy Tarreau) [task:99634]
  - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau) [task:99634]
  - tcp: add small random increments to the source port (Willy Tarreau) [task:99634]
  - tcp: use different parts of the port_offset for index and offset (Willy Tarreau) [task:99634]
  - tcp: add some entropy in __inet_hash_connect() (Eric Dumazet) [task:99634]
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin) [task:99634]
  - KYLIN: add graphics card priority for x86 (yangdeyi) [task:88651]
  - KYLIN: vga: add inno graphics card priority (yangdeyi) [task:88651]
  - KYLIN: 3rd/inno: add inno driver support (yangdeyi) [task:88651]
  - i40iw: Remove setting of VMA private data and use rdma_user_mmap_io (Shiraz Saleem) [bug:130467]
  - KYLIN: x86/paravirt: useless assignment instructions cause Unixbench full core performance degradation (chenke) [task:99415]
  - x86/module: Fix the paravirt vs alternative order (Peter Zijlstra) [task:99415]
  - x86/paravirt: Add new features for paravirt patching (Juergen Gross) [task:99415]
  - crypto: drbg - fix error return code in drbg_alloc_state() (Wei Yongjun) [task:101008]
  - lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO (Vincenzo Frascino)
  - arm64: vdso32: Remove jump label config option in Makefile (Vincenzo Frascino)
  - arm64: vdso32: Detect binutils support for dmb ishld (Vincenzo Frascino)
  - arm64: vdso: Remove stale files from old assembly implementation (Vincenzo Frascino)
  - arm64: vdso32: Fix broken compat vDSO build warnings (Vincenzo Frascino)
  - arm64: vdso: Fix Makefile regression (Vincenzo Frascino)
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [bug:120191] {CVE-2022-1679}
  - drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions (Joe Perches) [bug:124652] {CVE-2022-20166}
  - drivers/base/cpu: Simplify s*nprintf() usages (Takashi Iwai)
  - xfs: don't set bmapi total block req where minleft is (Brian Foster) [bug:128797]
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [bug:129113] {CVE-2022-34918}
  - f2fs: fix to do sanity check on segment/section count (Chao Yu) [task:98376] {CVE-2019-19449}
  - f2fs: fix wrong total_sections check and fsmeta check (Wang Xiaojun) [task:98376] {CVE-2019-19449}
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik) [task:98376] {CVE-2019-19448}
  - KYLIN: box: Fix Use-After-Free caused by parallel access (Jackie Liu) [task:98126, task:99088, task:99013]
  - KYLIN: sw64: fix incompatible pointer of __kernel_timex (Jackie Liu) [task:99336, task:99333]
  - mips: generate uapi header and system call table files (Firoz Khan) [task:99337, task:99334]
  - mips: remove unused macros (Firoz Khan) [task:99337, task:99334]
  - mips: add +1 to __NR_syscalls in uapi header (Firoz Khan) [task:99337, task:99334]
  - mips: rename scall64-64.S to scall64-n64.S (Firoz Khan) [task:99337, task:99334]
  - mips: add __NR_syscalls along with __NR_Linux_syscalls (Firoz Khan) [task:99334, task:99337]
  - mips: remove syscall table entries (Firoz Khan) [task:99337, task:99334]
  - io_uring: drop 'ctx' ref on task work cancelation (Jens Axboe)


author: huayadong <huayadong@kylinos.cn>-3.12.2-8.p05
changelog:
  - add Patch:kylin-brasero-fix-bug-42668-after-switching-the-language-to-English-the-name-is-still-Chinese.patch


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.10-8
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cachefilesd-fix-abort-in-decant_cull_table.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: chenyanpanHW <chenyanpan@huawei.com> - 1.4.33-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-T0ProcACK-fix-a-potential-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CmdGetSlotStatus-fix-potential-read-of-uninitialized.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-ReadUSB-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-IFDHSetProtocolParameters-handle-ATR_GetConvention-e.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-PPS_Match-fix-potential-read-of-uninitialized-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-dw2i-fix-potential-integer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: xuyujun <xuyujun@kylinos.com.cn> -1.0.0-3.skl3.ft.ns7_4.se.05
changelog:
  - Type: update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 设置策略接口由kysec-utils实现
  - 	  add patch: chpolicy-20220527.patch


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liquor <lirui130@huawei.com> - 11-5
changelog:
  - Delete remaining references to the removed http pin
    Install cryptsetup and tpm2_pcrlist in the initramfs
    Add device TCTI library to the initramfs


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 19.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the error level logs displayed for the cloud-init-local service


author: Liang yangang <liangyangang@kylinos.cn> - 196.3-1.01.p01
changelog:
  - add mips64el arch support,
  - add Requires for storaged to support lvm: libblockdev libblockdev-devel libudisks2 udisk2-lvm2


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p01
changelog:
  - Type:	compile
  - ID:	[TASK#74801]
  - SUG: 	NA
  - DESC:	remove gcc_secure BuildRequires from spec & add BuildFlags="-O2 -g -fPIC"


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p02
changelog:
  - Type:	update & bugfix
  - ID:	[TASK#74132]
  - SUG: 	NA
  - DESC:	Added kylin patch merged from glibc-2.28-49.p02 of v10sp2


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p04
changelog:
  - Type:	bugfix
  - ID:	[bug#119200]
  - SUG: 	NA
  - DESC:	Provide compatibility support for linking against libpthread_nonshared.a


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p05
changelog:
  - Type:	update
  - ID:	[TASK#101352]
  - SUG: 	NA
  - DESC:	Add Give-a-chance-to-reload-gl_path-when-dlopen patch


author: Zhenneng Li <lizhenneng@kylinos.cn> - 2.28-88-p06
changelog:
  - Type:	update
  - ID:  	[TASK#105748]
  - SUG: 	NA
  - DESC: Delete 9001-kylin-glibc-add-mesa_func-in-midr-way.patch


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2o-5
changelog:
  - Keep the compat-openssl10-devel for Fedora 30
  - Generate missing build notes for assembler sources


author: yueyuankun<yueyuankun@kylinos.cn> - 33.6-3.p01
changelog:
  - Type:update
  - ID:task#74110
  - SUG:NA
  - DESC:add ngbe txgbe mwv206 drivers
         set menuentry 'Install @PRODUCT@ @VERSION@' as the default


author: yueyuankun<yueyuankun@kylinos.cn> - 33.6-3.p02
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add csmcore for aarch64,remove mwv206 and add csmcore for x86_64


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: Lihx <lihaoxiang@kylinos.cn> - 8.32-1.p03
changelog:
  - update to 8.32 for kylin
  - Migrate patch p01 and p02 to version 8.32-1
  - Add color display.zhangqiang <zhangqiang@kylinos.cn>
  - disable check.ouyangkang <ouyangkang@kylinos.cn>


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20210628.41
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: zhangqiang <zhangqiang@kylinos.cn> - 7.2.9-2.p03
changelog:
  -Type:bugfix
  -ID:[任务#126238]
  -SUG:NA
  -DESC:join the upstream patch for suppourt arm64 KASAN kernel debug


author: hexiaole <hexiaole@kylinos.cn> - 3.15-3.p01
changelog:
  - Type: bugfix
  - ID: [BUG#119711]
  - SUG: NA
  - DESC: Patch0008 disables '--extra' option of 'criu check' command, because 'criu check --extra' prompts kylin-v10-sp3 kernel absence of the 'time namespace' feature and this absent feature might cause the 'criu dump' or 'criu restore' to fail. Disable '--extra' to act as the 'criu' from kylin-v10-sp3 do not support the extra functions that 'criu check --extra' checks for.


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cryptsetup-add-sm4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wanghao <wanghao2@kylinos.cn> - 2.3.3-6.se.01
changelog:
  - Type: bugfix
  - ID: #104286
  - SUG: NA
  - DESC: cryptsetup增加sm4支持
  -         add patch: cryptsetup-add-sm4.patch


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: zhaoqingyou<zhaoqingyou@kylinos.com> - 1:1.12.16-19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#85132]
  - SUG:NA
  - DESC: Add Patch7000:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: wangxiao <wangxiao65@huawei.com> - 10.13.1.1-2
changelog:
  - fix CVE-2018-1313
  - a specially-crafted network packet can be used to request the
  - Derby Network Server to boot a database whose location and contents
  - are under the user's control.


author: hexiaole <hexiaole@kylinos.cn> - 8:2.03.09-12.p01
changelog:
  - Type:compile
  - ID:[任务#74797]
  - SUG:NA
  - DESC:Patch18:0018-LD_LIBRARY_PATH-add-extra-dir.patch:add patch to resolve running-time error of test/unit/unit-test: error while loading shared libraries: libdevmapper-event.so.1.02: cannot open shared object file: No such file or directory


author: Miroslav Suchý <msuchy@redhat.com> 1.30-1
changelog:
  - Deleted old Copr keys and added new Copr keys
  - readme: add note about Debian, Ubuntu and Arch
  - update list of keys in README
  - add brave key
  - Add remi 2019 key


author: Miroslav Suchý <msuchy@redhat.com> 1.34-1
changelog:
  - update copr keys
  - fix whitespace error in fedora-32 key (rhbz#1743422)
  - Add RPM Fusion keys for fedora 32


author: Shi Jingying <shijingying@kylinos.cn> - 4.2.23-6.p03
changelog:
  - Type: bugfix
  - ID: [BUG#130554], [BUG#130508]
  - SUG: NA
  - DESC: skip p02
          fixed `dnf reposync` command error, and modify bugtracker url, and add support loongarch64
          Add patch9: dnf-4.2.23-fixed-reposync-error-and-modify-bugtracker-url-and-support-loongarch64.patch


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 
  CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: jingrui<jingrui@huawei.com> - 18.09.0-105
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix include
    1. fix image cleanup failed.
    2. cleanup load tmp files.
    3. kill residual container process.
    4. resume suspend dm device.
    5. dont kill containerd during dockerd starting.
    6. handle exit event for restore failed container.
    7. wait io with timeout when start failed.
    8. support hostname mirror registry.
    9. mask unused proc files.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. fix execCommands leak in health-check.
         2. check containerd pid before kill it.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-201
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-202
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)


author: songnannan<songnannan2@huawei.com> 0.8.0.dev.2-2.h1
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:the debuginfo and debugsource packages are not generated by default


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-104
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:don't deny all devices when update cgroup resource
         do not permit /proc mounts to non-directories
         fix permission denied


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. add cpu and memory info when print cgroup info
         2. fix freezing race


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-201
changelog:
  - Type:CVE
  - CVE:CVE-2021-30465
  - SUG:NA
  - DESC:add mount destination validation(fix CVE-2021-30465)


author: huayumeng<huayumeng@kylinos.cn> - 1.0.0.rc3-203.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix connect container failed when reading partially written state.json content


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 4.1-10
changelog:
  - backport patches to fix two memory leak problems, rename patch names,
    and set release num to 9 for CI.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.1-11
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-Fix-signed-integer-overflow-in-FSTART.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-Avoid-returning-deleted-directory-entries-as-labels.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Remove-long-file-name-when-changing-short-file-name.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-gcc-sprintf-length-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-fsck.fat-Fix-Year-2038-Bug.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-mkfs.fat-Fix-parsing-of-block-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-device_info-Fix-parsing-partition-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-Fix-memory-leaks-in-read_fat-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-Turn-label-in-struct-DOS_FS-into-char-array-from-poi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p01
changelog:
  - Type:updated
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  Modify to get the value of the kernel and BuildRequires:kernel-core


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p02
changelog:
  - Type:bugfix
  - ID:[BUG#121835]
  - SUG:NA
  - DESC:
  - add patch kylin-0001-support-dpdk-cross-compile-in-x86-platform.patch
  1) The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on all x86 platforms.
  2) Due to kylin-rpm-config updating, the patch changes python interpreter version to python3.
  3) Openvswitch service starts stably after dpdk is repaired.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p03
changelog:
  - Type:bugfix
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  - 1.The igb_uio.ko and rte_kni.ko modules generated by dpdk reuquire the same kernel version to be compiled and installed, otherwise it cannot be loaded correctly.
    2.The kernel version will be continuously updated. It will be troublesome to rebuild dpdk while kernel updating. Therefore, it is best to decoule dpdk from kernel.
    3.DKMS (Dynamic kernel module system) can automatically compile modules after kernel changes and adpat to the new kenrel. So igb_uio and rte_kni in dpdk can be handed over to DKMS for management, and dpdk.spec is modified according to DKMS specification to generate dpdk-igb-uio and dpdk-rte-kni binary packages.


author: ningjin <ningjin@kylinos.cn> - 19.11-15.p04
changelog:
  - Type:bugfix
  - ID:[BUG#132923]
  - SUG:NA
  - DESC:
  - add patch kylin-0002-support-dpdk-cross-compile-in-hygon-platform.patch
  The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on hygon platforms，reduce dpdk compiling cpu instruction set to corei7.corei7 is the minimum instruction set supported by dpdk.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p05
changelog:
  - Type:task
  - ID:[TASK#118976]
  - SUG:NA
  - DESC:
  - Since there is no ko module in the main rpm package, delete /usr/sbin/depmod from post.


author: panxiaohe <panxiaohe@huawei.com> - 050-5
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec设置relabel脚本
  -         add patch: dracut-kylin-add-relabel-scripts.patch
  -       将kysec_sync_notify改为kysec_sync_daemon
  -         add patch: dracut-change-kysec-sync-notify-to-kysec-sync-daemon.patch
  -       将3adm的enable改为和桌面一致
  -         add patch: dracut-change-3adm_enable-to-be-same-as-desktop.patch
  -       更改数据库文件属主
  -         add patch: dracut-change-chown-db.patch
  -       修复加载31-32policy
  -         add patch: dracut-fix-load-policy-31-or-32.patch
  -       添加kysec_tpm配置，grub未配置时，将配置文件中的状态写入内核
  -         add patch: dracut-add-kysec-tpm-status.patch
  -       将kylin-security.conf改名为kysec.conf
  -         add patch: dracut-change-libsecurity1-config-file-name.patch
  -       修改字体
  -         add patch: dracut-change-font.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.02
changelog:
  - Type:update
  - ID:[Task#81148]
  - SUG:NA
  - DESC: 从数据库中读取relabel_status，如果是0，修改数据库中的值为1
  -         add patch: dracut-set-relabel_status-1-after-read-relabel_status.patch
  - Type:update
  - ID:[Task#81149]
  - SUG:NA
  - DESC: 将dracut.conf中安全相关的配置移动到modules.d/98relable/security.conf中
  -         add patch: dracut-move-dracut.conf-security-configure-to-98relable-security.conf.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.03
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: dracut-fix-modify-or-del-audit-log-bug.patch


author: Neal Gompa <ngompa13@gmail.com> 0.4.0-1
changelog:
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: Xiao Zai<xiaozai@kylinos.cn> - 2.0.11-2.p01
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:replaced ebtables-save perl script by bash script to get rid of the perl requirement


author: weishaokun<weishaokun@kylinos.cn> - 202002-8.p02
changelog:
  - Type: update
  - ID:   84913
  - SUG:  NA
  - DESC: KYLIN, ArmVirtPkg, add Kylin-Support-virtual-AHCI-and-NVMe-drives.patch


author: Shi Jingying <shijingying@kylinos.cn> - 4-4.p01
changelog:
  - Type:bugfix
  - ID:[Task#74111]
  - SUG:NA
  - DESC:Solve the problem of directory conflict caused by including the /boot/efi/EFI/Boot directory with grub2-efi


author: Mark Wielaard <mark@klomp.org> 0.177-1
changelog:
  - elfclassify: New tool to analyze ELF objects.
  - readelf: Print DW_AT_data_member_location as decimal offset.
             Decode DW_AT_discr_list block attributes.
  - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
  - libdwelf: Add dwelf_elf_e_machine_string.
              dwelf_elf_begin now only returns NULL when there is an error
              reading or decompressing a file. If the file is not an ELF file
              an ELF handle of type ELF_K_NONE is returned.
  - backends: Add support for C-SKY.


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j4 V=1 VERBOSE=1 instead of make for building bootstrap


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: lvfei <lvfei@kylinos.com> - 1:27.1-6.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: zhaoyuxing <zhaoyuxing2@huawei.com> - 2.2.8-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: split aspell and voikko subpackage & backport patch that enchant2 use hunspell


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.1.2-4-p03
changelog:
  - modify file esc.desktop, smart card manager description chinese local
  - Add Comment[zh_CN]=企业安全客户端智能卡管理器


author: xiehongyu <xiehongyu@kylin.cn> - 3.30.1-4.01
changelog:
  - Add evince-3.30.1-kylin-perfect-Internationalization.patch
  - Fixed BUG #12046, #11966, perfect Internationalization


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: chenyanpanHW <chenyanpan@huawei.com> - 5.39-6
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-file-localmagic.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-improve-detection-of-static-pie-binaries.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: shenyangyang <shenyangyang4@huawei.com> - 2:4.6.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo and gettext-devel to slove the build problem


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix test failures ran as root and enable -xautofs and disable leaf opt


author: xu_ping <xuping33@huawei.com> - 3.0.3.32900-9
changelog:
  - Fix connect linking to web database by modifying the firebird.conf items to make client and server compatible


author: lvfei <lvfei@huawei.com> - 3.0.3.32900-9.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: cuiyudong <cuiyudong@kylinos.cn> - 3.0.3.32900-9.p02
changelog:
  - Type:NA
  - ID:bug#134298
  - SUG:NA
  - DESC: Add Patch0009 for support loongarch and Same source code as other arch for solve bug 134298


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: lvfei <lvfei@kylios.cn> - 79.0-7.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:Patch700:            0001-kylin-modify-the-first-url.patch
  -           0001-kylin-firefox-modify-firstrunURL.patch
  -            0001-firefox-modify-newtabel-top-site.patch
  -            firefox-modify-firsturl-http-to-https.patch
  -            0001-modify-taiwan-to-taiwansheng.patch
  - modify firefox desktop 
  - modify firefox.js
  - DESC: fix chandao bug add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p02
changelog:
  - type bug fix
  - ID bug 114400 
  - add patch:Patch705:     0001-fix-chandao-bug-114400.patch
  - DESC: fix chandao bug 114400  add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p03
changelog:
  - type bug fix
  - ID bug 129652
  - add patch:Patch705:     0001-defaultSearchEngine-baidu-bug129652.patch
  - DESC: fix chandao bug 129652  add spec


author: liujilin<liujilin@kylinos.cn> - 0.6.6-5.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESG:sync from sp2 patch,patch:firewalld-0.6.6-kylin-add-cockpit.patch

  - Type:bugfix
  - ID:48533
  - SUG:NA
  - DESG:fix bug 68533 sync from sp2 patch,patch:firewalld-0.6.6-kylin-fix-bug48533.patch


author: zhangjun<zhangjun@kylinos.cn> - 0.6.6-5.p02
changelog:
  - Type:update
  - ID:[Task#85464]
  - SUG:NA
  - DESC:split package firewall-config、firewalld-filesystem,reduce main package installation dependencies


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: openEuler Buildteam <buildteam@openeuler.org> - 2.9.9-0
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update fuse2 from 2.9.7 to 2.9.9,
         update fuse3 from 3.2.3 to 3.9.0


author: chenyanpanHW <chenyanpan@huawei.com> - 1.0.5-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-segfault-on-some-weird-data-structures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: huayadong <huayadong@kylinos.cn> - 1:3.30.1-10.p01
changelog:
  - Type:	compile
  - ID: 	[TASK#75897]
  - SUG:	NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: liujilin <liujilin@kylinos.cn> - 4.0.20-5.p01
changelog:
  - modify spec for mips64el, "XLDFLAGS='-Wl,-z,relro   -Wl,-z,now -specs=/usr/lib/rpm/kylin/kylin-hardened-ld -m elf64ltsmip' "


author: huayadong <huayadong@kylinos.com> - 2.5.6-1.p01
changelog:
  - Type:bugfix
  - ID  :[bug#135451]
  - SUG :NA
  - DESC:add patch0: geoclue-2.5.6-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: yangcheng <yangcheng87@huawei.com> - 2.66.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESE:remove the installation dependency of the main pakage on the help package


author: brian@bstinson.com - 2.28-42
changelog:
  - Adapted from Fedora's glibc32 package: https://src.fedoraproject.org/rpms/glibc32/tree/74c2744f44def24f5911291159547e77352641a2


author: mengchaoming<mengchaoming@kylinos.cn>- 3.30.1-2.p03
changelog:
  -add patch:gnome-calculator-3.30.1-kylin-fix-bug.patch
  -输入等于号等同于回车计算结果
  -进制转化的时候置灰不能输入的数字
  -单位转换的时候，对应的标签做相应的变化


author: huayadong <huayadong@kylinos.cn>- 3.30.1-2.p06
changelog:
  - add Patch:gnome-calculator-3.30.1-kylin-numlook-bug.patch
  - add Source1:gnome-calculator.tar.gz  --chengrui


author: lvfei <lvfei@kylinos.c> - 3.30.0-2.p01
changelog:
  - add patch:0001-update-the-package-name.patch
  - add patch:0002-fix-some-translate.patch 
  - add patch:0003-disable-popup-dialog-warning.patch


author: huayadong <huayadong@kylinos.cn> - 3.30.1-10.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#165420]
  - SUG:  NA
  - DESC: add Requires: llvm-libs >= 8.0.1-1.6.p01 only for loongarch64


author: changjie.fu <changjie.fu@cs2c.com.cn> - 1.1-0.11
changelog:
  - Add patch :Neokylin-Arc-Menu-remove-ArcMenu-Setting.patch .
  - and add software-center to main-Menu.


author: Liu Tao <tao1.liu@cs2c.com> - 3.32.1-2.08
changelog:
  - Modified spec file and patch100 for Network function
  - Add patch101 patch102 for Services function


author: anyunhao<anyunhao@kylinos.cn> - 3.6.14-7.p02
changelog:
  - Type:update
  - ID:[Task#85463]
  - SUG:NA
  - DESC:split package gnutls-utils,reduce main package installation dependencies


author: chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
changelog:
  - fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: liufeng<liufeng@kylinos.cn> - 3.4-0.1.p01
changelog:
  - Type:compile
  - ID:[TASK#74803]
  - SUG:NA
  - DESC:avoid sticky problem with '-f - -f -'
         open Check


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.1.0-2
changelog:
  - fix source link
  - fix description
  - fix packaging shared libraries
  - add upstream patch to fix include dir


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.p01
changelog:
  - Type:bugfix/update
  - ID:task#74110
  - SUG:NA
  - DESC:Add Patch0356,Patch0357,Patch0358
  -      Add support for uboot
  -      Add Grub2 password


author: xieyuxing<xieyuxing@kylinos.cn> - 2.04-21.se.01.p04
changelog:
  - Type:update
  - ID:task#81649 121848,123751,88712
  - SUG:NA
  - DESC:Add and modify Kyee measure mod
  -      Add tpcm patches provided by haiguang


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p05
changelog:
  - Type:update
  - ID:task#96116
  - SUG:NA
  - DESC:backport PATCH0368, support BPI01002 and phy-addr BIOS
         backport PATCH0369, loongArch64 add FDT support
         add PATCH0370, loongArch64 fix undeclared errors


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p06
changelog:
  - Type:update
  - ID:bug#127107
  - SUG:NA
  - DESC:add PATCH0371, loongArch64 solve "out of memory" during PXE installation


author: kangyu<kangyu@kylinos.cn> - 2.04-21.se.01.p07
changelog:
  - Type:update
  - ID:bug#128022
  - SUG:NA
  - DESC:Remove the not find kyee prompt
         add press y to enter the system


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.01.p08
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for grub-boot-indeterminate.service


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: liqian <liqian@kylinos.cn> - 2.24.32-7.p01
changelog:
  - install gtk3-immodules need gtk2-immodules package 
  - modify spec file enable_immodules_package 1  build gtk2-immodules packages


author: GuoCe <guoce@kylinos.cn> 2.24.32-7.p02
changelog:
  - gtk/gtkscale.c (gtk_scale_class_init): Change Up, Down, Kp up, Kp down,
  - Page Up, Page Down, Kp page up, Kp page down, Left, Right, Kp left and Kp Right
  - bindings for logical movement.
  - add file gtk+-2.24.32-kylin-13336.patch


author: lvfei <lvfei@kylinos.cn> - 3.24.21-1.p01
changelog:
  - sync liqian spec modify code 
  - Handle the mouse block problem of virt-manager virtual machine
  - loss buildrequire packages libXcursor-devel 
  - Handle the mouse block problem of virt-manager virtual machine
  - modify gtk3 spec file enable_immodules_package 1


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: panzhe <panzhe@kylinos.cn> - 1.40.2-8.p01
changelog:
  - Type:bugfix/compile
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that coldplug does not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel 
  - Add Patch02, Fixed "Favorites" error in "My Computer".
  - Add Patch03, Solve the problem that usb flash drive sometimes fails to mount automatically.
  - Add Patch04, Solve the problem that the window displays "Network".


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p01
changelog:
  - Type:bugfix
  - ID:[Bug#114844]
  - SUG:NA
  - DESC:add patch1:hardinfo-kylin-fix-vendor-unknown-bug.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p02
changelog:
  - Type:bugfix
  - ID:[Bug#127017][Bug#127010]
  - SUG:NA
  - DESC:add patch2:hardinfo-0.6.1-kylin-solve-segment-error-and-survival-reporting-problems.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p03
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch3:hardinfo-0.6.1-kylin-change-x11-vendor.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p04
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch4:hardinfo-0.6.1-kylin-fix-the-segment-error-when-executing-hardinfo-without-display.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p05
changelog:
  - Type:bugfix
  - ID:[Bug#140774]
  - SUG:NA
  - DESC:add patch4:hardinfo-0.6.1-kylin-fix-core-file-appears-in-the-report-generation-function.patch


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-9.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p02
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, change country and organization to kylin


author: hanjinpeng <hanjinpeng@kylinos.cn> - 2.4.43-13.p03
changelog:
  - Type:bugfix
  - ID:116374
  - SUG:NA
  - DESC: modify httpd cert info, according to the requirements , only  change country to CN


author: wangfengtu <wangfengtu@huawei.com> - 2.0.10-8
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: fix undefined reference to `service_arguments_free' in libisulad_img.so


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.10-11
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: fixed a bug that occurs when starting a container in host mode


author: xuhe <xuhe@kylinos.cn> - 1.7.1-11.p01
changelog:
  - Type: bugfix
  - ID: BUG#131728
  - SUG: NA
  - DESC: Fix yum install fail on x86_64 platform and fix build error due to files missing


author: Simone Caronni <negativo17@gmail.com> - 3.8.3-47
changelog:
  - Use macros for build, install and setup.
  - Minor cleanups to SPEC file.
  - Use valid URL for Debian patches.


author: liyunqing <liyunqing@kylinos.cn> - 0.3.82-1.p02
changelog:
  - Add p10002: bug#48052、47928 add ChineseHK and capitalized the first letter
  - Add p10003: solve the problem of license's bad display


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: zouk <zouk@innosilicon.com.cn> - 1.1-1.p01
changelog:
  - Add support 2D/3D render
  - Add support OpenGL4.0 OpenGL ES3.2 OpenCL3.0 Vulkan 1.2
  - Add support 2 way HDMI(2K1 + 4K1) & 1 way DP(2K*1)
  - Add support H.264 & H.265 Codec\Decode
  - Add support 16GDDR


author: wangjia <wangjia55@huawei.com> - 0.6-18.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix prio field for ppc and aarch64
         fix data value unpack with latest kernels
  - Package init


author: chengycehun <chengycehun1@huawei.com> - 5.5.0-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:lib/bpf:fix bpffs mount when /sys/fs/bpf exists
             tc/f_flower:fix port range parsing


author: wuchangsheng <wuchangsheng2@huawei.com> - 5.5.0-10
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:tc flowerr Fix buffer overflow on large labels
         q_cake allow changing to diffserv3


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-10.p01
changelog:
  - Type:bugfix
  - ID:[task#88672]
  - SUG:NA
  - DESC:fix remove namespace fail when netns have net_device


author: liyunqing <liyunqing@kylinos.cn> - 5.5.0-10.p02
changelog:
  - Type:bugfix
  - ID:[task#90176]
  - SUG:NA
  - DESC:add buildrequire libdb-devel to fix missing arpd program


author: Xiao Zai<xiaozai@kylinos.cn> - 4.5.0-1.p01
changelog:
  - Add Patch iso-codes-4.5.0-kylin-remove-zhonghuaminguo-string.patch
  - remove the "zhong hua min guo" string


author: lixiang <lixiang172@huawei.com> - 0.9.4-14
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:Modify gen-version script and add changelog automatically


author: leizhongkai<leizhongkai@huawei.com> - 0.9.5-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:make `isula-build ctr-img images` display comfortably


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.312-b07.2
changelog:
  - add 8273111-Default-timezone-should-return-zone-ID-if-locatiome-is-valid-but-not-canonicalization-on-linux.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.12.7-2
changelog:
  - add Update-algorithm-annotations-for-fill_words.patch
  - add 8257145-Performance-regression-with-XX-ResizePLAB-af.patch
  - add create-jfr-dump-file-with-pid-or-timestamp-if-specif.patch
  - add enhance-the-TimeZone-s-path-solution-on-Euler.patch
  - add Add-KAE-implementation.patch


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:directly copy kata binary files instead of building them


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert the kata-containers.spec to still build kata-containers components into one package


author: jiangpengfei<jiangpengfei9@huawei.com> - 1.11.1-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:update
  - DESC:update kata-containers source forms of organization to move all kata-containers related source repo into one repo kata-containers


author: Lichang Zhao<zhaolichang@huawei.com> - 1.11.1-13
changelog:
  +- Type:bugfix
  +- ID:NA
  +- SUG:NA
  +- DESC:fix the problem that sandbox stratovirt with network devices fails to start


author: like <like@kylinos.cn> - 30-13.p03
changelog:
  - add patch1: rpm-config-mips64el-macros-debugsource-optflags-O2.patch
  --fix macros-debugsource_template and gcc-optflags-O3-to-O2


author: Shi Jingying <shijingying@kylinos.cn> - 30-18.p03
changelog:
  - Type:bugfix
  - ID:[Task#74111]
  - SUG:NA
  - DESC: Keep brp* kpylin* related files double directory configuration
          remove patch3: kylin-rpm-config-30-18-modify-files-path.patch


author: Shi Jingying <shijingying@kylinos.cn> - 30-18.p04
changelog:
  - Type:bugfix
  - ID:[Task#74111]
  - SUG:NA
  - DESC: support KABI
          add patch3: kylin-rpm-config-30-18-support-KABI.patch


author: Shi Jingying <shijingying@kylinos.cn> - 30-18.p05
changelog:
  - Type:bugfix
  - ID:[Task#74111]
  - SUG:NA
  - DESC: remove invalid parameter
          add patch4: kylin-rpm-config-30-18-remove-invalid-parameter.patch


author: Shi Jingying <shijingying@kylinos.cn> - 30-18.p06
changelog:
  - Type:bugfix
  - ID:[Task#96636]
  - SUG:NA
  - DESC: remove brp-mangle-shebangs relevant content
          add patch5: kylin-rpm-config-30-18-remove-brp-mangle-shebangs-relevant-content.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 2.0.20-13
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:fix kdump service failed on x86 because of KDUMP_FILE_LOAD is set to on


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: liwenchong <liwenchong@kylinos.cn> - 2.0.20-16.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge kexec-tools-2.0.20-14.p01 kexec-tools-2.0.20-14.p02 patch 
  	disable kdump.service for mips.
  	put the patch of aarch64 into the src package on x86 environment 
  	it's not just enough to have a fixed size of memory range array,
  	patch 13 allowed to handle arbitrary number of memory ranges


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.01
changelog:
  - Type: update
  - ID: #75532
  - SUG: NA
  - DESC: 移植kysec补丁
  -         add patch: kmod-27-kylin-security.patch
  -       添加kysec检查
  -         add patch: kmod-27-add-kysec-kmod-check.patch
  -       使用kysec检查函数
  -         add patch: kmod-27-using-kysec-check-kmod-func.patch


author: Kevin Fenzi <kevin@scrye.com> - 1.17.0-6
changelog:
  - Switch kojid back to python3 as imagefactory and oz have moved.
  - Backport patch to download only repomd.xml instead of all repodata.
  - Backport patch to allow 'bare' repo merging for modularity.
  - Backport patch to allow for seperate srpm repos in buildroot repos.


author: Kevin Fenzi <kevin@scrye.com> - 1.17.0-7
changelog:
  - Add patch to fix koji kerberos auth with python3.
  - Drop internal mergerepos so we can go all python3. Fixes bug #1715257


author: luofei <fei.luo@cs2c.com.cn> - 1.18.1-1.ns7.01
changelog:
  - 0001-Add-password-login-function.patch
  - 0002-Add-password-modify-function.patch
  - 0003-Add-web-display-koji-host-ip.patch
  - 0004-Need-web-login-to-download-src-rpm.patch


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: xuchao <xuchao@kylinos.cn> - 1.0.1-5kord.se.04
changelog:
  - Type:update
  - ID:[Task#87930]
  - SUG:NA
  - DESC:
  - 安全加固二期功能和入。目前安全加固分为15大类：安全服务、内核参数、安全网络、系统命令、系统审计、系统设置、潜在危险、文件权限、风险账户、磁盘检查、密码强度、账户锁定、系统安全、系统维护、资源分配。并支持自定义加固功能
  - 移植指令流、安全内存模块


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.06
changelog:
  - Type:update
  - ID:[Task#92827 #93756]
  - SUG:NA
  - DESC:
  - 修改设置界面，根据不同的用户和安全状态判断是否可以设置
  - 合入可信启动、安全内存、指令流模块


author: liu_yi <liu_yi@kylinos.cn> - 1.0.1-5kord.se.08
changelog:
  - Type:update
  - ID:[Task#94884 #73846]
  - SUG:NA
  - DESC:
  - 实现开启指令流功能时自动开启LSM
  - 修改关于界面
  - 修改主界面图标
  - 修改bug118416
  - 启用启动度量时重置系统基准值


author: liu_yi <liu_yi@kylinos.cn> - 1.0.1-5kord.se.09
changelog:
  - Type:update
  - ID:[Bug#128578][Bug#128649,119422,122889,119065,118375,126613]
  - SUG:NA
  - DESC:
  - #128578 修复切换安全内存保护导致系统卡死问题
  - #128649 安全加固界面未更新命令行操作结果
  - #119422 还原完成存在失败项，报告界面显示错误
  - #122889 还原完成且不存在还原失败项，界面显示错误
  - #119065 加固过成中加固项后面没有显示数量
  - #126613 首次扫描未加固打场景下可以使用一键还原功能


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.11
changelog:
  - Type:update
  - ID:[Task#92827,81150,100973][Bug#118375,122968,122944,17825,117712,117348,112302,131649, 131821]
  - SUG:NA
  - DESC:
  - #92827 安全设置界面功能用户权限调整
  - #118375 账户设置不保存状态
  - #122968 回文不生效
  - #122944 密码字典不生效
  - #117825 网络首页提示错误
  - #117712 联网控制切换状态后与命令行不符
  - #117348 安全加固界面上下栏上显示不一致
  - #112302 联网控制切换状态后与命令行不符
  - #81150 账户管理相关项取值范围调整
  - #100973 安全报告增加重启生效状态
  - #131649 安全防护模式为自定义时安全设置勾选推荐
  - #131821 设置界面的问好文案错误


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.12
changelog:
  - Type:update
  - ID:[Bug#136400,135982,130841]
  - SUG:NA
  - DESC:
  - #136400 report dialog's datas are wrong
  - #135982 安全加固点击停止扫描后，等扫描完成后点击确定，闪退
  - #130841 加固后还原提示有误


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.13
changelog:
  - Type:update
  - ID:[Bug#117868,131649,138075,140001]
  - SUG:NA
  - DESC:
  - #117868 :update help file
  - #131649 :setting's contents wrong while security level is custom
  - #138075 :cannot select box item successfully
  - #140001 :get different model type is wrong


author: wanggang <wanggang1@kylinos.cn> - 1.15.10-1
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:update to 1.15.10,replace kubernetes.tar.gz with kubernetes-1.15.10.tar.gz
         and ignore patch18 which for compile ppc64le


author: weiyucheng <weiyucheng@kylinos.cn> - 1.15.10-1.p02
changelog:
  - Type:bug
  - ID:[BUG#139325]
  - SUG:NA
  - DESC:remove the "--allow-privileged=true" in patches/orig/kubeadm.conf


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p20
changelog:
  - add patch30 kylin_activation_fix_103100_ukey_activation_error.patch
  - bug 103100 ukey激活异常，优化激活过程。使界面不弹出Marco，系统不卡顿。


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p22
changelog:
  - Type:bugfix&task
  - ID:[BUG#122719] [TASK#88923] 
  - SUG:NA
  - DESC:limit dbus method import_auth_file


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#117856]
  - SUG : NA
  - DESC: add Patch18 kylin-computer-viewer-3.9.1s1-kylin-delete-comment.patch


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p20
changelog:
  - Type: bugfix
  - ID  : [TASK#90519]
  - SUG : NA
  - DESC: add Patch19 kylin-computer-viewer-3.9.1s1-kylin-fix-fortify-3.patch


author: huayadong <huayadong@kylinos.cn> -p58
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch61 kylin-control-center-3.9.5-kylin-fix-the-problem-that-palindrome-detection-does-not-take-efffect.patch
          修复密码回文检测不生效问题.


author: huayadong <huayadong@kylinos.cn> -p59
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch62 kylin-control-center-3.9.5-kylin-supplementary-password-configuration-rules.patch
          对密码设置增加规制限制.


author: huayadong <huayadong@kylinos.cn> -p60
changelog:
  - Type: bugfix
  - ID  : [BUG#122944]
  - SUG : NA
  - DESC: add Patch63 kylin-control-center-3.9.5-kylin-add-dictionary-detection-function-for-password-modif.patch


author: huayadong <huayadong@kylinos.cn> -p61
changelog:
  - Type: bugfix
  - ID  : [BUG#128211][BUG#136078]
  - SUG : NA
  - DESC: add Patch64 kylin-control-center-3.9.5-kylin-fix-adding-pictures-in-lock-screen-background-without-saving.patch
  	添加密码相似性检查，修复锁屏壁纸不保存问题.


author: huayadong <huayadong@kylinos.cn> -p63
changelog:
  - Type: bugfix
  - ID  : [BUG#144468]
  - SUG : NA
  - DESC: add Patch65 kylin-control-center-3.9.5-kylin-fix-password-verification-problems.patch
          修复root用户密码更新不对原密码进行校验.


author: huayadong <huayadong@kylinos.cn> -p64
changelog:
  - Type: bugfix
  - ID  : [BUG#151189]
  - SUG : NA
  - DESC: add Patch66 kylin-control-center-3.9.5-fix-crash-when-switching-lock-screen-mode.patch 
  	修复切换屏保模式时的崩溃问题。


author: huayadong <huayadong@kylinos.cn> -p65
changelog:
  - Type: bugfix
  - ID  : [Bug#158569]
  - SUG : NA
  - DESC: add Patch67 kylin-control-center-3.9.5-kylin-Merge-display-in-control-panel-for-users-with-the-same-UID.patch
  	为具有相同UID的用户在控制面板合并显示.


author: huayadong <huayadong@kylinos.cn> -p66
changelog:
  - Type: bugfix
  - ID  : [Bug#159672]
  - SUG : NA
  - DESC: add Patch68 kylin-control-center-3.9.5-kylin-fix-the-problem-that-the-screensaver-image-appears-black.patch
  	修复每次打开控制面板屏保预览都是黑色问题.


author: huayadong <huayadong@kylinos.cn> -p67
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: add Patch69 kylin-control-center-3.9.5-kylin-fix-the-same-uid-user-deletion-problem.patch


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p12
changelog:
  - add patch10: kylin-menu-5.5.9-kylin-fix-tw-and-hk-chinese.patch  ---xiaozai@kylinos.cn
  - fix bug 47488 
  - "将香港繁体和台湾繁体的开始菜单列表汉化
  - add patch11:kylin-menu-5.5.9-kylin-Solve-traditional-Chinese-and-English.patch
  - spec:注释掉patch9
  - "隐藏磁盘管理"
  - “保证语言在简体中文 繁体中文 英文在安装以及来回切换过程中保持风格一致且显示正常”


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p13
changelog:
  -add patch12:kylin-menu-kylin-strict-non-administrators-hide-system-monitor.patch
  -strict 模式下,非root用户 菜单隐藏 mate-system-monitor;fix bug 49504;


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p19
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch15: kylin-menu-5.5.9-delete-comment.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p20
changelog:
  - Type:bugfix
  - ID  :[bug#138701][bug#123656]
  - SUG :NA
  - DESC:add Patch16: kylin-menu-5.5.9-kylin-non-root-users-hide-shutdown-and-restart-functions.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p22
changelog:
  - Type:bugfix
  - ID  :[bug#139752]
  - SUG :NA
  - DESC:add patch17:kylin-menu-5.5.9-kylin-fix-the-default-mode-The-start-menu-has-no-gnome-logs.patch


author: limingle <limingle@kylinos.cn> - 1.0-24.6.p92.ws01
changelog:
  - update Build_id / Build_date for V10SP3
  - update /etc/os-release, /etc/.productinfo, /etc/system-release


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.04
changelog:
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: KYLIN-kylin-security-daemon-fix-sql-inject-by-retrieve.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.05
changelog:
  - Type: update
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复kysec-sync-notify中的sub_3960函数存在命令注入漏洞
  -         add patch: kylin-security-daemon-fix-fix-notify-get-file-type.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.06
changelog:
  - Type: bugfix 
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kylin-security-daemon-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#147906]
  - SUG:NA
  - DESC: 修复文件保护无法添加含有特殊字符文件名的文件
  -         add patch: kylin-security-daemon-fix-fpro-not-add-special-character-file-name-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题 
  -         add patch: kylin-security-daemon-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#154600]
  - SUG:NA
  - DESC: 修复设置模块防卸载是提示kmod_whlist不存在的错误
  -         add patch: kylin-security-daemon-fix-kmod-set-protect-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kylin-security-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.12
changelog:
  - Type: update 
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kylin-security-daemon-fix-parse-pyc-file-error-in-sp2-version.patch


author: lvfei <lvfei@kyinos.cn>.p03
changelog:
  - modify spec remove  gtksourceview
  - usr/share/gtksourceview-2.0/styles/classic.xml
  - usr/share/gtksourceview-2.0/styles/cobalt.xml
  - usr/share/gtksourceview-2.0/styles/kate.xml
  - usr/share/gtksourceview-2.0/styles/oblivion.xml
  - usr/share/gtksourceview-2.0/styles/tango.xml


author: tanyulong <tanyulong@kylinos.cn>.p05
changelog:
  - Type:bugfix
  - ID:[TASK#77056]
  - SUG:NA
  - DESC:modify kylin.conf file of kernel
  - Add Patches:modify-kylin.conf-file-of-kernel.patch


author: Shi Jingying <shijingying@kylinos.cn> - .p05
changelog:
  - Type:bugfix
  - ID:[Bug#112894]
  - SUG:NA
  - DESC:update plymouth pictures
  - add patch kylin-theme-4.0.5kord47~rc2-kylin-update-plymouth-for-v10sp3.patch


author: huayadong <huayadong@kylinos.cn> - .p06
changelog:
  - Type:bugfix
  - ID:[Bug#114562]
  - SUG:NA
  - DESC:add patch04:kylin-theme-4.0.5kord47~rc2-fix-bug-114562.patch
         修复gtk界面下,下拉框组建图标消失问题.


author: lvfei <lvfei@kylinos.cn> - p04
changelog:
  - Type:update
  - ID:[Task#85463]
  - SUG:NA
  - DESC: modify spec separate kylin-verify and kylin-verify-gui  kylin-verify-gui require gtk2 hicolor-icon-theme
  - kylin-verify do not require gtk2 hicolor-icon-theme


author: lvfei <lvfei@kylinos.cn> - p05
changelog:
  - Type:update
  - ID:[Task#85463]
  - SUG:NA
  - DESC: mini install gtk3 hicolor-icon-theme is remove  remove %post-gui execute  gtk-update-icon-cache


author: caoshuhao <caoshuhao@kylinos.cn> - 1.0.10kord-se.06
changelog:
  - Add patch 0001-change-version-1.0.10.patch
    This patch only updated the tool's version to 1.0.10 from 1.0.7.


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-7kord.se.01
changelog:
  - add Patch0: kysec-auth-fix-common-user-authorize-passwd-failed-error.patch
  - add Patch1: kysec-auth-fix-authorize-failed-for-none-of-sudoer.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.02
changelog:
  - exectl添加sm3硬算法，并且有kysec_tpm控制是否启用硬算法
  - setstatus添加kysec_tpm
  -   add patch: kysec-daemon-add-sm3-hard-hash-and-kysec-tpm.patch
  - netctl计算文件路径改用sm3算法，当tpm卡可用时使用硬算法，否则使用软算法
  -   add patch: kysec-daemon-netctl-change-sm3-hash.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.03
changelog:
  - 修改kmod白名单
  -   add patch: kysec-daemon-modify-kmod-whlist.patch
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: kysec-daemon-fix-sql-inject-by-retrieve.patch
  - 添加enable_tpm编译宏
  -   add patch: kysec-daemon-add-enable-tpm-budil-macro.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#118414]
  - SUG:NA
  - DESC: 清空内核模块防卸载白名单，保留sm4_generic
  -         add patch: kysec-daemon-kmod-whlist-keep-sm4_generic.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.06
changelog:
  - Type: update
  - ID: [TASK#84294]
  - SUG:NA
  - DESC: 修复whlist_update_by_deb接口存在命令注入漏洞
  -         add patch: kysec-daemon-fix-popen-injection-command-leak.patch
  - Type: bugfix 
  - ID: [BUG#122953]
  - SUG:NA
  - DESC: 解决在龙芯机器上安全中心获取内核防卸载名单失败的问题 
  -         add patch: kysec-daemon-fix-ksc-defender-load-kmod-whlist-error.patch
  - Type: bugfix 
  - ID: [BUG#122688]BUG#122673]BUG#122671]BUG#122646]BUG#122644]
  - SUG:NA
  - DESC: 修复操作whlist数据库的SQL注入的问题
  -         add patch: kysec-daemon-fix-sql-inject-by-operate-whlist-database.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.07
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC:   kysec命令行改造，将security-switch模块设置逻辑下移到服务
  -         add patch: kysec-daemon-add-security-switch-module.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.08
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的服务接口
  -         add patch: kysec-daemon-add-chpolicy.patch
  - Type: bugfix
  - ID: [Bug#122953]
  - SUG:NA
  - DESC: 修复添加内核防卸载时，Qstring导致的乱码的问题
  -         add patch: kysec-daemon-fix-add-kmod-protect-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.09
changelog:
  - Type: bugfix
  - ID: [Bug#131435][Bug#131574]
  - SUG:NA
  - DESC: 修复security-switch加固后切换strict模式失败的问题
  -       修复strict模式下，切换selinux模式为permissive失败的问题
  -         add patch: kysec-daemon-fix-kysec-command-bug.patch
  - Type:update
  - ID: NA
  - SUG:NA
  - DESC: 将kysec-module的dbus通信移植到kysec-daemon
  -         add patch: kysec-daemon-modify-dbus-module-to-daemon.patch
  - Type: bugfix
  - ID: [bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.10
changelog:
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-daemon-fix-failed-to-remove-exectl.patch
  - Type: update 
  - ID: []
  - SUG:NA
  - DESC: netctl添加pkg path的dbus接口
  -         add patch: kysec-daemon-netctl-add-pkg-path-dbus-interface.patch 
  - Type: bugfix
  - ID: [Bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.02
changelog:
  - netctl自动添加联网程序，并设置为拦截
  -   add patch: kysec-syc-daemon-netctl-auto-add-xml.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -          add patch: kysec-sync-daemon-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.04
changelog:
  - Type: bugfix 
  - ID:[bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题
  -       修复网络控制自动探测时程序不是rpm或者dpkg安装，导致包名不正确的问题
  -           add patch: kysec-sync-daemon-fix-netctl-auto-add-pkg-is-not-rpm-install.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-41.se.05
changelog:
  - Type: update
  - ID:[]
  - SUG:NA
  - DESC: 修改netctl自动探测，对于不是rpm包安装的,pkg填写全路径
  -         add patch: kysec-sync-daemon-modify-netctl-auto-add-whlist.patch
  - Type: bugfix
  - ID:[bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-sync-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.03
changelog:
  - 网络控制获取所有包信息时过滤未安装的软件包
  -   add patch: kysec-utils-netctl-pkg-read-all-data-filter-unistalled-pkg.patch
  - 添加enable_tpm编译宏
  -   add patch: kysec-utils-add-enable-tpm-build-macro.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#75532]
  - SUG:NA
  - DESC: 修改getstatus查看kysec信息显示，去除devctl和tpm_status
  -         add patch: kysec-utils-modify-getstatus-info.patch
  - Type: update
  - ID:[TASK#81148]
  - SUG:NA
  - DESC: 当kysec_status或者exectl的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: kysec-utils-change-relabel_status-to-0.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#112677]
  - SUG:NA
  - DESC: 依据服务器部门提供的netctl白名单列表，修改网络控制xml文件
  -         add patch: kysec-utils-netctl-modify-xml-file.patch
  - Type: bugfix
  - ID:[BUG#106538]
  - SUG:NA
  - DESC: 修改kysec_check_exec()函数，解决sh执行脚本的问题
  -         add patch: kysec-utils-modify-kysec_check_exec-function.patch
  - Type: bugfix
  - ID:[BUG#118587]
  - SUG:NA
  - DESC: 修复当模块的标签是unknown是仍然可以insmod的问题
  -         add patch: kysec-utils-fix-insmod-seccuess-when-module-label-unknown.patch
  - Type: bugfix
  - ID:[BUG#122963]
  - SUG:NA
  - DESC: netctl为龙芯的机器添加龙芯浏览器白名单
  -         add patch: kysec-utils-netctl-xml-add-lbrowser-for-loongarch64.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 给安全加固程序加上kysoft标记，因为安全加固程序需要给配置文件打白名单，需要kysoft标记，否则没有权限
  -       add patch: kysec-utils-add-kysoft-label-to-security-reinforce.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.07
changelog:
  - Type: update
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-utils-fix-fortify.patch
  - Type: bugfix
  - ID:[Bug#121813]
  - SUG:NA
  - DESC: 在secadm_list列表中加入semodule程序，修复三权模式下，secadm用户安装，卸载策略模块失败的问题 
  -         add patch: kysec-utils-add-semodule-to-secadm_list.patch
  - Type: bugfix
  - ID:[Bug#122812]
  - SUG:NA
  - DESC: 修复sh执行可执行程序失败的问题，libkysecwhlist.so调用失败
  -         add patch: kysec-utils-fix-sh-execute-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.08
changelog:
  - Type: update
  - ID:[Task#90053]
  - SUG:NA
  - DESC: 修改kysec相关命令
  -         add patch: kysec-utils-modify-kysec-command.patch
  - Type: bugfix
  - ID:[Bug#128959][Bug#128809]
  - SUG:NA
  - DESC: sh执行没有标记的脚本，度量成功后，允许执行并打上verified的标记
  -         add patch: kysec-utils-fix-sh-execute-set-label.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.09
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的库接口
  -         add patch: kysec-utils-add-chpolicy.patch
  - Type: update
  - ID:[Task#90053][Bug#131756]
  - SUG:NA
  - DESC: 优化部分kysec相关命令, 解决软件包标签获取命令执行报错的问题
  -         add patch: kysec-utils-kysec-command-optimize-and-fix-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.10
changelog:
  - Type: update
  - ID:[Task#90053][Bug#128917][Bug#131796][Bug#131599][Bug#131594]
  - SUG:NA
  - DESC: 优化部分kysec相关命令
  -       修复进程开启情况下，设置防杀死标签，不生效，下次打开的进程才生效的问题
  -       修复kysec_set设置应用程序联网管控失败的问题
  -       修复strict模式下关闭kysec后root用户执行setenforce 0提示权限不够的问题
  -       修复strict模式下关闭kysec后secadm和auditadm用户仍存在的问题
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: kysec-utils-fix-kysec-command-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.11
changelog:
  - Type: update
  - ID: NA
  - SUG:NA
  - DESC: kysec检查接口还原p标记检查，先做hash值检查，再检查p标记
  -         add patch: kysec-utils-kysec-check-lib-restore-parent-label-check.patch
  - Type: bugfix
  - ID: [bug#135468]
  - SUG:NA
  - DESC: 修复kysec组件命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-command-inject-bug.patch
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-utils-fix-failed-to-remove-exectl.patch
  - Type: bugfix
  - ID: [Bug#138094]
  - SUG:NA
  - DESC: 旧版本接口兼容
  -         add patch: kysec-utils-add-old-version-interface-compatible.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.12
changelog:
  - Type: bugfix
  - ID: [BUG#140008]
  - SUG:NA
  - DESC: setstatus设置disable提示重启生效
  -         add patch: kysec-utils-setstaus-disable-prompt-reboot.patch
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-utils-fix-not-set-status-when-close-3adm.patch
  - Type: bugfix
  - ID: [BUG#142102]
  - SUG:NA
  - DESC: 修复非secadm用户不可查看当前安全状态的问题
  -         add patch: kysec-utils-delete-security-switch-from-secadm-list.patch
  - Type: update
  - ID: [TASK#113906]
  - SUG:NA
  - DESC: 从auditadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-auditadm-list.patch
  - Type: update
  - ID: [TASK#113152]
  - SUG:NA
  - DESC: 命令行注入分析及解决
  -         add patch: kysec-utils-command-line-injection.patch


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add new fields in config v2 and inspect to support modifications on iSulad


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-exec-Fix-setting-locale-for-util-calls.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-dm-Fix-memory-leak-in-the-DM-plugin-and-DM-logging-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-fs-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-kbd-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-lvm-dbus-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-mdraid-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-swap-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-vdo-Do-not-use-g_memdup-in-bd_vdo_stats_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: liwenchong <liwenchong@kylinos.cn> - - 2:0.4.0-1-p01
changelog:
  - Type:task
  - ID: [Task#91017]
  - move struct btf_ext_header to btf.h for bcc make
  - change Requires kernel-headers for bcc make


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: imxcc <xingchaochao@huawei.com> - 1.0.0.2
changelog:
  - gensrc: we should add align while FLAGS_PUSH_SECTION flag is set
  - elf: add section adderss for STT_NOTYPE type of symbol


author: imxcc <xingchaochao@huawei.com> - 1.0.0.4
changelog:
  - libcare-patch-make: adapt libcare-patch-make to meson
  - gitignore: ignore some tests and binary
  - elf/strip: adapt to new gcc version(10.3.1)


author: imxcc <xingchaochao@huawei.com> - 1.0.0.5
changelog:
  - kpatch_elf: compatible with older versions of the so naming rules
  - kpatch_parse: fix failed to recognize .cold


author: wanghao <wanghao2@kylinos.cn> - 1.0-2.skl2.ky10.p.se.05
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: libchkuid-1.0-login-check-same-uid.patch


author: gaoyi <gaoyi15@huawei.com> - 0.1.8-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:CVE for libcomps
         https://github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046


author: xuhe <xuhe@kylinos.cn> - 5.3.28-36.p01
changelog:
  - Rebuild for Kylin
  - Add BuildRequires:  java       >= 1:1.6.0
  - Add BuildRequires:  java-devel <  1:1.11.0
  - Add BuildRequires:  java       <  1:1.11.0


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: panxiaohe <panxiaohe@huawei.com> - 2.1.12-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add debuginfo package and make ELF files stripped
         remove redundant ABI compatibility library


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: xiao yuliang <xiaoyuliang@kylinos.cn> - 1:1.40.2-13.p01
changelog:
  - Type: update
  - ID:   [TASK#74237]
  - SUG:  NA
  - DESC: add supermin.d-arm.tar.gz and supermin.d-x86.tar.gz from libguestfs-1.40.2-9.p03 to fix bug that guestfish can not use.
  -       remove Enable appliance because it interferes with the above functions.


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p39
changelog:
  - Type:update
  - ID:[BUG#122522][BUG#121006]
  - SUG:NA
  - DESC:kylin_activation_check improve permissions


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p43
changelog:
  - Type:update
  - ID:[TASK#102068][BUG#135390][BUG#134276]
  - SUG:NA
  - DESC:add limit time palce authorization (patch45)
         fix bug135390 (patch46)
         fix buf134276 (modify spec file)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p45
changelog:
  - Type:update
  - ID:[TASK#110237]
  - SUG:NA
  - DESC:Limited time unlimited site authorization activated when booting (patch48)


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p46
changelog:
  - Type:bugfix
  - ID:[BUG#137974]
  - SUG:NA
  - DESC:slove when replaceing the authorization file view computer properties then serial number changed (patch49)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p47
changelog:
  - Type:bugfix
  - ID:[BUG#152498]
  - SUG:NA
  - DESC:slove the problem of check error for private activation ordinary users (patch50)


author: hanjinpeng <hanjinpen@kylinos.cn> - 8.16.1-5.p01
changelog:
  - Type:bugfix
  - ID:26848
  - SUG:NA
  - DESC: add procmail requires. merge 8.15.2-33.p01 , 
          modified spec, sendmail.mc from "include(`cf/m4/cf.m4')dnl"
          to "include(`/usr/share/sendmail-cf/m4/cf.m4')dnl"


author: shenyangyang <shenyangyang4@huawei.com> - 1.6.4-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of gobject-introspection-devel to solve build problem


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: liujilin <liujilin@kylinos.cn> - 1.18.22-4.p02
changelog:
  - add patch4: network-manager-applet-1.8.22-kylin-tooltip-shows-error.patch
  - network-manager-applet tooltips display error.


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.18.22-4.p03
changelog:
  - Add patch5 resolve bug2846
  - The desktop operating system has been resolved,modify the prompt content


author: mengchaoming<mengchaoming@kylinos.cn>--1.18.22-4.p09
changelog:
  -add patch10: nm-applet-1.8.22-kylin-fix-bug49556.patch
  -strict模式下，只有root用户显示左键菜单; 
  -strict模式下, 右键菜单只有root用户会显示全,其他用户只显示“连接信息"、“启用联网”
  -非strict 模式下,流程不变;


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Miro Hrončok <mhroncok@redhat.com> - 4.10.1-5
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Guoshuai Sun <sunguoshuai@huawei.com> - 1.2.57-12
changelog:
  - ID:CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
  - SUG:restart
  - DESC:fix CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
    And we have check CVE-2014-9495 CVE-2011-3045 CVE-2008-3964 CVE-2015-8126 CVE-2015-0973 alreadyi been fixed before.
    And CVE-2016-3751 CVE-2013-6954 didn'd involved.


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 加入回文和相似性检查
  -         add patch: libpwquality-add-palindrome-similar-option.patch
  -       恢复pwquality.conf的默认配置
  -         add patch: libpwquality-restore-pwquality.conf-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.02
changelog:
  - Type:update
  - ID: [Task#91807]
  - SUG:NA
  - DESC: 恢复pwqprivate.h的默认配置
  -         add patch: libpwquality-restore-pwqprivate.h-default-configure.patch


author: wanghao <wanghao2@kylinos.cn> - 1.4.2-1.p02.se.03
changelog:
  - Type: Bugfix
  - ID: [Bug#118364]
  - SUG:NA
  - DESC: 回文检查配置项默认打开
  -         add patch: libpwquality-set-palindrome-default-on.patch


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 5.0-1
changelog:
  - New upstream release, migrated to python
  - Turn off automatic python byte-compilation and use py_byte_compile for the
    extension files


author: fuanan <fuanan3@huawei.com> - 1.12.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Fix:memory leaks
         Fix:lr_fastestmirror_prepare:Resource leaks
         Fix:lr_get_curl_handle:Check curl_easy handle before use
         lr_get_curl_handle:Strict check of curl_easy_setopt return code
         Remove "may be used uninitialized" compiler warnings


author: Shi Jingying <shijingying@kylinos.cn> - 2.10.1-10.p01
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify spec, custom files, and add file ureport.conf
         add Patch10001, rebrand


author: zhangjun <zhangjun@kylinos.cn> 1.0-1.11.1.p01
changelog:
  - update spec:Install libRockeyARM.s0.0.3 library to /usr/lib/xxx-linux-gnu directory
  - bug102904平安银行定制iso授权Key激活失败
  - 本次更新修复将动态库安装到对应架构指定目录


author: RPM Fusion Release Engineering <leigh123linux@gmail.com> - 2.4-13.20160224.gitfa8646d
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
  - Remove Group tag
  - Add BuildRequires:  gcc


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1-4-se.01
changelog:
  - Type:update
  - ID:[Task#]
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks


author: hanhuijie <hanhuijie@qq.com> - 3.1-3.se.01
changelog:
  - Type:update
  - ID:[Task#76391]
  - SUG:NA
  - DESC:
  - 增加libsemanage补丁
  -         add patch: libsemanage-20200319.patch
  -       增加文件当前包含的作用户操作的模板


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: gaoyi<gaoyi15@huawei.com> - 2.1.14-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport patches from https://github.com/samba-team/samba
  - Package init


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependecy on the help package from requires to recommends.


author: wanfeng <wanfeng@kylinos.cn> - 1.2.6-2.p01
changelog:
  - Type:BUGFIX
  - ID:Task#145401
  - SUG:NA
  - DESC:add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
         add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
         fix oom bug


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: Harald Hoyer <harald@redhat.com> - 16-1
changelog:
  - libvarlink 16
  - fixed coverity issues
  - Resolves: #1638294 - Interface name validation rule update


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - virDevMapperGetTargets: Don't ignore EBADF
  - virdevmapper: Don't cache device-mapper major
  - virdevmapper: Handle kernel without device-mapper support


author: lijunwei <lijunwei@kylinos.cn> 6.2.0-16.p01
changelog:
  - Type update
  - ID:NA
  - SUG:NA
  - DESC:KYLIN-add-Phytium-support-host-model.patch 增加飞腾使用host-model启动虚拟机功能


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p02
changelog:
  - Type:update
  - ID:[TASK#84925]
  - SUG:NA
  - DESC:Enable esx support to support virt-v2v from esx to kvm


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-16.p03
changelog:
  - Type update
  - ID:[BUG:132676]
  - SUG:NA
  - DESC:libvirt-6.2.0 add computing baseline hypervisor CPU for arm


author: Danilo de Paula <ddepaula@redhat.com> - 1.2.0-3
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix following issues:
         fix unsigned integer overflow in htmlParseTryOrFinish
         fix undefined behavior in UTF16LEToUTF8
         fix SEGV in xmlSAXParseFileWithData
         encoding: fix memleak in xmlRegisterCharEncodingHandler()
         fix null deref in xmlStringGetNodeList
         fix memory leak in xmlParseElementMixedContentDecl
         fix slow parsing of HTML with encoding errors


author: fuanan <fuanan3@h-partners.com> - 2.9.10-25
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: openEuler Buildteam <buildteam@openeuler.org> - 1.3-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:change the directory of the license file and add the help package for libxshmfence


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: wuxu <wuxu.wu@hotmail.com> - 3.6.0-4
changelog:
  - update license consistent with upstream community:
    The library (libsensors) is released under the GNU Lesser General Public
    License (LGPL), as included in the file COPYING.LGPL. The rest of this
    package may be distributed according to the GNU General Public License
    (GPL), as included in the file COPYING.


author: Bjorn <bjorn1@users.sourceforge.net> 7.5.1-1
changelog:
  * Fri Dec 28 2018 Bjorn <bjorn1@users.sourceforge.net> 7.5.0
  - simplified files section
  - using symbolic links for some man files


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-improve-NVMe-device-parsing-and-make-WWN-printing-fo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-lsscsi-wwn-number-output-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: shixuantong <shixuantong@huawei.com> - 2.1.49-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:move mime.types to mailcap rpm and change mime.types to mime_mailcap.types


author: huayadong <huayadong@kylin.cn> - 1.16.1-4
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: GuoCe <guoce@kylinos.cn> - 1.12.1-1.p01
changelog:
  - Add patch: mate-media-1.12.1-1kord24~rc1-kylin-tooltip-shows-error.patch
  - Disable tooltips display of speaker.


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: mengchaoming<mengchaoming@kylinos.cn> 1.24.0-1.p01
changelog:
  --add patch:mate-system-monitor-1.24.0-kylin-del-help.patch
  --add patch:mate-system-monitor-1.24.0-kylin-adjust-proc-spacing.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: guoshengsheng<guoshengsheng@kylinos.cn>1.12.2-1kord1k10.p02
changelog:
  - Add %post 
  - dconf reset /org/mate/terminal/profiles/default/font
  - dconf write /org/mate/terminal/profiles/default/font "'Courier 10 Pitch 12'"


author: Lu lijun<lulijun@kylinos.cn>1.12.2-1kord1k10.p03
changelog:
  - add Patch:mate-terminal-1.12.1-kylin-modify-setting-default-font.patch
  - fix bug20234 and bug18836.


author: konglidong <konglidong@uniontech.com> - 1.0.22
changelog:
  - fix build error : Non-resolvable parent POM for org.apache.maven.plugins:maven-verifier-plugin:1.0


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the --syslog option while executing mdadm --scan command in mdmonitor.service


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-10
changelog:
  - Fixed memtest86+ to run even if relocated above 1 MB
    (by real-mode-reloc patch)
  - Relocated memtest86+ above 1 MB (as we always did in Fedora)
  - Fixed compilation of inline assembly with new gcc
    (by fgnu89-inline patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-14
changelog:
  - Removed some spec artifacts (like buildroot cleaning)
  - Fixed malformed "Loading" banner
  - Not relocating memtest86+ above 1 MB
    Related: rhbz#1303804
  - Introduced new configuration file (/etc/memtest86+.conf)
  - Introduced new memtest-setup switches for selecting ELF/non-ELF versions
    Resolves: rhbz#1303804


author: chengguipeng <chengguipeng11@huawei.com> - 8.3.0-14
changelog:
  - BuildRequires:add libglvnd-devel, libXext-devel and remove mesa-libGLES-devel to solve compilation failture.


author: Zhenneng Li <lizhenneng@kylinos.cn> - 20.1.4-1.p05
changelog:
  - Type:BUG
  - ID:[BUG#95676]
  - SUG:NA
  - DESC: add loongarch patch to fix sigment fault when running glxgears


author: Zhenneng Li <lizhenneng@kylinos.cn> - 20.1.4-1.p06
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS
  	Fix some compile warning


author: Miroslav Suchý <msuchy@redhat.com> 1.4.12-1
changelog:
  - Don't try to use a spec we've already cleaned up (otaylor@fishsoup.net)
  - only set print_main_output when not set in configs
    (chuck.wilson+github@gmail.com)
  - Try to get the proxy from environment (brunovern.a@gmail.com)
  - stop after first failure if -c or --recurse is not used
  - fallback to C.UTF-8 locale (tomek@pipebreaker.pl)
  - completion: improve --copy(in|out), --cwd, --macro-file, --rootdir, and
    --sources (tmz@pobox.com)
  - do not get spec from command line when using scm [GH#203]
  - enable cap_ipc_lock in nspawn container [RHBZ#1580435]
  - use host's resolv.conf when --enable-network is set on cml [RHBZ#1593212]
    (jskarvad@redhat.com)
  - add --forcearch to bash_completion


author: Miroslav Suchý <msuchy@redhat.com> 1.4.14-1
changelog:
  - config['decompress_program'] default (praiskup@redhat.com)
  - add example for jinja templates
  - implement templated configs using jinja2
  - move live defaults from site-defaults.cfg to utils.py
  - introduce "decompress_program" option for root_cache for bsdtar
  - fix exclude patter for bsdtar
  - delete old changelog entries
  - use f29 for tests
  - update the default in sitec-defaults.cfg
  - Recommend dnf-utils (fzatlouk@redhat.com)
  - ignore useless-object-inheritance pylint warning
  - add scientific linux on list of rhel clones [GH#228]
  - Use 32-bit personality for armv7*/armv8* builds (bero@lindev.ch)
  - create custom error message for dnf-utils not being installed
    (pjunak)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.15-1
changelog:
  - ignore weird distro.version() [RHBZ#1690374]
  - switch to string rpm's API [RHBZ#1693759]
  - FileNotFoundError is not defined in Python 2 [RHBZ#1696234]
  - Fix python2-devel build require
  - temporary do not make errors from createrepo_c fatal [GH#249]
  - allow to configure disabled DNF plugins [GH#210]
  - print warning when user is not in the mock group [GH#244]
  - implement Dynamic Build Dependencies (msuchy@redhat.com)
  - Allow mock to be built for epel 8, and without tests
    (vanmeeuwen@kolabsys.com)
  - Add debug logging for systemd-nspawn and related args (riehecky@fnal.gov)
  - Fix mock for non-ascii paths on python2 (a.badger@gmail.com)
  - require python-jinja2 rather than python2-jinja2
  - Fix --enable-network documentation in man page (directhex@apebox.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.16-1
changelog:
  - switch to python3 on el7
  - respect use_host_resolv config even with use_nspawn (praiskup@redhat.com)
  - Fix crash on non-ascii dnf log messages (bkorren@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.17-1
changelog:
  - change of exit code during transition from mockchain to mock --chain
  - support run in Fedora Toolbox (otaylor@fishsoup.net)
  - add cheat sheet
  - Adding tool for parsing build.log (sisi.chlupova@gmail.com)
  - load secondary groups [RHBZ#1264005]
  - pass --allowerasing by default to DNF [GH#251]
  - make include() functional for --chain [GH#263]
  - Removing buildstderr from log - configurable via 
    _mock_stderr_line_prefix (sisi.chlupova@gmail.com)
  - Fixup: Use rpm -qa --root instead of running rpm -qa in chroot
    (miro@hroncok.cz)
  - DynamicBuildrequires: Detect when no new packages were installed
    (miro@hroncok.cz)
  - Allow more loop devices (sisi.chlupova@gmail.com)
  - Fix binary locations in /bin for split-usr setups (bero@lindev.ch)
  - describe behaviour of resultdir together with --chain [GH#267]
  - repeat dynamic requires if needed [GH#276]
  - Fix compatibility with pre-4.15 RPM versions with DynamicBuildRequires
    (i.gnatenko.brain@gmail.com)
  - Enable dynamic BuildRequires by default (i.gnatenko.brain@gmail.com)
  - bootstrap: independent network configuration (praiskup@redhat.com)
  - Update the man page about ~/.config/mock/FOO.cfg (miro@hroncok.cz)
  - explicitely convert releasever to string [GH#270]
  - grant anyone access to bind-mounted /etc/resolv.conf (praiskup@redhat.com)
  - -r FOO will try to read first ~/.mock/FOO.cfg if exists
  - enhance man page of mock about --chain
  - bash completion for --chain
  - respect use_host_resolv config even with use_nspawn (praiskup@redhat.com)
  - Fix crash on non-ascii dnf log messages (bkorren@redhat.com)
  - add deprecation warning to mockchain
  - replace mockchain with `mock --chain` command (necas.marty@gmail.com)
  - switch to python3 on el7 (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.18-1
changelog:
  - use forcearch even when --forcearch is not specified
    (turecek.dominik@gmail.com)
  - requires systemd-container on rhel8 [RHBZ#1744538]
  - mock: only make /sys and /proc mounts rprivate (praiskup@redhat.com)
  - Add Red Hat subscription-manager support (praiskup@redhat.com)
  - Turn jinja ON a bit later, once configs are loaded (praiskup@redhat.com)
  - bootstrap-chroot: always explicitly install shadow-utils
    (praiskup@redhat.com)
  - Add procenv plugin for more detailed buildtime information
    (riehecky@fnal.gov)
  - enable selinux plugin for nspawn [RHBZ#1740421]
  - Added signals handling by calling orphansKill for signals: SIGTERM, SIGPIPE
    and SIGHUP (janbuchmaier@seznam.cz)
  - Mention user configuration file in a man page (jkonecny@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.19-1
changelog:
  - results should be owned by unpriv user [GH#322]
  - do not build with tests by default
  - Resultdir variable is missing in config. (sisi.chlupova@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.20-1
changelog:
  - /bin/mockchain wrapper around 'mock --chain' (praiskup@redhat.com)
  - mock: options for retrying packager managers' actions (praiskup@redhat.com)
  - remove mockchain [RHBZ#1757388]
  - chain: don't skip local repository (praiskup@redhat.com)
  - chain: propagate local repository to bootstrap chroot (praiskup@redhat.com)
  - hw_info: don't create root-owned files (praiskup@redhat.com)
  - ignore ./var/log when creating root_cache - fixes #309
    (jiri.novak@ghorland.net)
  - mock: don't create root files if possible (praiskup@redhat.com)
  - add commandline options for using bootstrap image (frostyx@email.cz)
  - Use podman to pull and export an image as a bootstrap chroot
    (dmach@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.21-1
changelog:
  - copy distribution-gpg-keys if this is boostrap and we use container image
  - move podman initialization to buildroot.py [GH#380]
  - bootstrap: fix --install and --installdeps [RHBZ#1447627]
  - mock: selinuxfs, one more fix for nspawn [RHBZ#1756972]
  - mock: fix broken rpmbuildstate [GH#349]


author: Miroslav Suchý <msuchy@redhat.com> 30.4-1
changelog:
  - Add 'fastestmirror=1' to Mageia mock configs (ngompa13@gmail.com)
  - bootstrap: disable sclo* repos for epel --installroot (praiskup@redhat.com)
  - drop Fedora ppc64 configs [RHBZ#1714489]


author: Miroslav Suchý <msuchy@redhat.com> 30.5-1
changelog:
  - disable updates-modulare repos for now
  - buildrequire systemd-srpm-macros to get _sysusersdir
  - removed info about metadata expire (khoidinhtrinh@gmail.com)
  - added updates-modular to 29 and 30 (khoidinhtrinh@gmail.com)
  - replace groupadd using sysusers.d
  - core-configs: epel-7 profiles to use mirrorlists (praiskup@redhat.com)
  - EOL Fedora 28
  - do not protect packages in chroot [GH#286]
  - Fix value for dist for OpenMandriva 4.0 configs (ngompa13@gmail.com)
  - Add initial OpenMandriva distribution targets (ngompa13@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com>
changelog:
  - add fedora 31 configs and rawhide is now 32
  - Add local-source repo definition to Fedora Rawhide (miro@hroncok.cz)


author: Miroslav Suchý <msuchy@redhat.com> 31.2-1
changelog:
  - revert sysusers setting [RHBZ#1740545]
  - add rhelepel-8 configs (praiskup@redhat.com)
  - add RHEL 7/8 (praiskup@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.3-1
changelog:
  - mock-core-configs: installroot fix for fedora 31+ i386 (praiskup@redhat.com)
  - Moving templates into templates dir (sisi.chlupova@gmail.com)
  - Changing cfg files for fedora 30 to use tpl file (sisi.chlupova@gmail.com)
  - Moving fedora-30-x86_64.cfg into templates/fedora-30.tpl
    (sisi.chlupova@gmail.com)
  - baseurl for f30-build was changed (sisi.chlupova@gmail.com)
  - no i686 repositories [GH#325]
  - adds equation sign to --disablerepo (thrnciar@reedhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.4-1
changelog:
  - provide explanation why modular repos are disabled
  - add epel-8
  - Changing cfg files for fedora rawhide to use tpl file
    (sisi.chlupova@gmail.com)
  - Changing cfg files for fedora 31 to use tpl file (sisi.chlupova@gmail.com)
  - Changing cfg files for fedora 29 to use tpl file (sisi.chlupova@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.5-1
changelog:
  - expand contentdir for now
  - expand $stream for now
  - add extra_chroot_dirs to centos8
  - use dnf for centos8
  - add centos-stream-8
  - rhelepel: reuse epel-8.tpl (praiskup@redhat.com)
  - Add Amazon Linux 2 configs (haroldji@amazon.com)
  - centos-8: enable PowerTools repo (praiskup@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.6-1
changelog:
  - disable modular repo for f29
  - configure podman containers for Fedora, EPEL and Mageia (frostyx@email.cz)
  - Fix baseurl typo in centos-stream config (dollierp@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.7-1
changelog:
  - Add configs for epel8-playground (mmathesi@redhat.com)
  - add 3 base packages to epel-playground buildroot [RHBZ#1764445]
  - add 3 base packages to epel buildroot [RHBZ#1764445]


author: liyunqing <liyunqing@kylinos.cn> - 2:0.93-2.p01
changelog:
  - Type:bugfix
  - ID:[Task#93368],[Task#93369]
  - SUG:NA
  - DESC: 1.fix mtr gui program can't start;
  	2.add patch01-03 to fix gui program can't change dst_ip;


author: Caolán McNamara <caolanm@redhat.com> - 3.0-22
changelog:
  - Related: rhbz#1604911 convert python2 to python3, verified
    that output th_en_US_v2.dat and th_en_US_v2.idx are identical
    before and after


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: zengwefeng<zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:enable check while building
         parser_bison memleak symbol redefinition
         segtree memleaks in interval_map_decompose
         json Combining terse with json has no effect
         evaluate Reject quoted strings containing only wildcard
         Solves Bug 1462 nft j list set does not show counters
         json Fix memleak in set_dtype_json
         mnl reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE


author: gaihuiying <gaihuiying1@huawei.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate disallow ct original s d ddr from maps
         evaluate disallow ct original s d ddr from concatena


author: Fyodor (fyodor(a)insecure.org)
changelog:
  - Removed changelog entries as SVN is a more authoritative source. Execute:
  - svn log --username guest --password "" https://svn.nmap.org/nmap/nmap.spec.in


author: lvfei <lvfei@kylonos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: yanghua<yanghua21@huawei.com> - 0.9.9-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Create /var/run/nslcd/socket after dropping privileges
         Fix crash in chsh.ldap


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.0-2
changelog:
  - Added sdmp-fixes.patch from upstream to remove net-tools dependency
    and couple of important fixes


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.5-1
changelog:
  - Package new upstream version open-vm-tools-11.1.5-16724464.
  - Removed gcc10-warning.patch and sdmp-fixes.patch (no longer needed).


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
changelog:
  - Package new upstream version open-vm-tools-11.2.5-17337674.
  - libdnet dependency was removed in open-vm-tools 11.0.0. So,
    removed the stale BuildRequires for libdnet.


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: wangxiaomeng <wangxiaomeng@kylinos.com> - 2.1.1-18.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug#138766, backport upstream patch to solve crash on Hygon


author: Senlin Xia <xiasenlin1@huawei.com> 1.3.2-5
changelog:
  - Fix scap-workbench compilation failure: declaration of 'operator' as parameter in oval_definitions.h


author: songjuntao<songjuntao@kylinos.cn> - 8.2P1-16.p02
changelog:
  - Type: update
  - ID: [Task#67551]
  - SUG: NA
  - DSEC: add openssh secure shell support national crypto standard algorithm feature


author: songjuntao<songjuntao@kylinos.cn> - 8.2P1-16.p04
changelog:
  - Type: bugfix
  - ID: [BUG#113446]
  - SUG: NA
  - DSEC: add ssh client login server use national alogrithm without password


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p02
changelog:
  - Type: update
  - ID: [Task#67548]
  - SUG: NA
  - DSEC: support national cryptographic standard algorithm feature


author: anyunhao <anyunhao@kylinos.cn> - 1:1.1.1f-15.p03
changelog:
  - Type: update
  - ID: [TASK#85463]
  - SUG: NA
  - DSEC: split package openssl-perl,reduce main package installation dependencies


author: wangshuo <wangshuo@kylinos.cn> - 1:1.1.1f-15.p04
changelog:
  - Type: update
  - ID: [TASK#78310]
  - SUG: NA
  - DESC: Add Patch85, Kylin add openssl loongarch64 support
  -       Modify spec, Kylin modify configure command for build on loongarch64


author: Xu Xiangyu <xuxiangyu@hygon.cn> - 1:1.1.1f-15.p05
changelog:
  - Type: update
  - ID: [Task#84503]
  - SUG: NA
  - DSEC: add hygoncpp engine and speed test for openssl support hygon cipher coprocessor hardware


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190504-1
changelog:
  - Update to v20190504 release
  - Resolves: rhbz#1699990 - Rebase to the latest upstream release
  - Resolves: rhbz#1689817 - virt-manager cannot detect operating system name
                             for rhel8.0.0 tree automatically
  - Resolves: rhbz#1703480 - rhel8.0.x is not detected as rhel8.0
  - Resolves: rhbz#1685364 - Add win2019 to libosinfo


author: Fabiano Fidêncio <fidencio@redhat.com> - 20191125-1
changelog:
  - Updated to v20191125 release
  - Resolves: rhbz#1780529 - Update to the latest upstream release
  - Add rhel8.2 & rhel7.8 entries
  - Remove upstream virtio-win / spice-guest-tools drivers


author: jiangping <jiangping@kylinos.cn> - 20200203-1.01
changelog:
  - Add osinfo-db-20200203-neokylin-and-kylin-release.patch 
  - Resolves: kylinbz#12970 - Add to v20200203 release for NeoKylin and Kylin


author: jiangping <jiangping@kylinos.cn> - 20200203-1.02
changelog:
  - Add osinfo-db-20200203-kylin-modify-autodetecting-entry.patch 
  - Resolves: kylinbz#12970 - modify autodetecting entry to v20200203


author: wulei <wulei80@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Do not run testcase test-libarchive-import, because selinux is off.


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: pam-login-check-same-uid.patch


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.02
changelog:
  - Type: bugfix
  - ID:[BUG#136126]
  - SUG:NA
  - DESC: 对于相同的uid的两个账户，允许uid和username匹配的账户登录
  -       add patch: pam-fix-right-uid-not-login-bug.patch


author: zhangqiang <zhangqiang@kylinos.cn> - 5.6.0-9.p01
changelog:
  -Type:bugfix
  -ID:[任务#117911]
  -SUG:NA
  -DESC:fixup SIGSEGV crash & add kunpeng920 support & add hygon cpu support


author: hy-euler <eulerstoragemt@huawei.com> - 3.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: delete -Sgit in 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-Switch-gpt-header-move-and-msdos-overlap-to-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/6000-add-support-of-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/9000-Add-extra-judgment-for-a-partition-created-success.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/9001-bugfix-parted-fix-failure-of-mklabel-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/9002-Fix-end_input-usage-in-do_resizepart.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/9003-parted-remove-patch-which-modifid-cyl-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: wanghao <wanghao2@kylinos.cn> - 0.80-9.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  -         add patch: passwd-0.80-add-security-check.patch


author: hy-euler <eulerstoragemt@huawei.com> - 3.6.2-5
changelog:
  - Type:enhancemnet
  - ID:NA
  - SUG:NA
  - DESC:add fedora patches for displaying more information while running lspci


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-pcsc-lite-change-to-use-python3-for-pcsc-spy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-Do-not-possibly-lock-a-reader-if-allocating-hCard-fa.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-a-hang-in-SCardTransmit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-ATRDecodeAtr-always-initialize-the-return-values.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-EHUnregisterClientForEvent-correctly-handle-EHTryToU.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Shen Yangyang <shenyangyang4@huawei.com> - 4:5.28.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete provide of perl-macros that actually provided by openEuler-rpm-config


author: wanghao<wanghao2@kylinos.cn> - 4:5.28.3-7.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec执行控制检查
  -         add patch: perl-5.28.3-add-kysec-exectl-check.patch


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: Paul Howarth <paul@city-fan.org> - 2.33-25
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Make %files list more explicit


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: shenyangyang <shenyangyang4@huawei.com> - 2.066-2
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:delete the /certs that used by test which contains the Unencrypted
         private key


author: shenyangyang <shenyangyang4@huawei.com> - 1.88-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl-Test-Warn and perl-Test-Exception


author: shenyangyang <shenyangyang4@huawei.com> - 0.35-420
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(Test::Portability::Files) 
         and perl(Test::Pod::Coverage)


author: Paul Howarth <paul@city-fan.org> - 0.16-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: shenyangyang <shenyangyang4@huawei.com> - 0.625-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(IO::Scalar) and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 2.29-398
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(BSD::Resource) 
         perl(Import::Into) >= 1.002004 and perl(Sub::Identify)


author: Ruzhao Zhu <zhuruzhao@kylinos.com> - 4.10.1-4.1
changelog:
  - modify spec: define __cmake3 as 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection  -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection  -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro   -Wl,-z,now -specs=/usr/lib/rpm/kylin/kylin-hardened-ld}" ; export LDFLAGS ; 
    /usr/bin/cmake \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON instead of \


author: liwenchong<liwenchong@kylinos.cn> - 1.1.0-5.p01
changelog:
  - Type:update
  - ID:[Task#74108]
  - SUG:NA
  - DESC:pinentry-1.1.0-5 package dep gtk2 and gtk3 ,plit out pinentry-gtk pinentry-gnome3 package


author: Lzhichao<zhichao.liu@cs2c.com.cn> - 1.16.2-1.4
changelog:
  - add patch:0004-cs2c-pluma-Complete-the-non-chinese-content-of-the-help-documen.patch
  - Complete the non-chinese content of the help document


author: xuhe <xuhe@kylinos.cn> - 0.9.5-2.p01
changelog:
  - Rebuild for Kylin
  - Migrates patch from v10sp2 to v10sp3 to fix default theme on FT-1500A platform


author: mengchaoming<mengchaoming@kylinos.cn> -3.1-7.p01
changelog:
  -Type:bugfix
  -ID:14829
  -SUG: Language Sinicization
  -DESC:sp2 patch to sp3:0001-Kylin-policycoreutils-2.8-14.2-kylin-fix-bug-14829.patch


author: panxiaohe <panxiaohe@huawei.com> - 0.116-9
changelog:
  - Fix CVE-2021-4034

  - Tue Jun 22 2021 Hugel <gengqihu1@huawei.com> - 0.116-8
  - Port polkit to mozjs78


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: xuwei<xuwei58@huawei.com> - 3.3.15-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:top: don't mess with groff line length in man document
        top: add another field sanity check in 'config_file()'
        top: prevent buffer overruns in 'inspection_utility()'
        docs: Tidying of ps,kill and skill manpages
        library: avoid problems involving 'supgid' mishandling
        w: Prevent out-of-bounds reads in
        w: Clamp maxcmd to the MIN/MAX_CMD_WIDTH range.
        vmstat: getopt*() returns -1 when done, not EOF.
        vmstat: Replace memcmp() with strncmp().
        vmstat: Check return values of localtime() and
        vmstat: Prevent out-of-bounds writes in new_header()
        top: the '#define PRETEND2_5_X' was found to be broken
        procio: use the user-supplied delimiter to split large
        procio: fix potential out-of-bounds access when write
        sysctl: do not report set key in case `close_stream`


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: shenyangyang <shenyangyang4@huawei.com> - 12.2-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add provides of pulseaudio-libs-devel(aarch-64) needed by libmikmod-devel


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.2.3-1
changelog:
  - Move test for unsigned packages with pkgset_koji_scratch_tasks to PkgsetPhase
    class. (jkaluza)
  - Allow building compose with scratch builds defined by
    `pkgset_koji_scratch_tasks`. (jkaluza)
  - createrepo: Allow making productid glob stricter (lsedlar)
  - docs: Remove outdated note (lsedlar)
  - createrepo: Add extra modulemd files to the repo (lsedlar)
  - pkgset: handle exception when using dogpile cache (hlin)
  - notification: Add compose_path into the messages (hlin)
  - gather: handle mirrorlist in kickstart (frederic.pierret)
  - Allow only creating unified ISO for specified arch (hlin)
  - docs: update doc for gather_lookaside_repos option (hlin)
  - Include the output of getisoimage in the error message (hlin)
  - tests: Patch time in CTS related tests (lsedlar)
  - Allow using Pungi Koji plugin for ostree phases. (jkaluza)
  - Allow getting the compose id from CTS (Compose Tracking Service). (jkaluza)
  - Fix flake8 issues (lsedlar)
  - Optimize the _link_file function to not call os.stat redundantly. This will
    eliminate 2 calls to os.stat per one invocation of the _link_file function.
    Assuming during the compose build 50000 files are linked, this change will
    eliminate 100000 redundant calls to os.stat. (bkhomuts)
  - doc: explain sigkey behavior (kdreyer)
  - doc: explain tradeoffs with pkgset_allow_reuse (kdreyer)
  - doc: fix grammar for pkgset_allow_reuse setting (kdreyer)
  - Support --skip-branding option in lorax (hlin)
  - docs: Embed phases.svg directly (hlin)
  - Execute image_checksum phase right after the dependent phases (hlin)


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: Paul Howarth <paul@city-fan.org> - 2.4.3-1
changelog:
  - Update to 2.4.3
    - Fix Ed25519 key handling so certain key comment lengths don't cause
      'SSHException("Invalid key")' (GH#1306, GH#1400)
    - Add support for the modern (as of Python 3.3) import location of
      'MutableMapping' (used in host key management) to avoid the old location
      becoming deprecated in Python 3.8


author: yefei <yefei25@huawei.com> - 18.0-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:  add bash completion and repair python2 interpreter path


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 0.6.7-1
changelog:
  - Update to 0.6.7 (#1609253).
  - https://dogpilecache.readthedocs.io/en/latest/changelog.html#change-0.6.7


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.16-25
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Reversed "Removed Python 2 bindings"


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-3
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: hanxinke<hanxinke@huawei.com> - 3.7.9-12
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:expose posix_spawn in os module
         fix leaks and errors in new os.posix_spawn
         improve error handing and fix a reference
         fix using of freed memory in old versions
         add signal.valid_signals
         make the sigset_t converter available
         add flag capabilities to posix_spawn
         pass os.environ in test_posix test_specify
         fix TestPosixSpawn.test_close_file
         change the file_actions parameter of os.posix_spawn
         subprocess uses os.posix_spawn in some case
         add os.posix_spawnp
         subprocess can use posix_spawn with pipes
         subprocess close pipes fds by using ExitStack
         guard definition of convert_sched_param with POSIX_SPAWN_SETSCHEDULER
         add setsid parameter to os.posix_spawn() and os.posix_spawnp()
         skip test_start_new_session() of posix_spawn
         fix function name in os.posix_spawnp() errors
         ensure os.posix_spawn() handles None
         rewrite setsid test for os.posix_spawn
         add user and group parameters to subproces
         fix buildbot failures
         posix_spawn doesn't support uid gid
         add umask support to subprocess
         use bin true in test_subprocess
         handle the case when there is no 'true' command
         fix test_subprocess if nobody user doesn't exist
         subprocess: Use vfork() instead of fork() on Linux when safe
         subprocess: Fix handling of pthread_sigmask() errors
         allow setsid() after vfork() on Linux
         fix memory leak in subprocess.Popen() in case of uid/gid overflow
         Unify cleanup in subprocess_fork_exec()


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Use gdbm_count for dbm_length if possible
         Don't override PYTHONPATH which is already set by the user


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: wanghao<wanghao2@huawei.com> - 3.7.9-18.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#104619]
  - SUG:NA
  - DESC: python3添加kysec检查
  -         add patch: Python3-judge-python-file-run.patch


author: wanghao<wanghao2@huawei.com> - 3.7.9-18.se.03
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python3加-c或者-m参数时kysec无法管控的问题
  -         add patch: python3-fix-parameter-c-or-m-kysec-exectl.patch


author: <jdennis@redhat.com> - 2018.10.15-3
changelog:
  - Resolves: rhbz#1659132 Incorrect location used for system certs
    where() now returns /etc/pki/tls/certs/ca-bundle.crt


author: Miro Hrončok <mhroncok@redhat.com> - 2.39-14
changelog:
  - Subpackage python2-distutils-extra has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.14.1-18
changelog:
  - Subpackage python2-fasteners has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: Kevin Fenzi <kevin@scrye.com> - 2.0.0-7
changelog:
  - Review fixes: drop python3 dep, Update obsoletes, add python_provide
  - Review fixes: Use pypi_source, fixed files globbing.


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: Rex Dieter <rdieter@fedoraproject.org> - 2.11.2-2
changelog:
  - cleanup, fix qsci docs and %check logic
  - include python dist-info for qt5 builds
  - drop python2 on f31+ for now due to FTBFS


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-4
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.2-9
changelog:
  - Subpackage python2-xlwt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.2-9
changelog:
  - Subpackage python2-xmltodict has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: wangguochun <wangguochun@kylinos.cn>
changelog:
  - Type:updated
  - ID:[任务#74236][BUG#112771]
  - SUG:NA
  - DESC:
  add patch KYLIN-virt-qemu-enable-qxl-for-aarch64.patch
  KYLIN: virt/qemu: enable qxl for aarch64
  - add patch change_cipher_name_from_sm4-128_to_sm4.patch
  Change the cipher name from sm4_128 to sm4
  - add patch support_sm4_encrypted_disk.patch
  Add sm4 disk encryption function
  - add patch KYLIN-virt-qemu-remove-the-useless-virtio_gpu_proces.patch
  After long-term tracking, no new command was found to be processed during the poll, so it was deleted to reduce the call overhead.
  - add patch H264-ENCODING-SUPPORT
  1) Add h264-encoding-support to qemu
  2) Support for the video codes parameter in the - Spice configuration item is added to QEMU. You can enable the H264 encoding of spice by setting the parameter to gstreamer:h264;
  3) Eg. -spice image-compression=auto_glz,jpeg-wan-compression=always,streaming-video=filter,video-codecs=gstreamer:h264
  - add KYLIN-Virtio-GPU-Spice-Display-Optimization.patch
  When the QEMU virtual machine uses virtio-gpu and spice protocol to send the cloud desktop to the remote end, the remote cloud desktop will tear the screen when dragging the window, affecting the user experience.In addition, the QEMU virtual machine based on virtio-gpu cannot successfully trigger the video streaming mode of spice server when playing video
  The reason for the above problem is that when QEMU processes the frame picture of virtio GPU, in order to reduce data transmission, it will only transmit the changed image area, resulting in multiple image segments with a width of 32 pixels in one frame picture
  This patch is dedicated to the following functions:
  1) Integrate the image segments generated for the same frame in QEMU. Under the condition of ensuring little change in the amount of image transmission data, integrate the image segments generated for the same frame into one or two image segments and send them to spice as far as possible, so as to avoid the image fragmentation problem of cloud desktop
  2) When QEMU virtual machine plays video, it forms image segments with stable size and position and sends them to spice to ensure that the video streaming mechanism of spice server can be triggered
  - add patch KYLIN-virt-qemu-optimize-the-interval-of-fence-poll-.patch
  The fence poll timer's timeout period is fixed at 10ms, which is too long
  for modern high-performance graphics cards and will cause performance loss.
  Here, an incremental time interval is used instead to improve the rendering
  efficiency of the virtio gpu.
  - add patch KYLIN-virtio-gpu-fix-spelling-mistakes-in-virtio_gpu.patch
  Fixed misspelling of function names: qemu_clock_get_ms modified to qemu_clock_get_ns
  - add patch KYLIN-Virtio-Gpu-Optimization.patch
  This patch is used to optimize the remote performance of virtio-gpu based on EGL headless, and the main idea is to reduce the impact of calling the glReaPixels function on the performance of the host GPU
  1) Synchronized dpy_refresh function and dpy_gl_update function ensures that a new image to be updated is generated through the dpy_gl_update function only after the dpy_refresh function has sent the previous image to the spice server.In this way, the number of calls to glReaPixels can be reduced;
  2) The area where the image may change in the next frame is predicted, so that only the image data of the area where the image may change is read into the memory from the video memory. This reduces the amount of image data that needs to be copied from video memory to memory each time glReaPixels is called
  - add patch KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix.patch KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix-2.patch
  1) KYLIN-Virtio-Gpu-Optimization.patch can improve the performance of virtio GPU,but it has a bug:when the resolution of the virtual machine is switched, the virtual machine may crash
  2) This patch is used to fix the crash problem during resolution switching
  - add patch KYLIN-virt-qemu-enable-sync-thread-for-virglrenderer.patch
  Enable the synchronization thread to improve the rendering efficiency of virglrenderer
  - add patch KYLIN-virt-qemu-add-more-fence-polling.patch
  Since synchronous threads are enabled, the cost of fence poll becomes very low, so we can poll fence in more places
  - add patch KYLIN-virt-qemu-create-fewer-fences-in-virtio-gpu.patch
  Considering that the creation and polling of fences are relatively expensive, so each time the command queue is processed, only one fence is created at most.
  - add patch KYLIN-virt-qemu-move-gui_update-to-a-separate-thread.patch
  The gui_update() function is very time-consuming and will seriously affect the operation of the qemu timer subsystem. Since the processing of the timer subsystem and the virtual device is located in the main thread, it also affects the response speed of the virtual device.
  - add patch KYLIN-virt-qemu-remove-repeated-context-switching-fo.patch
  The SUBMIT_3D command internally switches the context by itself,which can be simplified here.


author: wangguochun <wangguochun@kylinos.cn>
changelog:
  - Type:updated
  - ID:[任务#74236]
  - SUG:NA
  - DESC:
  - add patch 0001-KYLIN-0001-KYLIN-VIRTIO-GPU-Optimization-2.patch
  1) This patch aims to further improve the 3D performance of virtiogpu
  2) The changes include:
          a.When qemu received VIRTIO_GPU_ CMD_ SUBMIT_3D command, if the command length does not exceed the size of an IOV, the data in the IOV will no longer be copied to the buf, but directly point the *buf to the IOV, so as to reduce the data replication overhead during command execution
          b.By analyzing the 3D command, the screen area refreshed in this frame is obtained, so that when outputting the screen picture in each frame, there is no need to obtain the screen area to be refreshed by comparing the data difference between the previous and subsequent frames, so as to reduce the CPU overhead. In addition, when calling glreadpixels to obtain the frame cache picture, the obtained screen area can also be used to reduce the amount of frame cache picture data that glreadpixels needs to copy, further reducing the GPU overhead of glreadpixels
          c. Change the initial timing call time of virtio_gpu_virgl_fence_poll command to 1US to ensure that the execution of 3D command can be fed back in time
  3) by this patch,the 3D performance of virtiogpu can be improved by about 10%
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Resolution-Bug-Fix-3.patch
  1) the processing steps of function egl_fb_read are adjusted.
  2) the new process is more reasonable,and can solve the programe of
  system crash when entering the commandline display(by ctrl+alt+F1)
  - add patch 0001-KYLIN-Virtio-GPU-Optimization-Bug-Fix-FOR-KYLIN-SERV.patch
  1) The previous virtio GPU optimizations were based on the desktop version of kylin system, when applied to the server version of Kirin system, there will be problems that the screen refresh is not timely and the output screen size cannot be changed.
  2) The reason for the above problems lies in the difference between the desktop graphics processing mechanism of the server version and the desktop version: each refresh of the desktop version is the whole desktop, so one of the optimization measures is to analyze and obtain the actual refresh area from the 3D command; The refresh operation of the server version is to directly send the actual refresh area to virtio GPU, so it needs to be handled differently.so in egl-headless, when egl_scanout_flush find that the flush area is not the whole desktop,it will call change_update_rect to update rect area.
  3) In addition, this bugfix also fixes an error in scanout operation, which will lead to the inconsistency between the screen area recorded by virtio GPU and the actual screen area, resulting in the problem of the screen size presented by the client


author: weishaokun <weishaokun@kylinos.cn>
changelog:
  - Type:updated
  - ID:[BUG#121211]
  - SUG:NA
  - DESC:Edk2 must be used when creating virtual machines. add ifarch aarch64 Requires: edk2-aarch64; add ifarch x86_64 Requires: edk2-ovmf.


author: lijunwei <lijunwei@kylinos.cn> -2:4.1.0-63.p05
changelog:
  - Type:update
  - ID:[BUG#132317]
  - SUG:NA
  - DESC:Enable fdt And add BuildRequires libfdt-devel to fix ifarch x86_64 can not start vm with virtio-gpu


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p12
changelog:
  - Type:bug
  - ID:[BUG#135672]
  - SUG:NA
  - DESC: Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28)


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p13
changelog:
  - Type:	bug
  - ID:	[BUG#143805]
  - SUG:	NA
  - DESC: Bugfix. When the virtual machine is restarted repeatedly, it may cause qemu-kvm crash.


author: weishaokun <weishaokun@kylinos.cn> -2:4.1.0-63.p14
changelog:
  - Type:bug
  - ID:[BUG#132317]
  - SUG:NA
  - DESC:Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p04
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: liwenchong <liwenchong@kylinos.cn> - 4.9.2-4.p02
changelog:
  - Type:bugfix
  - ID:BUG#131963
  - SUG:NA
  - DESC:fix bug#131963 rebuild in tag v10-sp3;
  -      add llvm version differentit for make error.


author: openEuler Buildteam <buildteam@openeuler.org> - 5.11.1-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Delete the dependency include qt5-qt3d qt5-qtenginio-devel qt5-qtwebkit-devel


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: Yeqing Peng <pengyeqing@huawei.com> - 6.5-1
changelog:
  - since 6.6, jitterentropy-library is independed from rng-tools,
    no any entropy source will lead to rng-tools service fail.


author: yueyuankun<yueyuankun@kylinos.cn> - 8.2006.0-7.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - DESC:solve the problem of duplicate logs in /var/log/messages after restarting the system


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.04
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220608.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.05
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug
  -       添加补丁security-reinforce-update-20220615.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[TASK#97459]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0707）
  -	修正上一个版本遗留的bug，包括密码有效期对root生效，普通用户也有操作模板权限等
  -       添加补丁security-reinforce-update-20220707.patch


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-se.07
changelog:
  - Type:update
  - ID:[TASK#90956]
  - SUG:NA
  - DESC: 修正上一个版本遗留的bug,包括加固与还原项数不一致的bug，适配新版kysec的接口等
  -       添加补丁security-reinforce-update-20220713.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.08
changelog:
  - Type:update
  - ID:[TASK#100149]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0721）
  -	修正上一个版本遗留的bug,包括密码期限还原失效，gsetting加固未生效，其权限用户无法操作模板等bug
  -       添加补丁security-reinforce-update-20220721.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.09
changelog:
  - Type:update
  - ID:[TASK#99843][Bug#134347][Bug#134228][Bug#130320][Bug#119204][Bug#132763]
  - SUG:NA
  - DESC: 安全加固命令行功能优化
  -       修复security-reinforce 帮助手册与实际不符的问题
  -       修复还原操作，界面与命令行上次操作结果内容不一致的问题
  -       修复单字母用户名的用户不适用口令更改最小间隔天数策略的问题
  -       修复加固后的完成加固项数与还原后的上次加固项数不一致的问题
  -       修复选择模板后返回时提示无效的选项请重新选择的问题
  -       添加补丁security-reinforce-update-20220811.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.10
changelog:
  - Type:update
  - ID:[TASK#105459][Bug#135048][Bug#134148][Bug#133979][Bug#135646][Bug#129410]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0818）
  -       【安全加固】【终端命令】default模式root用户只能扫描无法加固
  -       【安全加固】【终端命令】三级项范围与全部项一样
  -       【安全加固】【终端命令】扫描过程中是用快捷键ctrl+d，扫描继续且异常
  -       【安全加固】【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       【安全加固】【系统设置】安全加固后系统ctrl+alt+del组合键未禁用
  -       添加补丁security-reinforce-update-20220818.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.11
changelog:
  - Type:update
  - ID:[TASK#108128][Bug#136311][Bug#136809][Bug#135646][Bug#136207]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0907）
  -       调整阻止root通过telnet登录的加固方法
  -       【安全加固】【终端命令】多个用户开启终端命令，其中一个进行扫描\加固\还原时，其他用户终端会同步输出
  -       【安全加固】【终端命令】命令行选择模板后无提示信息并且模板菜单连续出现两次
  -       【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       调试 strict模式下，cvs服务未禁用加固项加固失败
  -       修改vsftp禁止root登录的加固方法，将配置文件/etc/ftpusers修改为/etc/vsftpd/ftpuser
  -       将用到vector的类在每次扫描前进行情况操作，放置获取的是之前扫描的数据
  -       修复日志文件非全局可写加固测试，日志文件权限都为600时依旧需要加固的bug
  -       psacct判断服务修改与grub判断修改 
  -       安全加固sp1\sp2\sp3同源改造
  -       添加补丁security-reinforce-update-20220906.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.12
changelog:
  - Type:update
  - ID:[Bug#122949][Bug#129235]
  - SUG:NA
  - DESC:
  -     【安全加固】【密码强度】密码复杂度策略检测--加固后需要四种字符类型可以修改成功
  -     【安全加固】【密码强度】密码复杂度策略安全加固后未恢复最佳策略
  -      同步主机加固安全bug，将硬盘所有分区修改为根分区使用率的扫描
  -      同步主机加固安全bug，修复最小口令长度加固无效bug
  -      同步修复v10问题
  -      添加补丁security-reinforce-update-20221009.patch


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.05
changelog:
  - 修复安全切换之后，grub.cfg的中文变英文的bug
  -   add patch: security-switch-fix-bug-of-Chinese-to-English-in-grub.cfg.patch 
  - 开启三权分立时，不允许非root用户修改主机名
  - 开启三权分立时，允许用户断开、链接网络
  -   add patch: security-switch-allow-user-connection-network-and-no-hostname.patch
  - 开启三权分立时，允许secadm打开防火墙应用配置
  -   add patch: security-switch-firewall-configuration.patch
  - 执行 security_switch --get 时不写 /etc/security_custom.conf 文件
  - 修改 /etc/security_custom.conf 文件权限为0644 --spec文件
  -   add patch: security-switch-not-write-custom-mode-when-get-security.patch
  - 不允许同时启用selinux和apparmor
  -   add patch: security-switch-not-allow-enable-selinux-and-apparmor.patc
  - 解决普通用户可以通过开始菜单右键选择卸载系统应用
  -   add patch: security-switch-polkit-for-kylin-uninstaller.patch
  - 添加切换失败后回滚操作
  -   add patch: security-switch-add-retroversion-when-switch-failed.patch
  - security-switch取消能切换到同时开启selinux和apparmor的限制
  -   add patch: security-switch-allow-enable-selinux-and-appa.patch
  - Bug：#71255
  - 关闭安全后写状态值到状态文件中
  -   add patch: security-switch-echo-0-into-status-after-disable-kysec.patch
  - Bug:  #93603
  - 未开启三元时，安全中心修改密码有效期时不修改root、secadm、audadm密码过期时间；
  - 开启三元时需根据系统配置，设置三元用户密码过期时间；
  - 关闭三元时，设置三元用户密码不过期
  -   add patch: security-switch-set-sp_warn-and-sp_max-when-change-adm3.patch
  - Bug:  #93603
  - 修改密码过期时间前先检查用户是否存在
  -   add patch: security-switch-check-user-when-chage_spwd.patch
  - 同步桌面补丁到：1.2.7-21kylin


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.06
changelog:
  - 添加kysec_tpm配置
  -   add patch: security-switch-add-kysec-tpm.patch
  - 修改tpm获取状态的函数
  - 删除kysec-auth的检查
  -   add patch: security-switch-fix-tpm-getstatus-and-del-kysec-auth.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.09
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:彻底删除auto-resetpw选项
  -      添加补丁security-switch-delete-auto-resetpw-completely.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: Han Shuang <hanshuang@kylinos.cn> - 2.0-1.50.p02
changelog:
  - Add Cancel_etc_grub.d_00_header_superusers_password_pbkdf2.patch
  - modify etc_grub.d_00_header cancel superusers_password_pbkdf2 logout fn_harden_grub2 function


author: mengchaoming <mengchaoming@kylinos.cn> - 2.0-1.50.p03
changelog:
  - Type:bugfix
  - ID: NA
  - SUG: do not create allow file while the command does not exist
  - DESC:sync from 2.0-1.75 patch:do-not-create-allow-file-while-the-command-does-not-.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.05
changelog:
  - Type:update
  - ID:[task#89746] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - 增加补丁,增加/etc/kysec/db/whlist.db的策略·
  - add patch:  add-whlist-db.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.06
changelog:
  - Type:update
  - ID:[task#89746] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - 增加补丁,适配kysec命令行 增加kysec-module进程适配·
  - add patch:  add-kysec-module.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.07
changelog:
  - Type:update
  - ID:[task#89746] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - 增加补丁,安全中心进程适配·
  - add patch:  add-security-reinforce.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.08
changelog:
  - Type:update
  - ID:[task#89746] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - 增加补丁,安全中心与dbus适配&安全模式状态设置·
  - add patch:  modify-security-reinforce-dbus.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.09
changelog:
  - Type:update
  - ID:[task#89746] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - 增加补丁,chpolicy适配新需求·
  - add patch:  modify-chpolicy-ukmcs.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.10
changelog:
  - Type:update
  - ID:[bug#123656] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - add patch: selinux-policy-disable-reboot-and-shutdown.patch
  - DESC:disable cmd reboot and shutdown for user secadm/auditadm
  - add patch: modify-kysec-reinforce-for-user.patch
  - DESC:添加user对安全加固的扫描,以及kysec修改适配


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.11
changelog:
  - Type:update
  - ID:[bug#134735] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - add patch:modify-ksc-reinforce.patch
  - DESC:修改ksc-defender启动慢和安全加固服务自启问题。
  -  修改ukmcs，targeted，与ukmls的配置文件,不同模式的模块适配。


author: hanhuijie <hanhuijie@kylinos.cn> - 3.14.2-76.se.12
changelog:
  - Type:update
  - ID:[bug#135567] 
  - SUG:NA
  - DESC: 安全策略bug修复（提交集成相关build）
  - add patch:selinux-policy-forbid-systemctl.patch
  - DESC:禁止非root 启停service服务;禁止非auditadm启停auditd服务. 
  - add patch:modify-security-reinforce.patch
  - DESC:增加安全加固适配权限。
  - add Patch60: selinux-policy-security-reinforce-account.patch:
  - DESC:136081 【安全加固】【风险账号】strict模式下，删除与设备运行、维护等工作无关的账号加固失败


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.13
changelog:
  - Type:update
  - ID:[bug#136024] 
  - SUG:NA
  - DESC: chpolicy切换ukmls后，无法重启问题。安全中心配置问题;strict模式下ssh无法连接问题。
  - add patch:chpolicy-ukmls-start.patch
  - DESC: 139507 【管理员分权】开启strict模式后无法ssh远程连接
  - DESC: 135559 【管理员分权】secadm，root修改安全中心对应配置失败
  - DESC: 135274 【安全模块状态设置】strict模式设置ukmls后查看状态显示段错误

  - add Patch62: selinux-policy-sudosu-auditd.patch
  - DESC: 135593 【安全审计】修改删除audit.log后日志为空
  - DESC: 141470 【selinux】selinux策略影响sudo su 以及reboot命令，无法找到命令


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.14
changelog:
  - Type:update
  - ID:[bug#138434] 
  - SUG:NA
  - DESC: 138434 【安全模式切换】只开启selinux时安全模式切换失败
  - add Patch63: selinux-policy-ss-tty.patch
  - DESC: 135378 【管理员分权】tty登录失败
  - DESC: 139759 【日志查看器】【strict模式】审计管理员打开日志查看器，日志内容显示为空
  - DESC: 142072 【安全模式切换】终端命令从strict模式切换none模式失败
  - DESC: 142075 【安全模式切换】终端命令从strict模式切换到default模式失败


author: haowenchao <haowenchao@huawei.com> - 1.45-4
changelog:
  - Fix grammar problems caused by patch
    0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.45-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-sg3_utils-1.37-rescan-scsi-findremapped-enhance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-sg3_utils-1.37-rescan-downpress.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-bugfix-sg3_utils-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-sg3_utils-fix-memset-coredump.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-sg3_utils-rescan-scsi-bus-list-all-LUNs-in-one-line.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-fix-bash-syntax-error-and-format-output.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-add-skiptype-shell-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hexiaole <hexiaole@kylinos.cn> - 1.45-7.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 
  - Patch6:0006-fix-bash-syntax-error-and-format-output.patch:fix bash syntax error and format output from 1.45-0.p01:9004-sg3_utils-1.45-fix-shell-syntax-error.patch
  - Patch7:0007-add-skiptype-shell-option.patch:add skiptype shell option from 1.45-0.p02:10002-add-skip-specified-devices-option.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.02.p01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.03.p01
changelog:
  - Type: bugfix 
  - ID: [BUG#136126]
  - SUG:NA
  - DESC: useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch


author: Xiao Zai <xiaozai@kylinos.cn> - 15-21.p01
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: remove the "BuildArch: noarch" for subpackage debuginfo and debugsource


author: Xiao Zai <xiaozai@kylinos.cn> - 15-21.p02
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: replace BOOTAA64.CSV and BOOTX86.CSV in order to Fix bug that bios using label named "openEuler"


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 1:6.6-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:os_linux.cpp/os_netbsd.cpp: fix crash on --scan if WITH_NVME_DEVICESC is not set and '-d <type>' is not specified
         ataprint.cpp: Fix detection of Device Statistics log with 256 sectors (#922)
         drivedb.h: - Western Digital Red: WD80EZZX - USB: WD
         update-smart-drivedb.in: Include configured PATH in help and error messages
         os_linux.cpp: Add missing braces to 3ware SELinux code
         drivedb.h: fix Innolite Satadom D150QV entry (#939)
         os_freebsd.cpp: on error was setting set_nvme_err() to 1
         os_linux.cpp: Fix device scan crash on missing /proc/devices
         smartd.cpp: Always ignore failure of ATA SMART ENABLE command if
         os_linux.cpp: Fix '-d megaraid' open crash on missing /proc/devices
         os_darwin.cpp, os_freebsd.cpp: fix return value in error paths
         ataprint.cpp: Fix Form Factor string with bits set in reserved area
  - Package init


author: openEuler Buildteam <buildteam@openeuler.org> - 1:6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the "-q never" option while executing smartd command in smartd.service


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: fu.lin <fulin10@huawei.com> - 5.6-2
changelog:
  - build: fix build error when the strace is builded in the environment with io_uring feature kernel devel package


author: openEuler Buildteam <buildteam@openeuler.org> - 1.4-23
changelog:
  - Modify spec error information

   Sat Sep 07 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.4-22
  - Package init


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-fix-error-func-call.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: hexiaole <hexiaole@kylinos.cn> - 2.1.0-32.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:0010-fix-error-func-call.patch:fix error func call from backport patch based on sysfsutils-2.1.1


author: Jun Zhang <jun.zhang@cs2c.com.cn> - 1.0.9-7.3
changelog:
  - add patch:0001-system-config-users-docs-cs2c-update-companyName-to-NeoKylin.patch
  - fix bug#40722 remove red hat and update Project name to NeoKylin


author: caiyinan <caiyinan@kylinos.cn> - 243-55.p01
changelog:
  -- add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
     Change NTP server.
  -- add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
     Modify ctrl+alt+F2 switch to init5 stuck problem
  -- add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
     fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: wanghao <wanghao2@kylinos.cn> - 243-55.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 修复了当LSM堆叠启用时systemctl的selinux拒绝错误
  -         add patch: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p02.se.01
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p04.se.01
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          Remove gnu-efi check in loongarch64


author: Li Mingle <limingle@kylinos.cn> - 243-55.p04.se.01.ws
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC: prevent unprivileged user from executing reboot operation


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: Shi Jingying <shijingying@kylinos.cn> - 1.10.1-5.p01
changelog:
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error
  - add patch 102: tigervnc-1.10.1-kylin-xstart1.patch
  - the autokill parameter cannot creat port


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 0.6-2
changelog:
  - The"cc:No such file or directroy"error message is displayed during compilation.Therefore,add buildrequires gcc.
    The macro unitdir is used.Therefore,add buildrequires systemd


author: wangjie<wangjie294@huawei.com> -1.4.48-15
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependency on the help package from requires to recommends


author: Yue Jiayuan <yuejiayuan@kylinos.cn> - 5.0-3.p02
changelog:
  - Type:update 
  - ID:[84598]
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-1.p01
changelog:
  - Type:update
  - ID:84598
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: Shi Jingying <shijingying@kylinos.cn> -p56
changelog:
  - Type: bugfix
  - ID  : [Task#85456]
  - SUG : NA
  - DESC: split package tuned-utils-systemtap, reduce main package installation dependencies


author: wangziliang <wangziliang@kylinos.cn> - 2.10.0-9.p02
changelog:
  - ID  : [Task#98746]
  - DESC: add the tuned profile sbm-performance, optimize filesystem and network performance
  -         add patch: added-new-profile-containing-optimizations-for-filesystem-and-network.patch


author: weiqingsong <weiqingsong@kylinos.cn> - 2.10.0-9.p03
changelog:
  - ID  : [Task#98746, BUG#120071]
  - DESC:
  	1.add disk IO optimization to sbm-performance profile, optimize disk IO performance
  	add patch: add-disk-IO-optimization-to-sbm-performance-profile.patch
  	2.add jvm flag UseNUMA, optimize jvm performance
  	add patch: add-jvm-flag-UseNUMA.patch


author: yueyuankun<yueyuankun@kylinos.cn> - 2021e-1.p02
changelog:
  - Type:bugfix
  - ID:bug#12793,task#74110
  - SUG:NA
  - DESC:Change Urumqi to the time in Eastern District 8


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.5-1
changelog:
  - update to 1.3.5
  - update upstream location
  - include SO version in files list to avoid unexpected bumps
  - use modern macros
  - drop obsolete comments


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch21 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p25
changelog:
  - Type: bugfix
  - ID  : [Bug#128021]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-1.2.1-kylin-Prevent-failure-to-connect-to-xserver.patch
          修复因无法连接xserver而出现的登录界面键盘输入后闪屏问题.


author: huayadong<huayadong@kylinos.cn> -p26
changelog:
  - Type:bugfix
  - ID  :[Bug#137537]
  - SUG :NA
  - DESC:add patch24:ukui-greeter-1.2.1-kylin-prompt-for-password-expiration.patch


author: huayadong<huayadong@kylinos.cn> -p27
changelog:
  - Type:bugfix
  - ID  :[Bug#158569]
  - SUG :NA
  - DESC:add patch25:ukui-greeter-1.2.1-kylin-Add-login-status-detection-function-for-users-with-the-same-UID.patch
         为具有相同UID的用户添加登录状态检测功能，在用户列表合并显示相同UID用户


author: huayadong<huayadong@kylinos.cn> -p28
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch26:ukui-greeter-1.2.1-kylin-fix-crash-with-the-same-uid-user.patch


author: huayadong<huayadong@kylinos.cn> -p29
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch27:ukui-greeter-1.2.1-kylin-fix-the-problem-that-the-users-avatar-of-the-same-uid-is-not-centered.patch


author: huayadong<huayadong@kylinos.cn> -p30
changelog:
  - Type:bugfix
  - ID  :[Bug#164455]
  - SUG :NA
  - DESC:add patch28:ukui-greeter-1.2.1-kylin-increase-name-label-height.patch


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


author: chenyanpanHW <chenyanpan@huawei.com> - 012-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-usbmisc-initialize-string-buffer-before-reading-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-sys-bus-usb-devices-dir-format-is-a-b.c-modify-read_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 012-5.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Backport one patch to solve kylin BUG#4342:lsusb display usb device error


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: lizhanchun <lizhanchun@kylinos.cn> 2.2.1-2.15
changelog:
  - Type:	update
  - ID:	BUG#114583
  - SUG:	NA
  - DESC:	KYLIN-add-default-device-on-aarch64-when-inst-vm.patch 
  -		add default device on aarch64 when inst vm.


author: wangdi <wangdi@kylinos.cn> - 2.2.1-2.16
changelog:
  - Type: update
  - ID:   BUG#129269
  - SUG:  NA
  - DESC: KYLIN-fix-virt-install-error-message-zh_CN-translation.patch 
  -               fix redundant characters in virt-install error message zh_CN translation.


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2.30-2.p01
changelog:
  - working on sp3, merge the following two patches from sp2
  - patch:0001-remove-taiwan-sheng-language.patch by lvfei
  - patch:xkeyboard-config-2.30-kylin-fixbug-54226.patch from by yuankun
  - remove unknown character and modify some po


author: Zhenneng Li <lizhenneng@kylinos.cn> - 19.1.0-1.p02
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p03
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: chengguipeng<chengguipeng1@huawei.com> - 7.7-29
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly X11 cannot support keycodes above 255


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


