# changelog

author: chenyanpanHW <chenyanpan@huawei.com> - 2.38-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2026-42496-and-CVE-2026-42497.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 3.02-1.p01
changelog:
  - Type:cves
  - Id:CVE-2026-42496 and CVE-2026-42497
  - SUG:CVE-2026-42496 and CVE-2026-42497
  - DESC:fix CVE-2026-42496 and CVE-2026-42497


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: Phytium
changelog:
  - Add TearFree Function
     - Add DisplayLink Function 

    * Tue June 11 2024 Phytium
     - Init pe220x-ddx


author: longcheng <longcheng@kylinos.com.cn> - 1.22.2-4
changelog:
  - fix(pluma-utils):Fixed garbled toolTips path in tab page with GB18030 encoding chinese translation


author: peijiankang <peijiankang@kylinos.cn> - 1.22.2-4.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#240263]
  - SUG:  NA
  - DESC: add pluma-1.22.2-cannot-automatically-detect-Chinese-encoding.patch
          add pluma-guide.tar.gz(fix BUG#240720)


author: peijiankang<peijiankang@kylinos.cn> - 1.22.2-4.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add pluma-1.22.2-fix-coredump-about-uri-isnot-exist.patch


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p02
changelog:
  - Type:cves
  - ID: CVE-2025-9566
        CVE-2025-58058
  - SUG:NA
  - DESC:Fix CVE-2025-9566 and CVE-2025-58058, 
         and change exec path from /usr/bin to /usr/local/bin about podman-docker, 
         and exclude podman-remote.1.gz from podman-remote rpm


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p03
changelog:
  - Type:cves
  - ID: CVE-2024-9676
        CVE-2024-9675
        CVE-2024-9407
        CVE-2024-9341
  - SUG:NA
  - DESC:Fix CVE-2024-9676, CVE-2024-9675, CVE-2024-9407, CVE-2024-9341


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: huayadong <huayadong@kylinos.cn> - 123-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#243579]
  - SUG:  NA
  - DESC: add Patch1:polkit-123-kylin-add-10-shutdown.rules-restrict-reboot-and-shutdown.patch


author: huayadong <huayadong@kylinos.cn> - 123-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#260533]
  - SUG:  NA
  - DESC: add Patch2:polkit-123-kylin-fix-prompt-no-chinese.patch


author: tianyunnuan<tianyunnuan@kylinos.cn> - 123-1.p03
changelog:
  - Type:cves
  - ID:CVE-2025-7519
  - SUG:NA
  - DESC: add patch backport-CVE-2025-7519-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch
          add patch polkit-123-kylin-fix-prompt-no-chinese.patch


author: songliyang <songlyang@kylinos.cn> - 0.123-4.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100 Patch101 to fix BUG#243579 and BUG#260533. Author: huayadong
          3.Backport Patch102 to fix BUG#499255. Author: zhoukangyu


author: houhongxun <houhongxun@kylinos.cn> - 23.12.0-7.p03
changelog:
  - Type: cves
  - ID:   [Task#549531]
  - SUG:  NA
  - DESC: fix CVE-2025-43718 and CVE-2025-52885
          fix conflicting man documents problem


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p01
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: update to 15.17 (fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p02
changelog:
  - Type: updates
  - ID: [BUG#556223],[BUG#546389]
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2025-8713, CVE-2025-8714


author: liuying <liuying03@kylinos.cn> - 15.18-1.p01
changelog:
  - Type: cves
  - ID: CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473
  - SUG: NA
  - DESC: synchronize the version to fix CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473


author: wangjia <wangjia55@huawei.com> - 42.2.4-1.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:disable the failed tests that caused by BEP to repair binary diffrence


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: lipengyu <lipengyu@kylinos.cn> - 3.7.1-2.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-10.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:2.81.0-1.p02
changelog:
  - Type: Updaets 
  - ID: TASK#504811
  - SUG: NA
  - DESC: fix the problem that the previous patch was not merged


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.16.6-1
changelog:
  - Update package with version 7.16.6
    Prevent leading whitespace in markdown code blocks from being stripped
    Update base.tex.j2 for macro compatibility with newer versions of Pandoc
    Allow including text/x-rst outputs in rst conversion, transition away from text/restructuredtext
    Add support for mistune 3.1.0
    [HTMLExporter] Initialize resources before widget filtering
    Add a toggle to skip the svg encoding of images
    Support configureable width and height of reveal presentations
    Convert coalescese_streams function to CoalesceStreamsPreprocessor


author: openeuler_bot <infra@openeuler.sh> - 7.17.0-1
changelog:
  - Add support for arbitrary browser arguments (version:7.17.0).
  - Fix QtPNGExporter returning empty bytes on macOS (version:7.17.0).
  - Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) (version:7.17.0).
  - Drop support for Python 3.8, fix the CI tests (version:7.17.0).


author: YangengLiu <dev01202@linx-info.com> - 7.17.1-1
changelog:
  - update version to 7.17.1
    * Allow configureable WebPDF JavaScript processing timeout.
    * Fix when checking template paths on shared filesystems.
    * Tweak webpdf template logic to fix duplicate extension problem.


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: houzhiwei <houzhiwei@kylinos.cn> - 1.17.1-16.p01
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: chengyechun <chengyechun1@huawei.com> - 1.26.17-2
changelog:
  - Type:CVE
  - ID:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped form HTTP requests


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p01
changelog:
  - Type: Update
  - ID:   [TASK#425199]
  - SUG:  NA
  - DESC: 
  - Add loongarch defalut machine type in machine map and fix qemu-iotest error
  - enable spice for aarch64
  - add phytium cpu models ft-2000+ ft-S2500 ft-S5000c
  - show virtio nic bandwith as 10Gbps
  - make libvirt support host-model on aarch64
  - Fixed:systemd-detect-virt returns the result qemu, when kvm acceleration is enabled in Loongson architecture.
  - Add support for migration from rhel or openEuler to Kylin
  - Fix acpi hotplug state cause migration failure


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p02
changelog:
  - Type: Update
  - ID:   [TASK#433635]
  - SUG:  NA
  - DESC: Support migration between Phytium different CPU model


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p03
changelog:
  - Type: Bug
  - ID:   [BUG#346607]
  - SUG:  NA
  - DESC: Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'.


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p05
changelog:
  - Type: Update
  - ID:   [BUG#346607][BUG#351085]
  - SUG:  NA
  - DESC: fix vm can not use virtio-gpu with error 'egl-headless is not available'


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p06
changelog:
  - Type: Update
  - ID:   [TASK#433654]
  - SUG:  NA
  - DESC: sync virtcca support patch from euler and fix bug


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p07
changelog:
  - Type: Bugfix
  - ID:   [Bug#346647][Bug#346638]
  - SUG:  NA
  - DESC: fix vm shutdown and reboot issues in loongarch


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p08
changelog:
  - Type: Bugfix
  - ID:   [Bug#398833]
  - SUB:  NA
  - DESC: resolve file conflicts in compatibility testing


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p09
changelog:
  - Type: Bugfix
  - ID:   [Bug#393455]
  - SUB:  NA
  - DESC: hw: Fix bug, multiple default machines caused the qemu-kvm to crash.


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-27.p12
changelog:
  - Type: cves
  - ID:   CVE-2026-2243
  - SUG:  NA
  - DESC: Sync fix CVE-2026-2243 Heap buffer out-of-bounds read in VMDK compressed grain parsing


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 11:8.2.0-27.p13
changelog:
  - Type: cves
  - ID:   CVE-2026-3195 CVE-2026-3196 CVE-2025-11234
  - SUG:  NA 
  - DESC: MAINTAINERS: add me as maintainer to virtio-snd
          virtio-snd: remove TODO comments
          virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
          virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
          virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
          Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 11:8.2.0-27.p14
changelog:
  - Type: cves
  - ID:   CVE-2025-12464
  - SUG:  NA
  - DESC: Sync fix CVE-2025-12464 qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode


author: peijiankang <peijiankang@kylinos.cn> - 0.9.2-1.p01
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: fix build error caused by disabling decoration_shadows support in qt5-qtwayland


author: Xu Jin <jinxu@kylinos.cn> - 8.0.2-3.p01
changelog:
  - Type:enhancement
  - ID:TASK#372069
  - SUG:NA
  - DESC:Add loongarch support.Fix build error for Kylin V11.


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p02
changelog:
  - Type: update
  - ID  : [TASK#587039]
  - SUG : NA
  - DESC: Patch1002:qtbase-5.15.10-work-around-pyside2-brokenness.patch
          适配pyside2


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#485611]
  - SUG : NA
  - DESC: Patch1003:CVE-2025-5455-qtbase-5.15.patch
          修复CVE-2025-5455


author: lizequan<lizequan@kylinos.cn> - 5.15.10-11.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#504703]
  - SUG : NA
  - DESC: Patch1004:qt5-base-fix-coredump-missing-display-env-in-ssh.patch


author: peijiankang<peijiankang@kylinos.cn> - 5.15.10-11.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#507841]
  - SUG : NA
  - DESC: add sw_64 QT_ARCH to fix kylin-aiassistant build error


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: lifeifei <lifeifei@kylinos.cn> 7.2.10-1
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangchaorui <zhangchaorui@kylinos.cn> -3.2.2-152.p01
changelog:
  - Type:cves
  - ID:CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257
  - SUG:NA
  - DESC:fix CVE-2026-42246 CVE-2026-42258 CVE-2026-42245 CVE-2026-42257


author: weiyuan <weiyuan@kylinos.cn> - 1.1.12-1.p03
changelog:
  - TYpe: update
  - ID: [TASK#371229]
  - SUG: NA
  - DESC: fix the problem that attackers could create files in arbitrary locations on the host filesystem


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p04
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p05
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 and fix system property miss handling in p04


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p07
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:resolve secure compilation issues and sync modified to the sw64 arch


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p08
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:inject stack proctector from Go compiler and modify the correct commit info


author: litianhao <litianhao@kylinos.cn> - 1.2.1-2.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG:NA
  - DESC: 合入sm设备管控补丁
          sane-backends-add-sm-devctl.patch


author: zhubing <zhubing@kylinos.cn> - 1.2.1-2.p01.se.02
changelog:
  - Type: update
  - ID: [TASK#427527] 增加ksaf补丁
  - SUG:NA
  - DESC: 移除sm设备管控代码，合入ksaf devctl补丁
          sane-backends-remove-sm-devctl.patch
          sane-backends-add-ksaf-devctl-hook.patch


author: sunjin <sunjin@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[Bug#290827][Bug#290809][Bug#281275][Bug#292899]
  - SUG:NA
  - DESC: 【安全加固】security-reinforce入库
  -   【V11-B14】【安全加固】【还原中】还原中断，安全加固界面异常 [用例#1365655]
  -   【V11-B14】【安全加固】【安全扫描】编辑用户自定义模板，安全中心闪退 [用例#1365641]
  -   【V11 B12】【安全加固】【交互命令】选择模板-扫描/加固/还原测试 加固模板与加固项不匹配 [用例#989419]
  -   【v11-B14】【安全加固】使用扫描项为所有的自定义模板进行扫描加固后，重启系统，安全加固功能不可用


author: sunjin <sunjin@kylinos.cn> 2.0.0-01
changelog:
  - Type:update
  - ID:[Task#436662][Bug#313077]
  - SUG:NA
  - DESC: 安全加固2.0版本，更新基线描述，v11适配空闲时间锁屏加固项
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   修复了一些自测发现的问题，禁用不必要别名需要执行newaliase


author: sunjin <sunjin@kylinos.cn> 2.0.0-02
changelog:
  - Type:update
  - ID:[Bug#347476][Bug#313077][Bug#348346][Bug#348226]
  - SUG:NA
  - DESC:
  -   【v11 2503】【B09】【需求44508】【uid唯一性检验】关闭uid唯一性检验-uid加固项测试，还原报告中用户名称出现了2次的问题
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   【B09】【41499】【V11-2503】【安全加固】【系统安全】防火墙配置在报告中描述错误
  -   【B09】【41499】【V11-2503】【安全加固】【文件权限】限制日志文件权限，描述错误
  -    未开启三员，root或管理员有安全加固的使用权限； 开启三员，仅root有安全加固的使用权限


author: sunjin <sunjin@kylinos.cn> 2.0.0-03
changelog:
  - Type:update
  - ID:[Bug#349061][Bug#349027][Bug#348813][Bug#348462][Bug#347932][Bug#348879]
  - SUG:NA
  - DESC:
  -   【B09】【41785】【V11-2503】【安全加固】【安全服务】用户登录ftp后访问目录权限正确 加固还原后源文件备注的信息被删除
  -   【B09】【41499】【V11-2503】【安全加固】【安全服务】限制FTP用户登录后能访问的目录加固|还原后的报告描述错误
  -   【V11-2503】【B09】【安全加固】【安全服务】设置SSH安全协议还原后将注释项也删除了
  -   【B09】【41499】【V11-2503】【安全加固】【密码强度】加强口令的密码算法报告描述错误
  -   【V11-2503】【B09】【安全加固】【系统维护】限制仅允许系统管理员进入维护模式，实际加固失败
  -   【V11-2503】【B09】【安全加固】【安全服务】禁止root登录VSFTP，扫描不成功
  -    同步修复密码策略里回文检查参数错误
  -    添加security-reinforce-update-20250521.patch


author: sunjin <sunjin@kylinos.cn> 2.0.0-04
changelog:
  - Type:update
  - ID:[Bug#246503]
  - SUG:NA
  - DESC:
  -   【V11-B07】【安全加固】【系统设置】禁用ctrl+alt+del组合键失败
  -    解决安全热点
  -    删除无用代码initSp3ToSp4IdMap
  -    单元测试覆盖率到达70%
  -    添加security-reinforce-update-20250611.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-05
changelog:
  - Type:bugfix
  - ID:[Bug#368657]
  - SUG:NA
  - DESC:
  -   【V11-2503】【B15】【需求41499】【安全加固】【交互命令】扫描后不加固，再次扫描加固，导出报告按enter键提示核心已转储


author: sunjin <sunjin@kylinos.cn> 2.0.0-06
changelog:
  - Type:TASK
  - ID:[TASK#553765][TASK#543765]
  - SUG:NA
  - DESC:
  -    子 安全编译参数整改 / security-reinforce安全编译参数整改
  -    V10各版本及V11版本安全加固项ssh强加密算法调整
  -    add security-reinforce-update-20251127.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-07
changelog:
  - Type:update
  - ID:[TASK#608701]
  - SUG:NA
  - DESC:
  - 修复高危漏洞cve-2020-15778等2个漏洞--openssh
  - 添加补丁security-reinforce-update-20260428.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-08
changelog:
  - Type: update
  - ID: [TASK#633053]
  - SUG: NA
  - DESC: 修复安全漏洞[KVE-2026-0409][BUG#532237]
  -       修复安全漏洞[KVE-2026-0420][BUG#541241]
  -       dbus管控整改
  -       security-reinforce-update-20260521.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 2.0.0-09
changelog:
  - Type: update
  - ID: [TASK#636621]
  - SUG: NA
  - DESC: 授权不当脚本整改
  -       增强dbus接口调用输入参数的检查
  -       security-reinforce-update-20260530.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.07
changelog:
  - Type: update
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: 由于内核不支持中文,将代码中的中文更改成英文
  -     add patch: security-switch-add-en-translation.patch


author: chengang <chengang@kylinos.cn> - 1.3.1-1.se.08
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      security-switch-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.09
changelog:
  - Type: update
  - ID: [TASK#379847]
  - SUG: NA
  - DESC: kasf compatible
  -     add patch: security-switch-2501-compatible01.patch


author: litianhao <litianhao@kylinos.cn> - 1.3.1-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       security-switch-add-license.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#457138]
  - SUG: NA
  - DESC: 对于security-switch命令的新参数需求 变更产品化版本
  -    security-switch-new-parameter-20250508.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653]
  - SUG: NA
  - DESC: 更新security-switch命令的help信息和关闭状态时get的返回值（none -> off）
  -	  security-switch-new-help-info.patch
  -	修复调用reboot命令执行错误的问题[BUG#352649][BUG#352653]
  -	  security-switch-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: bugfix 
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -       无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -         security-switch-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: bugfix 
  - ID: NA
  - SUG: NA
  - DESC: 修复缺少此设置将使系统失去安全防护，极大增加系统安全风险提示的问题,桌面bug#360683
  -	  -- security-switch-fix-error-with-missing-prompt-message.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#468603]
  - SUG: NA
  - DESC: 修改安全模式切换到off状态时的提示[BUG#468603]
  -         security-switch-modify-security-mode-to-off-tips.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: update
  - ID: [TASK#633305]
  - SUG: NA
  - DESC: 添加dbus管控的yaml配置文件
  -         security-switch-add-dbus-control-yaml-file.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.14
changelog:
  - Type:update
  - ID:[BUG#352649]
  - SUG:NA
  - DESC: 解决模式切换时自动重启失败的问题
  -		add patch9102: selinux-policy-fix-switch-mode-auto-reboot-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.15
changelog:
  - Type:update
  - ID:[BUG#353491][BUG#353491]
  - SUG:NA
  - DESC: 可惜启动适配三权策略
  -		add patch9103: selinux-policy-add-secadm-perms-for-kydima.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.16
changelog:
  - Type:update
  - ID:[TASK#474973]
  - SUG:NA
  - DESC: 修复升级ukui后 黑屏问题
  -		add patch9104: selinux-policy-fix-login-error-when-update-ukui.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.17
changelog:
  - Type:update
  - ID:[BUG#368341][BUG#365769]
  - SUG:NA
  - DESC: 入侵检测适配selinux,解决root用户能修改/etc/auditd/下的文件
  -		add patch9105: selinux-policy-20250624-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.18
changelog:
  - Type:update
  - ID:[BUG#368353]
  - SUG:NA
  - DESC: 解决入侵检测secadm、auditadm等其他用户无法打开问题
  -		add patch9106: selinux-policy-20250701-fix-kguard-some-bug.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.19
changelog:
  - Type:update
  - ID:[BUG#376643][BUG#376149]
  - SUG:NA
  - DESC: 解决strict模式下root无法插入ko的问题、安全加固偶现无法扫描的问题
  -		add patch9107: selinux-policy-20250704-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.20
changelog:
  - Type:update
  - ID:[BUG#377387]
  - SUG:NA
  - DESC: 解决ukmls策略下 登录界面和注销界面显示乱码问题
  -		add patch9108: selinux-policy-fix-ukmls-login-ui-display-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.21
changelog:
  - Type:update
  - ID:[BUG#381787][BUG#381725]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过控制面板修改密码
  -       解决strict模式下 root用户无法通过开始菜单打开防火墙软件
  -		add patch9109: selinux-policy-fix-root-open-firewall-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.22
changelog:
  - Type:update
  - ID:[BUG#382849]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过入侵检测工具无法导出报告问题
  -		add patch9110: selinux-policy-fix-kguard-export-doc-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.23
changelog:
  - Type:update
  - ID:[BUG#385099][BUG#383617]
  - SUG:NA
  - DESC: 解决开启selinux 非root用户打开终端过慢问题
  -       解决strict模式下【文件保护箱】strict模式下已锁定的保护箱写入文件成功
  -       其他: 解决ldap dovecot等开源服务strict模式下无法启动问题
  -		add patch9111: selinux-policy-20250722-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.24
changelog:
  - Type:update
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决targeted下kytrust与tpm dbus通信超时问题
  -		add patch9112: selinux-policy-fix-ktrust_config-dbus-timeout.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.25
changelog:
  - Type:update
  - ID:[BUG#431351]
  - SUG:NA
  - DESC: 解决targeted下 passwd 修改密码偶现卡主问题
  -		add patch9113: selinux-policy-20251030-fix-passwd-stuck.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.28
changelog:
  - Type:update
  - ID:[BUG#498055]
  - SUG:NA
  - DESC:
  -		add patch9115: selinux-policy-fix-netflow-monitor-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.29
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启无法启动lightdm.service问题引起的桌面无法进入
  -		add patch9116: selinux-policy-fix-lightdm-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.30
changelog:
  - Type:update
  - ID:[BUG#502337]
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启root用户无权限执行ksaf-label-manager-tool工具的问题
  -		add patch9117: selinux-policy-fix-ksaf-label-manager-tool-exec-failed.patch
  -       add patch9118: selinux-policy-fix-auditadm-can-use-systemctl-change-status-of-the-kydima-service.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.31
changelog:
  - Type:update
  - ID:[BUG#504255]
  - SUG:NA
  - DESC: 1.修复targeted模式下切换default模式失败的问题
  -		add patch9119: selinux-policy-fix-targeted-switch-default-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.32
changelog:
  - Type:update
  - ID:[BUG#499261][BUG#504489][BUG#504521][BUG##505103][BUG#506197]
  - SUG:NA
  - DESC: 1.修复targeted模式下安装k8s服务后，running节点失败的问题;
  -       2.修复strict模式下box、kvm以及ukey等问题;
  -		add patch9120: selinux-policy-fix-k8s-box-kvm-ukey-bugs.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.33
changelog:
  - Type:update
  - ID:[TASK#614655]
  - SUG:NA
  - DESC: 1.修复strcit模式下,root用户可以执行sudo相关命令，且访问限制目录的问题;
  -		add patch9121: selinux-policy-fix-policy-that-allows-root-access-restricted-directories.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.34
changelog:
  - Type:update
  - ID:[TASK#617539]
  - SUG:NA
  - DESC: 1.strcit模式下，为文件保护箱适配专用域策略;
  -       2.修复strict模式下root用户可以使用echo对/var/log写入权限问题;
  -		add patch9122: selinux-policy-adapt-box-manager-dedicated-domain-policy.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.35
changelog:
  - Type:update
  - ID:[BUG#544169]
  - SUG:NA
  - DESC: 1.strcit模式下，修复secadm用户无法使用boxadm创建启动保护箱应用的问题;
  -		add patch9123: selinux-policy-secadm-use-boxadm-permission-denied.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.36
changelog:
  - Type:update
  - ID:[BUG#544169][BUG#571099]
  - SUG:NA
  - DESC: 1.strcit模式下，修复secadm用户boxadm操作文件保护箱应用的报错问题;
  -       2.strict模式下，修复secadm执行sesearch -A和seinfo提示权限问题;
  -		add patch9124: selinux-policy-fix-boxmanager-and-sesearch-exec-bugs.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.37
changelog:
  - Type:update
  - ID:[BUG#583343]
  - SUG:NA
  - DESC: 1.target模式下，修复安全中心设置strict模式失败的问题;
  -       add patch9125: selinux-policy-fix-ksc-defender-set-strict-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.38
changelog:
  - Type:update
  - ID:[BUG#583343]
  - SUG:NA
  - DESC: 1.target模式下，修复loongarch环境下安全中心设置strict模式失败的问题;
  -       add patch9126: selinux-policy-fix-ksc-defender-set-strict-failed-loongarch.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.39
changelog:
  - Type:update
  - ID:[BUG#599431][BUG#608947]
  - SUG:NA
  - DESC: 1.target模式下，修复无法安装systemd软件包的问题;
  -       2.strict模式下，修复各用户可信启动命令执行失败的问题；
  -       add patch9127: selinux-policy-fix-kytrust-bima-permission-and-reinstall-systemd.patch


author: mengchaoming <mengchaoming@kylinos.cn> - 2:4.14.3-1.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch:支持香港繁体中文	 	 
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.01
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
  - add patch: kylin-shadow-add-user-UID-unique.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.02
changelog:
  - Type:update
  - ID:[BUG#241779]
  - SUG:NA
  - DESC: 【uid唯一性检验】uid唯一性提示语为英文
  - add patch: kylin-shadow-fix-zh_CN-po-0001.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-15.p05
changelog:
  - Types:bugfix
  - ID:BUG#500923
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-16.p05
changelog:
  - Type:cve;bugfix
  - ID:[BUG#585405]
  - SUG:NA
  - DESC: fix CVE-2025-69421, CVE-2026-22796, CVE-2026-28388, CVE-2026-28389
          allow debuginfo to be installed alone without pulling in the debugsource package


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: cenhuilin <cenhuilin@kylinos.cn> - 24.01-7.p03
changelog:
  - Type: cves
  - ID: [BUG#546429]
  - SUG: NA
  - DESC:1.fix CVE-2025-57275: lib/nvmf: limit number of NVMe-oF registrants when updating PTPL info
         2.nvmf/rdma: Shorten trace name of request state


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: duanhongtao <duanhongtao@kylinos.cn> - 5.9.10-4.p05
changelog:
  - Type:CVE
  - CVE:CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35328/CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: zhangyao <zhangyao108@huawei.com> - 255-32
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p01
changelog:
  - Type: update
  - ID:   [TASK#424801]
  - SUG:  NA
  - DESC:  1. systemd-udev package contain kernel-install
           2. add Patch: 0001-Change-the-NTP-server.patch
              Change NTP server.
           3. add Patch: 0001-basic-add-missing-PIDFS-magic.patch
              Fix missing PIDFS magic issue when compile
           4. add Patch: 0001-basic-add-missing-BCACHEFS-magic.patch
              Fix missing BCACHEFS magic issue when compile
           5. Add 0001-rc-local-change-order-after-network-online.target.patch
              Change rc-local order after network-online.target, fix service or process start failed issue


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p02
changelog:
  - Type: update
  - ID:   [TASK#447315]
  - SUG:  NA
  - DESC: Revert patch to fix test performance regression


author: hanjinpeng <hanjinpeng@kylinos.cn> - 255-34.p03
changelog:
  - Type: update
  - ID:   [TASK#350099]
  - SUG:  NA
  - DESC: 1. Add zombie process recycling module component
          2. Add process monitoring, process self-healing and automatic pull up


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-34.p05
changelog:
  - Type: update
  - ID:   [TASK#568069]
  - SUG:  NA
  - DESC: fix CVE-2026-4105
          fix CVE-2026-29111
          fix CVE-2026-40226


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: Yu Peng <yupeng@kylinos.cn> - 5.0-3.p03
changelog:
  - Type:bugfix
  - ID:task#641921
  - SUG:NA
  - DESC:Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-80.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: huayadong <huayadong@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type: update
  - ID:   [TASK#327372]
  - SUG:  NA
  - DESC: add tigervnc-1.13.1-kylin-vncpasswd-add-pwquality-check-and-translation.patch
  	add tigervnc-1.13.1-kylin-add-pwquality-check-and-translation.patch
  	add BuildRequires:libpwquality-devel  Requires:libpwquality


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: yaoxin <1024769339@qq.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117 for fix CVEs: CVE-2026-24880, CVE-2026-25854,
    CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990,
    CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500


author: yaoxin <1024769339@qq.com> - 1:9.0.118-1
changelog:
  - Update to 9.0.118 for fix CVEs: CVE-2026-41284, CVE-2026-41293,
    CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514,
    CVE-2026-43515
  - Fix tomcat-jsvc stop failed


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决可信启动与tpm通信失败问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tabrmd-communication-with-kytrust-error.patch


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.02
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决tpm dbus服务读写设备文件错误问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tpm-wirte-device-failed.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: huayadong<huayadong@kylinos.cn> 4.10.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: delete Requires: kf5-bluez-qt-devel kf5-bluez-qt


author: peijiankang<peijiankang@kylinos.cn> 4.10.1.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add ukui-bluetooth-add-copyright.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.1.0-ok3.2k0.10


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-bluetooth-4.10.1.0-ok3.2k0.14
          upstream commtid:1dddb5543c1a61b7a19a412f73da010effd59666


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p06
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Recommends:kylin-installer; delete Recommends:kylin-user-guide


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p08
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add ukui-server Recommends: kylin-user-guide


author: houhongxun<houhongxun@kylinos.cn> - 2.0.2-21.p09
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: ukui-server now requires kylin-user-guide fcitx5
          fcitx5-chinese-addons, fcitx5-config-qt


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#408731]
  - SUG : NA
  - DESC: change Requires: ukui-wallpapers to Recommends: ukui-wallpapers


author: peijiankang<peijiankangkylinos.cn> - 2.0.2-21.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#422303][BUG#468605]
  - SUG : NA
  - DESC: modify system os_version and update_version information
          revert 2.0.2-21.p13


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch6: ukui-greeter-4.10.0.0-kylin-remove-power-Button.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#294017]
  - SUG : NA
  - DESC: Patch7: ukui-greeter-4.10.0.0-kylin-fix-the-font-too-large.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-greeter-4.10.0.0-ok5.1k0.7
          upstream commtid:ba4854458f270994721d1348c774b8b41d2f8b0f


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#334467] [BUG#292059]
  - SUG : NA
  - DESC: fix greeterwindow and loginwindow translate bugs


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add ukui-greeter-4.10.0.0-fix-sonarqube-security-hotspots.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: delete file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: cves
  - ID  : KVE-2026-05100 KVE-2026-05102
  - SUG : NA
  - DESC: fix ukui-greeter KVE-2026-05100 and KVE-2026-05102


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok1k0.10
          upstream commitid: 1a9e6bbc2ee562d89d4cebfcc5fb2244b3e35513


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#504657]
  - SUG : NA
  - DESC: add Patch03:ukui-media-4.10.0.0-kylin-add-check-for-display.patch
          添加DISPLAY检测，修复KVE-2026-0320


author: houhongxun<houhongxun@kylinos.cn> 4.10.4.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix ukui control center icon showing twice problem


author: huayadong<huayadong@kylinos.cn> 4.10.4.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch3: ukui-panel-4.10.4.3-kylin-remove-s3-s4-reboot-poweroff.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-panel-4.10.4.3-ok0.1k0.11
          upstream commtid:9f40cceb1001001c1a767ce4335f31edf6f90a07


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [BUG#294119]
  - SUG : NA
  - DESC: add ukui-power-manager-4.10.0.0-kylin-remove-ukui-control-center-Suspend-and-Hibernate-and-wakeUpDisplay-no-passwd.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: ukui-power-manager-kylin-4.10.0.0-hide-shutdown.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-power-manager-4.10.0.0-ok1.34k2.0
          upstream commtid:cc25d6a66a8e679daef437d0f5d243116752e994


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#636667]
  - SUG : NA
  - DESC: 增强ukui-power-manager功能，添加参数校验，保障ukui-power-manager功能正常


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#363325][BUG#369099]
  - SUG : NA
  - DESC: add Patch14:ukui-screensaver-4.10.0.0-kylin-remove-black-drawPath.patch
          add Patch15:ukui-screensaver-4.10.0.0-kylin-change-message-rule.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch16: ukui-screensaver-4.10.0.0-kylin-remove-AuthDialog-onChangeUser.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-fix-ukui-screensaver-backend-coredump-in-vncdesktop.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p24
changelog:
  - Type: bugfix
  - ID  : [BUG#498405]
  - SUG : NA
  - DESC: Patch25: ukui-screensaver-4.10.0.0-add-dbus-signal-lock-for-session-tools.patch
          修复从电源管理器锁定屏幕没有lock dbus信号发出问题


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p02
changelog:
  - Type: update
  - ID  : [TASK#492845]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p03
changelog:
  - Type: update
  - ID  : [TASK#522795]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p02
changelog:
  - Type:update
  - ID:[BUG#238630][BUG#238129]
  - SUG:NA
  - add Patch0011:usbguard-parse.patch
  - DESC: 238129 【V11 B02】【龙芯】【USBGuard】USB设备及策略管理交互模式界面展示不友好
  - DESC: 238630 【V11 B02】【USBGuard】设备已有拦截策略，再次手动添加放行策略不生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p04
changelog:
  - Type:update
  - ID:[BUG#242968][BUG#245015]
  - SUG:NA
  - add Patch0012: usbguard-config.patch
  - DESC: 242968 【V11-B05】【安全SDK】全部设备管控策略查询-授权提示转储
  - DESC: 245015 【V11-B06】【安全SDK】设备授权取消授权大概率转储，usbguard服务起不来
  - 去除usbguard-selinux包,策略已在selinux-policy统一管理


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p05
changelog:
  - Type:update
  - ID:[BUG#242972]
  - SUG:NA
  - add Patch0013: usbguard-format.patch
  - DESC: 242972 【V11 B05】【USBGuard】导入错误格式策略，提示核心已转储
  - DESC: 243051 【V11 B05】【USBGuard】放行部分USB接口提示核心已转储
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p06
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0014:     usbguard-restore.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p07
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0015:     usbguard-restore2.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p08
changelog:
  - Type:update
  - ID:[BUG#310899]
  - SUG:NA
  - add Patch0016:     usbguard-hub.patch
  - DESC: 306393 【V11-B17】【USBGuard】root hub 1.0和2.0设备设置永久拦截和放行提示核心已转储
  - DESC: 310899 【V11-B18】【USBGuard】在设备策略管理中，修改策略失败，策略被删除


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p09
changelog:
  - Type:update
  - ID:[BUG#247155/347856]
  - SUG:NA
  - add Patch0017: usbguard-import.patch
  - DESC: 247155 【V11-B07】【安全SDK】通过设备信息删除设备管控策略，删除serial名字较长的设备管控策略失败
  - DESC: 347856 [V11 2503][B09][需求41823][USBGuard]管理设备策略-导入放行策略使被拦截U盘放行，导入拦截策略覆盖现有策略后没有及时生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p10
changelog:
  - Type:update
  - ID:[任务#479543]
  - SUG:NA
  - add Patch0018: usbguard-idnull.patch
  - DESC: 479543 【V11 2503】修改usbguard默认策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p11
changelog:
  - Type:update
  - ID:[BUG#383547]
  - SUG:NA
  - add Patch0019: usbguard-setdev.patch
  - DESC:[出厂测试][v11-2503][B19][需求42057][USBGuard]管理已连接设备,设备状态为拦截,修改为永久拦截,未生成策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p12
changelog:
  - Type:update
  - ID:[BUG#391973]
  - SUG:NA
  - add Patch0020: usbguard-hub2.patch
  - DESC: 391973 [同源测试][v11-2503][B20][需求42057]开启usbguard后，bmc的虚拟鼠标和键盘被拦截


author: lijian <lijian01@kylinos.cn> - 2:9.0.2092-15.p01
changelog:
  - Type:update
  - ID:[task#424803]
  - SUG:NA
  - DESC:1) 移植敏感词修改和zh_HK繁体字支持的补丁
  -      2) 移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      3) remove discriminatory language


author: houzhiwei <houzhiwei@kylinos.cn> - 2:9.0.2092-18.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-53905 and CVE-2025-53906
  - SUG:NA
  - DESC:1.fix some tests failed. 2.fix CVE-2025-53905 and CVE-2025-53906


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-32.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> - 2:9.0.2092-33.p01
changelog:
  - Type:update
  - ID:[task#512917][#bug587499]
  - SUG:NA
  - DESC: update to 9.0.2092-33 and fix CVE-2026-42307 CVE-2026-44656 CVE-2026-45130


author: zuo <zuohongsheng@kylinos.cn> - 1:4.4.14-1.p01
changelog:
  - Type:CVE
  - CVE:[task#597029]
  - SUG:NA
  - DESC: update to 4.14, and backport add-HK-complex-Chinese-character.patch


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2022-49737, CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180, CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.01
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083, CVE-2024-9632


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p06.04
changelog:
  - Type: CVE
  - ID:   [BUG#605083]
  - SUG:  NA
  - DESC: fix CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261


