# changelog

author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.24.v2505
changelog:
  - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [task:659317] {CVE-2026-64531}


author: Jackie Liu <liuyun01@kylinos.cn> - 1.0-1
changelog:
  - inject: add missing -h args
  - filesnoop: fix crash when -o OPEN
  - Add dbstat support
  - Add ustat support
  - Add inject support
  - tcplinks: fix typo for helps
  - Add icstat support
  - memleak: Tiny fixes
  - memleak: Fix memory leak
  - Fix memory leak when using getline()
  - dbslower: Fixes build errors caused by uninitialized variables in bpf program
  - Add dbslower support
  - Add ugc support
  - Add mysqld-qslower support
  - javagc: fix some attach errors
  - Add uflow support
  - ucalls: Correct 'phpccalls' to 'phpcalls'
  - Add cachetop support
  - biotop/filetop: Fix 'count' print count
  - Add get_uid_name() implementation
  - Add trace support
  - Display UID in username format
  - libbpf-tools: update arm vmlinux with missing perf_event, BPF_PROG_TYPE_PERF_EVENT
  - setuids: rename UID to SU_UID
  - filegone: convert errno to error string
  - filegone: Increase the buffer for filename
  - filegone: Add return code support
  - Expand the print width of pid
  - libbpf-tools/filelife: Check btf struct field for CO-RE
  - tplist: Use tracefs_path()
  - Add reset-trace support
  - Tiny fixes
  - libbpf-tools/tcprtt: use the same options to filter IPv4 and IPv6 addresses
  - tools, libpf-tools: increase IPv6 address width to 39 characters
  - Fix memory leak in capable.c
  - libbpf-tools/execsnoop: fix ret type of bpf_probe_read_user*.
  - libbpf-tools: add block_io_{start,done} tracepoints support to bio tools
  - libbpf-tools: fix tcppktlat show wrong ports
  - Tiny fix we meet
  - funcslower/profile/stackcount: Add folded format output
  - filegone: rewrite filegone base on unlinksnoop
  - offwaketime/wakeuptime: Add folded format output
  - offcputime: Add folded format output
  - Add offwaketime support
  - offcputime: Change the tracepoint mode to kprobe to repair the calltrace display
  - ketones: reword new software tagline
  - dcstat: fix macro err defined
  - Add uthreads support
  - Fix potential double fclose warning
  - Use bpf_core_filed_exist for bpf_ringbuf exist
  - Fix allocating and freeing memory in {probe,free}_usdt_notes
  - Add shmsnoop support
  - uobjnew: Adjust this program to better match the BCC version
  - Add uobjnew support
  - Add tplist support
  - package: Prompt for compilation dependencies
  - Add unlinksnoop support
  - Add dcstat support
  - core_fixes: Fix __builtin_preserve_enum_value not defined issue
  - libbpf-tools: Allow tcppktlat to run on old kernels
  - libbpf-tools: Add support for IPv6 to tcprtt.
  - libbpf-tools: fallback to tracefs mount point if debugfs is not mounted
  - libbpf-tools: add filter for biosnoop
  - cpufreq: read initial freqs only of valid links
  - libbpf-tools: Avoid virtual memory area [uprobes] warning
  - statsnoop: print parent pid
  - opensnoop: print parent pid
  - filesnoop: drop opensnoop and statsnoop in filesnoop
  - Revert "statsnoop: Remove specially designed statsnoop"
  - filesnoop: extend parent pid
  - debian rules to package ketones
  - prepare for make project
  - statsnoop: Remove specially designed statsnoop
  - libbpf: Support POSIX regular expressions for multi kprobe
  - Add tcprst support
  - Add ucalls support
  - uprobe_helpers: Fix path acquisition function
  - libbpf-tools: syscount: Add syscall lookup table for arm64 and riscv
  - Add profile support
  - Add tcpdrop support
  - tcplinks: use ncurses for draw UI
  - libbpf: tiny fixup of libbpf
  - Add tcpsubnet support
  - Add tcplinks support
  - libbpf: don't attach to non-attachable kprobes
  - Add stackcount support
  - libbpf: don't need zero res in exit path
  - libbpf: available_filter_functions_addrs for filter functions
  - Fix the function to get the sk_protocol
  - tcpaccept: Delete redundant code to make more compact
  - tcp: Delete unnecessary parameters
  - Add zfsslower support
  - Add zfsdist support
  - Add funcslower support
  - signal: fix undefined behavior of signal handler
  - commons: Simplified time_since_start function
  - Add tcpaccept support
  - Makefile: fix compile error for bpflist
  - Add tcpretrans support
  - ttysnoop: Implement new way for CO-RE
  - libbpf: rewrite kprobe.multi filter with available_filter_functions
  - Add funccount support
  - Resolve compilation errors on loongarch
  - libbpf: support record count of functions has been traced
  - Makefile: bpflist: remove unnecessary compilation dependencies
  - libbpf: filter by available functions
  - Add vfscount support and cleanup unused variable
  - Add README
  - Add filesnoop support
  - Add bpflist support
  - Add stacksnoop support
  - Add writeback support
  - vfsstat: fix exit value when SIGINT
  - Add threadsnoop support
  - trace_helpers: fix proc maps with [uprobes] entry
  - Add syncsnoop support
  - Cleanup vmlinux and others
  - loads: register perf event on all cpus
  - klockstat: fix running on un-implement down_read_interruptible kernel
  - loads: Remove unnecessary assign 0 operations
  - readahead: fix CO-RE on running without fentry
  - memleak: fix kmalloc and kmalloc_node's hook running on old kernel
  - Makefile: fix foo.bpf.o build without foo.h
  - libbpf-tools: Add loongarch support
  - libbpf-tools: use fentry in funclatency
  - libbpf-tools: Filter with kprobe blacklist for kprobe_exists() api.
  - libbpf-tools/memleak: support ksyms and syms_cache
  - libbpf-tools/memleak: make it run on old kernel
  - change storage type of helper err to int
  - libbpf-tools/memleak: remove unused arg "PERCPU"
  - libbpf-tools/memleak: fix 'show allocs'
  - Makefile: fix binary depends on includes file update
  - ttysnoop: fix co-re on struct iov_iter hasn't ubuf
  - loads: sample_period works on ns, convert to second
  - Add setuids support
  - Sync upstream bpftool libbpf blazesym without submodules
  - Redefine the global name of the project and its representative meanings
  - Add ttysnoop support
  - Move various tracing programs to his directory
  - Move binary to ./bin directory
  - Spit includes and libs into directory
  - Add pidpersec support
  - Add naptime support
  - Add cpuwalk support
  - Add dcsnoop support
  - Add loads support
  - Add swapin support
  - Add tcppktlat support
  - Add javagc support
  - Add tcpstates support
  - Add tcprtt support
  - Add tcplife support
  - tcpconnect: Drop unused ts_us
  - Add tcpconnect support
  - Fix some string features must be done in _GNU_SOURCE
  - Fix potential early exit of the program
  - Add tcpsynbl support
  - Add tcptop support
  - Add tcptracer support
  - Use strftime_now for cleanup
  - Add vfsstat support
  - Use BPF_CORE_READ_STR_INTO to instead of bpf_probe_read_kernel_str
  - Add syscount support
  - Merge changes If1eb510b,I220234bb
  - tcpconnlat: Remove entries from map in all cases
  - execsnoop: add execveat support
  - Fix load of ringbuffer is not support
  - Add tcpconnlat support
  - Add statsnoop support
  - Add solisten support
  - Add support slabratetop
  - Add sigsnoop support
  - Add support readahead
  - Add opensnoop support
  - update submodules url into gitee.com
  - Add support oomkill
  - Add support mountsnoop
  - Use argp_parse_pid and do_process_running wrapper for cleanup
  - memleak: use blazesym for show symbols
  - Add support blazesym
  - Makefile: Generate a symlink for different ebpf programs
  - Add support memleak
  - Add support mdflush
  - Update submodules
  - Add support llcstat
  - Add support ksnoop
  - rename bpf_map_lookup_and_delete to bpf_map_lookup_and_delete_elem
  - Add support klockstat
  - biostacks: fix wrong function name of __blk_account_io_start
  - biosnoop.bpf: fix run by inline functions
  - cpufreq: fix typo from raw_btf to raw_tp
  - biostacks: support run on kernel without btf
  - offcputime: work on kernel without btf
  - fsdist: fix crash on kernel without bss support
  - cpufreq: work on kernel without btf
  - bitesize: fix run on kernel without btf
  - biosnoop: support kernel without fentry
  - numamove: fix initial of num and latency
  - Add fsslower support
  - Drop libbpf_set_strict_mode() calls
  - Add support fsdist
  - bitesize: add missing partitions__load
  - Add support filetop
  - Use bpf_get_current_ns_pid_tgid for WSL or container
  - Add support filelife
  - Add support exitsnoop
  - Add drsnoop support
  - Add support capable
  - Add support cachestat
  - Add support bitesize
  - Add support biostacks
  - Add support biosnoop
  - Add support biopattern
  - Add support biolatency
  - Add support bindsnoop
  - Add support cpufreq
  - Add biotop support
  - Add support funclatency
  - Add gethostlatency support
  - Add bash readline support
  - numamove: only work for numa node > 1
  - runqlen: Add run queue length support
  - execsnoop: convert to use bpf_core_read_xxx
  - Add numasched support
  - execsnoop: works on !(tracepoint/syscalls)
  - numamove: fixes BPF_KRETPROBE for kretprobe
  - update vmlinux.h
  - Add numamove support
  - Fix wrong patch of uapi/linux/bpf.h
  - Add wakeuptime support
  - Add execsnoop support
  - Add support offcputime
  - Add support cpudist
  - Add support runqueue-latency
  - Add support hardirqs
  - use warning instead of fprintf stderr
  - Add softirqs support
  - runqslower support thread id
  - Add .gitreview for git-review
  - Add README.md for build binary
  - Add runqslower tools
  - Init submodules
  - Initial LICENSE


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-2
changelog:
  - softirqs: Fix the naming error
  - Revert "ksnoop: use bpf_get_func_ip() where helper is available"
  - Add criticalstat support
  - ttysnoop: fix iov_iter.ubuf CO-RE mismatch
  - libbpf-tools/gethostlatency: Resolve the path of libc for different namespaces
  - libbpf-tools: Fix misaligned pointer accesses in exitsnoop
  - libbpf-tools/filelife: Fix error tracking caused by failed unlink
  - Added support for f2fs to fsdist and fsslower tools.
  - libbpf-tools: Check biolatency tracepoints using BTF
  - libbpf-tools: Add s390x support
  - libbpf-tools: Fix bindsnoop types usage
  - libbpf-tools: Fix -Wformat errors for 32bit systems
  - ksnoop: use bpf_get_func_ip() where helper is available
  - use tid instead of tgid
  - Add sofdsnoop support
  - spec: mark ketones need clang >= 10
  - package ketones for RPM


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-3
changelog:
  - Add adaptive readahead support
  - Add wqlat support
  - libbpf-tools: fix syscall tracepoints
  - Fix bashreadline
  - libbpf-tools/offcputime, futexctn: Fix incorrect DSO information in stacktrace
  - libbpf-tools/memleak: Add verbose option
  - libbpf: Some advanced features customized for ketones
  - Update libbpf to 1.4.0
  - Add netqtop support
  - Add kvmexit support
  - Add dddos support
  - cpuunclaimed: Add cpuunclaimed support
  - libbpf-tools/ksnoop: perf buffer fix unnecessary junk bits output
  - libbpf-tools: Fix bindsnoop for kernel v6.6+
  - libbpf-tools: Fix trace_helper symbol search bug
  - libbpf-tools/biotop: Add PID filter support
  - libbpf-tools: Fix misaligned pointer accesses in drsnoop
  - libbpf-tools: Fix misaligned pointer accesses in tcptracer
  - libbpf-tools: Fix misaligned pointer accesses in tcpstates
  - libbpf-tools: Fix misaligned pointer accesses in filegone
  - libbpf-tools: Fix misaligned pointer accesses in tcplife
  - libbpf-tools: Fix misaligned pointer accesses in tcpconnect
  - libbpf-tools: Fix misaligned pointer accesses in statsnoop
  - libbpf-tools: Fix misaligned pointer accesses in runqslower
  - libbpf-tools: Fix misaligned pointer accesses in opensnoop
  - libbpf-tools: Fix misaligned pointer accesses in gethostlatency
  - libbpf-tools: Fix misaligned pointer accesses in fsslower
  - libbpf-tools: Fix misaligned pointer accesses in filelife
  - libbpf-tools: Fix misaligned pointer accesses in biosnoop
  - Add futexctn support
  - libbpf-tools/memleak: correct key size of memptrs
  - Sync ketones.spec to v1.0-2


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-4
changelog:
  - tcpmemory: Fix -P filter
  - trace: Fix Segmentation fault
  - icstat: Fix -i error
  - softirqs: Fix compilation optimization issues
  - Correct copyright statements across multiple files
  - retsnoop: capture call stacks of kernel functions that return errors
  - Use kfunc bpf_log2l instead
  - softirqs: Fix R1 unbounded memory access
  - ugc: Fix usdt: no USDT notes section (.note.stapsdt) found in '/usr/bin/python3.11'
  - uflow: Fix get binary file path failed
  - ucalls: Fix get binary file path failed
  - ustat: Fix get binary file path failed
  - ustat: Ability to add Python3
  - provide string helpers
  - Update errno functions
  - Use newer version log2 function
  - Update .clang-format
  - fslatency: Use bpf buffer for compatibility with perf and ring buffer
  - Add fslatency support


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-6
changelog:
  - blk-glitch: Add IO glitch detection function
  - offcpureason: Add tool to trace off-CPU reasons
  - wqlat: Add target function
  - wqlat: Fix the data missing issue
  - compiler: add __must_nonnull attribute and apply to bpf_buffer functions
  - compiler_types.h: add "auto" as a macro for "__auto_type"
  - chmodsnoop: Add tool to trace chmod() syscalls
  - fsdist/fslatency/fsslower: Add fuse support
  - trace_helpers: Use legacy probe attach mode for better compatibility
  - readahead: Fix eBPF program loading and attachment mismatch
  - Add funcratio support
  - filesnoop: improve code quality and fix bugs
  - tcplife: refactor port filtering with inline helper function
  - build: add compile_commands.json generation support
  - syscall_helpers: Update syscall_names_x86_64
  - sofdsnoop: fix BPF verifier error and refactor code
  - execsnoop: improve code quality and formatting consistency
  - udpdrop: Delete unused judgments
  - build: avoid creating empty binary file when cargo is missing
  - udpdrop: Fix the issue where qdisc packet loss has no stack trace
  - tcpdrop: Fix the issue where qdisc packet loss has no stack trace
  - build: streamline build system and improve maintainability
  - build: refactor library system to use static archive
  - build: optimize compilation performance and binary size
  - dddos: Fix dddos no-data issue
  - deadlock: Add lock/unlock name set
  - trace_helpers: Fix double free bug
  - build: add static compilation support with STATIC=1 flag
  - bpflist: replace strncpy with snprintf to fix truncation warning
  - wakeuptime: optimize argument parsing and error handling
  - string_helpers: cleanup and modernize code
  - memory_helpers: refactor ensure_mem function
  - btf_helpers: refactor with C99 features and improve code clarity
  - argp_helpers: simplify parsing functions and improve error handling
  - uprobe_helpers: modernize code with GNU C features and cleanup attributes
  - pattern_helpers: modernize resource management with automatic cleanup
  - vector: replace realloc with reallocarray for overflow protection
  - numa_helpers: replace sscanf with manual parsing for complex NUMA formats
  - trace_helpers: apply RAII and GNU99 optimizations
  - git-review: drop obsolete .gitreview config
  - filesnoop: add missing Makefile for symlink definitions
  - bpflist: reimplement using BPF iterator for accurate process tracking
  - bpftop: refactor BPF program type classification system
  - memleak: migrate allocation tracking to vector.h
  - vector: introduce vector.h and migrate multiple tools to use it
  - tcpdrop/udpdrop: add fentry support with runtime detection
  - system_helpers: move detect_language function for better modularity
  - commons: add variadic support to INIT_TOOL_COMPONENTS macro
  - commons: integrate skeleton cleanup into INIT_TOOL_COMPONENTS
  - udpdrop: add UDP packet drop tracing tool
  - reset-trace: Fix the infinite loop
  - include: Fix list_syscalls() prototype return type
  - opensnoop: add creation-only filtering support
  - build: rename ARCH to Arch in config.mk
  - softirqslower: add Rust-based eBPF tool for softirq latency monitoring
  - build: improve Rust tool detection and cargo availability handling
  - nfssnoop: Add more prominent error log prompts
  - ksnoop: Remove useless and white lines
  - ksnoop: Fix two invalid access to map value (#5361)
  - runqslower: add -c option to filter by process name prefix
  - ttysnoop: clean up and optimize code structure
  - runqueue-latency: clean up argument parsing and error handling
  - funcslower: refactor probe function generation using unroll macro
  - runqslower: simplify error handling and remove unnecessary cleanup logic
  - retsnoop-rs: add root privilege check before main execution
  - retsnoop: simplify Linux source path detection
  - retsnoop: revert incorrect use of bpf_map__set_max_entries()
  - execsnoop: switch from perf buffer to bpf_buffer
  - bpf: use min_t macros for histogram slot boundary checking
  - bpf: optimize string comparison with unified compat_bpf_strncmp
  - retsnoop-rs: implement professional kernel symbol resolution and stack formatting
  - stack: refactor time calibration to use OnceLock and functional style
  - build: fix BPF tool compilation dependency order
  - retsnoop-rs: implement complete BPF tracing system with dual comm support
  - build: add Rust tool support and retsnoop-rs integration
  - nfssnoop: migrate to CO-RE compatible BTF structures
  - core_fixes: improve code style and formatting consistency
  - intrusiondetec: Fix bpf_program__attach_xdp failed
  - dirwatch: Fix missing attach_mode setting in the BPF function for vfs_open
  - deadlock: Add lib set
  - libs: Fix the mismatch error
  - strings: add unified boolean-to-string and plural helpers
  - nfssnoop: add NFS client operations tracing tool
  - retsnoop: fix uninitialized a2l causing invalid free in addr2line__free
  - Add udppktlat support
  - tcplinks: add automatic PID correction for TCP connections
  - Add iowait support
  - tcplinks: simplify TCP connection tracking implementation
  - tcplinks: update man page to reflect current functionality
  - tcplinks: enhance TCP connection monitoring with complete state machine
  - bpftop: optimize TUI rendering performance and fix header display
  - tcplinks: rewrite as interactive TUI monitoring tool
  - bpftop: simplify TUI rendering logic and remove redundant color handling
  - bpftop: enhance program type detection with detailed categorization
  - bpftop: optimize filtering and sorting algorithms for better performance
  - bpftop: fix memory corruption caused by mismatched array sizes
  - man: add manual page for bpftop
  - bpftop: improve graph scaling logic for data visualization
  - bpftop: fix initial sorting with optimized baseline sampling
  - bpftop: remove non-TUI mode and filtering system to simplify architecture
  - bpftop: implement intelligent sort pausing during navigation
  - bpftop: implement comprehensive graph mode with time-series visualization
  - bpftop: add interactive TUI mode with UTF-8 support
  - bpftop: add real-time eBPF program monitoring tool
  - zombiememcgstat: Fix R8 invalid mem access 'scalar'
  - KYLIN: update the man page of mptcpify
  - docs: update development environment requirements in contributing guides
  - opensnoop: add caller stack trace functionality
  - opensnoop: implement single-event full-path reconstruction
  - KYLIN: update mptcp tool
  - docs: add contributing guides in both English and Chinese
  - license: correct LICENSE and debian/copyright to LGPL-3+
  - debian: update build and runtime dependencies
  - build: preserve BPF skeleton files for debugging purposes
  - deb: fix the issue preventing binary .deb generation on LoongArch platforms
  - trace_helpers: replace manual ELF symbol parsing with libdw interface
  - offcputime: add support for multiple PIDs and TIDs
  - offcputime: rewrite BPF program using tracepoint sched:sched_switch
  - log2: modernize implementation with type-safe dispatch and clang compatibility
  - compiler_types: simplify attribute macro definitions
  - system: implement variadic strftime_now with automatic buffer sizing
  - tcprtt: modernize BTF usage and improve exit handling
  - numamove: adopt modern resource management and runtime BSS detection
  - libs: fix resource leaks in FILE pointer operations
  - refactor: consolidate header files and improve code organization
  - libs: refactor commons.h by extracting helper functions to dedicated modules
  - bpf_buffer: add macro overloading for bpf_buffer__new function
  - tcpdrop: add support for dumping TCP drop reasons
  - libbpf-tools: sigsnoop: display target process's comm
  - tools: unify component initialization with INIT_TOOL_COMPONENTS
  - include: enhance signal handling with type safety and compilation checks
  - commons: introduce modular initialization macros for system tools
  - futexslower: implement new eBPF tool for tracing slow futex operations
  - commons: remove DEFINE_SKEL_OBJECT macro and improve resource management
  - memleak: Extract print_headers
  - biotop: Use dump_hash for map processing
  - map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  - dirtop: refactor directory tree traversal using shared filesystem helpers
  - errno_helpers: standardize error code format with negative prefix
  - bpf: extract filesystem target directory checking into common helper
  - opensnoop: add full path reconstruction capability
  - build: improve output path display in build messages
  - bpf: remove duplicate network constant definitions
  - clangd: add configuration to disable unused include warnings
  - bpf_buffer: refactor compat layer to bpf_buffer abstraction
  - constants.h: extract common constants into unified header file
  - refactor: unify min/max macros and improve header organization
  - Makefile: move vmlinux headers to src directory and update build config
  - debian: enhance packaging documentation and fix build targets
  - deb: create separate ketones-doc package for man pages
  - rpm: add comprehensive man pages and create ketones-doc package
  - build: complete migration to modern modular build system
  - retsnoop: comprehensive modernization and optimization
  - filetop,filelife: add directory filtering support and man pages
  - dirwatch: Add directory file operations monitoring tool
  - blkalgn: add block device alignment analysis tool
  - libs: remove DWARF debug support
  - Add deadlock support
  - tcprst: Correct a typo
  - uprobe_helpers.c: Fix the issue of unreleased resources
  - llcstat: Fix error: redefinition of 'key_info' on aarch64
  - drsnoop: Fix typo
  - syscall_helpers.c: Fix incorrect syscall name
  - syscall_helpers.c: support loongarch64 and add more generic syscall
  - Add dynamic switching congestion support
  - README: Add some dependencies
  - rdmaucma: add RDMA userspace connection manager tracer
  - btf: Replace ensure_core_btf with guard(btf_open_opts)
  - btf: Introduce RAII mechanism for BTF resource management
  - libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  - capable: optimize PID namespace and process tracking logic
  - libbpf-tools/profile: Add support for PID-namespacing
  - libbpf-tools: support to find symbols in different mount namespace
  - bpf: Replace version checks with BTF detection for cap_capable
  - bpf: Replace kernel version check with BTF detection for block tracepoints
  - Replace PERF_POLL_TIMEOUT_MS with POLL_TIMEOUT_MS
  - numasched: Convert to use bpf_buffer instead of perf_buffer
  - fsslower: Convert to use bpf_buffer instead of perf_buffer
  - gethostlatency: Convert to use bpf_buffer instead of perf_buffer
  - exitsnoop: Convert to use bpf_buffer instead of perf_buffer
  - runqslower: Convert to use bpf_buffer instead of perf_buffer
  - drsnoop: update to use bpf_buffer instead of perf_buffer
  - capable: update to use bpf_buffer instead of perf_buffer
  - bindsnoop: update to use bpf_buffer instead of perf_buffer
  - bashreadline: update to use bpf_buffer instead of perf_buffer
  - sofdsnoop: update to use bpf_buffer instead of perf_buffer
  - mdflush: update to use bpf_buffer instead of perf_buffer
  - filelife: switch from perf_buffer to bpf_buffer
  - biosnoop: switch from perf_buffer to bpf_buffer
  - block: refactor block_rq_* tracepoint parameter detection
  - btf: Use __free attribute for automatic btf object cleanup
  - zombiememcgstat: add new tool to track zombie memory cgroups
  - statsnoop: Missing dirfd check
  - klockstat: Don't crash on NULL ksym when looping over stack
  - klockstat: Track IOCTL numbers
  - memleak: Change the start message to match memleak python
  - memleak: Allocate map and calculate statistics only when -C option is used
  - memleak: Fix output error for invalid stackid when using combined-only mode
  - biosnoop: Fix biosnoop dependency on kernel version
  - statsnoop: Support fstat(2) and parse fd/dirfd in userspace
  - klockstat: Track netlink message types when taking locks
  - statsnoop: Display syscall name with -s
  - Add intrusiondetec support
  - Add jbdrunstat support
  - loads: simplify perf event sampling and CPU handling
  - inject: refactor call depth tracking with unroll macro
  - irq_storm: implement interrupt storm detection tool
  - trace: optimize code structure and string handling
  - trace_helpers: refactor kprobe attachment logic
  - trace: unify pattern parsing across all tools
  - trace_helpers: add DWARF debug info support for symbol resolution
  - common: refactor NUMA helpers and linker flags
  - Add kctxlatency support
  - softirqs: add target_cpu for softirqs
  - hardirqs: add target_cpu for hardirqs
  - profile,flamegraph: improve C++ symbol handling in flame graph
  - profile: add flame graph visualization support
  - offcputime: improve SVG output option handling
  - offcputime: add flamegraph support for visualizing off-CPU time
  - offcputime: add detailed stack printing functions
  - bitesize: use BTF to detect block_rq_issue tracepoint parameters
  - bitesize: enhance I/O statistics and improve code structure
  - wqlat: Add extra activation time
  - runqueue-latency: Add CPU display and sorting functions
  - softirqs: Optimize output information and increase CPU display and sorting
  - hardirqs: Optimize output information and increase CPU display and sorting
  - Add biofullpathlatency support
  - ttysnoop: use CO-RE to handle ITER_UBUF value changes
  - ttysnoop: enhance error handling and resource management
  - biolatency: improve code documentation and error handling
  - bindsnoop: improve code documentation and resource management
  - bashreadline: improve code documentation
  - adaptive-readahead: improve code documentation and error handling
  - biostacks: enhance error handling and statistics
  - biotop: improve error handling and thread safety
  - bpf: Use DEFINE_FREE for automatic cleanup of BPF skeletons
  - bashreadline: Use __free attribute for automatic cleanup
  - trace_helpers: Use AUTO and __free attributes for resource management
  - signoop: Support real-time signals
  - memleak: add mremap uprobe
  - klockstat: Search for correct stack offset in userspace
  - trace_helpers/partitions: Add __free attribute for partitions
  - trace_helpers/ksyms: Add __free attribute for ksyms
  - syms_cache: Add cleanup support for syms_cache
  - Replace explicit bpf_is_root checks with CHECK_ROOT_CONSTRUCTOR macro
  - Use __free macro for automatic resource cleanup
  - Use __free macro for automatic bpf_buffer cleanup
  - Add cleanup macros and refactor code for better resource management
  - trace: Update demangling_cplusplus_function to use cplus_demangle


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-7.01
changelog:
  - bitesize/zombiememcgstat: Fix no data bug
  - blkalgn: Fix segmentation fault in blkalgn -t
  - schedtrace: refactor userspace code for clarity and maintainability
  - schedtrace: add per-CPU scheduling latency statistics
  - numasched: modernize codebase and improve BPF efficiency
  - dirwatch: Fix the issue where mkdir has no output
  - solisten: Fix failed to get map info bug
  - jbdrunstat: Add more elegant error messages
  - numamove: Fix the segmentation fault
  - netfilter: Fix the bug where packet loss detection fails
  - schedtrace: add timeslice analysis and refactor codebase
  - schedtrace: add BPF-based scheduling delay tracker
  - offcputime: Fix the unit conversion error


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01:kdelibs4support-5.113.0-kylin-mg-word-modification.patch


author: fuhuanzhang <fuhuanzhang@kylinos.cn> - 1.21.2-20.p01
changelog:
  - [BUG#560223] krb5包安全漏洞【['CVE-2026-40356']】【银河麒麟高级服务器操作系统 V11 2603】
  - backport kylin patch: Add krb5-kycompat subpackage.[TASK#424795]
  - backport kylin patch: Fix code scan logic warning.[TASK#596097]


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.01
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 修改spec文件及删除一些无用文件
  -       添加状态切换日志
  -       按照打包规范修改版本号
  -       添加异常退出时输出堆栈


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.02
changelog:
  - Type:update
  - ID:[BUG#295657] [v11-B14] [外设管控] 系统初始环境，/var/log/下存在txt格式文本文件
  - SUG:NA
  - DESC: 修改审计应用日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 相关的轮替功能操作由logrotate来管理，提供默认转存配置
          增加fuzz测试
          合规性整改移除ksaf_config


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#474839] 【v11 2503】审计包功能优化
        [任务#471091] 【安全红线】整改自研组件第一轮Fortify问题-ksaf-audit-daemon
  - SUG: NA
  - DESC: 优化审计，和内核相关的定义从class-def.conf获取
          合规性整改
          没启动ksaf_main模块，不启动审计日志服务


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#490381] 【v11 2503】优化ksaf-audit-daemon相关功能
  - SUG: NA
  - DESC: 去除掉配置文件，不允许修改日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#649531] 修复ksaf-audit-daemon的systemd unit 配置指令位置错误
  - SUG: NA
  - DESC: 收缩日志dac权限，Netlink 消息发送方校验绕过漏洞


author: lengchunying <lengchunying@kylinos.cn> 1.0.1-01
changelog:
  - Type:update
  - ID: [任务#434606] 【ksaf】升级kysec2.0包版本至1.0.1-01
  - SUG:NA
  - DESC: 升级kysec2.0包版本至1.0.1-01


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [BUG#338617] 【ksaf-policy】【安全风险】文档有未实现功能的描述
  - SUG: NA
  - DESC: 允许所有用户执行ksaf-main-policy-sync
          kysec2.0相关几个模块禁止卸载
          增加保护ksaf标签的策略, 仅允许标记管理器修改


author: maxu <maxu@kylinos.cn> 1.0.1-05
changelog:
  - Type: bugfix
  - ID: [TASK#633017]
  - SUG: NA
  - DESC: 修复漏洞KVE-2026-0425
  - 	add patch: 0014-fix-kyexectl-dir-permission.patch


author: zhubing zhubing@kylinos.cn - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#327787]【V11-B19】【loongarch】【外设管控】sm-example命令执行失败
  - SUG: NA
  - DESC: 同步v11 2409解决网卡策略及时生效异常问题


author: zhubing zhubing@kylinos.cn - 1.0.1-05
changelog:
  - Type: update
  - ID: [BUG#639515]ksaf-devctl包安全漏洞['KVE-2026-0733']
  - SUG: NA
  - DESC: 升级包版本至1.0.1-05, rpm包中移除ksaf_devctl_test二进制文件


author: zhubing zhubing@kylinos.cn - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#651407]【威胁分析】ksaf-devctl组件优化
  - SUG: NA
  - DESC: 0010-fix-system-command-injection-bug-and-verify-netlink-.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#486679] 【v11 2503】优化ksaf-dynamic-uid相关功能
  - SUG:NA
  - DESC: 未加载ksaf_main模块不启动该服务
          修改方案，优化该程序，减少io访问。
          移除无效的监控
  	修改单元测试
          从qmake变为cmake
          修改依赖选项


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.03
changelog:
  - Type: update
  - ID: [BUG#296941] 【V11-B14】【外设管控】人体工学设备不插拔重启后策略失效
  - SUG: NA
  - DESC: 在加载kbox模块前，判断cmdline是否使能box


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.04
changelog:
  - Type: update
  - ID: [任务#419047]【安全红线】解决ksaf-init的strip编译选项问题
  - SUG: NA
  - DESC: 去除libksaf_status库文件的符号信息


author: zhubing zhubing@kylinos.cn - 1.0.1-03
changelog:
  - Type: update
  - ID: [BUG#347071]【V11 2503】【需求36791|41559】【执行控制】首次kysec_policy enable开启安全，执行控制不生效 
  - SUG: NA
  - DESC: 修复ksaf-label-manager --sync-path-id 执行失败问题


author: chengang chengang@kylinos.cn - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#369687]【执行控制】手动添加启动参数，lsm=ksaf，重启系统后开启kysec功能不生效
  - SUG: NA
  - DESC: ksaf 默认状态从 4 修改为 0


author: chengang chengang@kylinos.cn - 1.0.1-06
changelog:
  - Type: update
  - ID: [task#502245]  支持grub设置ksaf为软模式
  - SUG: NA
  - DESC: 支持解析grub参数，设置ksaf为软模式ksaf_status=0


author: chengang chengang@kylinos.cn - 1.0.1-08
changelog:
  - Type: update
  - ID: [BUG#] off模式切换strict模式，不重启之前，setstatus 关闭kysec 或者selinux,关闭时进入了是否立即重启的交互信息提示  
  - SUG: NA
  - DESC: 未开启安全时get状态返回0


author: chengang chengang@kylinos.cn - 1.0.1-16
changelog:
  - Type: update
  - ID:  [task#638473] 安装系统-升级本次提测的所有软件包-重启系统-#journalctl -b -p 2，检查系统日志报错
  - SUG: NA
  - DESC: 使用 ksaf-main-policy-init 替换 ksaf-main-policy-sync 命令


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#300787]【V11-B16】【ARM】【安全模式切换】none-strict重启过程中报错
  - SUG: NA
  - DESC: [任务#412519]【ksaf】已运行进程标记更新功能优化
          [任务#415507] ksaf-label-manager安全问题整改


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-02
changelog:
  - Type: update
  - ID: [BUG#340532]【V11-2503】【B05】rpm包vendor信息检查失败
  - SUG: NA
  - DESC: 修改SPEC文件vendor信息
          同步os-release-v11分支最新代码


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [BUG#346402]【V11-2503】【B09】【需求36791】【执行控制】加载无执行权限的内核模块，无审计日志
  - SUG: NA
  - DESC: tid配置文件中添加/usr/bin/kmod,值设置为4


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#364225]【v11-2503】【B14】【需求36795|41839|41835】【文件保护】移除软件包文件保护后被移动后还原的文件，再次添加保护不生效
  -     [BUG#364165]【v11-2503】【B14】【需求36795|41549】【文件保护】移除包方式添加的保护的例外后，文件保护不生效
  - SUG: NA
  - DESC: 优化继承标志设置逻辑
          同步桌面最新代码，桌面独有代码使用条件编译
          优化程序启动时对软件包查询的流程，减少对CPU资源的占用


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#374711]【B17】【v11 2503】【需求36795|41839|41835】【文件保护】添加\删除\查看文件保护策略-软件包-kysec_set，只读策略不生效
  - SUG: NA
  - DES: 全盘打标之前删除包内文件父目录缓存文件


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-06
changelog:
  - Type: bugfix
  - ID: [BUG#439759]【V11-6.6.0-32.9】【龙芯3C5000L】龙芯3C5000L从selinux切换到off失败
  - SUG: NA
  - DES: 注释掉标记变更发布与订阅功能，该功能暂时未用到
         解决/opt目录下文件未打标的问题,使用宏定义将全盘打标时要跳过的目录与桌面版本区分开


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-07
changelog:
  - Type: bugfix
  - ID: [BUG#455411]【20251021update内网源测试】【loongarch/x86-v11 2503】提测软件包增量升级后，执行yum -y update核心转储
        [任务#553743]安全编译参数整改 / ksaf-label-manager安全编译参数整改
  - SUG: NA
  - DES: 解决动态库中dbus连接没有关闭文件描述符的问题
         修改软件包安装后脚本，解决软件包更新后服务进程身份错误问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-09
changelog:
  - Type: update
  - ID: [任务#637697]ksaf-label-manger组件增强
  - SUG: NA
  - DES: 解决日志文件授权不当问题
         dbus接口增加polkit用户身份检查


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [任务#649215]ksaf-label-manager组件功能增强
  - SUG: NA
  - DES: 修改dbus配置文件
         加强dbus接口参数校验
         修改相关配置文件权限


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-09
changelog:
  - Type: bugfix
  - ID: [BUG#330607]光驱设置只读策略后，再设置禁用策略，移除策略失效
  -     [BUG#347535]插入1次打印机，生成多条连接记录
  -     [BUG#330419]不可变切换到运维模式后，关闭执行控制失败
  -     [BUG#347348]应用安全-删除软件包执行例外设置后程序依旧可执行
  -     [BUG#352767]禁用无线网卡设备策略后，有线网络也会断开重连
  - SUG: NA
  - DESC: 内核升级,重编模块；同时同步v11桌面已修复bug


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-16
changelog:
  - Type: bugfix
  - ID: [任务#513487]桌面产线ksaf代码质量提高
  - SUG: NA
  - DESC: 桌面系统发现的问题，现将补丁同步到服务器,同时整改spec文件，满足合规要求


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-19
changelog:
  - Type: bugfix
  - ID: [BUG#439483]开启selinux后,rpm方式安装内核测试更新后无法进入系统
  - SUG: NA
  - DESC: 内核provides有问题,但内核发布周期较长，由此模块修改.


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 固定函数名和函数ID对应关系解决增量下发函数名会变问题
          内置变量interactive扩展：由bool类型更改为int类型
          删除由配置生成的源文件，改为编译时自动生成
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-06
changelog:
  - Type:update
  - ID: [任务#461412] 策略改动及优化
  - SUG:NA
  - DESC: 优化策略下发速度
          全量下发和增量下发方案调整
          添加策略module_name字段
          代码冗余调整，重复代码合并
          解决当section段没策略全量下发，后加入策略增量下发失败问题
  	修复loongarch初始化下发策略段错误问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 去掉ksafpolicy服务，因和dbus启动的服务冗余
          去除注释的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#487477] 【V11】【内核特性】内核启动时间调优 / 【安全】initrd裁剪-安全的脚本ksaf
        [bug#338197] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0302
        [bug#338196] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0301
  - SUG:NA
  - DESC: 新增ksaf-policy-sync-init只下发初始化策略
          修复脉诊漏洞


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 库修复，之前不是链接


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [Bug#583555] 修复KVE-2026-0429
  - SUG:NA
  - DESC: ksaf-policy.log改权限为640
          日志中去掉文件名和行数


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-6
changelog:
  - Type:update
  - ID:[BUG#347383][BUG#349036][BUG#346870][BUG#346816][BUG#344842][BUG#346423][Bug#346777][BUG#346779][BUG#346822][BUG#347522][BUG#347703][任务#461358]
  - SUG:NA
  - DESC: 添加0010补丁: 修改可信度量bug;添加日志级别;切换开关翻译;同步桌面进程，文件，内核防卸载模块修改。----hanhuijie
  -    [BUG#349036]【V11-2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】管理员关闭可信度量重启后查看详情未置灰 		
  -    [BUG#347383]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】切换可信启动开关后显示未达预期	
  -    [BUG#346870]【V11 2503】【B09】【需求41727】【应用程序执行控制】安全日志-关闭应用程序度执行控制功能，日志级别为信息 
  -      添加0009补丁: 同步桌面联网管控状态切换优化，搜索优化，首次加载数据优化                         ----jioahongjie
  -      添加0008补丁: 控制面板的安全中心为英文;【UKUI4.0】设置面板中安全项未汉化;终端和设置中含有英文，未繁体化; 同步桌面kysec切换接口 ----duanhongtao
  -       [BUG#346816] 【UKUI4.0】设置面板中安全项未汉化
  -       [BUG#344842] 【繁体】终端和设置中含有英文，未繁体化
  -       [BUG#346423]  控制面板的安全中心为英文
  -      添加0007补丁，修复以下问题                                                                      -----maqiting
  -    【V11 2503】【B09】【账户保护】密码强度-推荐文案中为“至少包含2类字符”
  -    【V11 2503】【B09】【账户保护】账户锁定-默认状态测试，锁定时长与锁定时间不对
  -    【V11 2503】【B09】【安全设置】安全模式切换（关闭-安全优先-关闭）,选择安全优先后重启，安全变为自定义模式，重启后安全管理员和审计管理员无法登录
  -    【V11 2503】【需求41779】【B09】default模式下test用户打开高级配置后切换root用户无法打开安全中心
  -    【V11 2503】【B09】【需求41779】点击安全中心-设置-切换安全防护设置为安全优先后重启未生效 
  - DESC: 0006补丁:开源合规修改&&删除ksc-exectl，kysec-devctl,PrivatySecurity和SecurityReinforce下的翻译文件  ----hanhuijie


author: maqiting <maqiting@kylinos.cn> - 3.0.0-7
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353735][BUG#353485][BUG#347924][BUG#347835][BUG#350293]
  - SUG:NA
  - DESC:
  -      添加0011,0012,0013补丁，修复以下问题
  -     【V11-2503】【B09】【安全加固】【安全扫描】安全扫描过程中，点击停止按钮，停止扫描后仍有扫描项的状态是扫描中
  -     【V11-2503】【B09】【日志查看器】审计操作行为日志文件中没有记录
  -     【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -     【V11 2503】【B11】【需求41769】【安全中心】繁体模式下，安全加固和安全工具为英文
  -     【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  -      更新设置下的切换安全模式弹窗逻辑，完善密码检查，更新翻译文件
  -      同步桌面修改，优化服务启动性能


author: maqiting <maqiting@kylinos.cn> - 3.0.0-8
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353485][BUG#344842][任务#455262][BUG#347416][BUG#346056][BUG#271387]
  - SUG:NA
  - DESC:
  -      添加0014补丁，修复完善以下问题
  -      [BUG#356165]【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -      [BUG#353485]【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  - 
  -      添加0015补丁，修复完善以下问题。----sunjin
  -      [BUG#344842]【V11-2503】【B08】【繁体】终端和设置中含有英文，未繁体化
  -      优化模板名显示不全和没翻译的问题
  -      修复msgstr"之间没空格的问题
  -
  -      添加0016补丁，完成用户手册（中文）编写和相关bug修复。----hanhuijie
  -      [任务#455262]【V11 2503】编写《银河麒麟高级服务器操作系统V11 2503安全中心用户手册》
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册关于可信度量说明失败
  -      [BUG#346056]【V11 2503】【B09】【需求41779】应用联网控制-帮助文档验证，帮助文档打不开
  -      [BUG#271387]【V11-2409】【B10】设置的帮助手册部分内容的描述与实际系统不一致
  -
  -      添加0017补丁，修复half打开安全中心时状态切换问题。----jiaohongjie
  -      [BUG#346997]【V11 2503】【B09】【需求41779】应用联网控制-UI状态更新实时更新到命令（关-开-关）-未开启过安全功能
  -      [BUG#346469]【v11 2503】【B09】【需求41775】【内核模块防卸载】首次开启内核模块防卸载，关闭弹框后界面没有提示重启生效
  -      [BUG#346521]【V11 2503】【B09】【需求41773】【文件防篡改】首次开启文件防篡改，点击稍后重启后，界面没有重启提示
  -      [BUG#346649]【v11 2503】【B09】【需求41777】【进程防杀死】off模式开启进程防杀死，点击稍后重启后，界面没有提示重启生效
  - 
  -      添加0018补丁，修复防火墙、联网管控问题。----jiaohongjie
  -      [BUG#363405]【v11-2503】【B14】【账户保护】密码强度默认为自定义
  -      添加多个应用或软件包时，增加交互进程条；优化添加软件包窗口和结果提醒弹窗出现顺序
  -      优化添加软件包对话框：搜索保持选中状态、搜索内容为空时回车关闭问题修复
  - 
  -      添加0019补丁，补充用户手册遗漏内容
  -      添加0020补丁，修复安全热点问题 ----zhaoqingyou
  -      [任务#468465][安全红线]整改自研组件第一轮安全热点扫描的问题-ksc-defender


author: duanhongtao <duanhongtao@kylinos.cn> - 3.0.0-9
changelog:
  - Type:update
  - ID:[BUG#359365][BUG#364657][BUG#364573][BUG#353220][BUG#367341][BUG#353220][BUG#351500][BUG#347416][BUG#347377]
  - SUG:NA
  - DESC:
  -      添加0021补丁，修复完善以下问题
  -      [BUG#359365] off模式下开启内核模块防卸载未立即重启界面选中关闭，无重启生效提示
  -      [BUG#364657]【应用程序执行控制】普通用户访问安全中心，脚本管控开关未置灰
  -      [BUG#364573]【控制面板安全】控制面板-安全中心-安全加固-界面排版存在问题
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误
  -
  -      添加补丁0022 修复可信度量弹窗以及可信根问题;用户手册删除不存在内容以及调整顺序问题。--hanhuijie
  -      [BUG#367341]【V11 2503】【B15】【需求41769】【安全中心】【可信度量】【KYEE】篡改grub.cfg后，可信度量项UEFI失败，通知是英文	
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误 
  -      [BUG#351500]【V11 2503】【B10】【需求41769】【安全中心】【可信启动】【TPM/TCM/KYEE】不可信状态下，切换用户后登录系统，未弹出通知 
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册内容有问题 	    
  -      [BUG#347377]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM】篡改BIOS配置后，系统未给通知
  -
  -      添加补丁0023 修复fortify问题。--zhaoqingyou
  -      [任务#471067][安全红线]整改自研组件第一轮Fortify问题-ksc-defender


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-10
changelog:
  - Type:update
  - ID:[BUG#372255][BUG#372147][BUG#370307] 	
  - SUG:NA
  - DESC:
  -      添加0024补丁，修复完善以下问题     ---jiahongjie
  -      应用联网管控提示语更新、优化删除按钮显示、软件包UI界面图标优化等
  - 
  -      添加0025补丁，修复完善以下问题     ---xuyujun
  -      涉密接管后，应用程序执行控制和应用联网控制修改为还可以继续使用
  - 
  -      添加0026补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#372255]【V11-2503】【B16】【需求41799】【可信启动】【TPM/TCM】命令行开启可信启动为拦截模式，切换安全中心界面，可信度量未选中开关 		    
  -      [BUG#372147]【V11-2503】【B16】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】开启文案长度不应该显示省略号
  -      [BUG#370307]【V11 2503】【B15】【需求41769】【可信度量日志】【KYEE】可信启动日志-在安全中心进行可信状态修改，日志查看器找不到操作日志    
  -
  -      添加0027补丁, 添加麒麟版本声明, 删除未使用代码 ---zhaoqingyou


author: maqiting <maqiting@kylinos.cn> - 3.0.0-11
changelog:
  - Type:update
  - ID:[BUG#377081][BUG#376931][BUG#378261][BUG#378697][BUG#378695]
  - SUG:NA
  - DESC:
  -      添加0028补丁，修复完善以下问题     ---duanhongtao
  -      [BUG#377081] 【B17】【应用程序执行控制】off模式开启应用程序执行控制把box也打开
  -
  -      添加0029，0030补丁，修复完善以下问题     ---maqiting
  -      [BUG#376931] 【V11-2503】【B17】【账户保护】账户锁定-关闭账户锁定登录测试，关闭锁定后重新打开安全中心，账户锁定自动打开
  -      [BUG#378261] 【v11-2503】【B17】【需求41775】【内核模块防卸载】off模式开启内核模块防卸载重启生效提示信息不对 
  -      更新设置-安全模式按钮展示逻辑，删除冗余代码
  -      [BUG#378697] 【V11 2503】【build18】【安全设置】UI上从安全模式从关闭切换成严格模式，未提示重启生效
  -      [BUG#378695] 【V11 2503】【build18】【安全设置】安全模式切换-初始状态从UI上切换到推荐，未提示重启生效


author: sunjin <sunjin@kylinos.cn> - 3.0.0-12
changelog:
  - Type:update
  - ID:[BUG#378983]
  - SUG:NA
  - DESC:
  -      添加0031补丁，修复完善以下问题     ---sunjin
  -      [BUG#378983] 【V11-2503】【B18】【安全加固】【首页显示】安全扫描，扫描结果时间显示省略号


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-13
changelog:
  - Type:update
  - ID:[BUG#383817]
  - SUG:NA
  - DESC:
  -      添加0032补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#383817] 【出厂测试】【v11 2503】0711提测的手册存在需要修改的内容
  -      添加0033补丁，修复可信度量英文标题大小写问题&&模块防卸载翻译 ---hanhuijie
  -      添加0034补丁，修复完善以下问题     ---duanhongtao
  -      [BUG#353095] 状态为permissive时安全中心的开关为关闭
  -      [BUG#347148]【应用程序执行控制】应用程序执行控制按钮文字不为“开启”
  -      添加0035补丁，【联网管控】增加重复添加应用提醒等优化     ---jiaohongjie
  -      添加0036补丁，安全中心开始与控制面板打开安全加固打开高亮问题&&命令行打开后增加更新optionName接口，侧边栏高亮并且手册支持跳转     ---hanhuijie


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-14
changelog:
  - Type:update
  - ID:[BUG#406159]
  - SUG:NA
  - DESC:
  -      添加0037补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#406159] 【20250826update内网源测试】【arm/loongarch/x86-v11 2503】ksc-defender软件包导致侧边栏安全加固切换失败


author: xuyujun <xuyujun@kylinos.cn> - 3.0.0-17
changelog:
  - Type:update
  - ID:[任务#570943]
  - SUG:NA
  - DESC:
  -      [任务#570943]  龙芯可信启动功能适配安全中心显示
  -      添加补丁 0039-ksc-defender-support-loongarch-tpm.patch


author: maqiting <maqiting@kylinos.cn> - 3.0.0-18
changelog:
  - Type:update
  - ID:[BUG#502367]
  - SUG:NA
  - DESC:
  -      [BUG#502367] 【['KVE-2026-0207']】【银河麒麟高级服务器操作系统 V11 2503】ksc-defender包安全漏洞
  -      添加补丁 0040-fix-security-vulnerability.patch


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.0.0-19
changelog:
  - Type:update
  - ID:[BUG#468603]
  - SUG:NA
  - DESC:
  -       添加补丁 0041-fix-ksc-defender-securitysetting.patch
  -       BUG#468603 【V11 2503】【B20】default模式切换off模式，不重启，系统模式查询为off


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-20
changelog:
  - Type:update
  - ID:[任务#622931]
  - SUG:NA
  - DESC:
  -      [任务#622931]【2503】安全中心移除libkysdk-security包依赖
  -      添加补丁 0042-fix-SW-rm-libsdk-security.patch


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.0.0-21
changelog:
  - Type:update
  - ID:[BUG#609613][任务#637699]
  - SUG:NA
  - DESC:
  -      添加补丁 0043-fix-fpro-log.patch 解决
  -      [BUG#609613][V11 2503][SW-B05][需求41727][文件防篡改]安全日志-解除策略日志内容不全
  -      添加补丁 0044-fix-permission.patch
  -      [任务#637699]【2503】ksc-defender组件增强


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.0.0-22
changelog:
  - Type:update
  - ID:[BUG#639461][BUG#639513][BUG#637199][BUG#635791][BUG#637201][任务#649075]
  - SUG:NA
  - DESC:
  -      添加补丁 0045-fix-kve.patch
  -      [BUG#639461] ksc-defender包安全漏洞【['KVE-2026-0705']】【银河麒麟高级服务器操作系统 V11 2503】
  -      [BUG#639513] ksc-defender包安全漏洞【['KVE-2026-0723']】【银河麒麟高级服务器操作系统 V11 2503】
  -      [BUG#637199] ksc-defender包安全漏洞【['KVE-2026-0727']】【银河麒麟高级服务器操作系统 V11 2503】
  -      [BUG#635791] ksc-defender包安全漏洞【['KVE-2026-0728']】【银河麒麟高级服务器操作系统 V11 2503】
  -      [BUG#637201] ksc-defender包安全漏洞【['KVE-2026-0729']】【银河麒麟高级服务器操作系统 V11 2503】
  -      [任务#649075] ksc-defender组件功能增强


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: weiyuan <weiyuan@kylinos.cn> - 1.29.1-10.p01
changelog:
  - Type:update
  - ID:[TASK#427098]
  - SUG:NA
  - DESC:backport v11-2409 patch
         add 1002-add-phytium-tune-for-better-affinity-in-k8s-1.29.patch


author: lijian <lijian2@kylinos.cn> - 1.29.1-10.p04
changelog:
  - Type:cves
  - ID:CVE-2025-13281
  - SUG:NA
  - DESC:backport fix CVE-2025-13281
         backport kubeadm preflight checks: fix host URL construction


author: houhongxun<houhongxun@kylinos.cn> - 5.24.4-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#352453]
  - SUG : NA
  - DESC: fix some windows displaying abnormally for 16bit depth


author: peijiankang<peijiankang@kylinos.cn> - 5.24.4-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kwin-5.24.4-fix-coredump-when-logout.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.24.4-1.p05
changelog:
  - Type: bugfix
  - ID  : [Task#536445]
  - SUG : NA
  - DESC: fix some apps displaying abnormally under 16bit color depth


author: huayadong <huayadong@kylinos.cn> - 5.24.4-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#429071]
  - SUG : NA
  - DESC: add Patch06:kwin-5.24.4-kylin-Turn-off-Tablet-Manager.patch
          关闭平板模式管理器


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-2
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 修复门禁系统兼容性分析问题 
  - 2. 修复门禁系统合规分析问题； 
  - 3. 提升ldop-ext模块的单元测试覆盖率;


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-4
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 提升单元测试覆盖率至80%; 
  - 2. 修复sonarqube扫描中的部分问题；


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-12
changelog:
  - Type: cves/bugfix/update
  - ID: KVE-2026-0710,[BUG#631845],[TASK#648147]
  - SUG: NA
  - DESC:
  - 1. 威胁分析整改，修复kyldop软件安全模块密钥硬编码问题[TASK#648147].
  - 2. 修复漏洞: KVE-2026-0710


author: liyulong <liyulong@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#637189]
  - SUG: NA
  - DESC:
  - 1. 修复KVE-2026-0688、KVE-2026-0689 KVE-2026-0716安全漏洞。
  - 2. 去除log.conf的执行权限。


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p16
changelog:
  - Type: update
  - ID:[TASK#436445][TASK#432968]
  - SUG: NA
  - DESC: add fuzz check
          add secret key activation
          add deactivation function
          adjust the configuration file to the/etc directory
          adjust activate the policy to the server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p17
changelog:
  - Type: bugfix
  - ID: [BUG#336521][BUG#336143] 
  - SUG: NA
  - DESC: update get activation code from kylin


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p18
changelog:
  - Type: bugfix
  - ID: [BUG#336143][TASK#442197][BUG#336809][BUG#339458][BUG#338942]
  - SUG: NA
  - DESC: update spec to fix install error
  	integrate value for added product
  	upate get activation status logic


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p22
changelog:
  - Type: update
  - ID:[TASK#463164][BUG#348859][TASK#466714]
  - SUG: NA
  - DESC: ajust the size of the Confirm Cancel button
  	check license osname locally when kms version lower than 2.5
  	fix security compilation issues


author: lichenguang <lichenguang@kylinos.cn> 1.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#473471]
  - SUG : NA
  - DESC: Fix security hotsposts in the sonarqube report.


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: kylin-process-manager-daemon-4.10.0.0-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-process-manager-4.10.0.0-ok1.33k1.5
          upstream commtid:0038ddf0249de1761514d30db39c7730dc0a1242


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#452549]
  - SUG : NA
  - DESC: remove kylin-process-manager core functionality


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#473473]
  - SUG : NA
  - DESC: kylin-process-manager fix sonarqube hotpoints


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#583449]
  - SUG : NA
  - DESC: Fix coredump when starting daemon while service is already running


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-calendar-4.10.0.0-ok2.16k0.12
          upstream commtid:33a3c76c0b50b9058fdebd352de5229ce21d71bb


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#250111]
  - SUG : NA
  - DESC: Patch0002: kylin-calendar-4.10.0.0-kylin-update-zh_HK-translation.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-calendar-4.10.0.0-Single-instance-addition-of-DISPLAY-judgment.patch


author: huayadong <huayadong@kylinos.cn> - 3.24.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#424335]
  - SUG:  NA
  - DESC: update version to 3.24.0.0-0k0.35
          fix KVE-2024-1102


author: peijiankang <peijiankang@kylinos.cn> - 3.24.0.0-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#289223]
  - SUG:  NA
  - DESC: add kylin-device-daemon-3.24.0.0-fix-coredump-when-quit.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-save-param-SIGABRT.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#291269]
  - SUG : NA
  - DESC: ukui-settings-daemon-4.10.0.0-fix-targetBrightness-to-100.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: add Patch5:ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.18k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch
          add ukui-settings-daemon-4.10.0.0-add-copyright-info.cpp


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#379967]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch
          add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: update
  - ID  : [TASK#635561]
  - SUG : NA
  - DESC: add Patch13:ukui-settings-daemon-4.10.0.0-1-kylin-Remove-the-write-permissions-of-files-and-folders.patch
          安全性提升


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: update
  - ID  : [TASK#637935]
  - SUG : NA
  - DESC: 新增基于inode的白名单校验机制，增强ukui-settings-daemon D-Bus访问控制。


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-2
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-2
  	support xfs.
  	add -d to output important logs to syslog.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-3
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-3
  	support device mapper
  	fix bug when print wwid


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-5
changelog:
  - Type:compile
  - ID:431407
  - SUG:NA
  - DESC: release 1.0-5
  	supports monitoring of file system mount/umount events.
  	improve program startup speed.
  	adjust license's description.
  	add option `--mask` to enable debug mode.
  	fix coredump when argc == 0.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-7
changelog:
  - Type:bugfix
  - ID:[bug#381669]
  - SUG:NA
  - DESC: release 1.0-7
  	fix coredump when wwid's length is less than 32.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-8
changelog:
  - Type:compile
  - ID:582005
  - SUG:NA
  - DESC: release 1.0-8
  	trigger unit tests and generate reports in CI.
  	supplement the copyright information and file header of the source code.


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.19
changelog:
  - Type: update
  - ID:   [BUG#293841]
  - SUG:  NA
  - DESC: 
  - strict模式下，所有用户都能查看日志查看器
  - 添加补丁:
  - bug-293841-permission-problems-in-strict-mode.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.20
changelog:
  - Type: update
  - ID:   [BUG#310625][TASK#361225][TASK#420685]
  - SUG:  NA
  - DESC: KVE漏洞修复
  		添加strip编译参数
  		添加copyright
  - 添加补丁:
  - bug-310625-fix-kve-2022-0308.patch
  - TASK-361225-add-strip-security-compile-parameter.patch
  - TASK-420685-supplement-header-comment.patch
  - TASK-420685-supplement-header-comment-update.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.21
changelog:
  - Type: update
  - ID:   [BUG#330366][BUG#297363][BUG#297421]
  - SUG:  NA
  - DESC: 修复崩溃日志无显示
  		更新单元测试文件
  		修复字体样式未随系统切换
  		修复审计日志导出后文件内容存在特殊字符
  		合规性整改
  - 添加补丁:
  - bug-330366-no-crash-log-display-after-crash.patch
  - update-unit-test-file.patch
  - bug-297363-font-update-with-system.patch
  - bug-297421-special-character-displayed-when-export-audit-log.patch
  - update-code-compliance-rectification.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.22
changelog:
  - Type: update
  - ID:   [BUG#338424]
  - SUG:  NA
  - DESC: 添加dbus方法级管控接口
  - 添加补丁:
  - bug-338424-add-dbus-interface-access-control.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.23
changelog:
  - Type: update
  - ID:   [TASK#439187][TASK#439188]
  - SUG:  NA
  - DESC: debug模式下禁用dbus接口管控
  		安全操作日志需求
  		适配kysec2.0内核日志
  - 添加补丁:
  - update-disable-dbus-access-control-in-debug.patch
  - TASK-439187-adapted-to-operation-log.patch
  - TASK-439188-adapted-to-kysec2.0-kernel-log.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.24
changelog:
  - Type: update
  - ID:   [BUG#295643][BUG#314413][BUG#347837][BUG#347838]
  - SUG:  NA
  - DESC: ssh登录失败等级为警告
  		root用户被锁定没有日志
  		复制日志失败
  		数据加载完成后提示窗不会自动退出
  - 添加补丁:
  - bug-295643-level-warning-when-ssh-login-failed.patch
  - bug-314413-no-root-locked-log.patch
  - bug-347837-copy-log-failed.patch
  - bug-347838-dialog-auto-exits-after-loading-completed.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.25
changelog:
  - Type: update
  - ID:   [BUG#347841][BUG#346493]
  - SUG:  NA
  - DESC: 主题适配
  		未知用户登陆等级修改为错误
  		关闭文件防篡改等级修改为警告
  - 添加补丁:
  - bug-347841-adapt-to-system-theme.patch
  - update-unknown-user-login-failed-is-error.patch
  - bug-346493-the-level-is-information-when-close-kysec-fpro.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.26
changelog:
  - Type: update
  - ID:   [BUG#346493][BUG#346442]
  - SUG:  NA
  - DESC: 更改warning级别翻译为告警
  		修复kysec命令行操作在麒麟安全中无显示问题
  		修复测试用例编译问题
  - 添加补丁:
  - update-warning-of-translation-issue.patch
  - update-kysec-cmd-operation-is-not-displayed.patch
  - update-test-case-compilation-issue.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.27
changelog:
  - Type: update
  - ID:   [BUG#375807][BUG#376571]
  - SUG:  NA
  - DESC: 用户手册无法打开、更新用户手册
  		default模式无应用日志：应用日志暂不显示
  		代码通过clang-format格式化
  - 添加补丁:
  - bug-375807-user-guide-cannot-be-opened.patch
  - bug-376571-ordinary-users-do-not-display-app-logs.patch
  - update-standardized-code-format.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.28
changelog:
  - Type: update
  - ID:   [TASK#553757]
  - SUG:  NA
  - DESC: 栈保护安全编译参数修改
  - 添加补丁:
  - TASK-553757-update-stack-protector-compile-parameter.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.29
changelog:
  - Type: update
  - ID:   [TASK#629787]
  - SUG:  NA
  - DESC: dbus管控整改
  - 添加补丁:
  - TASK-629787-dbus-management.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.29
changelog:
  - Type: update
  - ID:   [TASK#633293]
  - SUG:  NA
  - DESC: dbus合入主线
  - 添加补丁:
  - TASK-633293-dbus-management.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.30
changelog:
  - Type: update
  - ID:   [TASK#648569][TASK#651031][TASK#650721]
  - SUG:  NA
  - DESC: 安全威胁处理
  		注入风险处理
  		dbus管控整改
  - 添加补丁:
  - TASK-648569-fix-threat-analysis.patch
  - TASK-651031-fix-auditlog-parse-type.patch
  - TASK-650721-dbus-system-secure.patch


author: zhangzikang <zhangzikang@kylinos.cn> -12.0.2-12.el8.ks8.02
changelog:
  - Type:update
  - ID:TASK#141930
  - SUG:NA
  - DESC:modify the spec file URL and gettext_package to kylin
  - Add Patches:fix_PACKAGE_name_to_kylin.patch


author: zhouming <zhouming@kylinos.cn> 1.0.0-08
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:修复BUG:354369;354103;353905;362383;353889;363101;354369;新增对免密登录的处理;优化OTP PIN码错误提示不够详细的问题;优化 存在多个UKEY设备时的相关提示


author: zhouming <zhouming@kylinos.cn> 1.0.0-09
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 修复BUG:修复开启双因子后，远程SSH登录失败的问题
          去除userAuthMethods dbus接口授权
          优化OTP绑定和PAM认证流程及其相关接口
          优化OTP,UKEY解绑接口
          修复 在服务器版本中，无法开启MFA SSH功能的问题
          优化 在配置SSH MAF的重启SSH服务修改为重新加载SSH配置
          修复 在编译过程中出现的警告信息
          修复 在SSH远程登录账户锁定时出现多次锁定信息的问题
          添加 在UKEY未绑定登录时，提示未绑定的信息
          更新 翻译信息


author: zhouming <zhouming@kylinos.cn> 1.0.0-12
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 
          修复 多因子认证-图形化页面-用户管理-删除用户验证：kylin用户绑定安全密钥，删除kylin用户，新建kylin用户，重新绑定初始化的Ukey失败
          添加帮助文档相关内容
          添加 生成证书的脚本


author: mengyuan <mengyuan@kylinos.cn> - 1.0.0-19
changelog:
  - Type:update
  - ID: [BUG#504385]
  - SUG:NA
  - DESC: 
           504385 【v11 2603】已经解绑过otp再执行解绑命令还提示 “成功解绑 OTP”


author: peijiankang <peijiankang@kylinos.cn> - 1.1.0.47-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-music-1.1.0.47-ok9.25k0.14
          upstream commtid:6d4626ab05a46fe6f1712a2f06571fb1d0cbd724


author: huayadong <huayadong@kylinos.cn> - 1.1.0.47-1.p01.01
changelog:
  - Type: update
  - ID  : [BUG#584863]
  - SUG : NA
  - DESC: add Patch2:kylin-music-1.1.0.47-kylin-remove-jieba.dict.utf8-idf.utf8-data.patch
          去掉不合适的字符


author: douyan<douyan@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch 0001-fix-kylin-nm-4.10.0.0-add-LANG-env.patch


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#437383]
  - SUG: NA
  - DESC: kylin-nm-4.10.0.0-kylin-fix-closing-network-segment.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0.1kylin1k81-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0.1kylin1k81-ok8.24k1.3


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-fix-aboutinfo-and-singleinstance.patch
          add kylin-screenshot-1.0.0.1kylin1k81-add-copyright-info.patch


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p05
changelog:
  - Type:update
  - ID:TASK#222678
  - SUG:NA
  - DESC: Modify License to KylinSoft
          RPM ignore test code


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p06
changelog:
  - Type:bugfix
  - ID:[BUG#248111/BUG#247937/BUG#247889/BUG#247883]
  - SUG:NA
  - DESC: Fix bugs cause by sonarQube


author: cenhuilin <cenhuilin@kylinos.cn> - 0.1.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#398435]
  - SUG:NA
  - DESC:1.fix match process error problem
         2.mdmonitor is not start by default,delete disable enable mdmonitor
         3.fix no python file problem in build


author: zhaojianbin <zhaojianbin@kylinso.cn> - 1.0.0
changelog:
  - add V10 fix,commitID:2b236802f51600b2a2ec6147e8607656ad59d4fc
  - optimize spec file with proper directory structure and dependencies
  - add command completion and man page support
  - improve post-install scripts for better system integration


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-8
changelog:
  - Type:compile
  - ID:TASK#387157
  - SUG:NA
  - DESC:add unit test code & improve code coverage & modify bpf program.


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-11
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#431721 TASK#429232
  - SUG:NA
  - DESC:monitor of signal & inode & filehandle & number of process


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-12
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#443800 TASK#433604 TASK#431721
  - SUG:NA
  - DESC:fix some known issues and GPL issue


author: changtao <changtao@kylinos.cn> - 2.0-13
changelog:
  - Type:compile
  - ID:BUG#339854 BUG#339852 TASK#446051
  - SUG:NA
  - DESC:fix file monitor failed of rm operation & fix file monitor timestamp problem &fix PenTest


author: changtao <changtao@kylinos.cn> - 2.0-15
changelog:
  - Type:compile
  - ID:TASK#471101 TASK#415537
  - SUG:NA
  - DESC:fix fortify high-level problem & add file license headers


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.3kord-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.3kord-ok6.13k0.13
          upstream commitid: f1439f4f99b8afd4691d8a401861442be40ca815


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p01.01
changelog:
  - Type: bugfix
  - ID  : [TASK#622499][BUG#491479][TASK#586739]
  - SUG : NA
  - DESC: add dbus limit
          Skip MD5 check for ISO images missing md5sum.txt
          fixed empty plugin version info


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.16
          upstream commtid:7ad757f89f412a5be1d5684048a516c028645671


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.18
          upstream commtid:a780d9a4d36e4f58f6dea3412fc3974c14e5f6ea


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-ukui-control-center-jump-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: update kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#385929]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-shortcut-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-virtual-keyboard-3.0.1.0-ok0.12k0.4
          upstream commtid:f3b588138f44997947ec3b5c2912a11fcafcd71f


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#470133]
  - SUG : NA
  - DESC: fix kylin-virtual-keyboard animationAvailability


author: zuohsh <zuohongsheng@kylinos.cn> -2.0.1-1
changelog:
  - Type:Task
  - ID:457822
  - SUG:NA
  - DESC: kylin_warm_revert_patch-taget_definition_compatible_with_all_hotpatches.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-wayland-compositor-1.3.1.0-0k0.5
          upstream commtid:1e12b35019a7339c27fabc4c88c6cee50f566461


author: wanghao <wanghao2@kylinos.cn> 1.0.0-02
changelog:
  - Type: bugfix
  - ID: [BUG#205129][BUG#205129]
  - SUG:NA
  - DESC: 添加默认授权配置,解决清空策略失败的问题
  -	  add patch: kysdk-module-authorize-add-default-authorize-conf.patch


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p01
changelog:
  - Type:update
  - ID:[任务#328060]
  - SUG:NA
  - add Patch02: kysdk-module-authorize-copyright.patch
  - DESC: 328060 libkysdk-module-authorize在V11上移植适配


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p02
changelog:
  - Type:update
  - ID:[任务#332809]
  - SUG:NA
  - add Patch03:	kysdk-module-authorize-unit-test.patch
  - DESC: 332809 kysdk-module-authorize单元测试


author: duanhongtao <duanhongtao@kylinos.com> - 1.0.0-02.p03
changelog:
  - Type:update
  - ID:[任务#421367]
  - SUG:NA
  - add Patch04:	kysdk-module-authorize-code-rectification.patch
  - DESC: 421367 kysdk-module-authorize代码整改及合规检查


author: duanhongtao <duanhongtao@kylinos.com> - 1.0.0-02.p04
changelog:
  - Type:update
  - ID:[任务#435323]
  - SUG:NA
  - add Patch05:	kysdk-module-authorize-code-add-more-unit-test.patch
  - DESC: 435323 kysdk-module-authorize提升单元测试覆盖率至70%


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p05
changelog:
  - Type:update
  - ID:[BUG#353731][BUG#357525]
  - SUG:NA
  - add Patch06:	kysdk-module-authorize-selfprotect.patch
  - DESC: 
  - 353731 [V11-2503][B11][安全SDK]enforcing状态下，kdk-authorize授权过的程序，执行时无法访问授权配置
  - 357525 [V11-2503][安全SDK][安全管控]应用执行控制添加应用,执行报错


author: hanzhengyun <hanzhengyun@kylinos.com> - 1.0.0-02.p06
changelog:
  - Type:update
  - ID:[任务#642861]
  - SUG:NA
  - add Patch07:	kysdk-module-authorize-fix-negative-permission-id-boundary-check.patch
  - DESC:
  - 642861 kysdk-module-authorize 组件增强，增加接口枚举入参下界检查


author: yangguangjing <yangguangjing@kylinos.com> - 1.0.0-02.p07
changelog:
  - Type:update
  - ID:[任务#649283]
  - SUG:NA
  - add Patch08:	change_dlopen_lib_to_abs_path_and_add_root_permissive_20260707.patch
  - DESC:
  - task649283 kysdk-module-authorize 【威胁分析】组件优化。bug628071_628157_628095包安全漏洞【KVE-2026-0673】


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#307245]
  - SUG: NA
  - DESC: 修复parse_file_type函数解析文件类型错误问题
  -       kysec-common-fix-parse-file-type-error.path


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#405875]
  - SUG: NA
  - DESC: 增加单元测试代码
  -       kysec-common-add-unit-test-20241024.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       kysec-common-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#435234]
  - SUG: NA
  - DESC: 单元测试代码更新
  -       kysec-common-update-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#449386]
  - SUG: NA
  - DESC: 修复平台扫描的开源代码引入问题
  -       kysec-common-fix-opensource-introduce.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-01
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: kysec2.0命令行开发,添加kysec_policy的日志类型
  -         kysec-common-add-kysec-policy-log-type.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-05
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 增加获取指定目录下所有子文件和子目录接口,逐级获取接口,增加获取指定目录下文件和目录,仅指定目录层级
  -     kysec-common-add-get-path-api.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.2.1-06
changelog:
  - Type: CVE
  - ID: KVE-2026-0206
  - SUG: NA
  - DESC: 修复函数在处理文件操作时，存在条件竞争缺陷的问题，合入补丁
  -     KVE-2026-0206.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-07
changelog:
  - Type: update
  - ID: [TASK#643287]
  - SUG: NA
  - DESC: kysec-common组件增强
  -     kysec-common-fix-api.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-08
changelog:
  - Type: update
  - ID: [TASK#643287]
  - SUG: NA
  - DESC: kysec-common组件增强
  -     kysec-common-fix-api-remove-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: 模式切换时 去除kysec中开启box的动作,单独开启box
  -	  kysec-daemon-fix-double-enable-box.patch  
  - 	添加setModuleStatusReboot()接口, 可以直接重启系统
  -         kysec-daemon-add-set-module-status-reboot-interface.patch   
  -   box开启逻辑放在kysec中作为子项
  -         kysec-daemon-fix-change-box-status.patch
  - 修改security-switch --get 状态时 off的状态显示值由none 变为off
  -	  kysec-daemon-get-status-none-2-off.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653][BUG#351149]
  - SUG: NA
  - DESC: 修复调用reboot命令执行错误的问题
  -	  kysec-daemon-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -	无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -	  kysec-daemon-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#354035][BUG#353489]
  - SUG: NA
  - DESC: [BUG#354035]修复开启安全后 audit服务启动失败问题
  -       [BUG#353489]解决安全中心设置中无法关闭安全问题
  -       [其它]修复onoe模式下ksaf是开启状态, 检查切换模式是否需要重启错误的问题
  -          -- kysec-daemon-fix-none-mode-but-ksaf-on-check-reboot-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#369811][BUG#368135]
  - SUG: NA
  - DESC: [BUG#369811]修复softmode和enable互相切换时会修改子模块状态的问题
  -	[BUG#368135]推荐模式下，setstatus生效测试-apparmor-enable，失败
  -         -- kysec-daemon-fix-softmode-and-enable-switch-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#372191]
  - SUG: NA
  - DESC: [BUG#372191]修改涉密场景禁止设置安全模式和切换kysec、selinux、apparmor状态
  -	[其它]修复setstatus设置状态时, 如果状态出错, 是正常返回的问题
  -	  -- kysec-daemon-modify-sm-scene-forbidden-set-security-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#375127][BUG#372111]
  - SUG: NA
  - DESC: [BUG#375127]修复频繁操作security-switch --get 模式回变成off
  -	[BUG#372111]解决普通用户可以使用systemctl管理服务问题
  -	  -- kysec-daemon-fix-repeatedly-execute-security-switch-get-error.patch


author: litianhao <litianhao@kylinos.cn> - 2.0.0-10
changelog:
  - Type: bugfix
  - ID: [BUG#376773]
  - SUG: NA
  - DESC: [BUG#376773]修复频繁操作security-switch --get 模式回变成off
  -	  kysec-daemon-do-not-disable-audit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#379175]
  - SUG: NA
  - DESC: 修复切换切换strict或default模式后 grub中存在两个audit参数问题
  -	  kysec-daemon-fix-grub-audit-param-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#381085]
  - SUG: NA
  - DESC: 修复off模式下仅开启box 重启后 获取的安全状态不正常问题
  -	  kysec-daemon-fix-get-security-status-error-when-only-open-box.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-13
changelog:
  - Type: bugfix
  - ID: [TASK#555445]
  - SUG: NA
  - DESC: 解决只切换selinux状态时, 不进行策略编译下发
  -	  kysec-daemon-fix-set-selinux-status-not-sync-policy.patch


author: lengchunying <lengchunying@kylinos.cn> - 2.0.0-14
changelog:
  - Type: bugfix
  - ID: [TASK#566261]
  - SUG: NA
  - DESC: 修复CVE-2025-1202
  -         kysec-daemon-fix-cve-2025-1202.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-16
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         kysec-daemon-add-dbus-control-yaml-file.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-20
changelog:
  - Type: bugfix
  - ID: [BUG#639535]
  - SUG: NA
  - DESC: 为security-switch增加获取安全等级接口[KVE-2026-0730]
  -	  kysec-daemon-add-get-security-level-interface-for-security-switch.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#218046]
  - DESC: 修复系统重启后kmod的sm策略不生效
  -	  add patch: kysec-sync-daemon-fix-sm-policy-kmod-inoperative-when-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: bugfix
  - ID: [BUG#218522]
  - DESC: 修复重启后hub管控不生效的问题
  -     add patch: kysec-sync-daemon-fix-hub-policy-not-work-after-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: bugfix
  - ID: [TASK#217917]
  - DESC: 修复设备管控usb中的段错误
  -     add patch: kysec-sync-daemon-fix-usb-coredump.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: update
  - ID: [TASK#226809] 覆盖率测试
  - SUG: NA
  - DESC: 编写覆盖率测试用例，覆盖率>10%
  - 	add patch: kysec-sync-daemon-test-20240729.patch
  - 		kysec-sync-daemon-test1-20240731.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: update
  - ID: [TASK#391719][TASK#395913] 修复安全热点 修复fortify
  - SUG: NA
  - DESC: 修复安全热点
  - 	add patch: kysec-sync-daemon-fix-security-func.patch
  - 		       kysec-sync-daemon-fix-sonarqube-bugs.patch
  -              kysec-sync-daemon-fix-fortify-security-issues.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: update
  - ID: [TASK#401353]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-add-unit-test-20241030.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 解决安全热点,增加license
  - 	add patch: kysec-sync-daemon-fix-sonarqube-scan.patch
  -   add path: kysec-sync-daemon-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#435238]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-update-unit-code.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#591121]
  - SUG: NA
  - DESC: 增加test条件编译变量
  - 	add patch: kysec-sync-daemon-20260129-add-test-compile-condition.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#642867]
  - SUG: NA
  - DESC: kysec-sync-daemon 组件增强
  - 	add patch: kysec-sync-daemon-comment-unused-code.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-01.se.20
changelog:
  - Type: update
  - ID: [TASK#642867]
  - SUG: NA
  - DESC: kysec-sync-daemon 组件增强
  - 	add patch: kysec-sync-daemon-comment-unused-code-1.patch


author: zhangfan<zhangfan4@kylinos.cn> - 1.0.0-05
changelog:
  - Type:bugfix
  - ID:[BUG#334554]
  - SUG:NA
  - DESC:1.服务器v11-2503机密级计算功能集成
         2.增加自动化测试脚本
         3.增加麒麟license和copyright信息


author: wujiening<wujiening@kylinos.cn> - 1.0.0-07
changelog:
  - Type:bugfix
  - ID:[BUG#487417]
  - SUG:NA
  - DESC:1.sosid 命令长度限制修改为32字节，超过报错
         2.sosid 命令增加错误提示
         3.增加sosid命令自动化测试脚本


author: wujiening<wujiening@kylinos.cn> - 1.0.0-08
changelog:
  - Type:bugfix
  - ID:[BUG#489293]
  - SUG:NA
  - DESC:1.kmid 命令长度限制修改为32字节，超过报错
         2.kmid 命令增加错误提示
         3.增加kmid命令超出32字节自动化测试脚本


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#347304][BUG#346994][BUG#352195][BUG#347171][BUG#346911]
  - SUG: NA
  - DESC: 应用联网控制-命令行状态实时更新到UI测试（关-开-关）-切换过安全功能的none，命令开启联网控制失败[BUG#347304]
  -	普通用户修改保护箱状态失败kysec_policy命令未提示失败原因[BUG#352195]
  -	kysec_policy错误参数未输出帮助信息[BUG#347171]
  -	应用联网控制，首次安装系统后执行kysec_policy net on，提示先开启kysec[BUG#346994]
  -	未开启kysec，输入错误参数未输出帮助信息[BUG#346911]
  -	  kysec-utils-fix-kysec-policy-command-bug3.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#346897]
  - SUG: NA
  - DESC: 修复BUG#346897 文件保护箱打不开
  -	kysec_policy和kysec_set命令交互提示之前,先检查接口调用权限
  -	旧命令加入废弃提示
  -	_get_func_status()接口查询子模块状态之前,先查询kysec状态, kysec为关,子模块都是关
  -	文件保护允许删除不存在的文件、目录和软件包的只读保护策略和例外策略
  -	忽略链接文件的实际文件不存在时的报错
  -	  kysec-utils-fix-kysec-policy-command-bug4.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#360575]
  - SUG: NA
  - DESC: 修复BUG#360575 添加\删除\查看\清除白名单-对象不存在-kysec_set提示信息未换行
  -       同步桌面修改:
  -       1、修复bug#353590 kysec_policy命令行-A添加策略时,不允许设置-v选项, 增加错误提示
  -       2、修复enable和warning的拼写错误
  -       3、修改checkSecuritySwitchReboot_dbus()接口调用函数名错误的问题
  -       4、新增getBootMode_dbus()查询当前系统模式的接口
  -       5、网络保护查询所有策略不检查软件包和文件是否存在
  -       6、网络保护删除文件策略时, 不检查文件是否存在
  -       7、网络保护删除、添加和更新文件策略时，如果文件有所属软件包，需要处理软件包的策略
  -       8、执行控制添加告警弹窗状态设置
  -       9、执行控制和文件只读保护添加在不可变模式下过滤/usr路径下的文件
  -         -- kysec-utils-fix-kysec-policy-command-bug5.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#361691]
  - SUG: NA
  - DESC: [BUG#361691]解决进程保护和文件只读保护例外程序无法删除的问题
  -       同步桌面补丁:
  -       [其它]文件保护和执行控制添加例外程序时，在不可变模式下过滤/usr目录
  -       [其它]删除status_dbus.h中的config.h头文件引用, 解决其它包引用时编包错误
  -         -- kysec-utils-fix-kysec-policy-command-bug6.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#347672][TASK#471077][BUG#346106][BUG#352444][BUG#346106][BUG#364039][BUG#364125][BUG#363959]
  - SUG: NA
  - DESC: [BUG#347672]根据要求去除错误码
  -       [BUG#347672]根据要求去除错误码
  -       [TASK#471077]修复申请的资源未释放问题
  -       [其它]安全热点问题
  -       [BUG#346106]修复使用kysec_set添加文件策略后, kysec_policy更新对应文件策略失败的问题
  -       [BUG#352444]优化kysec关闭时, 开启单独模块耗时长的问题
  -       [BUG#346106]网络控制修改逻辑, 文件有所属软件包, 添加修改软件包策略
  -       [BUG#364039]文件保护的帮助信息不对
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#363959]目录添加保护，删除文件保护例外失败
  -       [其它]修改setstatus命令, 切换box时ksaf开启不提示重启
  -       同步桌面补丁:
  -       [其它]修改设备管控光驱的状态显示
  -       [其它]优化执行控制查询白名单速度
  -          -- kysec-utils-fix-kysec-policy-command-bug7.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-10
changelog:
  - Type: bugfix
  - ID: 
  - SUG: NA
  - DESC: [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368127]kysec_get netctl -l 无数据
  -       [BUG#367319]帮助信息-kysec_get输出多余信息
  -       [BUG#367069]更新被篡改的文件，有多余的提示信息
  -       [BUG#366955]off->开启kysec，禁止程序执行的子模块显示名称不对
  -       [BUG#366937]开启获取selinux状态，命令提示处于废弃阶段，删除getstatus和setstatus中废弃提示
  -       [BUG#366379]execban禁止程序执行-strict权限测试，root和auditadm用户不可执行
  -       [BUG#366367]strict模式下关闭selinux，出现交互信息
  -       [BUG#365915]清除标签-递归目录-执行命令未达预期，删除提示信息
  -       [BUG#365873]清除标签-目录，执行命令提示不符预期，删除提示信息
  -       [BUG#364687]kysec_policy包名添加的程序，路径方式删除成功提示失败
  -       [BUG#364667]kysec_set添加的策略，kysec_policy更新失败
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#364017]删除文件保护后，例外程序未被删除
  -       [其它]修改设备管控错误, 修改cdrom设置权限的方式
  -       [其它]修改scripts/init-bottom/3adm_enable文件,解决三员模式下kysec-daemon修改netctl.xml错误的问题
  -          -- kysec-utils-fix-kysec-policy-command-bug8.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#370259]
  - SUG: NA
  - DESC: [BUG#370259]删除服务器的命令行的禁止执行功能
  -	[BUG#369979]解决黑白名单安装控制-黑白名单同时生效时，rpm安装软件包提示核心已转储的问题
  -       [其它]修复编译优化参数是-O0时，编译错误的问题
  -       [其它]涉密场景下kysec_policy禁止设置kysec状态, setstaus禁止设置kysec、selinux和apparmor状态,
                kysec_set和kysec_get禁止和查询设置fpro、ppro和kmod策略
  -         -- kysec-utils-fix-kysec-policy-command-bug9.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#375705]
  - SUG: NA
  - DESC: [BUG#375705]kysec_policy userid --help root用户不展示帮助手册
  -       同步桌面修改：
  -       [BUG#377631]删除开明包标记后，kaiming命令不可用，软件包忽略软链接文件
  -       [BUG#358329]开明包删除标记后，进行标记查询，出现警告弹窗，软件包忽略软链接文件
  -       [其它]隐私保护除设置开关外，其它操作不检查用户权限检查
  -	  -- kysec-utils-fix-kysec-policy-command-bug10.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-13
changelog:
  - Type: bugfix
  - ID: [BUG#378971][BUG#380475][BUG#380117]
  - SUG: NA
  - DESC:[BUG#378971]下发docker中的脚本，无法移除策略, 修改通过pid获取路径接口
  -      [BUG#380475]kysec_policy -V不显示版本信息, 隐藏-V选项
  -      [BUG#380117]更新不存在的管控策略成功, 修改文件和软件包策略都不存在,不添加软件包策略
  -      [BUG#380347]/usr/etc/文件不应存在,修改spec文件,创建命令注释了
  -      spec文件增加libksaf-label-manager-devel依赖
  -	  -- kysec-utils-fix-kysec-policy-command-bug11.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-14
changelog:
  - Type: TASK
  - ID: [TASK#502485]
  - SUG: NA
  - DESC: 同步桌面修改：
  -	[BUG#355391]不可变模式下，忽略软件包中含有不可变目录下的文件设置执行控制标签
  -	  -- kysec-utils-fix-kysec-policy-command-bug12.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-15
changelog:
  - Type: TASK
  - ID: [TASK#548021]
  - SUG: NA
  - DESC: 同步Bug#434735修复补丁
  -	[BUG#434735]进程防杀死接口测试-执行./ppro add /usr/bin/top失败
  -	  kysec-utils-fix-return-value.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-16
changelog:
  - Type: update
  - ID: [BUG#450991]
  - SUG: NA
  - DESC: 【安全套件】文件防护功能函数优化，对目录添加保护后子目录仍然能够被删除移动
  -	  kysec-utils-add-dir-protect.patch


author: zhubing <zhubing@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#452593]【V11 2503】基于6.6.0-29.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-04


author: zhubing <zhubing@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [任务#461244]【V11 2503】基于6.6.0-31.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-05


author: zhubing <zhubing@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#463153]【V11 2503】基于6.6.0-32.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-06


author: zhubing <zhubing@kylinos.cn> - 1.0.1-07
changelog:
  - Type: update
  - ID: [任务#465109]【V11 2503】基于6.6.0-32.1内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-07


author: zhubing <zhubing@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [任务#469313]【V11 2503】基于6.6.0-32.2内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-08


author: zhubing <zhubing@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [任务#472101]【V11 2503】基于6.6.0-32.3内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-09


author: zhubing <zhubing@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [任务#482713]【V11 2503】基于6.6.0-32.5内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-10


author: zhubing <zhubing@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [任务#487747]【v11 2503】ksaf模块加载与内核版本号解绑-kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-11


author: zhubing <zhubing@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#382147]【自动测试】【v11-2503】0710daily的x86/arm版本安装选择虚拟化主机安装模块kysec2-devctl-module出现异常导致安装失败
  - SUG: NA
  - DESC: 升级包版本至1.0.1-12


author: zhubing <zhubing@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [任务#637871] kysec2-devctl-module组件增强
  - SUG: NA
  - DESC: 修复因memcpy潜在的内核堆栈泄漏问题, 升级包版本至1.0.1-13


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [任务#461243]【V11 2503】基于6.6.0-31.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-31.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [任务#463150]【V11 2503】基于6.6.0-32.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#347597]添加内核模块度量策略后，加载模块没有度量日志
  - SUG: NA
  - DESC: 修复没有tpm芯片时系统启动初期没有静态度量日志的bug


author: wangchi <wangchi@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [任务#465108]【V11 2503】基于6.6.0-32.1内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.1内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [任务#469315]【V11 2503】基于6.6.0-32.2内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.2内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [任务#472093]【V11 2503】基于6.6.0-32.3内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.3内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [任务#482719]【V11 2503】基于6.6.0-32.5内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.5内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID:
  -   [任务#487751]【v11 2503】ksaf模块加载与内核版本号解绑-kysec2-exectl-module
  -   [任务#485691]【v11 2503】开启安全的性能优化
  -   [需求##360361] 【安全套件】运维模式安装smexampleh后，退出运维模式，进入系统失败
  - SUG: NA
  - DESC: 优化静态度量性能，添加执行控制文件类型以及inode为空时的检查


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.07
changelog:
  - Type: update
  - ID: [BUG#290677]【V11-B14】【访问控制】【白名单访问控制】模块防卸载-执行控制标记为unknown内核模块无法修改标识
  - SUG: NA
  - DESC: 修复无法添加ko.xz文件到白名单


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [BUG#347949]【执行控制】将空目录加入白名单列表执行失败
  - SUG: NA
  - DESC: 添加空目录时接口返回0；过滤掉路径前面不存在的 /tmproot


author: wangchi <wangchi@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [BUG#528259]  修复python脚本无法被管控的问题
  - SUG: NA
  - DESC: 1.修改脚本判断逻辑，增加对pyc文件管控; 2.修改未授权文件执行控制标记;


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.0-7
changelog:
  - Type: bugfix
  - ID: [BUG#313455 TASK#420691 TASK#422689 TASK#423777]
  - SUG: NA
  - DESC: 将文件列表数组静态定义方式改为动态分配，解决有文件未打上标记问题
          【安全编译】安全编译整改 zhoukangyu
          【开源合规】开源合规整改 zhoukangyu
          【单元测试】增加单元测试覆盖率 zhoukangyu


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-0
changelog:
  - Type: update
  - ID: [TASK#471081 BUG#354750 BUG#338995]
  - SUG: NA
  - DESC: 解决fortify问题
          kysec2-scene-1.0.0-01.se.14.ky11.src.rpm卸载后，yum install指令提示核心已转储
          增加单元测试
          【V11 2409】【SW-B04】软件包安装报“Segmentation fault（核心已转储）”，安装失败


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-01.se.01
changelog:
  - Type: update
  - ID: [任务#420435]【ksaf】安全编译选项整改-kysec2-rbac-utils和审计
  - SUG:NA
  - DESC: 优化spec文件
          不能删除最后一条用户配置
          移除rpath


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [Bug#352562] 【20250513update内网源测试】【v11-2409】kysec2-rbac-utils卸载失败，提示错误信息
  - SUG: NA
  - DESC:	未开启ksaf不用同步内核策略


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#471093] 【安全红线】整改自研组件第一轮Fortify问题-kysec2-rbac-utils
  - SUG: NA
  - DESC: fortify整改
          同步fuzz代码


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [BUG#364017]
  - SUG: NA
  - DESC: kysec2-scenen升级策略合并, 新增清除例外策略接口,解决自保护相关问题
  -     kysec2-scene-20250613-add-some-features.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#366133]
  - SUG: NA
  - DESC: chronyc命令在strict模式下 只能root执行
  -     kysec2-scene-20250624-fix-some-bugs.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [BUG#370845][BUG#368687]
  - SUG: NA 
  - DESC: 修复安装pure-ftpd后ftp无法连接，获取kysec状态时线程阻塞的问题
  -     kysec2-scene-20250626-fix-some-bugs.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#372333]
  - SUG: NA 
  - DESC: 去除secadm的dac override权能
  -     kysec2-scene-remove-secadm-dac-override-cap.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#377637]
  - SUG: NA 
  - DESC: boxctl增加user protect接口
  -     kysec2-scene-20250708-fix-some-bugs.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-14
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -     kysec2-scene-add-sm-authorize-sync-exception-rules.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [BUG#379211]
  - SUG: NA 
  - DESC: 修复通过pid获取容器内进程的路径不正确
  -    kysec2-scene-fix-get-program-path-by-pid-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: 修复缺kmodctl.h文件中缺失的对scene_common.h的引用问题
  -    kysec2-scene-fix-missing-header-file.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-17
changelog:
  - Type: update
  - ID: [TASK#501697]
  - SUG: NA 
  - DESC: 修复：根据PID获取进程路径时，路径中大写字母强制转成小写字母，导致授权程序异常
  -    kysec2-scene-fix-get-path-case-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-18
changelog:
  - Type: update
  - ID: [BUG#383859]
  - SUG: NA 
  - DESC: 【通用用例安全适配】开启strcit后 secadm无权限执行 setsebool ftpd_full_access on
  -    kysec2-scene-fix-strict-not-exec-setsebool.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-19
changelog:
  - Type: update
  - ID: [BUG#416485]
  - SUG: NA 
  - DESC: 解决下发静态度量策略不生效问题
  -    kysec2-scene-fix-static_measurement-not-effective.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-20
changelog:
  - Type: update
  - ID: [BUG#418689]
  - SUG: NA 
  - DESC: 升级软件包时，即时生效策略
  -    kysec2-scene-add-update-rpm-sync-policy.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-21
changelog:
  - Type: update
  - ID: [TASK#549749]
  - SUG: NA
  - DESC: 移除setfattr命令特权
  -    kysec2-scene-remove-setfattr-permit.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-29
changelog:
  - Type: update
  - ID: [TASK#649101]
  - SUG: NA
  - DESC: kysec2-package-plugins组件优化
  -    kysec2-scene-fix-rpm-install.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-31
changelog:
  - Type: bugfix
  - ID: [BUG#642171][BUG#636005]
  - SUG: NA
  - DESC: 1.修复存在D-Bus名称抢占漏洞的问题-[KVE-2026-0752]；
  -    	2.修复存在配置策略文件权限设置不当，本地非特权用户可以读取策略内容的问题-[KVE-2026-0740]；
  -    	kysec2-scene-fix-KVE-2026-0752.patch


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.21
changelog:
  - Type:Bug
  - ID:[Bug#289319]
  - SUG:NA
  - DESC:1.修复篡改.bimabase文件中arrest_mode字段后依旧可以更新基准值的问题
         2.增加执行相关操作后同步更新PCR的流程


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.22
changelog:
  - Type:update
  - ID:[TASK#415481] [TASK#361223]
  - SUG:NA
  - DESC:1.安全热点问题修改（PCR部分）
         2.增加PCR相关测试用例
         3.安全编译参数增加strip


author: zhangfan<zhangffan4@kylinos.cn> - 2.0.14.24
changelog:
  - Type:update
  - ID:[TASK#435903]
  - SUG:NA
  - DESC:1.同步桌面v10 2503改动
         2.增加错误码
         3.新增卸载包时清理配置文件功能
         4.支持debug版本包编译
         5.修改copyright信息


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.27
changelog:
  - Type:BUG
  - ID:[Bug#353449]
  - SUG:NA
  - DESC:1.修改kybima.service服务失败问题
         2.增加生成度量报告后触发写trust.log的行为
         3.提升单元测试覆盖率


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.30
changelog:
  - Type:update
  - ID:[TASK#553767]
  - SUG:NA
  - DESC:1.安全编译栈保护参数改为-fstack-protector-strong,去掉-fstack-protector-all参数


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: litenglong <litenglong@kylinos.cn> - 2.39.1-16.p01
changelog:
  - Type:update
  - ID:[task#424805]
  - SUG:NA
  - DESC:
     author:  litenglong <litenglong@kylinos.cn>
     support enable-raw
     sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
     9400-set-locale-for-supporting-utf-8.patch

     author: shenzhongwei <shenzhongwei@kylinos.cn> -
     fix loongarch test error
     fix_loongarch_test_error.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 2.39.1-16.p02
changelog:
  - Type:bugfix
  - ID:[TASK#542963]
  - SUG:NA
  - DESC:libblkid: (xfs) external log: check for ceph_bluestore


author: zhangtao <zhangtao@kylinos.cn> - 2.39.1-16.p04
changelog:
  - Type:cves
  - ID:CVE-2026-27456
  - SUG:NA
  - DESC: backport to fix symlink traversal vulnerability in loop device setup


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-add-application-with-DISPLAY.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#349212]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-ukui-menu-empty.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.13.0-1.p05
changelog:
  - Type:update
  - ID:[Task#482359]
  - SUG:NA
  - DESC: add ukui-search-4.10.13.0-kylin-remove-sensitive.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223][BUG#369841]
  - SUG : NA
  - DESC: update ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch
          add ukui-search-4.10.13.0-kylin-ukui-search-app-data-service-sql-exec-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370275]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-GetDesktopFileByPid-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.13.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [TASK#601833]
  - SUG : NA
  - DESC: Patch10: ukui-search-4.10.13.0-kylin-correction-of-ambiguous-description.patch
          修复字典文件的错误字符


author: wanghao <wanghao2@kylinos.cn> - 1.0-2.skl2.ky10.p.se.05
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: libchkuid-1.0-login-check-same-uid.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 1.0-3.se.07
changelog:
  - Type:update
  - ID:[Task#133684]
  - SUG:NA
  - DESC: 提供状态检查接口
          add patch:libchkuid-get-chkuid-state.patch


author: hanzhengyun<hanzhengyun@kylinos.cn> - 1.0-3.se.08
changelog:
  - Type:update
  - ID:[Task#185626]
  - SUG:NA
  - DESC: 解决添加用户段错误的问题
          add patch:libchkuid-fix-segmentation-fault.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.09
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
           规范代码头部格式
       add patch: libchkuid-format-code-headers.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.10
changelog:
  - Type:update
  - ID:[Task#391549 Task#391551 Task#391555]
  - SUG:NA
  - DESC: 【单元测试】Sonarqube单元测试覆盖率提升-libchkuid
          【安全编译】gcc编译添加安全编译参数-libchkuid
          【安全函数】libchkuid整改
       add patch: libchkuid-test-add-unittest-and-coverage.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.11
changelog:
  - Type:update
  - ID:[Task#391551 Task#420701]
  - SUG:NA
  - DESC: 【安全编译】修改安全编译RPATH/STRIP
           【开源合规】合规整改


author: zhangnandi<zhangnandi@kylinos.cn> - 1.1.0-3
changelog:
  - Type:update
  - ID:[Task#649927]
  - SUG:NA
  - DESC: 解决init_uid_record()写入 /etc/uid_list 时未加锁问题、insert_uid_log()锁机制保护范围不足问题


author: songjuntao <songjuntao@kylinos.cn> - 1.10.2-3.p01
changelog:
  - Type:update
  - ID:TASK#599077
  - SUG:NA
  - DESC:fix use weak random while using rsa crt private operation


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: lizhipeng <lizhipeng@kylinos.cn> - 2.29.0-4.p01
changelog:
  - Type: update
  - ID: [TASK#614387]
  - SUG: NA
  - DESC: 1.EC: load xgfts with VBROADCASTI128 (AVX2)
          2.EC: special dispatch case for Hygon 1/2/3
          3.CRC: use crc32_iscsi_by8_02 instead
          4.CRC: short data opt
          5.CRC: add crc32_iscsi_by16_10 for simplicity of dispatch
          6.No 32-bit support in new files.


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解决动态变量不生效问题
          固定函数名和函数ID对应关系解决增量下发函数名会变问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解析策略前先初始化函数名解决增量下发函数名会变问题
          解决首次加载安全缺少section信息的问题
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [Bug#354818] 【poc】安全中心多次切换策略后，策略不生效
  - SUG:NA
  - DESC: 支持多次编译一次下发
          解决动态变量不生效问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 修改单元测试代码
          删除注释掉的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 未挂载日志目录时打印到屏幕


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-10
changelog:
  - Type:update
  - ID: [Bug#382843] 【出厂测试】【v11 2503】【需求41775】【内核模块防卸载】内核模块添加防卸载保护后卸载成功
  - SUG:NA
  - DESC: 文件写入强制落盘，防止断电丢失
          下发初始化策略，无策略二进制文件或无二进制策略目录均返回成功


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [任务#553741] 安全编译参数整改 / libksaf-policy-sync安全编译参数整改
  - SUG:NA
  - DESC: 将安全编译栈保护参数改为-fstack-protector-strong


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-13
changelog:
  - Type:update
  - ID: [任务#645217] libksaf-policy-sync组件增强
  - SUG:NA
  - DESC: 对makeSingleExprPolicy 函数和parsePolicyData 函数进行安全加固


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[TASK#366361] 【安全函数】libkydima整改
  - SUG:NA
  - DESC:安全编码合规性整改
  -      [TASK#361219] 【安全编译】gcc编译添加安全编译参数-libkydima
  -      修正不可靠代码，增加安全增强编译选项


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-19
changelog:
  - Type:update
  - ID:[BUG#351739]
  - SUG:NA
  - DESC: 针对set命令增加配置异常提示，针对get命令增加模块未加载时off状态显示
  	针对开源标准tcm2设备节点名称做自适应
  	修改kydima_get安装路径确保默认状态下普通用户可以访问该命令


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-20
changelog:
  - Type:update
  - ID:[BUG#353894] 【v11 2503】【B11】【需求44504】【x86\arm】【动态度量】不指定设备时，开启PCR策略命令执行失败
  - SUG:NA
  - DESC: 优化命令提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-21
changelog:
  - Type:update
  - ID:[TASK#471063] 【安全红线】整改自研组件第一轮Fortify问题-libkydima
  - SUG:NA
  - DESC: 修复server.cpp中 文件打开后存在句柄不释放的问题


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-22
changelog:
  - Type:update
  - ID: [BUG#369787] 【v11-2503】【B15】【需求44504】【动态度量】动态度量总开关关闭，无法获取子开关状态
  - SUG:NA
  - DESC: 修改kydima_get关闭状态显示信息
    	调整kydima_set用户执行权限


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-23
changelog:
  - Type:update
  - ID: [BUG#385507]【出厂测试】【v11-2503】【B20】【需求44504】【动态度量】帮助信息描述不对
  - SUG:NA
  - DESC: 优化命令帮助信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-24
changelog:
  - Type:update
  - ID: [BUG#408605]【自动化update内网源测试】【SP3-2403】libkydim包kydima_set命令设置周期可为负数
  - SUG:NA
  - DESC: 增加参数容错告警，修复后台服务无意义告警信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC: 
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC:
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-26~RC0
changelog:
  - Type:update
  - ID: [TASK#595487]完成libkydima模糊测试和ci对接
  - SUG:NA
  - DESC:
  	添加ci平台模糊测试支持
  	添加ci平台单元覆盖率测试支持


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-27
changelog:
  - Type:update
  - ID: [BUG#499553] 【2603-B09】kydima_get命令fuzzing过程中出现crash，非100%复现，请分析确认
  - SUG:NA
  - DESC:
  	优化对系统文件读取时的格式限位校验


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-28
changelog:
  - Type:update
  - ID: [BUG#502811]【V11 2503】【B12】【威胁消减】【动态度量】default模式下，kydima-daemon.service关闭后无法启
  - SUG:NA
  - DESC:
  	增加后台服务禁止重复启动限制


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p25
changelog:
  - Type: bugfix
  - ID:[BUG#345916]
  - SUG: NA
  - DESC: adjust the hardware binding order for value-added product
  	add v10/v11 version check by LICENSE OSNAME
  	add osname check and similar_product check in ukey activation
  	backup license_serial upload to activation platform
  	fix get subscription status error


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p26
changelog:
  - Type: bugfix
  - ID:[BUG#348464]
  - SUG:NA
  - DESC: fix kylin_activation_sync output when subscription


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p27
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: change similar_product to product for ukey activation
  	add place activation check for activation sync
  	kylin_productinfo output optimization
  	check license osname locally when kms version lower than 2.5


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p28
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC:
  	reduce the number of subscription status checks in kms
          check license osname locally when kms version lower than 2.5 \
  	 for kms udp activation mode
  	add local osname and product_type check when system is \
  	 migrated from other system which is not v11


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p29
changelog:
  - Type: bugfix
  - ID:[BUG#359265][TASK#463164]
  - SUG: NA
  - DESC:
  	change the process of obtaining hard disk serial number
  	optimized code and add copyright header
  	add restart_activation to conf for automatic activation


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p30
changelog:
  - Type: bugfix
  - ID:[BUG#363291][BUG#365021][BUG#364959]
  - SUG: NA
  - DESC: fix ukey write error 
  	fix activate with v10 kyinfo and license
  	update testcase


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p31
changelog:
  - Type: update
  - ID:[TASK#442245]
  - SUG: NA
  - DESC: fix value added product osname check error for place


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: cancel bind system uuid
  	change the way of obtaining embedded network card names on x86


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32.01
changelog:
  - Type: update
  - ID:[TASK#502175][BUG#378051][BUG#414807]
  - SUG: NA
  - DESC: fix ukey activation more times
          upload cpu and os version info to kms server
  	change the access method of os version


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p32.04
changelog:
  - Type:bugfix
  - ID:[BUG#526731]
  - SUG:NA
  - DESC: optimize the mechanism for obtaining unique hardware identifiers
          add sw64 support
          security hardening
          add support for mqtt user login


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.2-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.2-0k4.22


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p04
changelog:
  - Type: update
  - ID  : [TASK#474331]
  - SUG : NA
  - DESC: add libkysdk-system-2.5.1.2-kylin-fix-fortity.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p06
changelog:
  - Type: cves
  - ID  : KVE-2025-259872293 KVE-2025-0703 KVE-2025-0704 KVE-2025-0705 KVE-2025-0706 KVE-2025-0707 KVE-2025-0801 KVE-2025-1001
  - SUG : NA
  - DESC: KVE-2025-259872293、KVE-2025-0703、KVE-2025-0704、KVE-2025-0705、
          KVE-2025-0706、KVE-2025-0707、KVE-2025-0801、KVE-2025-1001


author: huayadong<huayadong@kylinos.cn> 2.5.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch:libkysdk-applications-2.5.1.0-kylin-fix-compile-error-of-STB_IMAGE.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.2.0-0k0.16


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add libkysdk-applications-2.5.1.0-fix-sonarqube-security-hotspots.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#352900]
  - SUG : NA
  - DESC: fix klabel problem displaying multiple line text


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p01
changelog:
  - Type:update
  - ID:[任务#333425]
  - SUG:NA
  - add Patch10:	libkysdk-security-copyright.patch
  - DESC: 333425 【sdk】移植libkysdk-security,解决编译错误,添加版权声明


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p02
changelog:
  - Type:update
  - ID:[BUG#242653]
  - SUG:NA
  - add Patch11:	libkysdk-security-unit-test.patch
  - DESC: 242653 【V11-B06】【安全sdk】devicesectest -g rulelist/devicelist无设备信息和策略输出
  - 添加单元测试


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p03
changelog:
  - Type:update
  - ID:[任务#332809]
  - SUG:NA
  - add Patch12:	libkysdk-security-unit-test2.patch
  - DESC: 332809 libkysdk-security单元测试添加测试内容提高覆盖率


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p04
changelog:
  - Type:update
  - ID:[任务#439178]
  - SUG:NA
  - add Patch13:	libkysdk-security-add-interface.patch
  - DESC: 439178 安全SDK-安全管控API接口增加


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p05
changelog:
  - Type:update
  - ID:[BUG#347377][BUG#351500]
  - SUG:NA
  - DESC: add Patch14: libkysdk-security-fix-secriskbox.patch
  -     【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM】篡改BIOS配置后，系统未给通知
  -     【V11 2503】【B10】【需求41769】【安全中心】【可信启动】【TPM/TCM/KYEE】不可信状态下，切换用户后登录系统，未弹出通知


author: xuyujun <xuyujun@kylinos.cn> 1.0.0-11.p06
changelog:
  - Type:update
  - ID:[BUG#358491]
  - SUG:NA
  - DESC: 【V11-2503】【B13】LoongArch物理机安装后物理鼠标键盘无法键入
  -         去除usbguard依赖


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p07
changelog:
  - Type:update
  - ID:[BUG#358491][BUG#363023][BUG#250867]
  - SUG:NA
  - DESC: add Patch15: libkysdk-security-fix-filesectest-coredump.patch
  - add Patch16: libkysdk-security-fix-process-exectl.patch
  - add Patch17: libkysdk-security-devicesec-emptyattr.patch
  - 【B13】【V11-2503】【安全SDK】【应用防护】文件保护控制添加应用，执行失败
  - 【B13】【V11-2503】【安全SDK】【应用防护】进程防杀死添加可执行应用
  - 【V11-B10】【安全SDK】整条设备管控策略添加-添加错误格式的策略成功，查看策略时提示核心已转储


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p08
changelog:
  - Type:update
  - ID:[BUG#363023]
  - SUG:NA
  - DESC: add Patch18: libkysdk-security-fix-process-exectl-2.patch


author: zhaoqingyou <zhaoqingyou@kylinos.cn> 1.0.0-11.p09
changelog:
  - Type:update
  - ID:[BUG#375587]
  - SUG:NA
  - add Patch19:	libkysdk-security-devicesec-auth.patch
  - DESC: 375587 【V11-2503】【B17】【安全SDK】【接口授权】添加删除接口授权提示usbguard服务开启失败


author: hanzhengyun <hanzhengyun@kylinos.cn> 1.0.0-11.p10
changelog:
  - Type:update
  - ID:[任务#647491]
  - SUG:NA
  - add Patch20:	libkysdk-security-remove-dbus-interface.patch
  - DESC: 647491 libkysdk-security-secRiskBox 组件功能增强


author: huayadong<huayadong@kylinos.cn> - 2.5.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: chnage libkysdk-gsetting Requires for delete glib2-devel


author: peijiankang<peijiankang@kylinos.cn> - 2.5.1.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add libkysdk-base-2.5.1.0-fix-sync-dbus-server-strcmp-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.0-0k1.6


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.5.1.0-1.p09
changelog:
  - Type: updates
  - ID  : [TASK#619873]
  - SUG : NA
  - DESC: fix add processing the user.db file for the user dbus


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.1-28
changelog:
  - Type:bugfix
  - ID:[BUG#354077]
  - SUG:NA
  - DESC:1.修改help命令的显示内容
         2.完善spi_sysconfig参数检测
         3.三员适配由API接口调整为kytrust_config命令适配


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.1-37
changelog:
  - Type:update
  - ID:[TASK553767]
  - SUG:NA
  - DESC:1.安全编译栈保护参数改为-fstack-protector-strong,去掉-fstack-protector-all参数


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.8
          upstream commitid: e244d03cbbaa55bff8777acce8145a0b09f20f6a


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.11
          upstream commitid: 8f91b3ac9f0c054dffc5d12daf0ae419909d1d54


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch02: ukui-biometric-auth-4.10.0.0-kylin-add-KylinUserDatePtr-for-root.patch


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#250151] [BUG#334551] [BUG#346033]
  - SUG : NA
  - DESC:
  -   1. peony fix translation error.
  -   2. remove a critial messagebox.


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#337905] [BUG#296933]
  - SUG : NA
  - DESC: remove support for exfat from format dialog.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#354594]
  - SUG : NA
  - DESC: fix thread race condition which caused coredumps


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#352389]
  - SUG : NA
  - DESC: fix for copying long name file to file safe box


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#497725]
  - SUG : NA
  - DESC: fix copying files that with specific symbols name


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop qt5-ukui-platformtheme-4.10.0.0-ok52k0.18
          upstream commtid:723df8376ab0c104ef9b4e5612fee9012cad4fc9


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: qt5-ukui-platformtheme remove libqt5-gesture-extensions


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#500213]
  - SUG : NA
  - DESC: add Patch05: qt5-ukui-platformtheme-4.10.0.0-kylin-fix-QLabel-Text.patch
          修复AI模块管理界面显示与预期不符配


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-35789.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-44235.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-44236.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: litianhao <litianhao@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [TASK#443853] 新增产品化功能 修复产品化功能BUG
  - SUG: NA
  - DESC: 优化sm授权机制，使用scene的接口控制授权
  -       sm-enhancement-optimize-authorize.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-04
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 优化sm授权进程，添加进程时，自动添加自保护例外放行
  -       sm-enhancement-add-self-protect-exception.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-05
changelog:
  - Type: update
  - ID: [TASK#468477]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-06
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 网卡管控-普通用户修改细粒度网卡策略无失败提示
  -       sm-enhancement-fix-common-user-no-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-07
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 修改普通用户设置细颗粒度网卡策略失败提示信息
  -       sm-enhancement-update-common-user-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-08
changelog:
  - Type: update
  - ID: [BUG#377853]
  - SUG: NA
  - DESC: 解决sm-authorize取消授权后无法切换strict模式
  -       sm-enhancement-fix-uninstall-sm-switch-strict-failed.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-09
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -       sm-enhancement-add-sm-authorize-sync-exception.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-10
changelog:
  - Type: update
  - ID: [BUG#382501]
  - SUG: NA
  - DESC: 修复remove pvid接口调用失败的问题
  -       sm-enhancement-fix-devctl-perm-when-remove-pvid.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 服务开机启动时，调用add_inf_policy add_device_policy add_usb_policy接口失败
  -       sm-enhancement-fix-return-incorrect-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-12
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 修改一处遗漏的返回值处理逻辑
  -       sm-enhancement-optimize-interface-return-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-13
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA
  - DESC: 同步桌面Bug#434735修复补丁
  -       sm-enhancement-sync-desktop-bug-434735.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-14
changelog:
  - Type: NA
  - ID: [TASK#589931]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-resolve-hotspot-issue.patch


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: peijiankang <peijiankang@kylinos.cn> - 2.74.3-10.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 2.74.3-4.p04(fix CVE-2025-4945 and Failed to fix websocket-test case)


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-10.p03
changelog:
  - Type: cves
  - ID:   [BUG#538961]
  - SUG:  NA
  - DESC: fix CVE-2026-0716 CVE-2026-1760 CVE-2026-5119 CVE-2025-14523
              CVE-2026-0719 CVE-2026-1467 CVE-2026-1801 CVE-2026-2369
              CVE-2026-1761 CVE-2026-1539


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-4.p02
changelog:
  - Type:cves
  - ID:[BUG#347089]
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
         CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911
         CVE-2025-32912 CVE-2025-32913 CVE-2025-32907 CVE-2025-32914


author: houzhiwei <houzhiwei@kylinos.cn> - 2.74.3-4.p03
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-4.p06
changelog:
  - Type:cves
  - ID:[TASK#593047][TASK#595441]
  - SUG:NA
  - DESC:fix CVE-2026-0719 CVE-2025-14523 CVE-2026-1761 CVE-2026-1539 CVE-2026-1467
         CVE-2026-0716 CVE-2026-2369 CVE-2026-1801 CVE-2026-1760


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: zhangjun <zhangjun@kylinos.cn> - 1.10.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Prevent files from being skipped if the output buffer is too small


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: liuming <liuming@kylinos.cn> - 1.11.0-6.p01
changelog:
  - Type:update
  - ID:task#650707
  - SUG:NA
  - DESC:fix byte amount copied for method in libssh2_agent_sign


author: chenyanpanHW <chenyanpan@huawei.com> - 1:1.1.1-26
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-pp_sharp_mod-calculation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-fix-underlinking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-png_sizeof-no-longer-available-since-libpng.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-CVE-2024-56431.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2026-5673.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: huayadong <huayadong@kylinos.cn> - 0.4.5.2-1.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01: timezonemap-0.4.5.2-kylin-mg-word-modification.patch


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yubo <yubo1@kylinos.cn> - 0.9.5-4.p01
changelog:
  - Type:update
  - ID:[任务#223921]
  - SUG:NA
  - DESC:add support to tpm2-00-permall update and disable sm4 in configure


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p30
changelog:
  - Type: bugfix
  - ID  : [BUG#353727]
  - SUG : NA
  - DESC: standard user shouldn't change other users' type、password、groups


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p32
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add kui-control-center-4.10.0.0-kylin-fix-display-widget.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p33
changelog:
  - Type: bugfix
  - ID  : [BUG#353362]
  - SUG : NA
  - DESC: add Patch30:ukui-control-center-4.10.0.0-kylin-change-checkUserPwd-rule.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p34
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-add-copyright-head.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p36
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-fix-SIGABRT-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p37
changelog:
  - Type: bugfix
  - ID  : [BUG#370881]
  - SUG : NA
  - DESC: fix opt bind prompt message size and position


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p39
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-add-kylin-mfa-help-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p40
changelog:
  - Type: bugfix
  - ID  : [BUG#396007]
  - SUG : NA
  - DESC: add ukui-control-center accountinfo user guide


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p41
changelog:
  - Type: bugfix
  - ID  : [BUG#448987]
  - SUG : NA
  - DESC: add Patch39: ukui-control-center-4.10.0.0-kylin-changeUserPwd-add-QMessageBox-warning.patch
  	changeUserPwd add QMessageBox warning.
          用户修改自身密码结束后添加弹窗，显示pam回显。


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p42
changelog:
  - Type: update
  - ID  : [TASK#553947]
  - SUG : NA
  - DESC: add Patch40: 0001-ukui-control-center-update-license-for-v11-2603.patch
  	update license for v11 2603


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p43
changelog:
  - Type: bugfix
  - ID  : [BUG#468605][TASK#553947]
  - SUG : NA
  - DESC: BUG#468605:get os_version from kylin-system-version.conf
          TASK#553947:update license for v11 2603(Revised)


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p44
changelog:
  - Type: bugfix
  - ID  : [TASK#525485][BUG#471359]
  - SUG : NA
  - DESC: remove ukui-search requires and add theme transparency value


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p45
changelog:
  - Type: update
  - ID  : [TASK#553999]
  - SUG : NA
  - DESC: add Patch44: 0001-ukcc-show-activation-status-dialog-when-click-serial.patch
  	show activation status dialog when click service serial number


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p46
changelog:
  - Type: update
  - ID  : [TASK#554089]
  - SUG : NA
  - DESC: add Patch45: 0001-ukcc-show-customer-when-locally-activated.patch
  	show customer info when system is locally activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p47
changelog:
  - Type: bugfix
  - ID  : [BUG#478205]
  - SUG : NA
  - DESC: Add UserName reading when dbus interface RealName is empty.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p48
changelog:
  - Type: bugfix
  - ID  : [BUG#477075]
  - SUG : NA
  - DESC: support password history account protection feature when change other users' password


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p50
changelog:
  - Type: bugfix
  - ID  : [BUG#481277][BUG#482067]
  - SUG : NA
  - DESC: show register number when system activated
          don't show activate button when system activated on main about page


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p51
changelog:
  - Type: bugfix
  - ID  : [BUG#483057]
  - SUG : NA
  - DESC: fix the check when system activation is expired


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p52
changelog:
  - Type: cves
  - ID  : [TASK#589295]
  - SUG : NA
  - DESC: fix KVE-2026-0104, encode password when used as command argument


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p52.01
changelog:
  - Type: cves
  - ID  : KVE-2026-0405 KVE-2026-0406
  - SUG : NA
  - DESC: fix KVE-2026-0405 and KVE-2026-0406


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p52.02
changelog:
  - Type: bugfix
  - ID  : [TASK#625879][Bug#500581][BUG#500383]
  - SUG : NA
  - DESC: update user license info
          Fixed defaultapp invalid when clicked reset button
          Fixed excessive password prompts when adding group members


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p52.07
changelog:
  - Type: update
  - ID  : NA
  - SUG : NA
  - DESC: add Patch60 Patch61 Patch62 Patch63 Patch64 Patch65
          hardening dbus interface


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p52.08
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add Patch66
          hardening dbus interface for polkit


author: douyan<douyan@kylinos.cn> 4.10.3.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch ukui-file-metadata-4.10.3.1-kylin-change-lib-to-lib64.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.3.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.3.1-ok4k0.3


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.1-1.p04
changelog:
  - Type: compile
  - ID  : [TASK#620945]
  - SUG : NA
  - DESC: rebuild for all arch and add copyright info


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.1-1.p05
changelog:
  - Type: update
  - ID  : [TASK#637941]
  - SUG : NA
  - DESC: 优化ukui-file-metadata对文件头参数的安全校验，增强ukui-file-metadata数据处理能力


author: huayadong<huayadong@kylinos.cn> 4.10.2.12-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-kylin-remove-s3-s4-chang-poweroff-reboot.patch


author: peijiankang<peijiankang@kylinos.cn> 4.10.2.12-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#288929]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-add-root-to-listCachedUsers.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.2.12-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-menu-4.10.2.12-ok0.2k0.9
          upstream commtid:3148deafc141224257df8dd9c5e67a37d8290e3b


author: huayadong <huayadong@kylinos.cn> - 4.10.2.12-1.p05
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: add patch4:ukui-menu-4.10.2.12-chnage-uninstall-rule.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.2.12-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#344202]
  - SUG: NA
  - DESC: add patch5:fix-chinese-translation-problem.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#347730] [BUG#347734]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-add-3adm.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#353097]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-update-3adm-appinfo.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#366591]
  - SUG : NA
  - DESC: add Patch08:ukui-menu-4.10.2.12-kylin-remove-kylin-process-manager.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#429765]
  - SUG : NA
  - DESC: remove argv --help-all
  	add Patch09:ukui-menu-4.10.2.12-kylin-remove-argv-help-all.patch
  	删除无用参数 --help-all


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p10.01
changelog:
  - Type: update
  - ID  : [TASK#636669]
  - SUG : NA
  - DESC: 移除ReloadSecurityConfig()废弃方法，减少dbus接口暴露，保障ukui-menu功能正常


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-notification-4.10.1.5-ok0.1k0.6
          upstream commtid:c54c60447b72e60f90fb0e80cfc9ceacc8d6177e


author: mengchaoming<mengchaoming@kylinos.cn> - 4.10.1.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#334491]
  - SUG : NA
  - DESC: add Patch2:ukui-notification-4.10.1.5-add-zh_HK.ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-fix-ukui-notification-server-no-quit-when-ukui-session-quit.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-kylin-fix-ukui-notification-server-coredump-SIGABRT-when-logout.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-sidebar-4.10.3.5-ok0.3k0.10
          upstream commtid:9b2175d39a58d36e5c2f7f05bade021dacd7c00a


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-fix-ukui-sidebar-coredump-SIGABRT-when-logout.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.3.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-change-kylin-screenshot-args.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: ukui-input-gather-4.1.0.0-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#289223]
  - SUG : NA
  - DESC: add ukui-input-gather-4.1.0.0-fix-coredump-about-ukuiinputgatherclient.patch


author: hy-euler <eulerstoragemt@huawei.com> - 1.0.22-3
changelog:
  - delete -Sgit in 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-descriptor-Fix-two-memory-safety-bugs-in-malformed-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: yanjainqing <yanjianqing@kylinos.cn> - 9.10.0-14.p01
changelog:
  - Type: Update
  - ID:   [TASK#425201]
  - SUG:  NA
  - DESC: Backport V11-2409 patch
  -   Support Phytium S5000c
  -   Add a path in DEFAULT_LOADER_NVRAM to solve the issue of not being able to find UEFI firmware in x86 architecture
  -   Support host-model for arm, solve core dump when libvirtd starts on Phytium,solve compile error with modify xml in the test dir
  -   Disconnect libvirt's dependency on rbd and install it when the user needs to support it
  -   Fix the translation problem of libvirtd.policy's prompts
  -   Support MCE error alert and optimization the function that locates VMs affected by MCE errors
  -   Fix CVE-2024-4418
  -   Fix virtual machine save and restore failure issue when CPU model is configured as host model mode


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p02
changelog:
  - Type: Update
  - ID:   [BUG#345770]
  - SUG:  NA
  - DESC: Fix some translation errors of common functions.


author: yanjianqing <yanjianqing@kylinos.cn> - 9.10.0-14.p03
changelog:
  - Type: Bugfix
  - ID: [BUG#347955]
  - SUG: NA
  - DESC: Enable netcf support
  -       Fix several iface-related translation issues


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p05
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p06
changelog:
  - Type: update
  - ID:   [TASK#592121]
  - SUG:  NA
  - DESC: Rebuild for wirshark update from 3.6.14-12.p01 to 4.4.10-3.p01


author: zhangxianjun <zhangxianjun@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type:update
  - ID:[TASK#425066]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: lipengyu <lipengyu@kylinos.cn> - 2.11.9-2.p01
changelog:
  - Type: update
  - ID: [TASK#424807]
  - SUG:NA
  - DESC:add patch
         0001-kylin-compat-support-V1.0-for-libxml2.patch
         0002-kylin-compat-support-V1.1-for-libxml2.patch


author: zuo <zuohongsheng@kylinos.cn> - 2.11.9-3.p03
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: yueyaoqiang <yueyaoqiang@kylinos.cn> -20241017-1.p01
changelog:
  - Type:update
  - ID:[Task#424811]
  - SUG:NA
  - DESC:add Corigine network interface card flash-boot-23.10-2.bin


author: zhangtao <zhangtao@kylinos.cn> -20241017-1.p03
changelog:
  - Type: update
  - ID: [Bug#343592]
  - SUG: NA
  - DESC: update 90-nfp-firmware-agilio-sriov-firmware.conf


author: yueyuankun <yueyuankun@kylinos.cn> - 20241017-1.p05
changelog:
  - Type:cves
  - ID:[Task#536541]
  - CVE:CVE-2024-36350 CVE-2024-36357
  - SUG:NA
  - DESC:Fix CVE-2024-36350 CVE-2024-3635


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.20.2-2
changelog:
  - Set TERM to xterm-256color
  - use https://github.com/mate-desktop/mate-terminal/commit/4f89d21
  - fix rhbz https://bugzilla.redhat.com/show_bug.cgi?id=1517870


author: longcheng <longcheng@kylinsec.com.cn> - 1.22.1-5
changelog:
  - KYOS-B: add kylin mask and part of translations
  - KYOS-T: Fix translation errors in help manual.
  - KYOS-B: set text preview content (#24148)
  - KYOS-B: add two color theme and change the default color theme to Dracula Dark (#30872)
  - KYOS-B: select the default charset by locale(#49592)


author: huayadong <huayadong@kylinos.cn> - 1.22.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#238335]
  - SUG:  NA
  - DESC: Patch1009: mate-terminal-1.22.1-kylin-remove-Reset.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.22.1-5.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#240137]
  - SUG:  NA
  - DESC: Patch1010: mate-terminal-1.22.1-fix-help-display-error.patch


author: Shixiong Ou <oushixiong@kylinos.cn> - 24.0.5-1.p02
changelog:
  - Type:bugfix
  - ID:TASK#378129
  - SUG:NA
  - DESC:add upstream orcjit patch and support loongarch64 orcjit


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: weiyucheng<weiyucheng@kylinos.cn> - 24.0.9-1
changelog:
  - Type: update
  - ID: [TASK#439666]
  - SUG: NA
  - DESC: change package name from docker-ce to moby && init package moby-24.0.9
          fix CVE-2024-29018
          fix CVE-2024-41110
          provides docker && conflicts docker-engine moby-engine


author: weiyucheng<weiyucheng@kylinos.cn> - 24.0.9-1.p01
changelog:
  - Type: update
  - ID: [TASK#468343]
  - SUG: NA
  - DESC: resolve secure compilation issues and add kylin notice to NOTICE file


author: weiyucheng <weiyucheng@kylinos.cn> - 24.0.9-1.p04
changelog:
  - Type:CVE
  - ID:CVE-2026-34040
       CVE-2026-33997
  - SUG:NA
  - DESC:fix CVE-2026-34040, CVE-2026-33997


author: gaihuiying <eaglegai@163.com> - 2:0.94-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if detach the GTK package from the master package
         modify changelog  to add epoch:2


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: chenyanpanHW <chenyanpan@huawei.com> - 4.9.3-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6842.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-6843.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: lipengyu <lipengyu@kylinos.cn> - 6.4-10.p01
changelog:
  - Type:update
  - ID:[Task#327352]
  - SUG:NA
  - DESC:ncurses-support-loongarch&&enable relocation for kylin


author: lijian <lijian2@kylinos.cn> - 0.3.0-1
changelog:
  - Type:update
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:Upgrade to 0.3.0
         Support to deploy, extend OS & k8s clusters in VM & PXE for generalos
         Delete housekeeper


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p01
changelog:
  - Type:bugfix
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:1.Fix incorrect bus type in aarch64, from ide to scsi. IDE is not supported in aarch64.
         2.Adjust the cloud-init service start sequence. Some services are not started.
           After adjustment, the service starts normally.
         3.Add the rpm package storage path to the http service buffer, so that they can be obtained after instance starts.
         4.Fix the bug of resetting existing instances during extension in aarch64.
           Some key configurations have been changed, resulting in OpenTofu rebuilding instances.
         5.Support loongarch64 for generalos.


author: liukuo <liukuo@kylinos.cn> - 0.3.0-1.p02
changelog:
  - Type:update
  - ID:[TASK#331942]
  - SUG:NA
  - DESC:Add go test files.
         Add require packages libxslt and kubernetes-client for nkd.
         Delete housekeeper and upgrade command.
         Modify containerd runtime configuration and copy cni files for nkd.


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p03
changelog:
  - Type:update
  - ID:[TASK#379139]
  - SUG:NA
  - DESC:Change the dependency package management method from go vendor to go mod.


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p05
changelog:
  - Type:update
  - ID:[TASK#416005]
  - SUG:NA
  - DESC:Remove OpenStack authentication information from the configuration file template


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yaoxin <yao_xin001@hoperun.com> - 4.1.114-1
changelog:
  - Update to 4.1.114
    * Validate HTTP Method (#14280)
    * Release AdaptiveByteBuf when ownership could not be transfered. (#14285)
    * Make arenas reuse their last chunk more aggressively (#14291)
    * Only add Magazine to Set if we can ensure its removed again (#14292)
    * Ensure Chunk will not leak if init of AdaptiveByteBuf fails for whatever reason (#14295)
    * Correctly release one-off allocated chunks (#14302)
    * Ensure pooled memory is released when AdaptivePoolingAllocator is GC'ed (#14304)
    * Slices / duplicates of AdaptiveByteBuf must not escape the rootParent (#14310)
    * Fix sizeBucket bug in AdaptivePoolingAllocator (#14311)
    * AdaptiveByteBufAllocator: More strict reference counting for chunks (#14322)
    * Ensure we not store the DnsQueryContext for later removal when we couldnt obtain a query id (#14326)
    * Reduce memory fragmentation (#14333)
    * Properly free magazine chunks and avoid orphaned magazines (#14334)
    * Magazines must be freed under the expand lock (#14336)
    * Release message before failing promise when multiple requests are written while upgrade is in progress. (#14342)
    * Allow to reuse more then one session per host / port mapping (#14356)
    * Ensure writes will not fail when triggered after receiving UpgradeEvent.UPGRADE_SUCCESSFUL (#14362)
    * Refactor DnsNameResolver to be able to use different strategies when it comes to creating Channels for queries. (#14374)
    * DnsNameResolver: allow users to skip bind() during bootstrap (#14375)
    * DnsResolverBuilder methods should make it clear that these are for DatagramChannel (#14379)


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p01
changelog:
  - Type: update CVE
  - ID:   [TASK#553251]
  - SUG:  NA
  - DESC: 1.Fix CVE-2025-59419
          2.Fix a build error
          3.Remove unused buildrequires: netty-tcnative


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p02
changelog:
  - Type: update
  - ID:   [BUG#468839]
  - SUG:  NA
  - DESC: Update information that CVE-2022-24823 has been fixed while upgrading to 4.1.114


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: chenjian <chenjian@kylinos.cn> - 3.2.1-5.p02
changelog:
  - Type:Task
  - ID:[TASK#648193]
  - SUG: NA
  - DESC: fix OVSDB Python monitors expose UUIDv1 MAC/time data over plaintext


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p01
changelog:
  - Type: bugfix
  - ID: [BUG#334490]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p06
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p07
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p09
changelog:
  - Type: cves
  - ID: CVE-2026-48142 CVE-2026-42055
  - SUG: NA
  - DESC: fix CVE-2026-48142 CVE-2026-42055


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: songliyang <songliyang@kylinos.cn> - 1:20.18.2-7.p01
changelog:
  - Type: updates
  - ID:   [BUG#528049]
  - SUG:  NA
  - DESC: 1.Upgrade to fix followup CVEs:
            CVE-2025-55130 CVE-2025-55131 CVE-2025-55132 CVE-2025-59465
            CVE-2025-59466 CVE-2026-21637 CVE-2026-21710 CVE-2026-21713
            CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 CVE-2026-21717
          2.Fix a build error on sw_64


author: Qiang Wei <qiang.wei@suse.com> - 2.2.1-1
changelog:
  - Update to version 2.2.1.
    * Remove 0001-bash-Fix-nvme-completion.patch, it is fixed in upstream.
    * backport upstream patch: Bash completion: move global declare into function.


author: kouwenqi <kouwenqi@kylinos.cn> - 2.8-1.p01
changelog:
  - Type: bugfix
  - ID: [TASK#631623]
  - SUG: NA
  - DESC: do not issue warning when nvme_core module is not loaded


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:update the sshd_config and ssh_config, add the auto control
          mode scripts, add auto generate sm2 hostkey when start sshd service,
          fix ssh-keyscan can't get host pubkey issue


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: jiaocong <jiaocong@kylinos.cn> - 9.6p1-5.p07.02.se.01
changelog:
  - Type:update
  - ID:TASK#608701
  - SUG:NA
  - DESC:add comment for StrictScpCheck option in sshd_config.


author: liuming <liuming@kylinos.cn> - 9.6p1-5.p07.04.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p01
changelog:
  - Type: update
  - ID:TASK#424671
  - SUG:NA
  - DESC: add tlcp protocol patch, add tls rfc8998 patch , add zuc algorithm
          patch, add random drbg satisfy the GM/T 0105-2021 implementation,
          add passout and cipher parameter of ecparam apps,
          add Add-support-for-Zhaoxin-SM2-3-4-RNG.patch,
          fix some issues for the base openssl version and
          adapter the kylin old version cert


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:3.0.12-15.p10
changelog:
  - Type:cves
  - ID:TASk#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160
             CVE-2025-69418
             CVE-2025-69419
             CVE-2025-69420
             CVE-2025-69421
             CVE-2026-22795
             CVE-2026-22796


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p12
changelog:
  - Type:cves
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-31790,CVE-2026-31789,CVE-2026-28390,
  	   CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p13
changelog:
  - Type:cves
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-34182,
             CVE-2026-42766,CVE-2026-42767,CVE-2026-42770,CVE-2026-45445,
             CVE-2026-45446,CVE-2026-45447


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p01
changelog:
  - Type:update
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:Add providers of libvirt, openstack and template 
         support LoongArch64


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix file lock type compatibility on sw64 by using write lock only


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: shaojiansong <shaojiansong@kylinos.cn> - 20230518-1.p02
changelog:
  - Type:bugfix
  - ID:[TASK#234560]
  - SUG:NA
  - DESC:Add kylin-11.0.xml and kylin-hostos-11.0.xml for recognization of kylinos-v11 on virtmanager


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add peony-share Requires: samba samba-client


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok2k1.3
          upstream commitid: c2238e7f6811fe1e1faa5a9fde637c32b2d785bd


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-fix-peony-share.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#352174]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-add-uncompress-type.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p07.03
changelog:
  - Type: bugfix
  - ID  : [BUG#584613]
  - SUG : NA
  - DESC: reference gvolume object if we used after(rebuild after peony fix)


author: mengchaoming <mengchaoming@kylinos.cn> - 0.80-10.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch
  - add patch: 0001-kylin-add-zh-HK-po.patch
  - 修改zh_HK.po文件的“户”为“戶”: kylin-modify-zh_HK_po.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 0.80-10.p01.se.01
changelog:
  - Type:update
  - ID:[Task#329161]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  - add patch: passwd-0.80-add-security-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 0.80-10.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#383361]
  - SUG:NA
  - DESC: passwd去除对libkysec包的依赖,改用dlopen方式
  - add patch: passwd-remove-libkysec-require.patch


author: zhangxingrong <zhangxingrong@uniontech.cn> - 0.11.7-16
changelog:
  - fix logging handlers imports
  - use ruby code instead of system binaries
  - fix running pcsd from git


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.8-1
changelog:
  - Update package to version 0.11.8
  - Updated pcs-web-ui to 0.1.20
  - Adjust OCF metadata processing to support the latest pacemaker change


author: bixiaoyan <bixiaoyan@kylinos.cn> - 0.11.9-1
changelog:
  - Update package to version 0.11.9
  - Update pcs-web-ui to 0.1.22
  - Using pcs resource delete | remove to delete resources representing remote and guest nodes.


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: chenyanpanHW <chenyanpan@huawei.com> - 2.38-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-42496-and-CVE-2026-42497.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 3.02-1.p01
changelog:
  - Type:cves
  - Id:CVE-2026-42496 and CVE-2026-42497
  - SUG:CVE-2026-42496 and CVE-2026-42497
  - DESC:fix CVE-2026-42496 and CVE-2026-42497


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: Phytium
changelog:
  - Add TearFree Function
     - Add DisplayLink Function 

    * Tue June 11 2024 Phytium
     - Init pe220x-ddx


author: longcheng <longcheng@kylinos.com.cn> - 1.22.2-4
changelog:
  - fix(pluma-utils):Fixed garbled toolTips path in tab page with GB18030 encoding chinese translation


author: peijiankang <peijiankang@kylinos.cn> - 1.22.2-4.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#240263]
  - SUG:  NA
  - DESC: add pluma-1.22.2-cannot-automatically-detect-Chinese-encoding.patch
          add pluma-guide.tar.gz(fix BUG#240720)


author: peijiankang<peijiankang@kylinos.cn> - 1.22.2-4.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add pluma-1.22.2-fix-coredump-about-uri-isnot-exist.patch


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p02
changelog:
  - Type:cves
  - ID: CVE-2025-9566
        CVE-2025-58058
  - SUG:NA
  - DESC:Fix CVE-2025-9566 and CVE-2025-58058, 
         and change exec path from /usr/bin to /usr/local/bin about podman-docker, 
         and exclude podman-remote.1.gz from podman-remote rpm


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p03
changelog:
  - Type:cves
  - ID: CVE-2024-9676
        CVE-2024-9675
        CVE-2024-9407
        CVE-2024-9341
  - SUG:NA
  - DESC:Fix CVE-2024-9676, CVE-2024-9675, CVE-2024-9407, CVE-2024-9341


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: huayadong <huayadong@kylinos.cn> - 123-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#243579]
  - SUG:  NA
  - DESC: add Patch1:polkit-123-kylin-add-10-shutdown.rules-restrict-reboot-and-shutdown.patch


author: huayadong <huayadong@kylinos.cn> - 123-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#260533]
  - SUG:  NA
  - DESC: add Patch2:polkit-123-kylin-fix-prompt-no-chinese.patch


author: tianyunnuan<tianyunnuan@kylinos.cn> - 123-1.p03
changelog:
  - Type:cves
  - ID:CVE-2025-7519
  - SUG:NA
  - DESC: add patch backport-CVE-2025-7519-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch
          add patch polkit-123-kylin-fix-prompt-no-chinese.patch


author: songliyang <songlyang@kylinos.cn> - 0.123-4.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100 Patch101 to fix BUG#243579 and BUG#260533. Author: huayadong
          3.Backport Patch102 to fix BUG#499255. Author: zhoukangyu


author: houhongxun <houhongxun@kylinos.cn> - 23.12.0-7.p03
changelog:
  - Type: cves
  - ID:   [Task#549531]
  - SUG:  NA
  - DESC: fix CVE-2025-43718 and CVE-2025-52885
          fix conflicting man documents problem


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p01
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: update to 15.17 (fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p02
changelog:
  - Type: updates
  - ID: [BUG#556223],[BUG#546389]
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2025-8713, CVE-2025-8714


author: liuying <liuying03@kylinos.cn> - 15.18-1.p01
changelog:
  - Type: cves
  - ID: CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473


author: wangjia <wangjia55@huawei.com> - 42.2.4-1.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:disable the failed tests that caused by BEP to repair binary diffrence


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: lipengyu <lipengyu@kylinos.cn> - 3.7.1-2.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-10.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:2.81.0-1.p02
changelog:
  - Type: Updaets 
  - ID: TASK#504811
  - SUG: NA
  - DESC: fix the problem that the previous patch was not merged


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.16.6-1
changelog:
  - Update package with version 7.16.6
    Prevent leading whitespace in markdown code blocks from being stripped
    Update base.tex.j2 for macro compatibility with newer versions of Pandoc
    Allow including text/x-rst outputs in rst conversion, transition away from text/restructuredtext
    Add support for mistune 3.1.0
    [HTMLExporter] Initialize resources before widget filtering
    Add a toggle to skip the svg encoding of images
    Support configureable width and height of reveal presentations
    Convert coalescese_streams function to CoalesceStreamsPreprocessor


author: openeuler_bot <infra@openeuler.sh> - 7.17.0-1
changelog:
  - Add support for arbitrary browser arguments (version:7.17.0).
  - Fix QtPNGExporter returning empty bytes on macOS (version:7.17.0).
  - Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) (version:7.17.0).
  - Drop support for Python 3.8, fix the CI tests (version:7.17.0).


author: YangengLiu <dev01202@linx-info.com> - 7.17.1-1
changelog:
  - update version to 7.17.1
    * Allow configureable WebPDF JavaScript processing timeout.
    * Fix when checking template paths on shared filesystems.
    * Tweak webpdf template logic to fix duplicate extension problem.


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: houzhiwei <houzhiwei@kylinos.cn> - 1.17.1-16.p01
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: chengyechun <chengyechun1@huawei.com> - 1.26.17-2
changelog:
  - Type:CVE
  - ID:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped form HTTP requests


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p01
changelog:
  - Type: Update
  - ID:   [TASK#425199]
  - SUG:  NA
  - DESC: 
  - Add loongarch defalut machine type in machine map and fix qemu-iotest error
  - enable spice for aarch64
  - add phytium cpu models ft-2000+ ft-S2500 ft-S5000c
  - show virtio nic bandwith as 10Gbps
  - make libvirt support host-model on aarch64
  - Fixed:systemd-detect-virt returns the result qemu, when kvm acceleration is enabled in Loongson architecture.
  - Add support for migration from rhel or openEuler to Kylin
  - Fix acpi hotplug state cause migration failure


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p02
changelog:
  - Type: Update
  - ID:   [TASK#433635]
  - SUG:  NA
  - DESC: Support migration between Phytium different CPU model


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p03
changelog:
  - Type: Bug
  - ID:   [BUG#346607]
  - SUG:  NA
  - DESC: Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'.


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p05
changelog:
  - Type: Update
  - ID:   [BUG#346607][BUG#351085]
  - SUG:  NA
  - DESC: fix vm can not use virtio-gpu with error 'egl-headless is not available'


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p06
changelog:
  - Type: Update
  - ID:   [TASK#433654]
  - SUG:  NA
  - DESC: sync virtcca support patch from euler and fix bug


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p07
changelog:
  - Type: Bugfix
  - ID:   [Bug#346647][Bug#346638]
  - SUG:  NA
  - DESC: fix vm shutdown and reboot issues in loongarch


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p08
changelog:
  - Type: Bugfix
  - ID:   [Bug#398833]
  - SUB:  NA
  - DESC: resolve file conflicts in compatibility testing


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p09
changelog:
  - Type: Bugfix
  - ID:   [Bug#393455]
  - SUB:  NA
  - DESC: hw: Fix bug, multiple default machines caused the qemu-kvm to crash.


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-27.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-2243
  - SUG:  NA
  - DESC: Sync fix CVE-2026-2243 Heap buffer out-of-bounds read in VMDK compressed grain parsing


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 11:8.2.0-27.p13
changelog:
  - Type: cves
  - ID:   CVE-2026-3195 CVE-2026-3196 CVE-2025-11234
  - SUG:  NA 
  - DESC: MAINTAINERS: add me as maintainer to virtio-snd
          virtio-snd: remove TODO comments
          virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
          virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
          virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
          Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 11:8.2.0-27.p14
changelog:
  - Type: cves
  - ID:   CVE-2025-12464
  - SUG:  NA
  - DESC: Sync fix CVE-2025-12464 qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p15
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: malike <malike@kylinos.cn> - 11:8.2.0-27.p16
changelog:
  - Type: Update
  - ID:   [TASK#589851]
  - SUG:  NA
  - DESC: Add support Hygon hct live migration feature


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p17
changelog:
  - Type: cves
  - ID:   CVE-2026-5761
  - SUG:  NA
  - DESC: Fix CVE-2026-5761 virtio-blk: fix zone report buffer out-of-memory


author: peijiankang <peijiankang@kylinos.cn> - 0.9.2-1.p01
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: fix build error caused by disabling decoration_shadows support in qt5-qtwayland


author: Xu Jin <jinxu@kylinos.cn> - 8.0.2-3.p01
changelog:
  - Type:enhancement
  - ID:TASK#372069
  - SUG:NA
  - DESC:Add loongarch support.Fix build error for Kylin V11.


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p02
changelog:
  - Type: update
  - ID  : [TASK#587039]
  - SUG : NA
  - DESC: Patch1002:qtbase-5.15.10-work-around-pyside2-brokenness.patch
          适配pyside2


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#485611]
  - SUG : NA
  - DESC: Patch1003:CVE-2025-5455-qtbase-5.15.patch
          修复CVE-2025-5455


author: lizequan<lizequan@kylinos.cn> - 5.15.10-11.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#504703]
  - SUG : NA
  - DESC: Patch1004:qt5-base-fix-coredump-missing-display-env-in-ssh.patch


author: peijiankang<peijiankang@kylinos.cn> - 5.15.10-11.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#507841]
  - SUG : NA
  - DESC: add sw_64 QT_ARCH to fix kylin-aiassistant build error


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: lifeifei <lifeifei@kylinos.cn> 7.2.10-1
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangchaorui <zhangchaorui@kylinos.cn> -3.2.2-152.p01
changelog:
  - Type:cves
  - ID:CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257
  - SUG:NA
  - DESC:fix CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257


author: songliyang <songlyang@kylinos.cn> - 1.4.5-2.p01
changelog:
  - Type: update
  - ID:   [TASK#622061]
  - SUG:  NA
  - DESC: 1.Sync for 4 architectures
          2.Skip part of check test error on sw_64 and aarch64


author: weiyuan <weiyuan@kylinos.cn> - 1.1.12-1.p03
changelog:
  - TYpe: update
  - ID: [TASK#371229]
  - SUG: NA
  - DESC: fix the problem that attackers could create files in arbitrary locations on the host filesystem


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p04
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p05
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 and fix system property miss handling in p04


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p07
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:resolve secure compilation issues and sync modified to the sw64 arch


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p08
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:inject stack proctector from Go compiler and modify the correct commit info


author: litianhao <litianhao@kylinos.cn> - 1.2.1-2.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG:NA
  - DESC: 合入sm设备管控补丁
          sane-backends-add-sm-devctl.patch


author: zhubing <zhubing@kylinos.cn> - 1.2.1-2.p01.se.02
changelog:
  - Type: update
  - ID: [TASK#427527] 增加ksaf补丁
  - SUG:NA
  - DESC: 移除sm设备管控代码，合入ksaf devctl补丁
          sane-backends-remove-sm-devctl.patch
          sane-backends-add-ksaf-devctl-hook.patch


author: sunjin <sunjin@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[Bug#290827][Bug#290809][Bug#281275][Bug#292899]
  - SUG:NA
  - DESC: 【安全加固】security-reinforce入库
  -   【V11-B14】【安全加固】【还原中】还原中断，安全加固界面异常 [用例#1365655]
  -   【V11-B14】【安全加固】【安全扫描】编辑用户自定义模板，安全中心闪退 [用例#1365641]
  -   【V11 B12】【安全加固】【交互命令】选择模板-扫描/加固/还原测试 加固模板与加固项不匹配 [用例#989419]
  -   【v11-B14】【安全加固】使用扫描项为所有的自定义模板进行扫描加固后，重启系统，安全加固功能不可用


author: sunjin <sunjin@kylinos.cn> 2.0.0-01
changelog:
  - Type:update
  - ID:[Task#436662][Bug#313077]
  - SUG:NA
  - DESC: 安全加固2.0版本，更新基线描述，v11适配空闲时间锁屏加固项
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   修复了一些自测发现的问题，禁用不必要别名需要执行newaliase


author: sunjin <sunjin@kylinos.cn> 2.0.0-02
changelog:
  - Type:update
  - ID:[Bug#347476][Bug#313077][Bug#348346][Bug#348226]
  - SUG:NA
  - DESC:
  -   【v11 2503】【B09】【需求44508】【uid唯一性检验】关闭uid唯一性检验-uid加固项测试，还原报告中用户名称出现了2次的问题
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   【B09】【41499】【V11-2503】【安全加固】【系统安全】防火墙配置在报告中描述错误
  -   【B09】【41499】【V11-2503】【安全加固】【文件权限】限制日志文件权限，描述错误
  -    未开启三员，root或管理员有安全加固的使用权限； 开启三员，仅root有安全加固的使用权限


author: sunjin <sunjin@kylinos.cn> 2.0.0-03
changelog:
  - Type:update
  - ID:[Bug#349061][Bug#349027][Bug#348813][Bug#348462][Bug#347932][Bug#348879]
  - SUG:NA
  - DESC:
  -   【B09】【41785】【V11-2503】【安全加固】【安全服务】用户登录ftp后访问目录权限正确 加固还原后源文件备注的信息被删除
  -   【B09】【41499】【V11-2503】【安全加固】【安全服务】限制FTP用户登录后能访问的目录加固|还原后的报告描述错误
  -   【V11-2503】【B09】【安全加固】【安全服务】设置SSH安全协议还原后将注释项也删除了
  -   【B09】【41499】【V11-2503】【安全加固】【密码强度】加强口令的密码算法报告描述错误
  -   【V11-2503】【B09】【安全加固】【系统维护】限制仅允许系统管理员进入维护模式，实际加固失败
  -   【V11-2503】【B09】【安全加固】【安全服务】禁止root登录VSFTP，扫描不成功
  -    同步修复密码策略里回文检查参数错误
  -    添加security-reinforce-update-20250521.patch


author: sunjin <sunjin@kylinos.cn> 2.0.0-04
changelog:
  - Type:update
  - ID:[Bug#246503]
  - SUG:NA
  - DESC:
  -   【V11-B07】【安全加固】【系统设置】禁用ctrl+alt+del组合键失败
  -    解决安全热点
  -    删除无用代码initSp3ToSp4IdMap
  -    单元测试覆盖率到达70%
  -    添加security-reinforce-update-20250611.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-05
changelog:
  - Type:bugfix
  - ID:[Bug#368657]
  - SUG:NA
  - DESC:
  -   【V11-2503】【B15】【需求41499】【安全加固】【交互命令】扫描后不加固，再次扫描加固，导出报告按enter键提示核心已转储


author: sunjin <sunjin@kylinos.cn> 2.0.0-06
changelog:
  - Type:TASK
  - ID:[TASK#553765][TASK#543765]
  - SUG:NA
  - DESC:
  -    子 安全编译参数整改 / security-reinforce安全编译参数整改
  -    V10各版本及V11版本安全加固项ssh强加密算法调整
  -    add security-reinforce-update-20251127.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-07
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260428.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-08
changelog:
  - Type: update
  - ID: [TASK#633053]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532237]
  -       修复安全漏洞[KVE-2026-0420][BUG#541241]
  -       dbus管控整改
  -       security-reinforce-update-20260521.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-09
changelog:
  - Type: update
  - ID: [TASK#636621]
  - SUG: NA
  - DESC: 授权不当脚本整改
  -       增强dbus接口调用输入参数的检查
  -       security-reinforce-update-20260530.patch


author: sunjin <sunjin@kylinos.cn> - 2.0.0-10
changelog:
  - Type: update
  - ID: [TASK#646757]
  - SUG: NA
  - DESC: 增加元字符检查
  -       模版导出限制
  -       增加dbus访问白名单
  -       修改数据库权限为640
  -       security-reinforce-update-20260701.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.07
changelog:
  - Type: update
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: 由于内核不支持中文,将代码中的中文更改成英文
  -     add patch: security-switch-add-en-translation.patch


author: chengang <chengang@kylinos.cn> - 1.3.1-1.se.08
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      security-switch-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.09
changelog:
  - Type: update
  - ID: [TASK#379847]
  - SUG: NA
  - DESC: kasf compatible
  -     add patch: security-switch-2501-compatible01.patch


author: litianhao <litianhao@kylinos.cn> - 1.3.1-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       security-switch-add-license.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#457138]
  - SUG: NA
  - DESC: 对于security-switch命令的新参数需求 变更产品化版本
  -    security-switch-new-parameter-20250508.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653]
  - SUG: NA
  - DESC: 更新security-switch命令的help信息和关闭状态时get的返回值（none -> off）
  -	  security-switch-new-help-info.patch
  -	修复调用reboot命令执行错误的问题[BUG#352649][BUG#352653]
  -	  security-switch-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: bugfix 
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -       无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -         security-switch-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: bugfix 
  - ID: NA
  - SUG: NA
  - DESC: 修复缺少此设置将使系统失去安全防护，极大增加系统安全风险提示的问题,桌面bug#360683
  -	  -- security-switch-fix-error-with-missing-prompt-message.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#468603]
  - SUG: NA
  - DESC: 修改安全模式切换到off状态时的提示[BUG#468603]
  -         security-switch-modify-security-mode-to-off-tips.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         security-switch-add-dbus-control-yaml-file.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-7
changelog:
  - Type: bugfix
  - ID: [BUG#639535][BUG#639517]
  - SUG: NA
  - DESC: 修复dbus管控策略宽松和命令行注入的漏洞[KVE-2026-0730][KVE-2026-0731]
  -	  security-switch-fix-dbus-conf-loose-and-command-line-injection.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.14
changelog:
  - Type:update
  - ID:[BUG#352649]
  - SUG:NA
  - DESC: 解决模式切换时自动重启失败的问题
  -		add patch9102: selinux-policy-fix-switch-mode-auto-reboot-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.15
changelog:
  - Type:update
  - ID:[BUG#353491][BUG#353491]
  - SUG:NA
  - DESC: 可惜启动适配三权策略
  -		add patch9103: selinux-policy-add-secadm-perms-for-kydima.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.16
changelog:
  - Type:update
  - ID:[TASK#474973]
  - SUG:NA
  - DESC: 修复升级ukui后 黑屏问题
  -		add patch9104: selinux-policy-fix-login-error-when-update-ukui.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.17
changelog:
  - Type:update
  - ID:[BUG#368341][BUG#365769]
  - SUG:NA
  - DESC: 入侵检测适配selinux,解决root用户能修改/etc/auditd/下的文件
  -		add patch9105: selinux-policy-20250624-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.18
changelog:
  - Type:update
  - ID:[BUG#368353]
  - SUG:NA
  - DESC: 解决入侵检测secadm、auditadm等其他用户无法打开问题
  -		add patch9106: selinux-policy-20250701-fix-kguard-some-bug.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.19
changelog:
  - Type:update
  - ID:[BUG#376643][BUG#376149]
  - SUG:NA
  - DESC: 解决strict模式下root无法插入ko的问题、安全加固偶现无法扫描的问题
  -		add patch9107: selinux-policy-20250704-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.20
changelog:
  - Type:update
  - ID:[BUG#377387]
  - SUG:NA
  - DESC: 解决ukmls策略下 登录界面和注销界面显示乱码问题
  -		add patch9108: selinux-policy-fix-ukmls-login-ui-display-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.21
changelog:
  - Type:update
  - ID:[BUG#381787][BUG#381725]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过控制面板修改密码
  -       解决strict模式下 root用户无法通过开始菜单打开防火墙软件
  -		add patch9109: selinux-policy-fix-root-open-firewall-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.22
changelog:
  - Type:update
  - ID:[BUG#382849]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过入侵检测工具无法导出报告问题
  -		add patch9110: selinux-policy-fix-kguard-export-doc-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.23
changelog:
  - Type:update
  - ID:[BUG#385099][BUG#383617]
  - SUG:NA
  - DESC: 解决开启selinux 非root用户打开终端过慢问题
  -       解决strict模式下【文件保护箱】strict模式下已锁定的保护箱写入文件成功
  -       其他: 解决ldap dovecot等开源服务strict模式下无法启动问题
  -		add patch9111: selinux-policy-20250722-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.24
changelog:
  - Type:update
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决targeted下kytrust与tpm dbus通信超时问题
  -		add patch9112: selinux-policy-fix-ktrust_config-dbus-timeout.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.25
changelog:
  - Type:update
  - ID:[BUG#431351]
  - SUG:NA
  - DESC: 解决targeted下 passwd 修改密码偶现卡主问题
  -		add patch9113: selinux-policy-20251030-fix-passwd-stuck.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.28
changelog:
  - Type:update
  - ID:[BUG#498055]
  - SUG:NA
  - DESC:
  -		add patch9115: selinux-policy-fix-netflow-monitor-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.29
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启无法启动lightdm.service问题引起的桌面无法进入
  -		add patch9116: selinux-policy-fix-lightdm-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.30
changelog:
  - Type:update
  - ID:[BUG#502337]
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启root用户无权限执行ksaf-label-manager-tool工具的问题
  -		add patch9117: selinux-policy-fix-ksaf-label-manager-tool-exec-failed.patch
  -       add patch9118: selinux-policy-fix-auditadm-can-use-systemctl-change-status-of-the-kydima-service.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.31
changelog:
  - Type:update
  - ID:[BUG#504255]
  - SUG:NA
  - DESC: 1.修复targeted模式下切换default模式失败的问题
  -		add patch9119: selinux-policy-fix-targeted-switch-default-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.32
changelog:
  - Type:update
  - ID:[BUG#499261][BUG#504489][BUG#504521][BUG##505103][BUG#506197]
  - SUG:NA
  - DESC: 1.修复targeted模式下安装k8s服务后，running节点失败的问题;
  -       2.修复strict模式下box、kvm以及ukey等问题;
  -		add patch9120: selinux-policy-fix-k8s-box-kvm-ukey-bugs.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.33
changelog:
  - Type:update
  - ID:[TASK#614655]
  - SUG:NA
  - DESC: 1.修复strcit模式下,root用户可以执行sudo相关命令，且访问限制目录的问题;
  -		add patch9121: selinux-policy-fix-policy-that-allows-root-access-restricted-directories.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.34
changelog:
  - Type:update
  - ID:[TASK#617539]
  - SUG:NA
  - DESC: 1.strcit模式下，为文件保护箱适配专用域策略;
  -       2.修复strict模式下root用户可以使用echo对/var/log写入权限问题;
  -		add patch9122: selinux-policy-adapt-box-manager-dedicated-domain-policy.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.35
changelog:
  - Type:update
  - ID:[BUG#544169]
  - SUG:NA
  - DESC: 1.strcit模式下，修复secadm用户无法使用boxadm创建启动保护箱应用的问题;
  -		add patch9123: selinux-policy-secadm-use-boxadm-permission-denied.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.36
changelog:
  - Type:update
  - ID:[BUG#544169][BUG#571099]
  - SUG:NA
  - DESC: 1.strcit模式下，修复secadm用户boxadm操作文件保护箱应用的报错问题;
  -       2.strict模式下，修复secadm执行sesearch -A和seinfo提示权限问题;
  -		add patch9124: selinux-policy-fix-boxmanager-and-sesearch-exec-bugs.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.37
changelog:
  - Type:update
  - ID:[BUG#583343]
  - SUG:NA
  - DESC: 1.target模式下，修复安全中心设置strict模式失败的问题;
  -       add patch9125: selinux-policy-fix-ksc-defender-set-strict-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.38
changelog:
  - Type:update
  - ID:[BUG#583343]
  - SUG:NA
  - DESC: 1.target模式下，修复loongarch环境下安全中心设置strict模式失败的问题;
  -       add patch9126: selinux-policy-fix-ksc-defender-set-strict-failed-loongarch.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.39
changelog:
  - Type:update
  - ID:[BUG#599431][BUG#608947]
  - SUG:NA
  - DESC: 1.target模式下，修复无法安装systemd软件包的问题;
  -       2.strict模式下，修复各用户可信启动命令执行失败的问题；
  -       add patch9127: selinux-policy-fix-kytrust-bima-permission-and-reinstall-systemd.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.40
changelog:
  - Type:update
  - ID:[BUG#569621]
  - SUG:NA
  - DESC: 1.strict模式下，修复各用户锁屏切换和注销切换登录卡死的问题；
  -       add patch9128: selinux-policy-fix-secadm-login-failed-due-to-authentication.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.41
changelog:
  - Type:update
  - ID:[BUG#651487][BUG#651573]
  - SUG:NA
  - DESC: 1.升级内核后，strict模式下，修复使用ssh登录各用户出现ovs-vsctl被拦截的问题；
  -       2.升级内核后，strict模式下，修复登录auditadm用户打开日志查看器查看崩溃日志的被拦截的问题；
  -       add patch9129: selinux-policy-fix-update-kernel-ssh-login-and-kylin-log-tool.patch


author: mengchaoming <mengchaoming@kylinos.cn> - 2:4.14.3-1.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch:支持香港繁体中文	 	 
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.01
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
  - add patch: kylin-shadow-add-user-UID-unique.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.02
changelog:
  - Type:update
  - ID:[BUG#241779]
  - SUG:NA
  - DESC: 【uid唯一性检验】uid唯一性提示语为英文
  - add patch: kylin-shadow-fix-zh_CN-po-0001.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-15.p05
changelog:
  - Types:bugfix
  - ID:BUG#500923
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-16.p05
changelog:
  - Type:cve;bugfix
  - ID:[BUG#585405]
  - SUG:NA
  - DESC: fix CVE-2025-69421, CVE-2026-22796, CVE-2026-28388, CVE-2026-28389
          allow debuginfo to be installed alone without pulling in the debugsource package


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: cenhuilin <cenhuilin@kylinos.cn> - 24.01-7.p03
changelog:
  - Type: cves
  - ID: [BUG#546429]
  - SUG: NA
  - DESC:1.fix CVE-2025-57275: lib/nvmf: limit number of NVMe-oF registrants when updating PTPL info
         2.nvmf/rdma: Shorten trace name of request state


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: duanhongtao <duanhongtao@kylinos.cn> - 5.9.10-4.p05
changelog:
  - Type:CVE
  - CVE:CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: zhangyao <zhangyao108@huawei.com> - 255-32
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p01
changelog:
  - Type: update
  - ID:   [TASK#424801]
  - SUG:  NA
  - DESC:  1. systemd-udev package contain kernel-install
           2. add Patch: 0001-Change-the-NTP-server.patch
              Change NTP server.
           3. add Patch: 0001-basic-add-missing-PIDFS-magic.patch
              Fix missing PIDFS magic issue when compile
           4. add Patch: 0001-basic-add-missing-BCACHEFS-magic.patch
              Fix missing BCACHEFS magic issue when compile
           5. Add 0001-rc-local-change-order-after-network-online.target.patch
              Change rc-local order after network-online.target, fix service or process start failed issue


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p02
changelog:
  - Type: update
  - ID:   [TASK#447315]
  - SUG:  NA
  - DESC: Revert patch to fix test performance regression


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p03
changelog:
  - Type: update
  - ID:   [TASK#350099]
  - SUG:  NA
  - DESC: 1. Add zombie process recycling module component
          2. Add process monitoring, process self-healing and automatic pull up


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-34.p05
changelog:
  - Type: update
  - ID:   [TASK#568069]
  - SUG:  NA
  - DESC: fix CVE-2026-4105
          fix CVE-2026-29111
          fix CVE-2026-40226


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: Yu Peng <yupeng@kylinos.cn> - 5.0-3.p03
changelog:
  - Type:bugfix
  - ID:task#641921
  - SUG:NA
  - DESC:Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-80.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: huayadong <huayadong@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type: update
  - ID:   [TASK#327372]
  - SUG:  NA
  - DESC: add tigervnc-1.13.1-kylin-vncpasswd-add-pwquality-check-and-translation.patch
  	add tigervnc-1.13.1-kylin-add-pwquality-check-and-translation.patch
  	add BuildRequires:libpwquality-devel  Requires:libpwquality


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: yaoxin <1024769339@qq.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117 for fix CVEs: CVE-2026-24880, CVE-2026-25854,
    CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990,
    CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500


author: yaoxin <1024769339@qq.com> - 1:9.0.118-1
changelog:
  - Update to 9.0.118 for fix CVEs: CVE-2026-41284, CVE-2026-41293,
    CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514,
    CVE-2026-43515
  - Fix tomcat-jsvc stop failed


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决可信启动与tpm通信失败问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tabrmd-communication-with-kytrust-error.patch


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.02
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决tpm dbus服务读写设备文件错误问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tpm-wirte-device-failed.patch


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: gaoyukun <gaoyukun@kylinos.cn> - 2.24.1-1.p01
changelog:
  - Type: update
  - ID: [BUG#310621]
  - SUG: NA
  - DESC: Migrate patches corresponding to task#153403,task#186385,bug#217426,bug#217442 in v10:
        - split package tuned-utils-systemtap, reduce main package installation dependencies
        - add the tuned profile sbm-performance, optimize filesystem and network performance
        - add disk IO optimization to sbm-performance profile, optimize disk IO performance
        - add jvm flag UseNUMA, optimize jvm performance
        - split sbm-performance mode to sbm and sbm-performance mode
        - improve disk IO and exec performance


author: xiejing <xiejing@kylinos.cn> - 2.24.1-1.p04
changelog:
  - Type: update
  - ID: [TASK#636695]
  - SUG: NA
  - DESC: modify polkit allow_active policy to auth_admin for switch_profile and auto_profile


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: huayadong<huayadong@kylinos.cn> 4.10.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: delete Requires: kf5-bluez-qt-devel kf5-bluez-qt


author: peijiankang<peijiankang@kylinos.cn> 4.10.1.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add ukui-bluetooth-add-copyright.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.1.0-ok3.2k0.10


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-bluetooth-4.10.1.0-ok3.2k0.14
          upstream commtid:1dddb5543c1a61b7a19a412f73da010effd59666


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p06
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Recommends:kylin-installer; delete Recommends:kylin-user-guide


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p08
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add ukui-server Recommends: kylin-user-guide


author: houhongxun<houhongxun@kylinos.cn> - 2.0.2-21.p09
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: ukui-server now requires kylin-user-guide fcitx5
          fcitx5-chinese-addons, fcitx5-config-qt


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#408731]
  - SUG : NA
  - DESC: change Requires: ukui-wallpapers to Recommends: ukui-wallpapers


author: peijiankang<peijiankangkylinos.cn> - 2.0.2-21.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#422303][BUG#468605]
  - SUG : NA
  - DESC: modify system os_version and update_version information
          revert 2.0.2-21.p13


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch6: ukui-greeter-4.10.0.0-kylin-remove-power-Button.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#294017]
  - SUG : NA
  - DESC: Patch7: ukui-greeter-4.10.0.0-kylin-fix-the-font-too-large.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-greeter-4.10.0.0-ok5.1k0.7
          upstream commtid:ba4854458f270994721d1348c774b8b41d2f8b0f


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#334467] [BUG#292059]
  - SUG : NA
  - DESC: fix greeterwindow and loginwindow translate bugs


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add ukui-greeter-4.10.0.0-fix-sonarqube-security-hotspots.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: delete file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: cves
  - ID  : KVE-2026-05100 KVE-2026-05102
  - SUG : NA
  - DESC: fix ukui-greeter KVE-2026-05100 and KVE-2026-05102


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok1k0.10
          upstream commitid: 1a9e6bbc2ee562d89d4cebfcc5fb2244b3e35513


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#504657]
  - SUG : NA
  - DESC: add Patch03:ukui-media-4.10.0.0-kylin-add-check-for-display.patch
          添加DISPLAY检测，修复KVE-2026-0320


author: houhongxun<houhongxun@kylinos.cn> 4.10.4.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix ukui control center icon showing twice problem


author: huayadong<huayadong@kylinos.cn> 4.10.4.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch3: ukui-panel-4.10.4.3-kylin-remove-s3-s4-reboot-poweroff.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-panel-4.10.4.3-ok0.1k0.11
          upstream commtid:9f40cceb1001001c1a767ce4335f31edf6f90a07


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [BUG#294119]
  - SUG : NA
  - DESC: add ukui-power-manager-4.10.0.0-kylin-remove-ukui-control-center-Suspend-and-Hibernate-and-wakeUpDisplay-no-passwd.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: ukui-power-manager-kylin-4.10.0.0-hide-shutdown.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-power-manager-4.10.0.0-ok1.34k2.0
          upstream commtid:cc25d6a66a8e679daef437d0f5d243116752e994


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#636667]
  - SUG : NA
  - DESC: 增强ukui-power-manager功能，添加参数校验，保障ukui-power-manager功能正常


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#363325][BUG#369099]
  - SUG : NA
  - DESC: add Patch14:ukui-screensaver-4.10.0.0-kylin-remove-black-drawPath.patch
          add Patch15:ukui-screensaver-4.10.0.0-kylin-change-message-rule.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch16: ukui-screensaver-4.10.0.0-kylin-remove-AuthDialog-onChangeUser.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-fix-ukui-screensaver-backend-coredump-in-vncdesktop.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p24
changelog:
  - Type: bugfix
  - ID  : [BUG#498405]
  - SUG : NA
  - DESC: Patch25: ukui-screensaver-4.10.0.0-add-dbus-signal-lock-for-session-tools.patch
          修复从电源管理器锁定屏幕没有lock dbus信号发出问题


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p02
changelog:
  - Type: update
  - ID  : [TASK#492845]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p03
changelog:
  - Type: update
  - ID  : [TASK#522795]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p02
changelog:
  - Type:update
  - ID:[BUG#238630][BUG#238129]
  - SUG:NA
  - add Patch0011:usbguard-parse.patch
  - DESC: 238129 【V11 B02】【龙芯】【USBGuard】USB设备及策略管理交互模式界面展示不友好
  - DESC: 238630 【V11 B02】【USBGuard】设备已有拦截策略，再次手动添加放行策略不生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p04
changelog:
  - Type:update
  - ID:[BUG#242968][BUG#245015]
  - SUG:NA
  - add Patch0012: usbguard-config.patch
  - DESC: 242968 【V11-B05】【安全SDK】全部设备管控策略查询-授权提示转储
  - DESC: 245015 【V11-B06】【安全SDK】设备授权取消授权大概率转储，usbguard服务起不来
  - 去除usbguard-selinux包,策略已在selinux-policy统一管理


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p05
changelog:
  - Type:update
  - ID:[BUG#242972]
  - SUG:NA
  - add Patch0013: usbguard-format.patch
  - DESC: 242972 【V11 B05】【USBGuard】导入错误格式策略，提示核心已转储
  - DESC: 243051 【V11 B05】【USBGuard】放行部分USB接口提示核心已转储
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p06
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0014:     usbguard-restore.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p07
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0015:     usbguard-restore2.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p08
changelog:
  - Type:update
  - ID:[BUG#310899]
  - SUG:NA
  - add Patch0016:     usbguard-hub.patch
  - DESC: 306393 【V11-B17】【USBGuard】root hub 1.0和2.0设备设置永久拦截和放行提示核心已转储
  - DESC: 310899 【V11-B18】【USBGuard】在设备策略管理中，修改策略失败，策略被删除


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p09
changelog:
  - Type:update
  - ID:[BUG#247155/347856]
  - SUG:NA
  - add Patch0017: usbguard-import.patch
  - DESC: 247155 【V11-B07】【安全SDK】通过设备信息删除设备管控策略，删除serial名字较长的设备管控策略失败
  - DESC: 347856 [V11 2503][B09][需求41823][USBGuard]管理设备策略-导入放行策略使被拦截U盘放行，导入拦截策略覆盖现有策略后没有及时生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p10
changelog:
  - Type:update
  - ID:[任务#479543]
  - SUG:NA
  - add Patch0018: usbguard-idnull.patch
  - DESC: 479543 【V11 2503】修改usbguard默认策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p11
changelog:
  - Type:update
  - ID:[BUG#383547]
  - SUG:NA
  - add Patch0019: usbguard-setdev.patch
  - DESC:[出厂测试][v11-2503][B19][需求42057][USBGuard]管理已连接设备,设备状态为拦截,修改为永久拦截,未生成策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p12
changelog:
  - Type:update
  - ID:[BUG#391973]
  - SUG:NA
  - add Patch0020: usbguard-hub2.patch
  - DESC: 391973 [同源测试][v11-2503][B20][需求42057]开启usbguard后，bmc的虚拟鼠标和键盘被拦截


author: herengui <herengui@kylinsec.com.cn> - 7.4.3-5
changelog:
  - Fix CVE-2026-34475: Fix http/1.1 absolute form dissection edge case leading to cache poisoning or authentication bypass


author: lijian <lijian01@kylinos.cn> - 2:9.0.2092-15.p01
changelog:
  - Type:update
  - ID:[task#424803]
  - SUG:NA
  - DESC:1) 移植敏感词修改和zh_HK繁体字支持的补丁
  -      2) 移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      3) remove discriminatory language


author: houzhiwei <houzhiwei@kylinos.cn> - 2:9.0.2092-18.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-53905 and CVE-2025-53906
  - SUG:NA
  - DESC:1.fix some tests failed. 2.fix CVE-2025-53905 and CVE-2025-53906


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-32.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: update to 9.0.2092-33 and fix CVE-2026-42307 CVE-2026-44656 CVE-2026-45130


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p02
changelog:
  - Type:update
  - ID:[#bug617491]
  - SUG:NA
  - DESC: fix CVE-2026-43961 CVE-2026-46483 CVE-2026-47162 CVE-2026-47167 CVE-2026-52858 CVE-2026-52859 CVE-2026-52860


author: zuo <zuohongsheng@kylinos.cn> - 1:4.4.14-1.p01
changelog:
  - Type:CVE
  - CVE:[task#597029]
  - SUG:NA
  - DESC: update to 4.14, and backport add-HK-complex-Chinese-character.patch


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.01
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083, CVE-2024-9632


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.04
changelog:
  - Type: CVE
  - ID:   [BUG#605083]
  - SUG:  NA
  - DESC: fix CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261


