# changelog

author: zhangzikang <zhangzikang@kylinos.cn> - 2:1.7.2-3.p01
changelog:
  - Type: update
  - ID: [TASK#372985]
  - SUG: NA
  - DESC: Add libunwind-kycompat subpackage.
          Supply follow symbols to solve the API/ABI compatibility issue:
            _UCD_add_backing_file_at_vaddr
            _UCD_add_backing_file_at_segment symbols


author: chenyanpanHW <chenyanpan@huawei.com> - 1:0.1.5-18
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0000-Link-with-znodelete-to-disallow-unloading.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-4
changelog:
  - docs: Document CPU clusters
  - docs: Improve documentation for CPU topology
  - tests: Verify handling of CPU clusters in QMP data
  - qemu: Make monitor aware of CPU clusters
  - qemu: Use CPU clusters for guests
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS
  - conf: Allow specifying CPU clusters
  - conf: Report CPU clusters in capabilities XML
  - tests: Add hostcpudata for machine with CPU clusters
  - cpu_map: add kunpeng-920 features to arm features
  - cpu/aarch64: enable host-model cpu for AArch64 architecture
  - conf/domain_conf: pin the retry_interval and retry_timeout parameters to xml
  - nodedev: fix potential heap use after free
  - libvirt/conf: Set default values of retry fileds
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt: Add 'retry' support for error policy
  - vdpa: support vdpa device migrate
  - vdpa: support vdpa device hot plug/unplug
  - hostdev:Introduce vDPA device to hostdev subsystem as a new subtype
  - node_device: fix leak of DIR*
  - migration/multifd-pin: support migration multifd thread pin
  - migration/multifd-pin: add qemu monitor callback functions
  - migration/migration-pin: add domainMigrationPid for qemuMonitorCallbacks
  - migration/migration-pin: add migrationpin for migration parameters
  - migration/migration-pin: add qemu monitor callback functions
  - migration/migration-pin:add some migration/multiFd params
  - qemu: add pointer check in qemuMonitorLastError
  - qemu: fix a concurrent operation situation
  - test/commandtest: skip the test4 if the testcase is run in the container env


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-5
changelog:
  - hotpatch: if hotpatch_path not in qemu.conf,the hotpatch doesn't antoload
  - remote: check for negative array lengths before allocation
  - Fix off-by-one error in udevListInterfacesByStatus
  - Fix warnings found by clang
  - hotpatch: virsh support autoload mode
  - domain: add logs for virDomainHotpatchManage
  - hotpatch: check vm id and pid before using hotpatch api
  - hotpatch: implement hotpatch virsh api
  - hotpatch: introduce hotpatch async job flag
  - hotpatch: Implement qemuDomainHotpatchManage
  - Hotpatch: introduce DomainHotpatchManage API


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: fangyi <eric.fangyi@huawei.com> - 9.10.0-15
changelog:
  - cpu-Add-new-Dharma-CPU-model.patch
  - qemu-cvm-support-uefi-boot-by-rom.patch
  - iommufd-Support-configuring-iommufd-backends-for-qem.patch
  - vdpa-iommufd-Support-associating-iommufd-with-vDPA-h.patch
  - capabilities-add-fun-to-determine-if-binary-is-strat.patch
  - qemu_command-unsupport-command-line-will-not-built-f.patch
  - chardev-use-path-instead-of-fd-for-stratovirt.patch
  - Revert-qemu-command-Delegate-qemuBuildDriveStr-to-SD.patch
  - Revert-qemu-Remove-pre-blockdev-PFLASH-setup.patch
  - qemu_command-get-disk-alias-from-disk-instead-of-nod.patch


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p01
changelog:
  - Type: Update
  - ID:   [TASK#534467]
  - SUG:  NA
  - DESC: Backport V11-2503 patch
  -   Enable netcf support
  -   Fix several iface-related translation issues
  -   Fix some translation errors of common functions.
  -   Support Phytium S5000c
  -   Add a path in DEFAULT_LOADER_NVRAM to solve the issue of not being able to find UEFI firmware in x86 architecture
  -   Support host-model for arm, solve core dump when libvirtd starts on Phytium,solve compile error with modify xml in the test dir
  -   Disconnect libvirt's dependency on rbd and install it when the user needs to support it
  -   Fix the translation problem of libvirtd.policy's prompts
  -   Support MCE error alert and optimization the function that locates VMs affected by MCE errors
  -   Fix virtual machine save and restore failure issue when CPU model is configured as host model mode


author: lijunwei <lijunwei@kylinos.cn> - 9.10.0-16.p04
changelog:
  - Type: Update
  - ID:   [TASK#554389]
  - SUG:  NA
  - DESC: Add support for Arm UEFI pflash vm internal snapshot


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-16.p06
changelog:
  - Type: Update
  - ID:   [TASK#588425]
  - SUG:  NA
  - DESC: Disconnect libvirt's dependency on rbd and glusterfs


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.13.1-4.p01
changelog:
  - Type:update   
  - ID:[TASK#533221]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: Thorsten Leemhuis <fedora@leemhuis.info> - 0.85.0-1
changelog:
  - update to 0.85.0
  - adjust license, as upstream changed it to MIT
  - update make-git-snapshot.sh to current locations and scheme
  - drop common package, not needed anymore
  - compositor is now in a separate package, hence reduce BuildRequires to what
    is actually needed (a lot less) and adjust summary
  - make usage of a git checkout in spec file optional
  - a %{?_isa} to requires where it makes sense


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.91-2
changelog:
  - Call ldconfig in libwayland-cursor %post* scripts.
  - Run test suite during build.
  - Compress snapshot tarballs with xz.


author: Till Maas <opensource@till.name> - 1.7.0-2
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Kristian Høgsberg <krh@redhat.com> - 2.18.0-2
changelog:
  - Add compiz integration patches from GNOME #352383:
     - libwnck-2.18.0-appearance.patch
     - libwnck-2.18.0-viewport.patch
     - libwnck-2.18.0-above.patch


author: shenyangyang <shenyangyang4@huawei.com> - 2.9.10-3
changelog:
  - Fix-use-after-free-with-validating-reader and
    Never-expand-parameter-entities-in-text-declaration


author: zoulin <zoulin13@huawei.com> - 2.9.10-6
changelog:
  - Fix more quadratic runtime issues in HTML push parse
  - Fix reset HTML parser input before reporting error


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.9.10-8
changelog:
  - revert Don-t-try-to-handle-namespaces-when-building-HTML-do.patch.
    rubygem-nokogoro test case fail,because this patch remove xml namespace function.


author: zoulin <zoulin13@huawei.com> - 2.9.10-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] patches from upstream
         Fix-handling-of-unexpected-EOF-in-xmlParseContent.patch
         Fix-line-numbers-in-error-messages-for-mismatched-ta.patch
         Fix-null-deref-in-legacy-SAX1-parser.patch
         update-for-xsd-language-type-check.patch
         Fix-dangling-pointer-with-xmllint-dropdtd.patch
         Fix-duplicate-xmlStrEqual-calls-in-htmlParseEndTag.patch
         Fix-exponential-behavior-with-recursive-entities.patch
         Fix-quadratic-behavior-when-looking-up-xml-attribute.patch
         Fix-use-after-free-with-xmllint-html-push.patch
         Fix-xmlGetNodePath-with-invalid-node-types.patch
         Stop-checking-attributes-for-UTF-8-validity.patch


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: huangduirong <huangduirong@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues, fix null-deref in xmlSchemaGetComponentTargetNs


author: panxiaohe <panxiaohe@huawei.com> - 2.9.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport bug fixes.
         work around lxml API abuse
         fix regression in xmlNodeDumpOutputInternal
         fix whitespace when serializing empty HTML documents
         forbid epsilon-reduction of final states
         fix buffering in xmlOutputBufferWrite


author: fuanan <fuanan3@h-partners.com> - 2.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: fuanan <fuanan3@h-partners.com> - 2.9.14-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.11.9-6.p01
changelog:
  - Type: update
  - ID: [TASK#529389]
  - SUG:NA
  - DESC: Sync kycompat patches from previous release
         0001-kylin-compat-support-V1.0-for-libxml2.patch
         0002-kylin-compat-support-V1.1-for-libxml2.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 1.3-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:change the directory of the license file and add the help package for libxshmfence


author: peijiankang <peijiankang@kylinos.cn> - 1.30.0-14.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#235397]
  - SUG:  NA
  - DESC: add After=accounts-daemon.service to fix SIGABRT


author: peijiankang <peijiankang@kylinos.cn> - 1.30.0-14.p04
changelog:
  - Type: update
  - ID:   [TASK#371117]
  - SUG:  NA
  - DESC: add lightdm-1.30.0-sync-from-openkylin-lightdm-1.30.0-ok4nile2.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.30.0-14.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add lightdm-1.30.0-fix-restoreLangSet-SIGSEGV.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.30.0-14.p06
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync to desktop version 1.30.0-ok5k0.2
          upstream commitid: e936277532e364c74401b1280ff89dd8ecd3edc0


author: huayadong <huayadong@kylinos.cn> - 1.30.0-14.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch1003:lightdm-1.30.0-kylin-not-remove-priv-starting-dirs-root.patch


author: zhangtao <zhangtao@kylinos.cn> -20250708-2.p02
changelog:
  - Type:bugfix
  - ID:[Bug#470395]
  - SUG:NA
  - DESC: fix the error reported when executing the dracut -f command


author: mengdehui <mengdehui@kylinos.cn> 0.9.6-01.se.30
changelog:
  - Type:compile
  - ID:[393341] 动态度量基于23.1版本内核重新编译入库
  - SUG:NA
  - DESC:just rebuild on some System version


author: mengdehui <mengdehui@kylinos.cn> 0.9.7-01
changelog:
  - Type:compile
  - ID:[461250] 基于6.6.0-31.0内核重编lkrg-kyextend
  - SUG:NA
  - DESC:同步修复部分软所问题，修复gerrit平台检查报错


author: mengdehui <mengdehui@kylinos.cn> 0.9.7-02
changelog:
  - Type:compile
  - ID:[465107] 【V11 2503】基于6.6.0-32.1内核重编lkrg-kyextend
  - SUG:NA
  - DESC:补充源码自研版本声明;修改模块为软连接安装;


author: mengdehui <mengdehui@kylinos.cn> 0.9.7-03
changelog:
  - Type:compile
  - ID:[472097] 【V11 2503】基于6.6.0-32.3内核重编lkrg-kyextend
  - SUG:NA
  - DESC:提高兼容性，修复tpm设备临时拔出时存在的空指针访问问题


author: mengdehui <mengdehui@kylinos.cn> 0.9.7-04
changelog:
  - Type:compile
  - ID:[353840] 【v11 2503】【需求44504】【动态度量】进程度量-添加和删除度量对象audit（全路径）-审计日志没有PCR审计日志
  - SUG:NA
  - DESC:修改pcr日志格式 path: 改为 path= 规避ausearch -i 日志解析错误


author: mengdehui <mengdehui@kylinos.cn> 0.9.7-05
changelog:
  - Type:compile
  - ID:[432761] 【需求46334】【动态度量】动态度量开启命令多次出现卡主
  - SUG:NA
  - DESC:解决度量过程中内核加载流程异常退出时的度量进程崩溃问题,同步桌面同源版本中的其它问题修复


author: Xiong Zhou <xiongzhou4@huawei.com> 0-2.20211016.gitb72f753
changelog:
  - Type:backport
  - ID:NA
  - SUG:NA
  - DESC: Handle data at the beginning of a function when disassembling and building CFG.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.27-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/lmdb-make.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/lmdb-s390-check.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/support-specify-cc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Bjorn <bjorn1@users.sourceforge.net> 7.5.1-1
changelog:
  * Fri Dec 28 2018 Bjorn <bjorn1@users.sourceforge.net> 7.5.0
  - simplified files section
  - using symbolic links for some man files


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: Xinwei Hu <shinwell_hu@openeuler.sh> - 3.9.2-1
changelog:
  - Decouple luarocks from openresty
  - Upgrade to 3.9.2
    . Improved connectivity resiliency
    . A couple of minor feature additions


author: Dingli Zhang <dingli@iscas.ac.cn> - 0:7.7.0-2
changelog:
  - Update spec for RISCV64 due to OOM compilation error
  - Add Requires of several packages to resolve conflicts during installation


author: mengchaoming<mengchaoming@kylinos.cn> - 0:7.7.0-3.p01
changelog:
  - Type:update
  - ID:[TASK#525393]
  - SUG:NA
  - DESC: add patch lucene-modify-sensitive-words.patch
  - Remove duplicated license entries from lucene-javadoc


author: chenyanpanHW <chenyanpan@huawei.com> - 9-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 5.0.2-8
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: skip setup console if disable pty and fix syscontainer-hooks write devices rule useless


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 5.0.2-9
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix dev mount failed and skip send/recv devpts_fd if disable_pty


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: shixuantong<shixuantong@huawei.com> - 2.1.49-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:move mime.types to mailcap rpm and change mime.types to mime_mailcap.types


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.6-4.g
changelog:
  - clean up old cruft from patches and split them out more logically
  - hman: use xdg-open and proper paths
  - improve manpages
  - temporarily fix SELinux until selinux-policy is patched
  - clarify licensing


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.6-6.g
changelog:
  - fix hman bug that caused linked to wrong URLs for sections (e.g. `hman 1`)
  - don't ship Italian man pages; they're provided by man-pages-it


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.6-22.g
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: chenyanpanHW <chenyanpan@huawei.com> - 3.0.6-9
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/mariadb-connector-c-3.1.13-src-sw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-riscv64-to-lib64-matches.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-sw64-to-lib64-matches.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-terminology-modifcation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: peijiankang <peijiankang@kylinos.cn> - 1.28.2-1.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 1.22.2-9.p01(Remove Requires: mate-control-center-filesystem mate-panel mate-notification-daemon mate-user-guide)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - initial build
  - KYOS-B: add kylin mask and part of translations
  - KYOS-B: set text preview content
  - KYOS-B: add a action in mate-terminal.desktop.in.in
  - KYOS-B: change default color and system color to Dracula Dark(#30872)
  - KYOS-B: select the default charset by locale


author: peijiankang <peijiankang@kylinos.cn> - 1.28.2-1.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 1.22.1-5.p02([BUG#240137]mate-terminal-1.22.1-fix-help-display-error.patch and [BUG#238335]mate-terminal-1.22.1-kylin-remove-Reset.patch)


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 175-2
changelog:
  - The "cc:command not found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the --syslog option while executing mdadm --scan command in mdmonitor.service


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 4.1-rc2.0.10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove -Werror to fix [-Werror=address-of-packed-member] problem


author: Shixiong Ou <oushixiong@kylinos.cn> - 24.0.5-1.p02
changelog:
  - Type:bugfix
  - ID:TASK#378129
  - SUG:NA
  - DESC:add upstream orcjit patch and support loongarch64 orcjit


author: Jan Safranek <jsafrane@redhat.com> 47-2
changelog:
  - added support for Fedora DS (when it provides ldif2ldbm)
  - rediffed all patches to get rid of patch fuzz


author: Petr Pisar <ppisar@redhat.com> - 47-19
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 20190618-1
changelog:
  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190618, add help package.

  - Type: enhancement
  - ID:   NA
  - SUG:  NA
  - DESC: Update to 20190116, add help package.


author: lifeifei <lifeifei@kylinos.cn> - 20230416-1.p01
changelog:
  - Type:update
  - ID:task#327393
  - SUG:NA
  - DESC: add patch9001, migrate patch:"remove country code tw" from kylin v10sp4


author: weiyucheng<weiyucheng@kylinos.cn> - 24.0.9-1
changelog:
  - Type: update
  - ID: [TASK#439666]
  - SUG: NA
  - DESC: change package name from docker-ce to moby && init package moby-24.0.9
          fix CVE-2024-29018
          fix CVE-2024-41110
          provides docker && conflicts docker-engine moby-engine


author: weiyucheng<weiyucheng@kylinos.cn> - 24.0.9-1.p01
changelog:
  - Type: update
  - ID: [TASK#468343]
  - SUG: NA
  - DESC: resolve secure compilation issues and add kylin notice to NOTICE file


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: chenyanpanHW <chenyanpan@huawei.com> - 0.4.0-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Show-usage-instead-of-aborting-on-bad-flags.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-mokutil-bugfix-del-unused-opt-s.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-Fix-leak-of-list-in-delete_data_from_req_var.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-Fix-leak-of-fd-in-mok_get_variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-mokutil-Fix-memory-leak-in-export_db_keys.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git
  git


author: yaoxin <yao_xin001@hoperun.com> - 2.0.20-1
changelog:
  - Update to 2.0.20
    * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
    * Open files with appropriate access on Windows. Closes #3119.
    * Don't allow invalid response topic values.
    * Fix some strict protocol compliance issues. Closes #3052.
    * Fix cmake build on OS X. Closes #3125.
    * Fix build on NetBSD
    * Fix mismatched subscribe/unsubscribe with normal/shared topics.
    * Fix crash on bridge using remapped topic being sent a crafted packet.
    * Don't allow SUBACK with missing reason codes in client library.
    * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
    * Fix mosquitto_rr not honouring -R. Closes #2893.
    * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
    * Fix max_inflight_messages not being set correctly. Closes #2876.
    * Fix mosquitto_passwd -U backup file creation. Closes #2873.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: chenyanpanHW <chenyanpan@huawei.com> - 4.0.26-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-comment-invalid-info-in-conf-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 2:0.94-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if detach the GTK package from the master package
         modify changelog  to add epoch:2


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: kongdelin<kongdelin@kylinos.cn> - 2.1.3
changelog:
  - 优化, 添加进程名称精确匹配功能, 默认模糊匹配, 任务地址:https://172.17.50.104/task-view-158948.html
  - /etc/MulCheckProcess.json -> "fuzzy_match": 0代表精确匹配，"fuzzy_match": 1代表模糊匹配


author: kongdelin<kongdelin@kylinos.cn> - 2.1.6
changelog:
  - 修复libmul.so: undefined reference to: "json_get_array_size", "json_parse cJSON_Delete", "json_get_string", "json_get_number"
  - 回退版本，使用2.1.5版本监控y用户程序，会导致用户程序退出
  - 回退内容mulserv.h mul_status_e mul_status -> unsigned char mul_status : 4, mul_mode_e   work_mode ->unsigned char work_mode  : 4


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: songliyang <songliyang@kylinos.cn> - 2.3.6-4.p01
changelog:
  - Type: update
  - ID:   TASK#426758
  - SUG:  NA
  - DESC: remove BuildArch: noarch on package help to solve compile error


author: yaoxin <yao_xin001@hoperun.com> - 1.2.2-1
changelog:
  - Update to 1.2.2:
    * XML declaration must produce a START_DOCUMENT event.
    * Fix processing of PIs.
    * Unit test with subsequent dashes in a PI.
    * Replace project license Indiana 1.1.1 with explicit license 1.2 of MXParser.


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.32.6-2.p01
changelog:
  - Type:update
  - ID:[TASK#533221]
  - SUG:NA
  - DESC:Fix noarch package built differently on different architectures


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: lipengyu <lipengyu@kylinos.cn> - 6.4-10.p01
changelog:
  - Type:update
  - ID:[Task#327352]
  - SUG:NA
  - DESC:ncurses-support-loongarch&&enable relocation for kylin


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.2-11
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/neon-0.32.2-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: eaglegai <eaglegai@163.com> - 2.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ifconfig display error when the length of interface name is 15


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <yao_xin001@hoperun.com> - 4.1.114-1
changelog:
  - Update to 4.1.114
    * Validate HTTP Method (#14280)
    * Release AdaptiveByteBuf when ownership could not be transfered. (#14285)
    * Make arenas reuse their last chunk more aggressively (#14291)
    * Only add Magazine to Set if we can ensure its removed again (#14292)
    * Ensure Chunk will not leak if init of AdaptiveByteBuf fails for whatever reason (#14295)
    * Correctly release one-off allocated chunks (#14302)
    * Ensure pooled memory is released when AdaptivePoolingAllocator is GC'ed (#14304)
    * Slices / duplicates of AdaptiveByteBuf must not escape the rootParent (#14310)
    * Fix sizeBucket bug in AdaptivePoolingAllocator (#14311)
    * AdaptiveByteBufAllocator: More strict reference counting for chunks (#14322)
    * Ensure we not store the DnsQueryContext for later removal when we couldnt obtain a query id (#14326)
    * Reduce memory fragmentation (#14333)
    * Properly free magazine chunks and avoid orphaned magazines (#14334)
    * Magazines must be freed under the expand lock (#14336)
    * Release message before failing promise when multiple requests are written while upgrade is in progress. (#14342)
    * Allow to reuse more then one session per host / port mapping (#14356)
    * Ensure writes will not fail when triggered after receiving UpgradeEvent.UPGRADE_SUCCESSFUL (#14362)
    * Refactor DnsNameResolver to be able to use different strategies when it comes to creating Channels for queries. (#14374)
    * DnsNameResolver: allow users to skip bind() during bootstrap (#14375)
    * DnsResolverBuilder methods should make it clear that these are for DatagramChannel (#14379)


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p01
changelog:
  - Type: update CVE
  - ID:   [TASK#553251]
  - SUG:  NA
  - DESC: 1.Fix CVE-2025-59419
          2.Fix a build error
          3.Remove unused buildrequires: netty-tcnative


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p02
changelog:
  - Type: update
  - ID:   [BUG#468839]
  - SUG:  NA
  - DESC: Update information that CVE-2022-24823 has been fixed while upgrading to 4.1.114


author: jiangjixiang <jiangjixiang@kylinos.cn> - 1.36.0-1.p01
changelog:
  - Type: update
  - ID: TASK#327392
  - SUG: NA
  - DESC: add patch2, migrate chinesization from kylin v10sp3


author: xulei <xulei@xfusion.com> - 2.17.5-2
changelog:
  - enhance some behavior: 
    1、add control group system-ovs.slice
    2、OVS_USER_ID change to root:root
    3、add user group openvswith and user openvswith


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: chenyanpanHW <chenyanpan@huawei.com> - 0.3.7-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Fix-infinite-loop-when-perl-is-added-in-BEP_FILE_TIM.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-build-do-not-generate-aclocal.m4.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-acl_nfs4_get_who-removed-an-always-false-evaluate-wa.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The python-setup tools causes an error in the nftables packaging path,This macro is added to ensure that path remains unchanged


author: xinghe <xinghe2@h-partners.com> - 1:1.0.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cache prepare nft_cache evaluate to return error
         fix cache validate handle string length
         add src support for implicit chain bindings
         fix cache release pending rules
         fix segtree map listing
         parser_json fix device parsing in netdev family
         fix src Don't parse string as verdict in map


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: yuxiangyang <yuxiangyang4@huawei.com> - 1:1.16.1-2
changelog:
  - delete http_stub_status_module.This configuration creates a simple
    web page with basic status data,but it will affect cpu scale-out because
    it use atomic cas.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-6.p01
changelog:
  - Type: update
  - ID: [TASK#532891]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: majianhan <majianhan@kylinos.cn> - 2:7.94-7.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC:[kylin] skip some testcases which need access internet


author: wangkai <13474090681@163.com> - 1:20.11.1-1
changelog:
  - Update to 20.11.1
  - Fix CVE-2023-46809 CVE-2024-21896 CVE-2024-22019 CVE-2024-21892 CVE-2024-24758 CVE-2024-22025


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: leiju <leiju4@huawei.com> - 0.1.3-2
changelog:
  - delete ExclusiveArch:i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl noarch


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: chenyanpanHW <chenyanpan@huawei.com> - 1.6-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-0001-w32-Use-cast-by-uintptr_t-for-thread-ID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-0002-posix-Add-npth_poll-npth_ppoll.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 4.29.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/nspr-gcc-atomics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/nspr-4.35-sw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanghua<yanghua21@huawei.com> - 0.9.9-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Create /var/run/nslcd/socket after dropping privileges
         Fix crash in chsh.ldap


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.13-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-libnuma-clear-errno-at-the-end-of-numa_init.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-numactl-Fix-shm-verfiy-for-preferred-policy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-numactl-numactl-length-xxx-shm-xxx-px-doesn-t-work.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-fix-wrong-nodemask_sz-when-CONFIG_NODES_SHIFT-is-les.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-numactl.c-Remove-unused-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-numactl.c-Fix-merging-of-neighboring-pages-policies-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-shm.c-Replace-stat64-fstat64-ftruncate64mmap64-with-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-numastat-Update-system-hugepages-memory-info-from-sy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0009-riscv64-remove-flag-latomic.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0010-fix-fix-memory-leaks-when-run-with-H.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0011-libnuma-Fix-unexpected-output.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0012-libnuma-Fix-incorrect-print-and-exit-of-numa_preferr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0013-fix-the-using-of-the-uninitialized-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0014-backport-Make-numa_available-respect-EPERM.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0015-backport-fix-nodemask-allocation-size-for-get_mempolicy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: Qiang Wei <qiang.wei@suse.com> - 2.2.1-1
changelog:
  - Update to version 2.2.1.
    * Remove 0001-bash-Fix-nvme-completion.patch, it is fixed in upstream.
    * backport upstream patch: Bash completion: move global declare into function.


author: Ruozhu Li <liruozhu@huawei.com> - 1.00.029-1
changelog:
  - Added the function of sending a notification message to the switch when the software starts, and the switch sending domain members to the host, improving the reliability of software upgrade scenarios.
  - Add more connection parameter support, consistent with nvme cli.
  - Bond ports can join the domain and automatically establish a connection.


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: Wu Bo <wubo@huawei.com> - 2.0.876-19
changelog:
  - iscsi-iname verfiy prefix length is at most 210 characters.
    iscsi-iname remove unneeded temp buffer.
    Fix issuse where 'iscsi-iname -p' core dumps.
    modify iSCSI shared memory permissions for log.


author: haowenchao <haowenchao@huawei.com> - 2.1.1-4
changelog:
  - backport patches from epoch2 including following changes:
    get_random_bytes is replaced by RAND_bytes so it is removed
    fix buffer overflow when discovering


author: haowenchao <haowenchao@huawei.com> - 2.1.1-5
changelog:
  - Change iscsid service PIDFile to /run/iscsid.ipd
    The pid file has be changed from /var/run/iscsid.pid to
    /run/iscsid.pid in code, here perform a sync.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.100-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-logging-fix-segfault-on-an-underflow-with-an-input-s.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-5
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: laokz <zhangkai@iscas.ac.cn> - 4.1.5-5
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le


author: songliyang <songliyang@kylinos.cn> - 4.1.5-7.p01
changelog:
  - Type: update
  - ID:   TASK#424809
  - SUG:  NA
  - DESC: fix wrong usage in spec file which makes it lose loongarch64 patch


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: Senlin Xia <xiasenlin1@huawei.com> 1.3.2-5
changelog:
  - Fix scap-workbench compilation failure: declaration of 'operator' as parameter in oval_definitions.h


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: seuzw<930zhaowei@163.com> - 8.8p1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix incorrect sftp-server binary path in /etc/ssh/sshd_config


author: renmingshuai <renmingshuai@huawei.com> - 8.8p1-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:PubkeyAcceptedKeyTypes has been renamed to PubkeyAcceptedAlgorithms in openssh-8.5p1


author: renmingshuai<renmingshuai@huawei.com> - 9.3p1-3
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:update the sshd_config and ssh_config, add the auto control
          mode scripts, add auto generate sm2 hostkey when start sshd service,
          fix ssh-keyscan can't get host pubkey issue


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: wangcheng <wangcheng156@huawei.com> - 1:3.0.12-1
changelog:
  - Upgrade to 3.0.12
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650
    Resolves: CVE-2023-5363
    Resolves: CVE-2023-6237
    Resolves: CVE-2023-6129
    Resolves: CVE-2023-5678
    Resolves: CVE-2024-0727


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p01
changelog:
  - Type: update
  - ID:TASK#424671
  - SUG:NA
  - DESC: add tlcp protocol patch, add tls rfc8998 patch , add zuc algorithm
          patch, add random drbg satisfy the GM/T 0105-2021 implementation,
          add passout and cipher parameter of ecparam apps,
          add Add-support-for-Zhaoxin-SM2-3-4-RNG.patch,
          fix some issues for the base openssl version and
          adapter the kylin old version cert


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p07
changelog:
  - Type:update
  - ID:TASK#533697
  - SUG:NA
  - DESC:add add-support-for-sw_64-architecture.patch and fix sw_64 _libdir


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p09
changelog:
  - Type:cves
  - ID:BUG#497061
  - SUG:NA
  - DESC: fix CVE-2025-15467,CVE-2025-69418,CVE-2025-69419,CVE-2025-69420,
              CVE-2025-69421,CVE-2026-22795,CVE-2026-22796,CVE-2025-68160


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-17.p10
changelog:
  - Type:update
  - ID:TASK#599075
  - SUG:NA
  - DESC: fix negative input length in EVP_EncryptUpdate function


author: - James.Bottomley@HansenPartnership.com
changelog:
  - Update to version 2.0.0:
    * Licence changed from GPL to LGPL (fixes openssl compatibility)
    * Key format changed for interoperability
    * OIDs updated with input from the TCG (new format only)


author: - James.Bottomley@HansenPartnership.com
changelog:
  - Update to version 2.0.1:
    * Fix name algorithm selection
    * Make policy correct for non sha256 name algorithms
    * add security to TPM decryption operations


author: - James.Bottomley@HansenPartnership.com
changelog:
  - Update to version 2.3.0
    * add the ability to produce restricted (storage) keys with defined
      symmetric seeds
    * new load_tpm2_key command to load a key file at a NV index
  - Version 2.2.0
    * Add support for non-PKCS1 padding
    * Fixups for engines and cross builds


author: - James.Bottomley@HansenPartnership.com
changelog:
  - Update to version 2.4.1
    * fixes for older OpenSSL and gcc
    * variable tpm_server location for testing


author: - James.Bottomley@HansenPartnership.com
changelog:
  - Update to version 2.4.2
    * Add every TPM supported curve (as defined by the TCG)
    * Fix a bug with explicitly parametrised curve handling (needed for BN)
    * Update the tests to be able to use swtpm
    * Allow loading public key without password


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p01
changelog:
  - Type:update
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:Add providers of libvirt, openstack and template 
         support LoongArch64


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix file lock type compatibility on sw64 by using write lock only


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: chenyanpanHW <chenyanpan@huawei.com> - 1.77-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/os-prober-mdraidfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/os-prober-bootpart-name-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/os-prober-mounted-partitions-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/os-prober-umount-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/os-prober-grub2-parsefix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/os-prober-grepfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shaojiansong <shaojiansong@kylinos.cn> - 20230518-1.p02
changelog:
  - Type:bugfix
  - ID:[TASK#234560]
  - SUG:NA
  - DESC:Add kylin-11.0.xml and kylin-hostos-11.0.xml for recognization of kylinos-v11 on virtmanager


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2020.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:DO not run testcase test-libarchive-import,because selinux is off.


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: Otavio R. Piske <opiske@redhat.com> - 1.2.0-1
changelog:
  - Fixed rpmlint warnings: replaced cmake call with builtin macro
  - Fixed rpmlint warnings: removed buildroot reference from build section


author: Otavio R. Piske <opiske@redhat.com> - 1.2.0-4
changelog:
  - Removed Group tag as required by packaging guidelines
  - Prevent the devel package from being used with incompatible versions
  - Replaced the doc tag with the license tag


author: Otavio R. Piske <opiske@redhat.com> - 1.2.0-7
changelog:
  - Replaced build and install commands with respective macros
  - Added license to the devel docs packages
  - Removed explicit require on OpenSSL
  - Move the shared library symlinks to the devel package


author: Otavio R. Piske <opiske@redhat.com> - 1.2.0-9
changelog:
  - Reduce description size to less than 80 characters
  - Install the Paho client/servers tools in the binary package
  - Install the binary examples in the development package only


author: Otavio R. Piske <opiske@redhat.com> - 1.2.1-0
changelog:
  - Updates paho-c package to the latest upstream version 1.2.1
  - Adjust the location of the documentation within the documentation dir


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.5.3-4.se.1
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
       add patch: pam-security-check-unique-uid.patch
  	            pam-add-zh-HK-po.patch


author: mengchaoming<mengchaoming@kylinos.cn> - 1.5.3-4.se.01.p01
changelog:
  - Type:bugfix
  - ID:[bug#279401]
  - SUG:NA
  - DESC:Added translation for message "(%d seconds left to unlock)" in pam_faillock module


author: chenjianhu<chenjianhu@kylinos.cn> - 1.5.3-6.se.01.p01
changelog:
  - Type:cves
  - ID:CVE-2024-10963 CVE-2024-10041 
  - SUG:NA
  - DESC:fix CVE-2024-10041 and CVE-2024-10963


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.5.3-6.se.02.p02
changelog:
  - Type:update
  - ID:[bug#369095]
  - SUG:NA
  - DESC: optimize password expiration warning message translation


author: mengchaoming<mengchaoming@kylinos.cn> - 1.5.3-6.se.02.p03
changelog:
  - Type:update
  - ID:[BUG#374941]
  - SUG:NA
  - DESC: Fix user login failure after lock due to strict dir permissions


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.5.3-6.se.03.p03
changelog:
  - Type:update
  - ID:[BUG#378295]
  - SUG:NA
  - DESC: pam_faillock: Prevent login for users with duplicate UIDs


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.5.3-9.se.03.p04
changelog:
  - Type:update
  - ID:[Task#601607 Task#601609]
  - SUG:NA
  - DESC: linux-pam: fix su_sighandler typos and pam_exec null dereference


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.13-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Drop-module-long-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add peony-share Requires: samba samba-client


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok2k1.3
          upstream commitid: c2238e7f6811fe1e1faa5a9fde637c32b2d785bd


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-fix-peony-share.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#352174]
  - SUG : NA
  - DESC: add peony-extensions-4.10.0.0-add-uncompress-type.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: update
  - ID  : [TASK#586391]
  - SUG : NA
  - DESC: remove peony-share Requires: samba samba-client


author: Xiaoqi Guo<guoxiaoqi2@huawei.com> - 3.2-36.h1
changelog:
  - Type:new-packages
  - ID:NA
  - SUG:NA
  - DESC:add patches, include
    huawei-bugfix-Add-extra-judgment-for-a-partition-created-success.patch
    huawei-bugfix-add-support-of-gpt_sync_mbr.patch


author: yanghua<yanghua21@huawei.com> - 3.2-36.h2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:parted fix crash due to improper partition number in
         parted fix wrong error label jump in mkpart
         clean the disk information when commands fail in int
         libparted Fix ending CHS address in PMBR
         Fix the length of several strncpy calls
         parted.c Always free peek_word
         parted.c Make sure dev_name is freed
         Fix potential command line buffer overflow


author: hy-euler <eulerstoragemt@huawei.com> - 3.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: delete -Sgit in 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-add-support-of-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-Add-extra-judgment-for-a-partition-created-success.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-bugfix-parted-fix-failure-of-mklabel-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-hfsplus_btree_search-free-node-when-hfsplus_file_rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-amiga_read-need-free-part-and-partition-when-constra.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-scsi_get_product_info-fix-memleak-and-avoid-to-use-N.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-fat_op_context_new-free-ctx-remap-and-goto-correct-l.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-hfsplus_cache_from_extent-fix-memleak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0009-fat_clobber-set-boot_sector-NULL-and-free-boot_secto.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/9000-parted-remove-patch-which-modifid-cyl-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: mengchaoming <mengchaoming@kylinos.cn> - 0.80-10.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch
  - add patch: 0001-kylin-add-zh-HK-po.patch
  - 修改zh_HK.po文件的“户”为“戶”: kylin-modify-zh_HK_po.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 0.80-10.p01.se.01
changelog:
  - Type:update
  - ID:[Task#329161]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  - add patch: passwd-0.80-add-security-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 0.80-10.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#383361]
  - SUG:NA
  - DESC: passwd去除对libkysec包的依赖,改用dlopen方式
  - add patch: passwd-remove-libkysec-require.patch


author: Xibo.Wang <wangxb12@chinatelecom.cn> - 2.7.6-20
changelog:
  - Skip "ed" test when the ed utility is not installed
  - Abort when cleaning up fails
  - Don't crash when RLIMIT_NOFILE is set to RLIM_INFINITY
  - Avoid invalid memory access in context format diffs
  - Fix failed assertion 'outstate->after_newline'
  - Add missing-section tests to context-format test case
  - Fix test for presence of BASH_LINENO[0]


author: chenyanpan <chenyanpan@huawei.com> - 1.0.1-1
changelog:
  - Type: bugfix
  - DESC: fixed issues related to the validity of service configuration items and command line parameters


author: hy-euler <eulerstoragemt@huawei.com> - 3.6.2-5
changelog:
  - Type:enhancemnet
  - ID:NA
  - SUG:NA
  - DESC:add fedora patches for displaying more information while running lspci


author: chenyanpanHW <chenyanpan@huawei.com> - 3.7.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0000-pciutils-2.2.1-idpath.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-pciutils-dir-d.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-Support-specify-CC.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-Fix-memory-leak-when-fill-flags-has-PCI_FILL_PARENT.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: huanghaitao <huanghaitao8@huawei.com> - 4.1.3-4
changelog:
  - Type:cves
  - ID: CVE-2019-3695 CVE-2019-3696 
  - SUG:restart
  - DESC: fix CVE-2019-3695 CVE-2019-3696


author: Guoshuai Sun <sunguoshuai@huawei.com> - 4.1.3-12
changelog:
  - Fix some bugs in pcp-pidstat,include -U option error,-? need an arg,
    And del unused -h/--host options


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: lilu <lilu@kylinos.cn> - 6.2.2-5.p01
changelog:
  - Type: update
  - ID: [TASK#381587]
  - SUG: NA
  - DESC: migrate patch to change the shell environment to english


author: chenyanpanHW <chenyanpan@huawei.com> - 8.44-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-riscv-jit-backport.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: wangqiang <wangqiang1@kylinos.cn> - 0.10.8-3
changelog:
  - Type:Feature
  - ID:NA
  - SUG:NA
  - DESC:delete "-S git" from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/do-not-support-cluster-setup-with-udp-u-transport.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Support-for-openEuler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-do-not-put-empty-uid-gid-options-to-an-uidgid-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-stonith-level-validation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-pcsd-ruby.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/update-crm_mon-schemas-for-tests.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-dtos-and-converting-functions-for-resources-stat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fixes-after-review.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/store-clone-instance-id-in-resource-status-dtos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/increase-a-timeout-in-a-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Export-rule-constraints-in-a-non-deprecated-way.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-stdout-wrapping-to-terminal-width.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-booth-destroy-for-arbitrators.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-tests-for-tornado-6.5.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.7-13
changelog:
  - fix: Support for other distributions and delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/do-not-support-cluster-setup-with-udp-u-transport.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Support-for-openEuler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-do-not-put-empty-uid-gid-options-to-an-uidgid-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-stonith-level-validation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-pcsd-ruby.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/update-crm_mon-schemas-for-tests.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-dtos-and-converting-functions-for-resources-stat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fixes-after-review.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/store-clone-instance-id-in-resource-status-dtos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/increase-a-timeout-in-a-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Export-rule-constraints-in-a-non-deprecated-way.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-stdout-wrapping-to-terminal-width.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-booth-destroy-for-arbitrators.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-tests-for-tornado-6.5.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.7-14
changelog:
  - fix stdout wrapping to terminal width and modify spec file, sed command to replace "patch3" with "patch1"


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: chenyanpanHW <chenyanpan@huawei.com> - 4.3.4-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/create-lists-of-nullable-types.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangjia <wangjia55@huawei.com> - 4:5.28.0-424
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:disable perl-ExtUtils-CBuilder and perl-CPAN require


author: shenyangyang<shenyangyang4@huawei.com> - 4:5.28.0-428
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of bzip2-devel and gdbm-devel to solve build problem


author: openEuler Buildteam <buildteam@openeuler.org> - 4:5.32.0-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete the temporary unneeded behavior for upgrade of perl


author: wuchaochao<wuchaochao4@huawei.com> - 4:5.32.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix backport-perl-5.22.0-Install-libperl.so-to-shrpdir-on-Linux.patch


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: chenyanpanHW <chenyanpan@huawei.com> - 7.60-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/disable-rpath-by-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ExtUtils-MakeMaker-7.30-Link-to-libperl-explicitly-on-Linux.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: shaojiansng <shaojiansong@kylinos.cn> - 6.01-23.p01
changelog:
  - Type:compile
  - ID:TASK#221072
  - SUG:NA
  - DESC:change macro _libdir to /usr/lib64 to fix build error for noarch in spec


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.206-1
changelog:
  - upgrade version to 2.206:
    - fix version checks to use correct method
    - drop rt.cpan from SUPPORT section


author: wuchaochao <wuchaochao4@huawei.com> - 0.41-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify the spec file ,solving the problem of the test probability failure


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: shenyangyang <shenyangyang4@huawei.com> - 2.066-2
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:delete the /certs that used by test which contains the Unencrypted
         private key


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: chenyanpanHW <chenyanpan@huawei.com> - 6.07-8
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: woody2918 <wudi1@uniontech.com> - 0.29-1
changelog:
  - Update version to 0.29
  - Fixed numeric zero and empty string argument handling in translit() & translit_reverse().


author: zhangyao <zhangyao108@huawei.com> - 0.047-1
changelog:
  - Upgrade version to 0.047
  - Filter out script documentation from scripts
  - Don't manify podless modules/scripts 
  - Compile all .c files in src/
  - Add module sharedirs
  - Add src/ to include paths


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: shenyangyang <shenyangyang4@huawei.com> - 1.88-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl-Test-Warn and perl-Test-Exception


author: woody2918 <wudi1@uniontech.com> - 1.94-1
changelog:
  - update version to 1.94
  - supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5 - 3.8.
  - Enhancements to the API.


author: woody2918 <wudi1@uniontech.com> - 0.45-1
changelog:
  - update version to 0.45
  - Make sure to stringify versions so that they are quoted when they are encoded in JSON
  - Allow to parse class|role NAME VERSION


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: shenyangyang <shenyangyang4@huawei.com> - 0.35-420
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(Test::Portability::Files) 
         and perl(Test::Pod::Coverage)


author: woody2918 <wudi1@uniontech.com> 0.242-1
changelog:
  - update version to 0.242
  - Corrected test dependencies
  - Packaging fix to stop installing boilerplate.pl


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: shenyangyang <shenyangyang4@huawei.com> - 0.625-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(IO::Scalar) and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 2.29-398
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(BSD::Resource) 
         perl(Import::Into) >= 1.002004 and perl(Sub::Identify)


author: yueyuankun <yueyuankun@kylinos.cn> - 1.10-11.p01
changelog:
  - Type:update
  - ID:TASK#204872
  - SUG:NA
  - DESC:replace mark from Fedora to Kylin
         change spec at  Requires: perl(Fedora::VSP) to perl(Kylin::VSP)
         Add Obsoletes: perl-Fedora-VSP


author: zhanzhimin <zhanzhimin@huawei.com> - 1:0.238-1
changelog:
  * Thu Sep 26 2019 shenyangyang<shenyangyang4@huawei.com> - 1:0.237-4
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revise help package


author: chenyanpanHW <chenyanpan@huawei.com> - 1.14.0-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/subversion-1.12.0-linking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/subversion-1.14.0-testwarn.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/subversion-1.14.0-soversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/subversion-1.8.0-rubybind.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/subversion-1.8.5-swigplWall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/subversion-1.14.3-fix-build-errors.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2024-45720.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2024-46901.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: openEuler Buildteam <buildteam@openeuler.org> - 7.2.10-2
changelog:
  - Add CVE patches
  - Fix CVE-2019-9021 CVE-2019-9022 CVE-2019-9023 CVE-2019-9024
    CVE-2019-9637 CVE-2019-9638 CVE-2019-9639 CVE-2019-9640
    CVE-2018-20783 CVE-2019-9641 CVE-2019-11034 CVE-2019-11035
    CVE-2019-11036 CVE-2019-11041 CVE-2019-11042 CVE-2019-11043
    CVE-2018-19935 CVE-2019-11045 CVE-2019-11046 CVE-2019-11050
    CVE-2019-11047


author: Funda Wang <fundawang@yeah.net> - 8.1.10-1
changelog:
  - New version 8.1.10
  - Sync systzdata with remi's php repo
  - enable libsodium sub package
  - cleanup unused build switches


author: peijiankang <peijiankang@kylinos.cn> - 1.2.1-1.p01
changelog:
  - Type: update
  - ID:   [TASK#327373]
  - SUG:  NA
  - DESC: pinentry-1.2.1-1 package dep gtk2 and gtk3 ,plit out pinentry-gtk pinentry-gnome3 package sync form 1.1.0-5.p01


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.15-1
changelog:
  - Upgrade to 0.3.15
  - Update Version, Source0, BuildRequires, Obsoletes
  - Update stage 'build', 'install' and 'files'
  - Correct uncorrect date, add one patch


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2.p01
changelog:
  - Type: update
  - ID:   [TASK#425692]
  - SUG:  NA
  - DESC: sync kylin patch from 1.12.0-1.p01
          add 0001-plasma-wayland-protocols-1.12.0-add-strength-sync-1.6.0-ok3.3.patch


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: add chinese translation
  - KYOS-B: Fixed garbled toolTips path in tab page with GB18030 encoding(#7248)


author: peijiankang <peijiankang@kylinos.cn> - 1.28.0-2.p01
changelog:
  - Type: bugfix
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: sync from  1.22.2-4.p04
          BUG#240263 BUG#335437: add pluma-1.28.0-cannot-automatically-detect-Chinese-encoding.patch
          BUG#240720: add pluma-guide.tar.gz
          BUG#346652: add pluma-1.28.0-fix-coredump-about-uri-isnot-exist.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.28.0-2.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#484137]
  - SUG : NA
  - DESC: don't disable smclient, fixes pluma not prompting to user
          for unsaved file when exit from desktop environment


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: shenzhongwei <shenzhongwei@kylinos.cn> - 22.02.122-2.p02
changelog:
  - Type: update
  - ID: [TASK#327341]
  - SUG:NA
  - DESC:add Source1 kylin-logo.tar.gz and 0001-add-kylin-logo.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.1-11
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-podman-4.9.4-add-support-for-loongarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-fix-CVE-2024-28180.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-fix-CVE-2023-3978.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-fix-CVE-2023-48795.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-fix-CVE-2022-3064.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: chenjianhu <chenjianhu@kylinos.cn> - 123-2.p01
changelog:
  - Type: update
  - ID:[TASK#529379]
  - SUG:NA
  - DESC: backport patch for fix prompt no chinese and  Non-root 
  users cannot shutdown or reboot the system


author: wangye <wangye70@huawei.com> - 0.67.0-7
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/poppler-21.01.0-glib-introspection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2024-6239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2024-56378.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2025-32364.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2025-32365.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2025-43903.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2025-52886.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2025-50420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: fengbing <fengbing7@huawei.com> - 10.5-7
changelog:
  - Type:cves
  - ID:CVE-2019-10208 CVE-2018-16850
  - SUG:restart
  - DESC: fix CVE-2019-10208 CVE-2018-16850


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: dillon chen <dillon.chen@gmail.com> - 13.3-7
changelog:
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat 
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: wangjia <wangjia55@huawei.com> - 42.2.4-1.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:disable the failed tests that caused by BEP to repair binary diffrence


author: Chenxi Mao <chenxi.mao@suse.com> - 13.01.0000-3
changelog:
  - Add libpq-devel version dependency.
  - Bump version release to 3, because previous change didn't bump release number.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.13-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-powertop-2.7-always-create-params.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/powertop-2.15-gettext-0.19.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-powertop-2.15-fix-configure-to-support-ncurses-w-tinfo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-powertop-2.15-fixed-riscv-t-head-1520-cpu-identification.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bufix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xuwei<xuwei58@huawei.com> - 3.3.15-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:top: don't mess with groff line length in man document
        top: add another field sanity check in 'config_file()'
        top: prevent buffer overruns in 'inspection_utility()'
        docs: Tidying of ps,kill and skill manpages
        library: avoid problems involving 'supgid' mishandling
        w: Prevent out-of-bounds reads in
        w: Clamp maxcmd to the MIN/MAX_CMD_WIDTH range.
        vmstat: getopt*() returns -1 when done, not EOF.
        vmstat: Replace memcmp() with strncmp().
        vmstat: Check return values of localtime() and
        vmstat: Prevent out-of-bounds writes in new_header()
        top: the '#define PRETEND2_5_X' was found to be broken
        procio: use the user-supplied delimiter to split large
        procio: fix potential out-of-bounds access when write
        sysctl: do not report set key in case `close_stream`


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: chenjianhu <chenjianhu@kylinos.cn> - 4.0.4-7.p01
changelog:
  - Type:update
  - ID:[Task#529379]
  - SUG:NA
  - DESC: backport patch to fix w print by utmp show info 
          when systemd get tty failed


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differe
  nces


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: shenyangyang <shenyangyang4@huawei.com> - 12.2-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add provides of pulseaudio-libs-devel(aarch-64) needed by libmikmod-devel


author: peijiankang <peijiankang@kylinos.cn> - 17.0-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#239529]
  - SUG:  NA
  - DESC: add pulseaudio-17.0-start-pulseaudio-in-root.patch


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: panxiaohe <panxiaohe@huawei.com> - 3.38.0-3
changelog:
  - use python3_sitelib macro for meson upgrade
  - add BuildRequires for testsuite
  - tests: Remove usage of some deprecated unittest methods
  - tests: fix test with glib 2.68 re GLocalFile


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: OpenStack_SIG <openstack@openeuler.org> - 0.9.3-3
changelog:
  - Revert the version to 0.9.3, because python3-aiomysql depends on the python-PyMySQL vertion ranging form 0.9 to 0.9.3


author: zhangxingrong <zhangxingrong@uniontech.com> - 1.4.6-1
changelog:
  - Update to version 1.4.6
    - Nothing in the library's logic. Just a fix in one of the test cases.
      And some changes to prevent same situation from happening again.
    - Fixed incorrect handling of newlines.
    - STARTTLS is now fully enforced if used.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.13.1-1
changelog:
  - Update package to version 1.13.1
    Improve re-writer implementation, fixing chain and adding support to callables


author: yueyuankun <yueyuankun@kylinos.cn> - 23.1.0-1
changelog:
  - Update to 23.1.0
  - The InvalidHash exception is deprecated in favor of InvalidHashError
  - argon2.hash_password(), argon2.hash_password_raw(), and argon2.verify_password() that have been soft-deprecated since 2016 are now hard-deprecated
  - Official support for Python 3.11 and 3.12
  - Python 3.6 is not supported anymore
  - argon2.exceptions.InvalidHashError as a replacement for InvalidHash
  - salt parameter to argon2.PasswordHasher.hash() to allow for custom salts


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.5-1
changelog:
  - Update package to version 1.0.5
  - fix error handling that might result in null exception
    cleanups of exception handling : errors must now have an exception
    Handling NameError is not working


author: yaoxin <1024769339@qq.com> - 1.0.6-1
changelog:
  - Update to 1.0.6:
    * drop testing and support for Python3.8, add Python 3.13, change document to reflect this.
    * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
    * make all procedure attributes private to curb access to AST nodes, which can be exploited
    * improvements to error messages, including use ast functions to construct better error messages
    * remove import of numpy.linalg, as documented
    * update doc description for security advisory


author: GuoCe <guoce@kylinso.cn> - 1.34.79-1
changelog:
  - update to version 1.34.79
  - A lot of functions have been updated, 
  - such as adding IAMIdentityCenterInstanceArn parameter to CreateAccountSubscription.


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xu_ping <707078654@qq.com> - 1.3.0-1
changelog:
  - Update package to version 1.3.0
  - Python 3.12 support.
  - fix some bugfix
  - Update internally pinned pytest-flask to 1.3.0 for Flask >=3.0.0 support


author: xigaoxinyan <xigaoxinyan@huawei.com> - 18.0.0-11
changelog:
  - Drop docs package: sphinx Update make docs build error and Fix build error caused by py3.10+ wildcard


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.22.1-1
changelog:
  - Update package to version 8.22.1
    Use check_same_thread=False by default for history sqlite db
    Use prompt_toolkit.application.create_app_session for debugger prompt
    Provide and easier way to generate magics and pre-post hooks
    Refuse to install event loop hooks when not using prompt_toolkit
    Add hack to change traceback syntax highlighting


author: liuqinfei <18138800392@163.com> - 3.4.0-1
changelog:
  - update version to 3.4.0
  - recover some excluded files in %files python3-jaraco-collections
    - __init__.py
    - collections.py


author: Enbo Kang <kangenbo@huawei.com> - 2.10-8
changelog:
  - Type:security
  - ID:CVE-2019-10906
  - SUG:NA
  - DESC:fix CVE-2019-10906 python-jinja2:str.format_map allows sandbox


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: fuanan <fuanan3@h-partners.com> - 3.17.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.17.3
         drop python 2 support
         datatime fixes
         Remove ancient pathlib requirement for python3. It is part of the stdlib since Python 3.4


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.7.1-1
changelog:
  - Update package with version 5.7.1
    Derive JupyterAsyncApp from JupyterApp
    Modernize event loop behavior
    Enable async JupyterApp
    Clean up lint and add downstream checks
    Add python 3.12 support and update typings for traitlets 5.11


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Clean up linting and fix a bug that was found
    Adopt ruff format
    Normalize "jsonschema[format-nongpl]" in pyproject.toml


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.2-1
changelog:
  - Update package with version 0.5.2
    Set terminals_available to False when not enabled
    Update ruff config


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.3-1
changelog:
  - Update package with version 0.5.3
    Drop support for Python 3.7
    Add direct dependency on ipykernel
    Adapt to level config to match other Jupyter repos


author: xuhe <xuhe@kylinos.cn> - 2.27.3-1
changelog:
  - Update to 2.27.3
  - Fix test util typings.
  - Use json5 typings.
  - Use updated releaser workflows.
  - Ignore pageconfig file if JSON is zero-length.
  - For v2 extensions parse entrypoint data.
  - Add util to get consolidated page_config from higher levels.
  - Move ENV_CONFIG_PATH import back into _get_config_manager.
  - Load overrides once, rather than in each settings handler.
  - Run docs on ubuntu.
  - Fix handling language packs for pseudo language.


author: chenhuihan <chenhuihan@huawei.com> - 2.8.0-1
changelog:
  - Update package to version 2.8.0:
    - export PyJWKClientConnectionError class
    - pre-autoupdate mirrors-mypy blacken-docs black
    - allows passing of ssl.SSLContext to PyJWKClient


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-8
changelog:
  - Subpackage python2-lexicon has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: lipengyu <lipengyu@kylinos.cn> - 3.7.1-2.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.5.3-1
changelog:
  - Update package to version 1.5.3
    Fix mkdocs serve sometimes locking up all browser tabs when navigating quickly
    Add many new supported languages for "search" plugin - update lunr-languages to 1.12.0
    Built-in themes now also support Chinese (Traditional, Taiwan) language


author: Michal Schmidt <mschmidt@redhat.com> - 0.5.5-1
changelog:
  - Upstream release 0.5.5.
  - New upstream location and tarball format.
  - Refer to python2-kerberos using its actual package name.


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.6-4
changelog:
  - Python2 binary package has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.1-1
changelog:
  - upgrade version to 3.2.1:
    - add Tadpole graph
    - fix listing of release notes on Releases page
    - fix syntax warning from bad escape sequence
    - fix triangles to avoid using is to compare nodes
    - fix error message for nx.mycielski_graph(0)
    - disallow negative number of nodes in complete_multipartite_graph
    - fix names of small graphs
    - fix extendability function name in bipartite.rst
    - improve error messages for misconfigured backend treatment


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: kaijie Gu <jiekgu@foxmail.com> - 24.1-1
changelog:
  - Update package with version 24.1
    Add support for Python 3.13
    Fix typo in _parser docstring
    Modernise type annotations using FA rules from ruff
    Document markers.default_environment()


author: yefei <yefei25@huawei.com> - 18.0-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:  add bash completion and repair python2 interpreter path


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.0.43-1
changelog:
  - Update package to version 3.0.43
    Make formatted_text.split_lines() accept an iterable instead of lists only.
    Disable the IPython workaround (from 3.0.41) for IPython >= 8.18.
    Restore signal.SIGINT handler between prompts.


author: shixuantong <shixuantong@huawei.com> - 7.43.0.6-2
changelog:
  - fix test fail for test_sslversion_options, test_failonerror and test_failonerror_status_line_invalid_utf8_python3


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.18.6-1
changelog:
  - Update package to version 0.18.6
  - Fix issue with multiple document intermixing YAML 1.2 and YAML 1.1, the VersionedResolver now resets


author: fuanan <fuanan3@h-partners.com> - 1.8.1-1
changelog:
  - update version to 1.8.1
  - bump http-proxy from 1.17.0 to 1.8.1
  - fix broken link
  - add chunked inference
  - fix attrs in custom predict fn for tensorboard
  - fixing infer edge case issue
  - explicitly require bash(Change /bin/sh to /bin/bash in build_pip_package.sh)
  - add support for witwidget for JupyterLab 3.x.


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: liuzhilin <liuzhilin@kylinos.cn> - 0.25.1-1
changelog:
  - Upgrade package 0.25.1
  - Fix crash when importing trio in embedded Python on Windows, and other installs that remove docstrings.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.10.0-1
changelog:
  - Update package with version 4.10.0
    Add support for PEP 728, PEP 742
    Drop runtime error when a read-only TypedDict item overrides a mutable one.
    Speedup issubclass() checks against simple runtime-checkable protocols by around 6%.
    Add support for PEP 705, adding typing_extensions.ReadOnly.
    Drop support for Python 3.7 (including PyPy-3.7).


author: zeng liwen <zengliwen@kylinos.cn> - 4.12.2-1
changelog:
  - Update to 4.12.2
  - Fix the runtime behavior of type parameters with defaults (PEP 696)
  - Fix AttributeError when using typing_extensions.runtime_checkable in combination with typing.Protocol on Python 3.12.2 or newer
  - Fix Protocol tests on Python 3.13.0a6 and newer
  - Improve the implementation of type parameter defaults (PEP 696)
  - Add typing_extensions.get_annotations, a backport of inspect.get_annotations that adds features specified by PEP 649
  - Fix regression in v4.12.0 where specialization of certain generics with an overridden __eq__ method would raise errors


author: wangjunqi <wangjunqi@kylinos.cn> - 5.2-1
changelog:
  - Update package to version 5.2
    Added a pre-commit config
    Updated python versions [hugovk]
    Added type hints for the public functions
    Moved to using pyproject.toml for project config.


author: shixuantong <shixuantong@h-partners.com> - 3.10.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: Chenxi Mao <chenxi.mao@suse.com> - 3.10.9-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.3.0-1
changelog:
  - Update package to version 4.3.0
    Fixed inability to pass total_tokens as a keyword argument on trio


author: liuzhilin <liuzhilin@kylinos.cn> - 4.4.0-1
changelog:
  - Update package to version 4.4.0
  - Added __slots__ to AsyncResource so that child classes can use __slots__.
  - Fixed the entire task group being cancelled if a TaskGroup.start() call gets cancelled.
  - Fixed MemoryObjectStream dropping an item if the item is delivered to a recipient that is waiting to receive an item but has a cancellation pending.
  - Fixed erroneous TypedAttributeLookupError if a typed attribute getter raises KeyError.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.6.1-1
changelog:
  - Update package to version 4.6.1
  - Bugfix: Fixed feed_data after feed_eof assertion errors on asyncio
    Bugfix: Fixed missing or inconsistent error when acquiring already owned Lock


author: yaoxin <yaoxin30@huawei.com> - 1.4.4-3
changelog:
  - Modified the build and install phases to adapt to the compilation and installation modes of Python 3.10


author: chenyanpanHW <chenyanpan@huawei.com> - 1.11.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/beaker-use-system-paste.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xihaochen <xihaochen@huawei.com> - 1.20.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update pycairo to 1.20.0


author: chenyanpanHW <chenyanpan@huawei.com> - 5.0.6-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Address-CVE-2023-26112-ReDoS.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: xihaochen <xihaochen@huawei.com> - 5.4-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update python-coverage to 5.4


author: cenhuilin <cenhuilin@kylinos.cn> - 2.7.5-1.p02
changelog:
  - Type: update
  - ID: [TASK#584093]
  - SUG: NA
  - DESC: _damon_args: add --priority option to set target priority.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.22.0-2
changelog:
  - DESC: delete -S git from 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "python-dbusmock-0.29.1 base"
  /usr/bin/git checkout --track -b rpm-build
  , and delete BuildRequires git


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.19.2-1
changelog:
  - Update package to version 1.19.2
    Fixed an exception when a Git repository had a broken ref. Git would print a warning that Dunamai failed to parse.


author: liudy <liudingyao@kylinos.cn> - 1.22.0-1
changelog:
  - Update version to 1.22.0
  - Fix The --ignore-untracked CLI flag was ignored.
  - Add --commit-length option.
  - Fix Some timestamps could fail to parse on Python 3.5 and 3.6.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:2.81.0-1.p02
changelog:
  - Type: Updaets 
  - ID: TASK#504811
  - SUG: NA
  - DESC: fix the problem that the previous patch was not merged


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 24.1.0-1
changelog:
  - Update package with version 24.1.0
    Added a default to an internal API that is used by scikit-build-core.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.25.0-1
changelog:
  - Upgrade package version to 1.25.0
    Add .venv to the list of directories that cannot be traversed
    Output from the core Application utility now writes to stderr


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.4-1
changelog:
  - Upgrade package with version 1.0.4
    Add support for HTTPS proxies.
    Handle sni_hostname extension with SOCKS proxy.
    Handle HTTP/1.1 half-closed connections gracefully.
    Add support for Python 3.12 and drop Python 3.7 support.
    Async support becomes fully optional.
    Add support for synchronous TLS-in-TLS streams.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.27.0-1
changelog:
  - Upgrade package with version 0.27.0
    Support HTTPS proxies.
    Drop support for Python 3.7 and Add support for Python 3.12.
    Add support for httpcore 1.0.
    Respect the http1 argument while configuring proxy transports.
    Fix RFC 2069 mode digest authentication.


author: lilu <lilu@kylinos.cn> - 0.42.1-1.p01
changelog:
  - Type: update
  - ID: [Task#327680]
  - SUG: NA
  - DESC: backport patch from other tag to revise the expression of sensitive words


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package with version 1.0.0
    Fix tests for nbclient v0.8
    Remove caps & bump Python for SPEC 0


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.6.0-1
changelog:
  - Update package with version 8.6.0
    Update typing for traitlets 5.13
    Enable strict typing
    Test on python 3.12


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.2.4-1
changelog:
  - Update package with version 2.2.4
    Fix websocket handler incorrectly inheriting from APIHandler rather than JupyterHandler
    Remove unused notebook config entry point
    Support latest version of typescript-language-server


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package with version 2.13.0
    Add an option to have authentication enabled for all endpoints by default
    Websockets: add configurations for ping interval and timeout
    Log extension import time at debug level unless it's actually slow
    Add support for async Authorizers
    Support get file(notebook) md5
    Update kernel env to reflect changes in session
    Support external kernels


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.1.2-1
changelog:
  - Upgrade package with version 4.1.2
    Fix highlight sequencing when replacing text in code cells
    Restore notebook scrolling on dragging a cell to the viewport edge
    Fix typing in editable elements inside of open shadow DOM
    Correct Alt + number keyboard shortcuts command map
    Update jupyter-collaboration for the Binder environment
    Add virtual scrollbar component to windowed lists.
    Load custom CSS functionality and documentation
    Add plugin manager and extension locks


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.6-1
changelog:
  - Upgrade package with version 4.1.6
  - Fix outputarea collapse expand
    Disable placeholder for password input


author: muxiaohui <muxiaohui@kylinos.cn> - 4.3.0-1
changelog:
  - Update version to 4.3.0
    Add setting to enable single-click navigation in file browser.
    Adds command to toggle cell outputs.
    Add kernel selection to Galata notebook creation.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.3.5-1
changelog:
  - Upgrade package with version 4.3.5
    Fix scrolling and selection restoration on undo/redo
    Fix windowing crash due to out-of-bounds access
    Increase color contrast of operators in code editor
    Fix jupyverse installation instructions
    Use Zulip for instant messaging


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.3.0-1
changelog:
  - Update package with version 0.3.0
    Upgrade extension to work with jupyterlab4
    Delete lock file and rerun jlpm install
    Remove dev dependencies and auto generated hatch file
    Make build work with python 3.12
    Remove package-lock.json from git tracking


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.2.0-1
changelog:
  - Upgrade package with version 1.2.0
    Support running LibCST on Python 3.12 and drop support for running it on 3.8
    Allow Element::codegen to be used by external users
    Fix parsing list matchers without explicit brackets
    Fix filepathprovider generic type


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.1-1
changelog:
  - Update package with version 1.0.1
    Don't import MkDocsConfig (does not exist on MkDocs 1.3-)
    Add Markdown anchors and aliases
    Preserve HTML data attributes (from spans to anchors)
    Support [`identifier`][] with pymdownx.inlinehilite enabled
    Recognize links with multi-line text


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.3.0-1
changelog:
  - Update package with version 2.3.0
    Change excluded file log level to INFO
    Add source attribute to authors. Aims to support GitHub and GitLab in mkdocs material.
    Add support for GitLab


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 6.0.4-1
changelog:
  - Update package with version 6.0.4
    Add mkdocs>=1.4 as dependency.
    Dropped Python upper version requirement bound.
    Fixed some warnings not shown when missing start and end delimiters in some contexts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.6.1-1
changelog:
  - Update package with version 0.6.1
    Fix compatibility with MkDocs 1.5+
    Fix when markdown extensions is set to None


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package to version 1.3.1
    Add official support for Python 3.11 and 3.12.
    Remove support for Python 3.7.
    FIX: Better deprecation warning.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.8.0-1
changelog:
  - Update package with version 0.8.0
    Remove python 3.7 support and upgrade setup-python action
    Upgrade setup-python action to v5


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: bizhiyuan <bizhiyuan@kylinos.cn> - 2.1.6-9
changelog:
  - Fix: do not check whether watchdog fencing is enabled for the node if stonith-watchdog-timeout is not configured


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.1.8-1
changelog:
  - Update package with version 2.1.8
    Bugfix: Can't include nested data files in built wheel.
    Rename tag-pattern to tag_regex in the docs.
    Copytree handle existing dirs.
    Normalize the dist info name in the wheel.
    Path to uri expansion in dependency string.


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-5
changelog:
  - Type:bugfix
  - CVE:CVE-2021-28675 CVE-2021-28676 CVE-2021-28677 CVE-2021-28678 CVE-2021-25287 CVE-2021-25288
  - SUG:NA
  - DESC: incorporate community patch


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
    Rewrite the entire library using dataclasses.
    Add more rigorous testing.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.10.6-1
changelog:
  - Update package to version 2.10.6
    Remove Cython & Move to pyproject.toml
    Move settings to pydantic-settings
    Add hooky config to pyproject.toml
    Add github token to cherry-pick
    Add strict option to BaseConfig


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.27.2-1
changelog:
  - Update package to version 2.27.2
    Fix linux PGO wheel build
    Forward default_value calls to the underlying schema for DefinitionRefValidator
    Include JSON Schema input core schema in function schemas


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2024.2-1
changelog:
  - Update package to version 2024.2
    Update sklearn.neighbors hook to account for removed hidden import


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 10.7-1
changelog:
  - Update package to version 10.7
    Allow configuring custom repository providers based off the existing providers.
    Admonitions and Details now allow configuring custom block classes and default titles.
    Ensure that Keys does not parse base64 encoded URLs.
    Allow PathLike objects for base_path to better support interactions with MkDocs.
    Officially support Python 3.12 and drop Python 3.7 support.
    Add new combine_header_slug option in legacy Tabbed extension and new Block Tab extension


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Update event loop handling
    Allow passing request_timeout to client_fetch
    Update ruff and typings


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.15.0-1
changelog:
  - Update package with version 3.15.0
    Make requirements compile disable pip's require-virtualenv flag always
    Update setuptools config
    Add dependabot configuration for GitHub Actions
    Bump actions/setup-python from 3 to 4
    Activate numpy tests on Python 3.11
    Add setup-cfg-fmt to pre-commit


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package with version 1.3.1
    Update workflows and tests.
    Use trusted publishing and configure Renovate.
    Drop 3.7 support and do sys path hack.


author: liukuo <liukuo@kylinos.cn> - 2.1.2-5.p01
changelog:
  - Type:compile
  - ID:Task#542701
  - SUG:NA
  - DESC:Add sw architecture support and add the missing patch3 and patch4 files


author: xihaochen <xihaochen@huawei.com> - 2020.5-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update pytz to 2020.5


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: Anakin Zhang <benjamin93@163.com> - 4.15.1-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use user.digest_list to avoid duplicate processing of the digest lists


author: shixuantong <shixuantong@huawei.com> - 4.15.1-25
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: zhoukangyu<zhoukangyu@kylinos.cn> - 4.18.2-23.p03
changelog:
  - Type:feature
  - ID:TASK#583191
  - SUG:NA
  - DESC: Support new para to strcit check sign and mark it as failed if pkg sign wrong


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.7.0-1
changelog:
  - Update package to version 0.7.0
    Add support for extensionless Python files for server
    Fix configuration inheritance for configurations specified in the LSP settings
    Fix placement of inline parameter comments
    Add a subcommand to generate dependency graphs
    Add Python version support to ruff analyze CLI
    Add exclude support to ruff analyze
    Fix parentheses around return type annotations
    Fix codeblock dynamic line length calculation for indented docstring examples
    Refurb implement hardcoded-string-charset
    Refurb Count codepoints not bytes for slice-to-remove-prefix-or-suffix


author: chenyanpanHW <chenyanpan@huawei.com> - 0.24.0-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2024-5206.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangxianting <zhangxianting@uniontech.com> - 3.19.2-1
changelog:
  - Update to 3.19.2:
  - Updated test & build matrix to include Python 3.12 and use GitHub Actions as a Trusted Publisher (OIDC) https://github.com/simplejson/simplejson/pull/317


author: wangkai <13474090681@163.com> - 3.19.2-2
changelog:
  - Fixed the packaging process does not include __pycache__ tests
  - Obsoletes empty package python-simplejson-help


author: chenyanpanHW <chenyanpan@huawei.com> - 0.8.8-12
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Remove-pyxdg-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
  - Dependencies: use pip-tools + GH Action to keep dependencies updated


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.8-1
changelog:
  - Update package to version 1.0.8
  - Fix multiple term matching when word appears in both title and document


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package to version 2.13.0
    Add support for datetime.timedelta to time_machine.travel().
    Add shift() method to the time_machine pytest fixture.
    Fix documentation about using local time for naive date(time) strings.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.12.3-1
changelog:
  - Update package to version 0.12.3
    chore(deps-dev): bump urllib3 from 1.26.14 to 1.26.18
    fix: Newline lost when updating a table
    fix: Significant slowdown on nested tables depending on syntax
    fix: Fix division for integers
    fix: error when overwriting a sub table


author: Binshuo <binshuo.oerv@isrc.iscas.ac.cn> - 0.13.2-1
changelog:
  - Update package to version 0.13.2
    chore(deps-dev): bump certifi from 2024.2.2 to 2024.7.4
    chore(deps-dev): bump idna from 3.4 to 3.7
    chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.4
    chore(deps-dev): bump requests from 2.31.0 to 2.32.2
    chore(deps-dev): bump setuptools from 68.0.0 to 70.0.0
    chore(deps-dev): bump urllib3 from 2.0.7 to 2.2.2
    chore(deps-dev): bump zipp from 3.15.0 to 3.19.1
    fix: delete keys from out of order table
    fix: don't add sign if the float is negative
    fix: Empty table dumped when number of subtables > 1
    fix: keep the nested out of order table
    fix: Table header missing
    fix: test_dates_behave_like_dates and test_times_behave_like_times
    fix: Encoder contract interferes with external TypeErrors raised in encoders
    fix: -1 index error when setting dotted key
    fix: |= does not work as expected on TOMLDocument
    fix: indent exist check before accessing its property
    [docs] Add tomlkit.dump()


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.14.1-1
changelog:
  - Upgrade package with version 5.14.1
    Add option to load traitlets values from environement.
    Cleanup after remove Python 2 support.
    Add more project URLs, trove classifiers.
    Added type hints to HasTraits.observe() and friends.


author: gaihuiying <eaglegai@163.com> - 1.13.2-1
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:update unbound version to 1.13.2 and remove the dependency of python3.8


author: gaihuiying <eaglegai@163.com> - 1.13.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.17.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.17-2
changelog:
  - Type:CVE
  - ID:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped form HTTP requests


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangqiang <wangqiang1@kylinos.cn> - 8.5.1-1
changelog:
  - Update to 8.5.1
  - NEW: Formally support Python 3.11 (no change).
  - NEW: Add support for Python 3.12 (pathlib changes).
  - NEW: Drop Python 3.7 support.
  - FIX: Fix handling of current directory when magic and non-magic patterns are mixed in glob pattern list.
  - FIX: Fix issue with type check failure in wcmatch.glob.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-2
changelog:
  - block: bugfix: Don't pause vm when NOSPACE EIO happened
  - block: enable cache mode of empty cdrom
  - block/mirror: fix file-system went to read-only after block-mirror
  - scsi-bus: fix incorrect call for blk_error_retry_reset_timeout()
  - scsi-bus: fix unmatched object_unref()
  - block: Add sanity check when setting retry parameters
  - block-backend: Stop retrying when draining
  - scsi-disk: Add support for retry on errors
  - scsi-bus: Refactor the code that retries requests
  - virtio_blk: Add support for retry on errors
  - block: Add error retry param setting
  - block-backend: Add timeout support for retry
  - block-backend: Enable retry action on errors
  - block-backend: Add device specific retry callback
  - block-backend: Introduce retry timer
  - qapi/block-core: Add retry option for error action
  - scsi: bugfix: fix division by zero
  - scsi: cdrom: Fix crash after remote cdrom detached
  - qemu-pr: fixed ioctl failed for multipath disk
  - scsi-disk: define props in scsi_block_disk to avoid memleaks
  - bugfix: fix possible memory leak
  - bugfix: fix some illegal memory access and memory leak
  - util/log: add CONFIG_DISABLE_QEMU_LOG macro
  - log: Add some logs on VM runtime path
  - bugfix: fix eventfds may double free when vm_id reused in ivshmem
  - hw/display/macfb: Fix missing ERRP_GUARD() in macfb_nubus_realize()
  - hw/cxl/cxl-host: Fix missing ERRP_GUARD() in cxl_fixed_memory_window_config()
  - qemu-img create: 'cache' paramter only use for reg file image
  - qemu-img: add qemu-img direct create
  - qemu-img block: set zero flags only when discard_zeros of the block supported
  - Revert "file-posix: Remove unused s->discard_zeroes"
  - pcie_sriov: Validate NumVFs (CVE-2024-26327)
  - hw/nvme: Use pcie_sriov_num_vfs() (CVE-2024-26328)
  - hw/acpi/cpu: Use CPUState typedef
  - target/i386/sev: Fix missing ERRP_GUARD() for error_prepend()
  - virtio-gpu: remove needless condition
  - hw/i2c/smbus_slave: Add object path on error prints
  - vfio/pci: Ascend710 change to bar2 quirk
  - vfio/pci: Ascend910 need 4Bytes quirk in bar0
  - vfio/pci: Ascend710 need 4Bytes quirk in bar0
  - vfio/pci: Ascend310 need 4Bytes quirk in bar4
  - chardev/char-socket: Fix TLS io channels sending too much data to the backend
  - i386/cpuid: Move leaf 7 to correct group
  - i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  - i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  - i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  - blkio: Respect memory-alignment for bounce buffer allocations
  - virtio-gpu: Correct virgl_renderer_resource_get_info() error check
  - hw/usb: Style cleanup
  - tests/qemu-iotests: resolved the problem that the 108 test cases in the container fail


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-3
changelog:
  - disable keyring option
  - loongarch: Change the UEFI loading mode to loongarch
  - target/loongarch: Fix qtest test-hmp error when KVM-only build
  - target/loongarch/kvm: Enable LSX/LASX extension
  - target/loongarch: Set cpuid CSR register only once with kvm mode
  - configure: Add linux header compile support for LoongArch
  - hw/intc/loongarch_extioi: Add vmstate post_load support
  - hw/intc/loongarch_extioi: Add dynamic cpu number support
  - hw/loongarch/virt: Set iocsr address space per-board rather than percpu
  - hw/intc/loongarch_ipi: Use MemTxAttrs interface for ipi ops
  - target/loongarch: Add loongarch kvm into meson build
  - target/loongarch: Implement set vcpu intr for kvm
  - target/loongarch: Restrict TCG-specific code
  - target/loongarch: Implement kvm_arch_handle_exit
  - target/loongarch: Implement kvm_arch_init_vcpu
  - target/loongarch: Implement kvm_arch_init function
  - target/loongarch: Implement kvm get/set registers
  - target/loongarch: Supplement vcpu env initial when vcpu reset
  - target/loongarch: Define some kvm_arch interfaces
  - linux-headers: Synchronize linux headers from linux v6.7.0-rc8
  - linux-headers: Update to Linux v6.7-rc5
  - target/loongarch: move translate modules to tcg/
  - target/loongarch/meson: move gdbstub.c to loongarch.ss
  - target/loongarch: Add timer information dump support
  - hw/loongarch/virt: Align high memory base address with super page size


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-4
changelog:
  - migration: Skip only empty block devicesi
  - iotests: adapt to output change for recently introduced 'detached hea…
  - travis-ci: Rename SOFTMMU -> SYSTEM
  - block: disallow block jobs when there is a BDRV_O_INACTIVE flag
  - [backup] memory: bakcup hugepages: hugepages files maybe leftover
  - memory: [backup] Modify the VM's physical bits value set policy.
  - ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
  - virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-5
changelog:
  - vfio/migration: Add support for manual clear vfio dirty log
  - vfio: Maintain DMA mapping range for the container
  - linux-headers: update against 5.10 and manual clear vfio dirty log series
  - arm/acpi: Fix when make qemu-system-aarch64 at x86_64 host bios_tables_test fail reason: __aarch64__ macro let build_pptt at x86_64 and aarch64 host build different function that let bios_tables_test fail.
  - pl031: support rtc-timer property for pl031
  - feature: Add logs for vm start and destroy
  - feature: Add log for each modules
  - log: Add log at boot & cpu init for aarch64
  - bugfix: irq: Avoid covering object refcount of qemu_irq
  - i386: cache passthrough: Update AMD 8000_001D.EAX[25:14] based on vCPU topo
  - freeclock: set rtc_date_diff for X86
  - freeclock: set rtc_date_diff for arm
  - freeclock: add qmp command to get time offset of vm in seconds
  - tests: Disable filemonitor testcase
  - shadow_dev: introduce shadow dev for virtio-net device
  - pl011: reset read FIFO when UARTTIMSC=0 & UARTICR=0xffff
  - tests: virt: Update expected ACPI tables for virt test(Update BinDir)
  - arm64: Add the cpufreq device to show cpufreq info to guest
  - hw/arm64: add vcpu cache info support
  - tests: virt: Allow changes to PPTT test table
  - cpu: add Cortex-A72 processor kvm target support
  - cpu: add Kunpeng-920 cpu support
  - net: eepro100: validate various address valuesi(CVE-2021-20255)
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - vdpa: set vring enable only if the vring address has already been set
  - docs: Add generic vhost-vdpa device documentation
  - vdpa: don't suspend/resume device when vdpa device not started
  - vdpa: correct param passed in when unregister save
  - vdpa: suspend function return 0 when the vdpa device is stopped
  - vdpa: support vdpa device suspend/resume
  - vdpa: move memory listener to the realize stage
  - vdpa: implement vdpa device migration
  - vhost: implement migration state notifier for vdpa device
  - vhost: implement post resume bh
  - vhost: implement savevm_handler for vdpa device
  - vhost: implement vhost_vdpa_device_suspend/resume
  - vhost: implement vhost-vdpa suspend/resume
  - vhost: add vhost_dev_suspend/resume_op
  - vhost: introduce bytemap for vhost backend logging
  - vhost-vdpa: add migration log ops for VhostOps
  - vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
  - hw/usb: reduce the vpcu cost of UHCI when VNC disconnect
  - virtio-net: update the default and max of rx/tx_queue_size
  - virtio-net: set the max of queue size to 4096
  - virtio-net: fix max vring buf size when set ring num
  - virtio-net: bugfix: do not delete netdev before virtio net
  - monitor: Discard BLOCK_IO_ERROR event when VM rebooted
  - vhost-user: add unregister_savevm when vhost-user cleanup
  - vhost-user: add vhost_set_mem_table when vm load_setup at destination
  - vhost-user: quit infinite loop while used memslots is more than the backend limit
  - fix qemu-core when vhost-user-net config with server mode
  - vhost-user: Add support reconnect vhost-user socket
  - vhost-user: Set the acked_features to vm's featrue
  - i6300esb watchdog: bugfix: Add a runstate transition
  - hw/net/rocker_of_dpa: fix double free bug of rocker device
  - net/dump.c: Suppress spurious compiler warning
  - pcie: Add pcie-root-port fast plug/unplug feature
  - pcie: Compat with devices which do not support Link Width, such as ioh3420
  - qdev/monitors: Fix reundant error_setg of qdev_add_device
  - qemu-nbd: set timeout to qemu-nbd socket
  - qemu-nbd: make native as the default aio mode
  - nbd/server.c: fix invalid read after client was already free
  - virtio-scsi: bugfix: fix qemu crash for hotplug scsi disk with dataplane
  - virtio: bugfix: check the value of caches before accessing it
  - virtio: print the guest virtio_net features that host does not support
  - virtio: bugfix: add rcu_read_lock when vring_avail_idx is called
  - virtio: check descriptor numbers
  - migration: report multiFd related thread pid to libvirt
  - migration: report migration related thread pid to libvirt
  - cpu/features: fix bug for memory leakage
  - doc: Update multi-thread compression doc
  - migration: Add compress_level sanity check
  - migration: Add zstd support in multi-thread compression
  - migration: Add multi-thread compress ops
  - migration: Refactoring multi-thread compress migration
  - migration: Add multi-thread compress method
  - migration: skip cache_drop for bios bootloader and nvram template
  - oslib-posix: optimise vm startup time for 1G hugepage
  - monitor/qmp: drop inflight rsp if qmp client broken
  - ps2: fix oob in ps2 kbd
  - Currently, while kvm and qemu can not handle some kvm exit, qemu will do vm_stop, which will make vm in pause state. This action make vm unrecoverable, so send guest panic to libvirt instead.
  - vhost: cancel migration when vhost-user restarted during migraiton


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-6
changelog:
  - coro: support live patch for libcare
  - tests/acpi: Update expected ACPI tables for vcpu hotplug(Update BinDir)
  - arm/virt: Require mc->has_hotpluggable_cpus for cold-plugged vcpu
  - arm/virt: Consider has_ged when set mc->has_hotpluggable_cpus
  - arm/virt-acpi: Require possible_cpu_arch_ids for build_cpus_aml()
  - acpi/ged: Remove cpuhp field of ged
  - acpi/ged: Init cpu hotplug only when machine support it
  - intc/gicv3: Fixes for vcpu hotplug
  - arm/kvm: Set psci smccc filter only with vcpu hotplug
  - accel/kvm: Use correct id for parked vcpu
  - arm/virt: Fix adjudgement of core_id for vcpu hotplugged
  - arm/virt.c: Convey local_err when set psci-conduit
  - system/cpus: Fix resume_all_vcpus() under vCPU hotplug condition
  - system/cpus: Fix pause_all_vcpus() under concurrent environment
  - acpi/cpu: Fix cpu_hotplug_hw_init()
  - arm/cpu: Some fixes for arm_cpu_unrealizefn()
  - system/physmem: Fix possible double free when destroy cpu as
  - hw/arm/virt: Expose cold-booted CPUs as MADT GICC Enabled
  - tcg/mttcg: enable threads to unregister in tcg_ctxs[]
  - hw/arm: Support hotplug capability check using _OSC method
  - target/arm/kvm,tcg: Register/Handle SMCCC hypercall exits to VMM/Qemu
  - target/arm/kvm: Write CPU state back to KVM on reset
  - target/arm: Add support of *unrealize* ARMCPU during vCPU Hot-unplug
  - physmem,gdbstub: Common helping funcs/changes to *unrealize* vCPU
  - hw/arm: Changes required for reset and to support next boot
  - arm/virt: Update the guest(via GED) about CPU hot-(un)plug events
  - hw/intc/arm-gicv3*: Changes required to (re)init the vCPU register info
  - hw/arm,gicv3: Changes to update GIC with vCPU hot-plug notification
  - arm/virt: Changes to (un)wire GICC<->vCPU IRQs during hot-(un)plug
  - arm/virt: Add/update basic hot-(un)plug framework
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - arm/virt: Release objects for *disabled* possible vCPUs after init
  - hw/acpi: Make _MAT method optional
  - hw/arm: MADT Tbl change to size the guest with possible vCPUs
  - hw/acpi: Update GED _EVT method AML with cpu scan
  - hw/acpi: ACPI/AML Changes to reflect the correct _STA.{PRES,ENA} Bits to Guest
  - arm/virt: Make ARM vCPU *present* status ACPI *persistent*
  - arm/virt/acpi: Build CPUs AML with CPU Hotplug support
  - tests/acpi/bios-tables-test: Allow changes to virt/DSDT file
  - acpi/cpu: Add cpu_cppc building support
  - arm/virt/acpi: Factor out CPPC building from DSDT CPU aml
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - arm/virt: Create GED dev before *disabled* CPU Objs are destroyed
  - arm/virt: Add cpu hotplug events to GED during creation
  - hw/acpi: Init GED framework with cpu hotplug events
  - hw/acpi: Use qemu_present_cpu() API in ACPI CPU hotplug init
  - hw/acpi: Add ACPI CPU hotplug init stub
  - arm/acpi: Enable ACPI support for vcpu hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - arm/virt: Init PMU at host for all possible vcpus
  - arm/virt,gicv3: Changes to pre-size GIC with possible vcpus @machine init
  - arm/virt,kvm: Pre-create disabled possible vCPUs @machine init
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - arm/virt,target/arm: Machine init time change common to vCPU {cold|hot}-plug
  - hw/arm/virt: Move setting of common CPU properties in a function
  - cpus-common: Add common CPU utility for possible vCPUs
  - arm/virt,target/arm: Add new ARMCPU {socket,cluster,core,thread}-id property


author: Keqian Zhu <zhukeqian1@huawei.com> - 11:8.2.0-7
changelog:
  - arm/virt: Use max_cpus to calculate redist1_count
  - arm/virt: Use separate filed to identify cpu-hotplug enable


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-11
changelog:
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum()
  - hw/nvme: fix -Werror=maybe-uninitialized
  - block/virtio-blk: Fix memory leak from virtio_blk_zone_report
  - hw/net/virtio-net: fix qemu set used ring flag even vhost started
  - hw/scsi/scsi-generic: Fix io_timeout property not applying
  - tests: bios-tables-test: Rename smbios type 4 related test functions


author: zhangxianting <zhangxianting@uniontech.com> - 11:8.2.0-12
changelog:
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately
  - kvm/arm: Fix compatibility of cold-plug CPU with SVE
  - arm/virt/acpi: Extend cpufreq to support max_cpus
  - kvm/arm: Fix SVE related logic for vcpu hotplug feature
  - arm/virt: Don't modify smp.max_cpus when vcpu hotplug disabled
  - acpi/cpu: Fix detection of present cpu


author: Song Gao <gaosong@loongson.cn> - 11:8.2.0-13
changelog:
  - target/loongarch: Fix qemu-system-loongarch64 assert
  - target/loongarch: Fix qemu-loongarch64 hang when executing 'll.d $t0, $t0, 0'
  - target/loongarch: Fix tlb huge page loading issue
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch/kvm: sync kernel header files
  - hw/intc/loongarch_extioi: Add virt extension support
  - target/loongarch/kvm: Add pmu support
  - target/loongarch/kvm: Fix vm restore failed
  - target/loongarch/kvm: Add pv steal time support
  - target/loongarch/kvm: fpu save the vreg registers high


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-14
changelog:
  - target/riscv/cpu.c: fix Zvkb extension config
  - target/i386: Add new Hygon 'Dharma' CPU model
  - target/i386: Add Hygon Dhyana-v3 CPU model
  - ui/gtk: Fix mouse/motion event scaling issue with GTK display backend
  - hw/ufs: Fix buffer overflow bug
  - arm/virt: Set vcpus_count of CPU as 1 to compatible with libvirt
  - ppc/pnv: I2C controller is not user creatablei


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-15
changelog:
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - migration/dirtyrate: Fix segmentation fault
  - target/hexagon: idef-parser fix leak of init_list


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-16
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100 
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-17
changelog:
  - cvm : bug fix for undefined reference to 'virtcca_cvm_allowed' while compiling
  - cvm : bug-fix for incorrect device name check for vhost-user-fs
  - target/i386: add control bits support for LAM
  - target/i386: add support for LAM in CPUID enumeration
  - Add support for the virtcca cvm feature.
  - target/sparc: use signed denominator in sdiv helper
  - crypto: Introduce SM4 symmetric cipher algorithm
  - ppc/vof: Fix unaligned FDT property access
  - vl: fix "type is NULL" in -vga help
  - hw/display/bcm2835_fb: fix fb_use_offsets condition
  - aspeed/smc: Fix possible integer overflow
  - hw/nvme: fix number of PIDs for FDP RUH update
  - hw/nvme: fix memory leak in nvme_dsm
  - hvf: arm: Do not advance PC when raising an exception
  - physmem: Bail out qemu_ram_block_from_host() for invalid ram addrs


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-18
changelog:
  - hw/loongarch/virt: Fix FDT memory node address width
  - hw/loongarch: Fix fdt memory node wrong 'reg'
  - load_elf: fix iterator's type for elf file processing
  - migration/colo: Fix bdrv_graph_rdlock_main_loop: Assertion `!qemu_in_…
  - target/i386: no single-step exception after MOV or POP SS
  - char-stdio: Restore blocking mode of stdout on exit
  - backends/cryptodev-builtin: Fix local_error leaks
  - target/loongarch: fix a wrong print in cpu dump
  - virtio-pci: fix use of a released vector
  - target/arm: Disable SVE extensions when SVE is disabled
  - hw/misc/bcm2835_property: Fix handling of FRAMEBUFFER_SET_PALETTE
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - virtio-net: Ensure queue index fits with RSS (CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - update io/trace-events. Parameters should remain consistent.
  - update docs/tools/virtfs-proxy-helper.rst. This place is spelled wrong.
  - kvm: Add support for CSV2 reboot
  - target/i386/kvm: Fix the resettable info when emulate Hygon CSV2 guest
  - target/i386: get/set/migrate GHCB state
  - target/i386: csv: Add support for migrate VMSA for CSV2 guest
  - migration/ram: Accelerate the loading of CSV guest's encrypted pages
  - migration/ram: Accelerate the transmission of CSV guest's encrypted pages
  - target/i386: csv: add support to load incoming encrypted pages queued in the CMD list
  - target/i386: csv: add support to queue the incoming page into a list
  - target/i386: csv: add support to encrypt the outgoing pages in the list queued before.
  - target/i386: csv: add support to queue the outgoing page into a list
  - target/i386: csv: Read cert chain from file when prepared for CSV live migration
  - target/i386: Introduce header file csv.h
  - migration/ram: Fix calculation of gfn correpond to a page in ramblock
  - target/i386: sev: Clear shared_regions_list when reboot CSV Guest
  - migration/ram: Force encrypted status for VGA vram
  - target/i386: sev: Return 0 if sev_send_get_packet_len() fails
  - kvm: Add support for userspace MSR filtering and handling of MSR_KVM_MIGRATION_CONTROL.
  - migration/ram: Force encrypted status for flash0 & flash1 devices.
  - migration/ram: add support to send encrypted pages
  - migration: add support to migrate shared regions list
  - kvm: Add support for SEV shared regions list and KVM_EXIT_HYPERCALL.
  - target/i386: sev: add support to load incoming encrypted page
  - target/i386: sev: add support to encrypt the outgoing page
  - target/i386: sev: do not create launch context for an incoming guest
  - target/i386: sev: provide callback to setup outgoing context
  - confidential guest support: introduce ConfidentialGuestMemoryEncryptionOps for encrypted VMs
  - migration.json: add AMD SEV specific migration parameters
  - doc: update AMD SEV to include Live migration flow
  - crypto/tlscredspsk: Free username on finalize
  - hw/nvme: fix leak of uninitialized memory in io_mgmt_recv
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - cvm : Implement command blacklist for cvm security enhancement
  - crypto: Introduce SM3 hash hmac pbkdf algorithm
  - virtio-net: Use virtual time for RSC timers
  - vvfat: Fix bug in writing to middle of file
  - hw/core/ptimer: fix timer zero period condition for freq > 1GHz
  - hw/misc: support vpsp


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-19
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-20
changelog:
  - Added CoDA feature support in the context of CVM. When virtcca cvm is enabled, the iommu is tagged as secure.
  - hw/block: fix uint32 overflow
  - hw/ufs: add basic info of query response upiu
  - crypto: avoid leak of ctx when bad cipher mode is given Fixes: Coverity CID 1546884


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-21
changelog:
  - tests: bump QOS_PATH_MAX_ELEMENT_SIZE again
  - softmmu/physmem: fix memory leak in dirty_memory_extend()
  - crypto: run qcrypto_pbkdf2_count_iters in a new thread
  - hw/audio/virtio-sound: fix heap buffer overflow
  - hw/intc/arm_gic: fix spurious level triggered interrupts
  - ui/sdl2: set swap interval explicitly when OpenGL is enabled
  - target/riscv/kvm: tolerate KVM disable ext errors
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - block: fix -Werror=maybe-uninitialized false-positive
  - hw/remote/vfio-user: Fix config space access byte order
  - hw/loongarch/virt: Fix memory leak
  - hw/intc/riscv_aplic: APLICs should add child earlier than realize
  - stdvga: fix screen blanking
  - ui/gtk: Draw guest frame at refresh cycle
  - target/i386: fix size of EBP writeback in gen_enter()
  - virtio-net: drop too short packets early
  - target/ppc: Fix lxv/stxv MSR facility check
  - target/ppc: Fix lxvx/stxvx facility check
  - virtio-snd: add max size bounds check in input cb(CVE-2024-7730)


author: fangyi <eric.fangyi@huawei.com> - 11:8.2.0-23
changelog:
  - vdpa: fix vdpa device migrate rollback wrong when suspend device failed.
  - vdpa: support resizing virtio-blk capacity online for kernel vdpa
  - Revert "vdpa: add vhost_vdpa_suspend"
  - Revert "vdpa: add vhost_vdpa->suspended parameter"
  - Revert "vdpa: block migration if SVQ does not admit a feature"
  - vdpa: remove memory listener unregister in vhost_vdpa_reset_status


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-24
changelog:
  - ppc/xive: Fix ESB length overflow on 32-bit hosts
  - target/hppa: Fix PSW V-bit packaging in cpu_hppa_get for hppa64
  - target/ppc: Fix migration of CPUs with TLB_EMB TLB type
  - target/arm: Clear high SVE elements in handle_vec_simd_wshli
  - module: Prevent crash by resetting local_err in module_load_qom_all()
  - tests/docker: update debian i686 and mipsel images to bookworm
  - target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)
  - docs/sphinx/depfile.py: Handle env.doc2path() returning a Path not a str
  - block/blkio: use FUA flag on write zeroes only if supported
  - virtio-pci: Fix the use of an uninitialized irqfd
  - hw/cxl: Ensure there is enough data to read the input header in cmd_get_physical_port_state()
  - intel_iommu: Send IQE event when setting reserved bit in IQT_TAIL
  - virtio-net: Avoid indirection_table_mask overflow
  - Fix calculation of minimum in colo_compare_tcp
  - target/riscv/csr.c: Fix an access to VXSAT
  - linux-user: Clean up unused header
  - raw-format: Fix error message for invalid offset/size
  - hw/loongarch/virt: Remove unnecessary 'cpu.h' inclusion
  - tests: Wait for migration completion on destination QEMU to avoid failures
  - acpi: ged: Add macro for acpi sleep control register
  - hw/intc/openpic: Improve errors for out of bounds property values
  - hw/pci-bridge: Add a Kconfig switch for the normal PCI bridge
  - docs/tools/qemu-img.rst: fix typo (sumarizes)
  - audio/pw: Report more accurate error when connecting to PipeWire fails
  - audio/pw: Report more accurate error when connecting to PipeWire fails
  - dma: Fix function names in documentation Ensure the function names match.
  - edu: fix DMA range upper bound check
  - platform-bus: fix refcount leak
  - hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
  - tests/avocado: fix typo in replay_linux
  - util/userfaultfd: Remove unused uffd_poll_events
  - Consider discard option when writing zeros
  - crypto: factor out conversion of QAPI to gcrypt constants
  - crypto: drop gnutls debug logging support
  - crypto: use consistent error reporting pattern for unsupported cipher modes
  - hw/gpio/aspeed_gpio: Avoid shift into sign bit


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-25
changelog:
  - hw/arm/virt:Keep Guest L1 cache type consistent with KVM
  - cvm : Add support for TEE-based national encryption acceleration.
  - Add virtCCA Coda annotation Adjust the position of the security device
  - target/i386: sev: Add support for reuse ASID for different CSV guests
  - target/i386: sev: Fix incompatibility between SEV and CSV on the GET_ID API
  - hw/cxl: Ensure there is enough data for the header in cmd_ccls_set_lsa()
  - hw/pci: Add parenthesis to PCI_BUILD_BDF macro
  - hw/audio/hda: free timer on exit
  - meson.build: Remove ncurses workaround for OpenBSD
  - ui/console-vc: Silence warning about sprintf() on OpenBSD
  - ui: remove break after g_assert_not_reached()
  - s390x/sclp: Simplify get_sclp_device()
  - hw/vfio/hct: qemu startup terminate once error happened in hct
  - hw/vfio/hct: fix ccp_index error caused by uninitialized buf
  - hw/vfio/hct: update support ccp count to 48.
  - hw/vfio: add device hct based on vfio.


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-28
changelog:
  - hw/misc/mos6522: Fix bad class definition of the MOS6522 device
  - target/i386: Fix minor typo in NO_NESTED_DATA_BP feature bit
  - cpu: ensure we don't call start_exclusive from cpu_exec
  - Avoid unaligned fetch in ladr_match()
  - audio/audio.c: remove trailing newline in error_setg
  - acpi/tests/avocado/bits: wait for 200 seconds for SHUTDOWN event from bits VM
  - linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
  - accel/tcg: Fix user-only probe_access_internal plugin
  - linux-user: Honor elf alignment when placing images
  - Reserve address for MSI mapping in the CVM scenario.


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-29
changelog:
  - target/i386: csv: Support inject secret for CSV3 guest only if the extension is enabled
  - target/i386: csv: Support load kernel hashes for CSV3 guest only if the extension is enabled
  - target/i386: csv: Request to set private memory of CSV3 guest if the extension is enabled
  - target/i386: kvm: Support to get and enable extensions for Hygon CoCo guest
  - qapi/qom,target/i386: csv-guest: Introduce secret-header-file=str and secret-file=str options
  - bakcend: VirtCCA:resolve hugepage memory waste issue in vhost-user scenario
  - parallels: fix ext_off assertion failure due to overflow
  - backends/cryptodev-vhost-user: Fix local_error leaks
  - hw/usb/hcd-ehci: Fix debug printf format string
  - target/riscv/vector_helper.c: fix 'vmvr_v' memcpy endianess
  - target/riscv/vector_helper.c: optimize loops in ldst helpers
  - target/riscv/vector_helper.c: set vstart = 0 in GEN_VEXT_VSLIDEUP_VX()
  - target/hexagon: don't look for static glib
  - virtio-net: Fix network stall at the host side waiting for kick
  - Add if condition to avoid assertion failed error in blockdev_init
  - target/arm: Use float_status copy in sme_fmopa_s
  - target/arm: take HSTR traps of cp15 accesses to EL2, not EL1
  - target/arm: Reinstate "vfp" property on AArch32 CPUs
  - target/i386/cpu: Fix notes for CPU models
  - target/arm: LDAPR should honour SCTLR_ELx.nAA
  - target/riscv: Avoid bad shift in riscv_cpu_do_interrupt()
  - hvf: remove unused but set variable
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - Avoid taking address of out-of-bounds array index
  - target/arm: Fix VCMLA Dd, Dn, Dm[idx]
  - target/arm: Fix UMOPA/UMOPS of 16-bit values
  - target/arm: Fix SVE/SME gross MTE suppression checks
  - target/arm: Fix nregs computation in do_{ld,st}_zpa
  - crypto: fix error check on gcry_md_open
  - Change vmstate_cpuhp_sts vmstateDescription version_id
  - hw/pci: Remove unused pci_irq_pulse() method
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - migration: Ensure vmstate_save() sets errp
  - target/i386: fix hang when using slow path for ptw_setl
  - contrib/plugins: add compat for g_memdup2
  - hw/audio/hda: fix memory leak on audio setup
  - crypto: perform runtime check for hash/hmac support in gcrypt
  - target/arm: Fix incorrect aa64_tidcp1 feature check
  - target/arm: fix exception syndrome for AArch32 bkpt insn
  - target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU
  - linux-user: Print tid not pid with strace
  - target/arm: Fix A64 scalar SQSHRN and SQRSHRN
  - target/arm: Don't assert for 128-bit tile accesses when SVL is 128
  - hw/timer/exynos4210_mct: fix possible int overflow
  - target/arm: Avoid shifts by -1 in tszimm_shr() and tszimm_shl()
  - hw/audio/virtio-snd: Always use little endian audio format
  - target/riscv: Fix vcompress with rvv_ta_all_1s
  - usb-hub: Fix handling port power control messages


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-30
changelog:
  - Revert "linux-user: Print tid not pid with strace"
  - gpex-acpi: Remove duplicate DSM #5
  - smmuv3: Use default bus for arm-smmuv3-accel
  - smmuv3: Change arm-smmuv3-nested name to arm-smmuv3-accel
  - smmu-common: Return sysmem address space only for vfio-pci
  - smmuv3: realize get_pasid_cap and set ssidsize with pasid
  - vfio: Synthesize vPASID capability to VM
  - backend/iommufd: Report PASID capability
  - pci: Get pasid capability from vIOMMU
  - smmuv3: Add support for page fault handling
  - kvm: Translate MSI doorbell address, only if it is valid
  - hw/arm/smmuv3: Enable sva/stall IDR features
  - iommufd.h: Updated to openeuler olk-6.6 kernel
  - tests/data/acpi/virt: Update IORT acpi table
  - hw/arm/virt-acpi-build: Add IORT RMR regions to handle MSI nested binding
  - tests/qtest: Allow IORT acpi table to change
  - hw/arm/virt-acpi-build: Build IORT with multiple SMMU nodes
  - hw/arm/smmuv3: Associate a pci bus with a SMMUv3 Nested device
  - hw/arm/smmuv3: Add initial support for SMMUv3 Nested device
  - hw/arm/virt: Add an SMMU_IO_LEN macro
  - hw/pci-host/gpex: [needs kernel fix] Allow to generate preserve boot config DSM #5
  - tests/data/acpi: Update DSDT acpi tables
  - acpi/gpex: Fix PCI Express Slot Information function 0 returned value
  - tests/qtest: Allow DSDT acpi tables to change
  - hw/arm/smmuv3: Forward cache invalidate commands via iommufd
  - hw/arm/smmu-common: Replace smmu_iommu_mr with smmu_find_sdev
  - hw/arm/smmuv3: Add missing STE invalidation
  - hw/arm/smmuv3: Add smmu_dev_install_nested_ste() for CFGI_STE
  - hw/arm/smmuv3: Check idr registers for STE_S1CDMAX and STE_S1STALLD
  - hw/arm/smmuv3: Read host SMMU device info
  - hw/arm/smmuv3: Ignore IOMMU_NOTIFIER_MAP for nested-smmuv3
  - hw/arm/smmu-common: Return sysmem if stage-1 is bypassed
  - hw/arm/smmu-common: Add iommufd helpers
  - hw/arm/smmu-common: Add set/unset_iommu_device callback
  - hw/arm/smmu-common: Extract smmu_get_sbus and smmu_get_sdev helpers
  - hw/arm/smmu-common: Bypass emulated IOTLB for a nested SMMU
  - hw/arm/smmu-common: Add a nested flag to SMMUState
  - backends/iommufd: Introduce iommufd_viommu_invalidate_cache
  - backends/iommufd: Introduce iommufd_vdev_alloc
  - backends/iommufd: Introduce iommufd_backend_alloc_viommu
  - vfio/iommufd: Implement [at|de]tach_hwpt handlers
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize_late() handler
  - HostIOMMUDevice: Introduce realize_late callback
  - vfio/iommufd: Add properties and handlers to TYPE_HOST_IOMMU_DEVICE_IOMMUFD
  - backends/iommufd: Add helpers for invalidating user-managed HWPT
  - Update iommufd.h header for vSVA
  - vfio/common: Allow disabling device dirty page tracking
  - vfio/migration: Don't block migration device dirty tracking is unsupported
  - vfio/iommufd: Implement VFIOIOMMUClass::query_dirty_bitmap support
  - vfio/iommufd: Implement VFIOIOMMUClass::set_dirty_tracking support
  - vfio/iommufd: Probe and request hwpt dirty tracking capability
  - vfio/{iommufd, container}: Invoke HostIOMMUDevice::realize() during attach_device()
  - vfio/iommufd: Add hw_caps field to HostIOMMUDeviceCaps
  - vfio/{iommufd,container}: Remove caps::aw_bits
  - HostIOMMUDevice: Store the VFIO/VDPA agent
  - vfio/iommufd: Introduce auto domain creation
  - vfio/ccw: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/ap: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/iommufd: Return errno in iommufd_cdev_attach_ioas_hwpt()
  - backends/iommufd: Extend iommufd_backend_get_device_info() to fetch HW capabilities
  - vfio/iommufd: Don't initialize nor set a HOST_IOMMU_DEVICE with mdev
  - vfio/pci: Extract mdev check into an helper
  - intel_iommu: Check compatibility with host IOMMU capabilities
  - intel_iommu: Implement [set|unset]_iommu_device() callbacks
  - intel_iommu: Extract out vtd_cap_init() to initialize cap/ecap
  - vfio/pci: Pass HostIOMMUDevice to vIOMMU
  - hw/pci: Introduce pci_device_[set|unset]_iommu_device()
  - hw/pci: Introduce helper function pci_device_get_iommu_bus_devfn()
  - vfio: Create host IOMMU device instance
  - backends/iommufd: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/container: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize() handler
  - backends/iommufd: Introduce helper function iommufd_backend_get_device_info()
  - vfio/container: Implement HostIOMMUDeviceClass::realize() handler
  - range: Introduce range_get_last_bit()
  - backends/iommufd: Introduce TYPE_HOST_IOMMU_DEVICE_IOMMUFD[_VFIO] devices
  - vfio/container: Introduce TYPE_HOST_IOMMU_DEVICE_LEGACY_VFIO device
  - backends/host_iommu_device: Introduce HostIOMMUDeviceCaps
  - backends: Introduce HostIOMMUDevice abstract
  - vfio/iommufd: Remove CONFIG_IOMMUFD usage
  - vfio/spapr: Extend VFIOIOMMUOps with a release handler
  - vfio/spapr: Only compile sPAPR IOMMU support when needed
  - vfio/iommufd: Introduce a VFIOIOMMU iommufd QOM interface
  - vfio/spapr: Introduce a sPAPR VFIOIOMMU QOM interface
  - vfio/container: Intoduce a new VFIOIOMMUClass::setup handler
  - vfio/container: Introduce a VFIOIOMMU legacy QOM interface
  - vfio/container: Introduce a VFIOIOMMU QOM interface
  - vfio/container: Initialize VFIOIOMMUOps under vfio_init_container()
  - vfio/container: Introduce vfio_legacy_setup() for further cleanups
  - docs/devel: Add VFIO iommufd backend documentation
  - vfio: Introduce a helper function to initialize VFIODevice
  - vfio/ccw: Move VFIODevice initializations in vfio_ccw_instance_init
  - vfio/ap: Move VFIODevice initializations in vfio_ap_instance_init
  - vfio/platform: Move VFIODevice initializations in vfio_platform_instance_init
  - vfio/pci: Move VFIODevice initializations in vfio_instance_init
  - hw/i386: Activate IOMMUFD for q35 machines
  - kconfig: Activate IOMMUFD for s390x machines
  - hw/arm: Activate IOMMUFD for virt machines
  - vfio: Make VFIOContainerBase poiner parameter const in VFIOIOMMUOps callbacks
  - vfio/ccw: Make vfio cdev pre-openable by passing a file handle
  - vfio/ccw: Allow the selection of a given iommu backend
  - vfio/ap: Make vfio cdev pre-openable by passing a file handle
  - vfio/ap: Allow the selection of a given iommu backend
  - vfio/platform: Make vfio cdev pre-openable by passing a file handle
  - vfio/platform: Allow the selection of a given iommu backend
  - vfio/pci: Make vfio cdev pre-openable by passing a file handle
  - vfio/pci: Allow the selection of a given iommu backend
  - vfio/iommufd: Enable pci hot reset through iommufd cdev interface
  - vfio/pci: Introduce a vfio pci hot reset interface
  - vfio/pci: Extract out a helper vfio_pci_get_pci_hot_reset_info
  - vfio/iommufd: Add support for iova_ranges and pgsizes
  - vfio/iommufd: Relax assert check for iommufd backend
  - vfio/iommufd: Implement the iommufd backend
  - vfio/common: return early if space isn't empty
  - util/char_dev: Add open_cdev()
  - backends/iommufd: Introduce the iommufd object
  - vfio/spapr: Move hostwin_list into spapr container
  - vfio/spapr: Move prereg_listener into spapr container
  - vfio/spapr: switch to spapr IOMMU BE add/del_section_window
  - vfio/spapr: Introduce spapr backend and target interface
  - vfio/container: Implement attach/detach_device
  - vfio/container: Move iova_ranges to base container
  - vfio/container: Move dirty_pgsizes and max_dirty_bitmap_size to base container
  - vfio/container: Move listener to base container
  - vfio/container: Move vrdl_list to base container
  - vfio/container: Move pgsizes and dma_max_mappings to base container
  - vfio/container: Convert functions to base container
  - vfio/container: Move per container device list in base container
  - vfio/container: Switch to IOMMU BE set_dirty_page_tracking/query_dirty_bitmap API
  - vfio/container: Move space field to base container
  - vfio/common: Move giommu_list in base container
  - vfio/common: Introduce vfio_container_init/destroy helper
  - vfio/container: Switch to dma_map|unmap API
  - vfio/container: Introduce a empty VFIOIOMMUOps
  - vfio: Introduce base object for VFIOContainer and targeted interface
  - cryptodev: Fix error handling in cryptodev_lkcf_execute_task()
  - hw/xen: Fix xen_bus_realize() error handling
  - hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
  - target/s390x: Fix a typo in s390_cpu_class_init()
  - hw/sd/sdhci: free irq on exit
  - hw/ufs: free irq on exit
  - hw/pci-host/designware: Fix ATU_UPPER_TARGET register access
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: enumerate VMX nested-exception support
  - vmxcap: add support for VMX FRED controls
  - target/i386: mark CR4.FRED not reserved
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - net: fix build when libbpf is disabled, but libxdp is enabled
  - hw/nvme: fix invalid endian conversion
  - hw/nvme: fix invalid check on mcl
  - backends/cryptodev: Do not ignore throttle/backends Errors
  - backends/cryptodev: Do not abort for invalid session ID
  - virtcca: add kvm isolation when get tmi version.
  - qga: Don't daemonize before channel is initialized
  - qga: Add log to guest-fsfreeze-thaw command
  - backends: VirtCCA: cvm_gpa_start supports both 1GB and 3GB
  - BUGFIX: Enforce isolation for virtcca_shared_hugepage
  - arm: VirtCCA: qemu CoDA support UEFI boot
  - arm: VirtCCA: Compatibility with older versions of TMM and the kernel
  - arm: VirtCCA: qemu uefi boot support kae
  - arm: VirtCCA: CVM support UEFI boot


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-31
changelog:
  - target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature
  - fw_cfg: Don't set callback_opaque NULL in fw_cfg_modify_bytes_read()


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-32
changelog:
  - target/i386: csv: Release CSV3 shared pages after unmapping DMA
  - target/i386: Add new CPU model ClearwaterForest
  - target/i386: add sha512, sm3, sm4 feature bits
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Introduce SierraForest-v2 model
  - vdpa/iommufd:Implement DMA mapping through the iommufd interface
  - vdpa/iommufd:Introduce vdpa-iommufd module
  - vdpa/iommufd:support associating iommufd backend for vDPA devices
  - Kconfig/iommufd/VDPA: Update IOMMUFD module configuration dependencies The vDPA module can also use IOMMUFD like the VFIO module. 
  - backends/iommufd: Get rid of qemu_open_old()
  - backends/iommufd: Make iommufd_backend_*() return bool
  - backends/iommufd: Fix missing ERRP_GUARD() for error_prepend()
  - backends/iommufd: Remove mutex
  - backends/iommufd: Remove check on number of backend users
  - hw/intc: Add extioi ability of 256 vcpu interrupt routing
  - hw/rtc: Fixed loongson rtc emulation errors
  - hw/loongarch/boot: Adjust the loading position of the initrd
  - target/loongarch: Fix the cpu unplug resource leak
  - target/loongarch: fix vcpu reset command word issue
  - vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-33
changelog:
  - arm: cvm: fix arm-softmmu build on x86 platform
  - arm: VirtCCA: fix arm-softmmu build on x86 platform
  - hw/arm/virt: HDBSS: fix arm-softmmu build on x86 platform
  - hw/arm/virt: decouple migrate_hdbss_buffer_size() with kvm_update_hdbss_cap()
  - hw/arm/virt: only support the HDBSS feature in aarch64
  - multifd: bugfix for incorrect migration data with qatzip compression
  - multifd: bugfix for incorrect migration data with QPL compression
  - multifd: bugfix for migration using compression methods
  - migration/multifd: Zero p->flags before starting filling a packet
  - migration/multifd: Ensure packet->ramblock is null-terminated
  - migration/multifd: Fix rb->receivedmap cleanup race
  - migration/multifd: Fix loop conditions in multifd_zstd_send_prepare and multifd_zstd_recv
  - tests/migration: Add integration test for 'qatzip' compression method
  - migration: Introduce 'qatzip' compression method
  - migration: Add migration parameters for QATzip
  - meson: Introduce 'qatzip' feature to the build system
  - docs/migration: add qatzip compression feature
  - migration/multifd: Fix p->iov leak in multifd-uadk.c
  - tests/migration-test: add uadk compression test
  - migration/multifd: Switch to no compression when no hardware support
  - migration/multifd: Add UADK based compression and decompression
  - migration/multifd: Add UADK initialization
  - migration/multifd: add uadk compression framework
  - configure: Add uadk option
  - docs/migration: add uadk compression feature
  - configure: add --enable-qpl build option
  - migration/multifd: implement qpl compression and decompression
  - migration/multifd: implement initialization of qpl compression
  - migration/multifd: include ram.h in multifd.h
  - migration/multifd: add qpl compression method
  - migration/multifd: put IOV initialization into compression method
  - docs/migration: add qpl compression feature
  - migration/multifd: solve zero page causing multiple page faults
  - migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page.
  - migration/multifd: Implement zero page transmission on the multifd thread
  - migration/multifd: Add new migration option zero-page-detection
  - migration/multifd: Allow multifd without packets
  - migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data
  - migration/multifd: Cleanup multifd_recv_sync_main
  - tests/migration: Set compression level in migration tests
  - migration: Properly apply migration compression level parameters
  - migration/multifd: Drop unnecessary helper to destroy IOC
  - migration/multifd: Cleanup outgoing_args in state destroy
  - migration/multifd: Make multifd_channel_connect() return void
  - migration/multifd: Drop registered_yank
  - migration/multifd: Cleanup TLS iochannel referencing
  - migration/multifd: Release recv sem_sync earlier
  - migration/multifd: Remove p->quit from recv side
  - migration/multifd: Add a synchronization point for channel creation
  - migration/multifd: Unify multifd and TLS connection paths
  - migration/multifd: Move multifd_send_setup into migration thread
  - migration/multifd: Move multifd_send_setup error handling in to the function
  - migration/multifd: Remove p->running
  - migration/multifd: Join the TLS thread
  - migration: Fix logic of channels and transport compatibility check
  - migration/multifd: Optimize sender side to be lockless
  - migration/multifd: Stick with send/recv on function names
  - migration/multifd: Cleanup multifd_load_cleanup()
  - migration/multifd: Cleanup multifd_save_cleanup()
  - migration/multifd: Rewrite multifd_queue_page()
  - migration/multifd: Change retval of multifd_send_pages()
  - migration/multifd: Change retval of multifd_queue_page()
  - migration/multifd: Split multifd_send_terminate_threads()
  - migration/multifd: Forbid spurious wakeups
  - migration/multifd: Move header prepare/fill into send_prepare()
  - migration/multifd: Move trace_multifd_send|recv()
  - migration/multifd: Move total_normal_pages accounting
  - migration/multifd: Rename p->num_packets and clean it up
  - migration/multifd: Drop pages->num check in sender thread
  - migration/multifd: Simplify locking in sender thread
  - migration/multifd: Separate SYNC request with normal jobs
  - migration/multifd: Drop MultiFDSendParams.normal[] array
  - migration/multifd: Postpone reset of MultiFDPages_t
  - migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths
  - migration/multifd: multifd_send_kick_main()
  - migration/multifd: Drop stale comment for multifd zero copy
  - docs/migration: Further move virtio to be feature of migration
  - docs/migration: Further move vfio to be feature of migration
  - docs/migration: Organize "Postcopy" page
  - docs/migration: Split "dirty limit"
  - docs/migration: Split "Postcopy"
  - docs/migration: Split "Debugging" and "Firmware"
  - docs/migration: Split "Backwards compatibility" separately
  - docs/migration: Convert virtio.txt into rST
  - docs/migration: Create index page
  - docs/migration: Create migration/ directory
  - tests/qtest: Re-enable multifd cancel test
  - tests/qtest/migration: Use the new migration_test_add
  - tests/qtest/migration: Add a wrapper to print test names
  - tests/qtest/migration: Print migration incoming errors
  - migration: Report error in incoming migration
  - migration/multifd: Change multifd_pages_init argument
  - migration/multifd: Remove QEMUFile from where it is not needed
  - migration/multifd: Remove MultiFDPages_t::packet_num
  - migration/multifd: Remove unnecessary usage of local Error
  - migration: Fix migration_channel_read_peek() error path
  - migration/multifd: Remove error_setg() in migration_ioc_process_incoming()
  - migration/multifd: Fix leaking of Error in TLS error flow
  - migration/multifd: Simplify multifd_channel_connect() if else statement
  - migration/multifd: Fix error message in multifd_recv_initial_packet()
  - hw/arm/virt: support the HDBSS feature


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-34
changelog:
  - target/arm: support the IPIV feature
  - Revert "target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature"
  - vdpa/iommufd: All vdpa devices perform only one log_sync each time.
  - memory:Optimize flatview ioeventfd processing
  - memory/eventfd:Introduce ioeventfd batch processing to reduce the time required to update ioeventfd
  - migration/memory:Optimize unnecessary memory region updates during live migration
  - migration:Extand the fdtable in the incoming phase of migration
  - virtio/irqfd: Batch processing of irqfd related operations during virtio device startup
  - kvm/msi: Mark whether there is an IRQ route table update through changes
  - virtio-pci:Batch processing of IRQFD mapping for multi queue Virtio devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-36
changelog:
  - Fix error in virtCCA CoDA scenario.
  - Revert "backends/iommufd: Make iommufd_backend_*() return bool"


author: Panhengchang <panhengchang@huawei.com> - 11:8.2.0-37
changelog:
  - Add stub function for 'tmm_get_kae_num' if 'CONFIG_KVM' is not set.
  - qapi/misc-target: Add KVM option to isolate virtcca detection interface.
  - qapi/misc-target: Add Virtcca capability struct and query command.


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-37.p01
changelog:
  - Type: Update
  - ID:   [TASK#534473]
  - SUB:  NA
  - DESC:
  - Add loongarch defalut machine type in machine map and fix qemu-iotest error
  - enable spice for aarch64
  - add phytium cpu models ft-2000+ ft-S2500 ft-S5000c
  - show virtio nic bandwith as 10Gbps
  - make libvirt support host-model on aarch64
  - Fixed:systemd-detect-virt returns the result qemu, when kvm acceleration is enabled in Loongson architecture.
  - Add support for migration from rhel or openEuler to Kylin
  - Fix acpi hotplug state cause migration failure
  - Support migration between Phytium different CPU model
  - hw: Fix bug, multiple default machines caused the qemu-kvm to crash.


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p04
changelog:
  - Type: Bugfix
  - ID:   [BUG#464097]
  - SUG:  NA
  - DESC: fix can not use virsh command to get host capabilities on phytium cpu


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-37.p05
changelog:
  - Type: Bugfix
  - ID:   [BUG#471289]
  - SUG:  NA
  - DESC: Enable disk encrypt function and fix compile error


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-37.p07
changelog:
  - Type: Update
  - ID:   [TASK#583973]
  - SUG:  NA
  - DESC: Add the PASUEOPT instruction to the ZHAOXIN chip.


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-37.p08
changelog:
  - Type: Update
  - ID:   [TASK#586391]
  - SUG:  NA
  - DESC: Disconnect qemu's dependency on qatzip-devel and intel-qpl-devel


author: wangdi <wangdi@kylinos.cn> - 11:8.2.0-37.p10
changelog:
  - Type: Bugfix
  - ID:   [BUG#466883]
  - SUG:  NA
  - DESC: Align VIRT_GED_CPUHP_ADDR to 4 bytes to fix cpu hotplug failure on loongarch64


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p11
changelog:
  - Type: cves
  - ID:   CVE-2025-14876
  - SUG:  NA
  - DESC: FIX CVE-2025-14876 qemu-kvm: Unbounded allocation in virtio-crypto


author: malike <malike@kylinos.cn> - 11:8.2.0-37.p12
changelog:
  - Type: cves
  - ID:   CVE-2025-12464
  - SUG:  NA
  - DESC: FIX CVE-2025-12464 qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode


author: peijiankang <peijiankang@kylinos.cn> - 0.9.2-1.p01
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: fix build error caused by disabling decoration_shadows support in qt5-qtwayland


author: zhouyihang<zhouyihang1@huawei.com> - 1:4.8.7-45
changelog:
  - Type:cves
  - ID:CVE-2018-19870 CVE-2018-19873
  - SUG:restart
  - DESC: fix CVE-2018-19870 CVE-2018-19873


author: Tom Stellard <tstellar@redhat.com> - 4.11.0-4
changelog:
  - Link against libclang-cpp.so
  - https://fedoraproject.org/wiki/Changes/Stop-Shipping-Individual-Component-Libraries-In-clang-lib-Package


author: Xu Jin <jinxu@kylinos.cn> - 8.0.2-3.p01
changelog:
  - Type:enhancement
  - ID:TASK#372069
  - SUG:NA
  - DESC:Add loongarch support.Fix build error for Kylin V11.


author: openEuler Buildteam <buildteam@openeuler.org> - 5.11.1-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Delete the dependency include qt5-qt3d qt5-qtenginio-devel qt5-qtwebkit-devel


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p02
changelog:
  - Type: update
  - ID  : [TASK#587039]
  - SUG : NA
  - DESC: Patch1002:qtbase-5.15.10-work-around-pyside2-brokenness.patch
          适配pyside2


author: huayadong<huayadong@kylinos.cn> - 5.15.10-11.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#485611]
  - SUG : NA
  - DESC: Patch1003:CVE-2025-5455-qtbase-5.15.patch
          修复CVE-2025-5455


author: lizequan<lizequan@kylinos.cn> - 5.15.10-11.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#504703]
  - SUG : NA
  - DESC: Patch1004:qt5-base-fix-coredump-missing-display-env-in-ssh.patch


author: Jingwiw <wangjingwei@iscas.ac.cn> - 5.2.0+git6.3-1
changelog:
  - Init package from openSUSE: https://build.opensuse.org/package/show/home:neochapay:nemo:mw/qt5-qtfeedback


author: peijiankang <peijiankang@kylinos.cn> - 5.15.10-2.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync form 5.15.10-1.p01(add Patch101: qtscript-everywhere-src-5.15.10-kylin-add_loongarch64_support.patch
  	add Patch102: qtscript-everywhere-src-5.15.10-kylin-remove-sensitive-information.patch)


author: peijiankang <peijiankang@kylinos.cn> - 5.15.10-2.p02
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: add debuginfo and debugsource for loongarch64 and sw_64
          add qtscript-everywhere-src-5.15.10-update-sw_64-aarch.patch


author: peijiankang <peijiankang@kylinos.cn> - 5.15.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#446380]
  - SUG : NA
  - DESC: sync code from desktop qtwayland-opensource-src-5.15.10-2ok22k0.8.patch
          upstream commtid:03e4cbc9a1164b50b8d2a3df23836efc6aaddd62


author: panchenbo <panchenbo@kylinsec.com.cn> - 5.15.10-5
changelog:
  - Backport ffmpeg: avcodec/x86/mathops: clip constants used with shift instructions within inline assembly


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: lvying<lvying6@huawei.com> - 0.6.3-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix file descriptor leak in ras-report.c:setup_report_socket()


author: Lv Ying <lvying6@huawei.com> - 0.6.6-3
changelog:
  - backport bugfix patches from community:
    1. ras-page-isolation: do_page_offline always considers page offline was successful
    2. ras-page-isolation: page which is PAGE_OFFLINE_FAILED can be offlined again


author: tanxiaofei<tanxiaofei@huawei.com> - 0.6.6-6
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:Add support for hisilicon common section that some IIO devices may
  - used in new firmware of Kunpeng920, and Kunpeng930 will also use it too.


author: tanxiaofei<tanxiaofei@huawei.com> - 0.6.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Backport 4 patches from openEuler master branch.
    1) Fix the issue of sprintf data type mismatch in uuid_le()
    2) Fix the issue of command option -r for hip08
    3) Fix some print format issues for hisi common error section
    4) Add some modules supported by hisi common error section
    2.Enable compilation of the feature memory fault prediction based on
    corrected error.
    3.Fix changelog date error of this spec file.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.7-4
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:
    1. Modify recording Hisilicon common error data in the rasdaemon and
    2. In the ras-mc-ctl,
    2.1. Improve Hisilicon common error statistics.
    2.2. Add support to display the HiSilicon vendor-errors for a specified module.
    2.3. Add printing usage if necessary parameters are not passed for the HiSilicon vendor-errors options.
    2.4. Reformat error info of the HiSilicon Kunpeng920.
    2.5. Relocate reading and display Kunpeng920 errors to under Kunpeng9xx.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.7-5
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:
    Update with the latest patches for the
    1. CPU online fault isolation for arm event.
    2. Modify recording Hisilicon common error data in the rasdaemon
    3. In the ras-mc-ctl,
    3.1. Improve Hisilicon common error statistics.
    3.2. Add support to display the HiSilicon vendor-errors for a specified module.
    3.3. Add printing usage if necessary parameters are not passed for the HiSilicon vendor-errors options.
    3.4. Reformat error info of the HiSilicon Kunpeng920.
    3.5. Relocate reading and display Kunpeng920 errors to under Kunpeng9xx.
    3.6. Updated the HiSilicon platform name as KunPeng9xx.
    4. Fixed a memory out-of-bounds issue in the rasdaemon.


author: Xiaofei Tan <tanxiaofei@huawei.com> - 0.6.7-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    Add the following patch to fix startup core dumped issue.
    0001-rasdaemon-use-standard-length-PATH_MAX-for-path-name.patch


author: huangfangrun <huangfangrun1@h-partners.com> - 0.6.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1.Fix for regression in ras_mc_create_table() if some cpus are offline at the system start.
    2.Fix poll() on per_cpu trace_pipe_raw blocks indefinitely.


author: Shiju Jose<shiju.jose@huawei.com> - 0.6.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:
    1. Fix return value type issue of read/write function from unistd.h.
    2. Fix issue of signed and unsigned integer comparison.
    3. Remove redundant header file and do some cleaup.
    4. Add support for create/open the vendor error tables at rasdaemon startup.
    5. Make changes in the HiSilicon error handling code for the same.
    6. Add four modules supported by HiSilicon common section


author: yanglongkang <yanglongkang@h-partners.com> - 0.6.8-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: renhongxun <renhongxun@h-partners.com> - 0.6.8-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: luoshengwei <luoshengwei@huawei.com> - 0.8.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: Qizhi Zhang <zhangqizhi3@h-partners.com> - 0.8.0-8
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:Add some improvements and add new modules to HiSilicon common section


author: andy <liuyang01@kylinos.cn> - 0.8.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16.3-24
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-build-bug-with-distro-of-openeuler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-build-bug-with-distro-of-kylin.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 6.5-1
changelog:
  - since 6.6, jitterentropy-library is independed from rng-tools,
    no any entropy source will lead to rng-tools service fail.


author: jiangxingsong jiangxingsong@kylinos.cn - 1.1.0-22
changelog:
  - Type: update
  - ID: [bug#599257] gdca_certs fuzzing测试过程中出现crash，上报核心已转储
  - SUG: NA
  - DESC: update failed


author: jiangxingsong jiangxingsong@kylinos.cn - 1.1.0-23
changelog:
  - Type: update
  - ID: [task#603517]  rootca-gov-cn软件合规性整改
  - SUG: NA
  - DESC: Access Control Compliance Check


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change the uid and gid of directories newly created when run with --change-files


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: Shouping Wang<wangshouping@huawei.com> - 8.1907.0-5.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: the return value judgment of recv() is err in CheckConnection


author: wuchaochao <wuchaochao4@huawei.com> - 8.2110.0-2
changelog:
  - move rsyslog-crypto rsyslog-doc rsyslog-elasticsearch rsyslog-mmjsonparse syslog-mmaudit rsyslog-mmsnmptrapd rsyslog-mysql syslog-gssapi rsyslog-gnutls rsyslog-updspoof from rsyslog


author: pengyi <pengyi37@huawei.com> - 8.2210.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2210.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: yangjiaqi <yangjiaqi16@huawei.com> - 1.0.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:set the burst value for the pod to enable the container burst


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync upstream patches to support isulad container engine and systemd cgroup driver


author: weiyuan <weiyuan@kylinos.cn> - 2.0.1-2.p01
changelog:
  - Type:update
  - ID:[TASK#427098]
  - SUG:restart
  - DESC:backport v11-2409 patch
         add rubik-add-netqos-service.patch
         add backport-dynlevel.patch
         add support-multi-qos-level.patch
         add add-dyn-affinity-service.patch
         add fix-wrong-force-empty-failed-log.patch
         add dyn-affinity-add-update-func.patch
         add modify-the-way-qoslevel-is-obtained-in-netqos.patch
         add skip-the-inspection-of-perf-llcmiss-llcaccess-event.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 2.5.1-104
changelog:
  - Type:cves
  - ID:CVE-2019-16163 CVE-2019-19204 CVE-2019-16255 CVE-2019-19246
  - SUG:N/A
  - DESC:fix CVE-2019-16163CVE-2019-19204CVE-2019-16255CVE-2019-19246


author: wutao <wutao61@huawei.com> - 2.5.8-4
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: Shinwell_Hu <huxinwei@huawei.com> - 2.5.8-113
changelog:
  - Upgrade bundled REXML gem to fix CVE-2021-28965, which is an XML
    round-trip vulnerability in REXML.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.3.8-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/00-disable-rubocop-tests.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shaojiansng <shaojiansong@kylinos.cn> - 1.14.4-1.p01
changelog:
  - Type:update
  - ID:TASK#221072
  - SUG:NA
  - DESC: Fix build error because lack of header file in std include dir


author: shinwell_hu <micromotive@qq.com> - 3.12.6-1
changelog:
  - Upgrade to 3.12.6 to fix following known CVEs
    CVE-2020-11077
    CVE-2020-11076
  - Workaround test failure on x forwarded protol


author: woody2918 <wudi1@uniontech.com> - 1.15.0-1
changelog:
  - Upgrade to 1.15.0
  - Update reference to MiniTest -> Minitest
  - Add test (and fix support for) for Rack v2.1.x.


author: Ge Wang <wang__ge@126.com> - 0.19.1-1
changelog:
  - update to version 0.19.1
  - No more warnings triggered by enable_for_subprocesses.
  - Avoid trying to patch Process.fork when it isn't available.
  - Dropped support for Ruby 2.4, it reached EOL


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 1.1.0-2
changelog:
  - add BuildRequires: rubygem-bigdecimal rubygem-io-console rubygem-openssl rubygem-psych 
    to resolve koji build error during check


author: liyanan <liyanan61@h-partners.com> - 1.4.0-1
changelog:
  - Update to 1.4.0
  - Faraday adapter exceptions namespace compatibility with Faraday v1
  - Add global config option `Typhoeus::Config.proxy`
  - Add cache adapters for Dails,Rails, and Redis


author: weiyuan <weiyuan@kylinos.cn> - 1.1.12-1.p03
changelog:
  - TYpe: update
  - ID: [TASK#371229]
  - SUG: NA
  - DESC: fix the problem that attackers could create files in arbitrary locations on the host filesystem


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p04
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p05
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 and fix system property miss handling in p04


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p07
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:resolve secure compilation issues and sync modified to the sw64 arch


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p08
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:inject stack proctector from Go compiler and modify the correct commit info


author: songjuntao <songjuntao@kylinos.cn> rustcrypto-hashes-20240523-git390a46e.p01
changelog:
  - Type:update
  - ID:TASK#221083
  - SUG:NA
  - DESC:fix compile failed in loongarch64 platform because of glibc library dependency


author: litianhao <litianhao@kylinos.cn> - 1.2.1-2.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG:NA
  - DESC: 合入sm设备管控补丁
          sane-backends-add-sm-devctl.patch


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
changelog:
  - Provide manual page for scap-security-guide
  - Remove percent sign from spec's changelog to silence rpmlint warning
  - Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
  - Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
  - Introduce 'Account and Access Control' section
  - Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
    rules to Fedora
  - Set proper name of the build directory in the spec's setup macro.
  - Replace hard-coded paths with macros. Preserve attributes when copying files.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
changelog:
  - Add .gitignore for Fedora output directory
  - Set up Fedora release name and CPE based on build system properties
  - Use correct file paths in scap-security-guide(8) manual page 
    (RH BZ#1018905, c#10)
  - Apply further changes motivated by scap-security-guide Fedora RPM review
    request (RH BZ#1018905, c#8):
    * update package description,
    * make content files to be owned by the scap-security-guide package,
    * remove Fedora release number from generated content files,
    * move HTML form of the guide under the doc directory (together
      with that drop fedora/content subdir and place the content
      directly under fedora/ subdir).
  - Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
    * drop Fedora release from package provided files' final path (c#5),
    * drop BuildRoot, selected Requires:, clean section, drop chcon for
      manual page, don't gzip man page (c#4),
    * change package's description (c#4),
    * include PD license text (#c4).


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1
changelog:
  - Update versioning scheme - move fedorassgrelease to be part of
    upstream version. Rename it to fedorassgversion to avoid name collision
    with Fedora package release.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1
changelog:
  - Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
    it to /shared
  - Add shared remediations for sshd disable empty passwords and
    sshd set idle timeout
  - Shared remediation for sshd disable root login
  - Add empty -compat subpackage to ensure backward-compatibility with
    openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
  - OVAL check for sshd disable root login
  - Fix typo in OVAL check for sshd disable empty passwords
  - OVAL check for sshd disable empty passwords
  - Unselect no shelllogin for systemaccounts rule from being run by default
  - Rename XCCDF rules
  - Revert Set up Fedora release name and CPE based on build system properties
  - Shared OVAL check for Verify that Shared Library Files Have Root Ownership
  - Shared OVAL check for Verify that System Executables Have Restrictive Permissions
  - Shared OVAL check for Verify that System Executables Have Root Ownership
  - Shared OVAL check for Verify that Shared Library Files Have Restrictive
    Permissions
  - Fix remediation for Disable Prelinking rule
  - OVAL check and remediation for sshd's ClientAliveCountMax rule
  - OVAL check for sshd's ClientAliveInterval rule
  - Include descriptions for permissions section, and rules for checking
    permissions and ownership of shared library files and system executables
  - Disable selected rules by default
  - Add remediation for Disable Prelinking rule
  - Adjust service-enable-macro, service-disable-macro XSLT transforms
    definition to evaluate to proper systemd syntax
  - Fix service_ntpd_enabled OVAL check make validate to pass again
  - Include patch from Šimon Lukašík to obsolete openscap-content
    package (RH BZ#1028706)
  - Add OVAL check to test if there's is remote NTP server configured for
    time data
  - Add system settings section for the guide (to track system wide
    hardening configurations)
  - Include disable prelink rule and OVAL check for it
  - Initial OVAL check if ntpd service is enabled. Add package_installed
    OVAL templating directory structure and functionality.
  - Include services section, and XCCDF description for selected ntpd's
    sshd's service rules
  - Include remediations for login.defs' based password minimum, maximum and
    warning age rules
  - Include directory structure to support remediations
  - Add SCAP "replace or append pattern value in text file based on variable"
    remediation script generator
  - Add remediation for "Set Password Minimum Length in login.defs" rule


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.5-1
changelog:
  - Fix fedora-srpm and fedora-rpm Make targets to work again
  - Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
  - EOL for Fedora 18 support
  - Include Fedora datastream file for remote Fedora system scans


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.5-3
changelog:
  - Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
  - Add STIG DISCLAIMER to the shipped documentation


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.22-1
changelog:
  - update to the latest upstream release
  - only DataStream file is now available for Fedora
  - start distributing security baseline for Firefox
  - start distributing security baseline for Java RunTime deployments


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.24-1
changelog:
  - update to the latest upstream release
  - created doc sub-package to ship all the guides
  - start distributing centos and scientific linux content
  - rename java content to jre


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.29-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.29 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.29
  - Do not ship Firefox/DISCLAIMER documentation file since it has been removed
    in 0.1.29 upstream release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
  - Drop shell library for remediation functions since it is not required
    starting from 0.1.30 release any more


author: Martin Preisler <mpreisle@redhat.com> - 0.1.31-1
changelog:
  - update to the latest upstream release
  - new default location for content /usr/share/scap/ssg
  - install HTML tables in the doc subpackage


author: Watson Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.35 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.35


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.36 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.36


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.37 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.38 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.39-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.39 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39


author: Matěj Týč <matyc@redhat.com> - 0.1.40-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.40 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.40
  - Update to use Python3 for build.


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.41 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
  - Fix Licence of this package


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.42-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.42 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
  - Fix man page build dependency on derivative content


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.43-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.43 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.43
  - Update URL and source URL


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.44-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.44 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.44


author: Watson Sato <wsato@redhat.com> - 0.1.45-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.45 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.45


author: Matěj Týč <matyc@redhat.com> - 0.1.47-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.47 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.47
  - Fixed XML parsing of remediation functions.


author: Watson Sato <wsato@redhat.com> - 0.1.48-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.48 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.48


author: Watson Sato <wsato@redhat.com> - 0.1.49-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.49 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.49


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.51-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.51 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.51


author: Jan Černý <jcerny@redhat.com> - 0.1.51-4
changelog:
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix FTBS in Rawhide/F33 (RHBZ#1863741)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.52-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.52 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.52


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.53-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.53 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.53


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.54-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.54 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.54


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.55-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.55 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.55


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.56-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.56 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.56


author: Matej Tyc <matyc@redhat.com> - 0.1.56-2
changelog:
  - Updated the packaging according to the RHEL development trends.
  - Don't ship 1.2 datastreams and Bash remediations.
  - Clean up dependencies and other package metadata.
  - Change the RHEL target.


author: Matej Tyc <matyc@redhat.com> - 0.1.57-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.57 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.57


author: Watson Sato <wsato@redhat.com> - 0.1.58-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.58 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.58
  - Fix license warning.


author: Watson Sato <wsato@redhat.com> - 0.1.59-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.59 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.59
  - Fix loading of jinja files


author: Watson Sato <wsato@redhat.com> - 0.1.60-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.60 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.60


author: Watson Sato <wsato@redhat.com> - 0.1.61-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.61 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.61


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.62-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.62 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.62


author: Watson Sato <wsato@redhat.com> - 0.1.63-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.63 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.63


author: Watson Sato <wsato@redhat.com> - 0.1.64-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.64 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.64


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.65-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.65 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.65


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.66-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.66 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.66


author: Matthew Burket <mburket@redhat.com> - 0.1.67-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.67 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.67


author: Jan Černý <jcerny@redhat.com> - 0.1.68-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.68 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.68


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.69 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.71 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.73


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
  - Remove /usr/bin/python3 from BuildRequires


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.75


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Timothée Floure <fnux@fedoraproject.org> - 1.9.4-3
changelog:
  - Remove useless PCDIR variable definition in build section
  - Fix erroneous dates in last two changelog entries


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: sunjin <sunjin@kylinos.cn> 3.0.0-06
changelog:
  - Type:update
  - ID:[TASK#600263][BUG#499333]
  - SUG:NA
  - DESC:
  - 优化开始菜单图标模糊的问题
  - 增加dbus接口权限检查
  - 修正错误的命令行信息
  - 【B10】【V11-2503】【安全加固】【非交互命令】自定义参数导入测试-确保设置空闲超时锁屏时间未生效
  - 添加补丁security-reinforce-update-20260310.patch


author: liangyangang <yangang.liang@cs2c.com.cn> 1.1.3.skl4.ns7_4.se.01
changelog:
  - update the selinux config file when switch the selinux status
  - add support for longson
  - fix bug that check package status
  - sync modify from 1.1.3.skl4


author: huanfuxi <huanfuxi@kylinos.cn> - 1.2.6-3kord.se
changelog:
  - 修复回退到上次的自定义模式时，若未执行get操作，回退的状态不正确的bug
  - kysec的normal状态修改为enable状态后，获取到的状态做同样修改
  - 当设置自定义模式的模块列表为空时切换到非安全模式
  - 修复当policycoreutils包未安装且当前未开启SE时，切换到无SE的安全状态失败的bug


author: Tianyue Ren <rentianyue@kylinos.cn> - 1.2.7-1.se4
changelog:
  - add env for subprocess call which may fail in dbus.
  - remove security modules's function parameters when switching status, only
      preserve the "security=".
  - specify secadm and auditadm users' shell as bash
  - when the 3adm is on,set secadm and auditadm users' shell as bash, and
      nologin when off.
  - redirect the update-grub output to log file


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.05
changelog:
  - 修复安全切换之后，grub.cfg的中文变英文的bug
  -   add patch: security-switch-fix-bug-of-Chinese-to-English-in-grub.cfg.patch 
  - 开启三权分立时，不允许非root用户修改主机名
  - 开启三权分立时，允许用户断开、链接网络
  -   add patch: security-switch-allow-user-connection-network-and-no-hostname.patch
  - 开启三权分立时，允许secadm打开防火墙应用配置
  -   add patch: security-switch-firewall-configuration.patch
  - 执行 security_switch --get 时不写 /etc/security_custom.conf 文件
  - 修改 /etc/security_custom.conf 文件权限为0644 --spec文件
  -   add patch: security-switch-not-write-custom-mode-when-get-security.patch
  - 不允许同时启用selinux和apparmor
  -   add patch: security-switch-not-allow-enable-selinux-and-apparmor.patc
  - 解决普通用户可以通过开始菜单右键选择卸载系统应用
  -   add patch: security-switch-polkit-for-kylin-uninstaller.patch
  - 添加切换失败后回滚操作
  -   add patch: security-switch-add-retroversion-when-switch-failed.patch
  - security-switch取消能切换到同时开启selinux和apparmor的限制
  -   add patch: security-switch-allow-enable-selinux-and-appa.patch
  - Bug：#71255
  - 关闭安全后写状态值到状态文件中
  -   add patch: security-switch-echo-0-into-status-after-disable-kysec.patch
  - Bug:  #93603
  - 未开启三元时，安全中心修改密码有效期时不修改root、secadm、audadm密码过期时间；
  - 开启三元时需根据系统配置，设置三元用户密码过期时间；
  - 关闭三元时，设置三元用户密码不过期
  -   add patch: security-switch-set-sp_warn-and-sp_max-when-change-adm3.patch
  - Bug:  #93603
  - 修改密码过期时间前先检查用户是否存在
  -   add patch: security-switch-check-user-when-chage_spwd.patch
  - 同步桌面补丁到：1.2.7-21kylin


author: wanghao <wanghao@kylinos.cn> - 1.2.7-6.se.06
changelog:
  - 添加kysec_tpm配置
  -   add patch: security-switch-add-kysec-tpm.patch
  - 修改tpm获取状态的函数
  - 删除kysec-auth的检查
  -   add patch: security-switch-fix-tpm-getstatus-and-del-kysec-auth.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.09
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:彻底删除auto-resetpw选项
  -      添加补丁security-switch-delete-auto-resetpw-completely.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#145103]
  - SUG:NA
  - DESC: 关闭kysec后,不重启机器的情况下，在root用户下使用security-switch切换strict模式，保证kysec-daemon的启动用户是secadm
  -         add patch: security-switch-fix-not-reboot-set-strict-when-kysec-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: security-switch-fix-security-switch-disable-after-force-reboot-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#147592]
  - SUG:NA
  - DESC: 解决切换模式失败后，无法再次切换的问题
  -       add patch: security-switch-fix-can-not-excute-after-switch-failed.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#157825]
  - SUG:NA
  - DESC: 【安全模式】切换default模式后，概率性报核心已转储提示
  -       add patch: security-switch-add-client-thread-wait.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.18
changelog:
  - Type: bugfix
  - ID: [BUG#191987]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题
  -	  add patch: security-switch-fix-set-passwd-dbus-timeout-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.3.1-1.se.02
changelog:
  - Type: bugfix
  - ID: [BUG#201315]
  - SUG:NA
  - DESC: 修复secadm输错三次密码后仍可以切换状态的问题
  -	  add patch: security-switch-fix-secadm-set-passwd-error-still-switch-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 1.3.1-1.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -	  add patch: security-switch-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.3.1-1.se.04
changelog:
  - Type: bugfix
  - ID: [BUG#209559]
  - SUG:NA
  - DESC: 修复安全模式切换失败时，存在多余输出信息的问题
  -	  add patch: security-switch-mode-switch-fail-tips-redundant-info.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.07
changelog:
  - Type: update
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: 由于内核不支持中文,将代码中的中文更改成英文
  -     add patch: security-switch-add-en-translation.patch


author: chengang <chengang@kylinos.cn> - 1.3.1-1.se.08
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      security-switch-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.3.1-1.se.09
changelog:
  - Type: update
  - ID: [TASK#379847]
  - SUG: NA
  - DESC: kasf compatible
  -     add patch: security-switch-2501-compatible01.patch


author: litianhao <litianhao@kylinos.cn> - 1.3.1-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       security-switch-add-license.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#457138]
  - SUG: NA
  - DESC: 对于security-switch命令的新参数需求 变更产品化版本
  -    security-switch-new-parameter-20250508.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653]
  - SUG: NA
  - DESC: 更新security-switch命令的help信息和关闭状态时get的返回值（none -> off）
  -	  security-switch-new-help-info.patch
  -	修复调用reboot命令执行错误的问题[BUG#352649][BUG#352653]
  -	  security-switch-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: bugfix 
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -       无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -         security-switch-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: bugfix 
  - ID: NA
  - SUG: NA
  - DESC: 修复缺少此设置将使系统失去安全防护，极大增加系统安全风险提示的问题,桌面bug#360683
  -	  -- security-switch-fix-error-with-missing-prompt-message.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-02
changelog:
  - Type: update
  - ID: [TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         security-switch-add-fuzz-test.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.1-03
changelog:
  - Type: bugfix
  - ID: [BUG#504759]
  - SUG: NA
  - DESC: 【模式切换】default切换off，未提示重启生效[BUG#504759]
  -         security-switch-default-to-off-prompt-reboot.patch


author: mengchaoming <mengchaoming@kylinos.cn> - 2.0-1.88.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch
  - add patch: Cancel_etc_grub.d_00_header_superusers_password_pbkdf2.patch
  - modify spec don't modify /etc/pam.d/su
  - add patch:security-tool-v2.0-Productization.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-42
changelog:
  - add allow for ldconfig to map /usr/libexec/libsudo_util.so
    allow syslogd_t domain to send null signal to all domain


author: openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-54
changelog:
  - add map to zerp device at dev_rw_zero interface;
    allow ipmievd to read the process state (/proc/pid) of init;
    allow systemd to mount unlabeled filesystemd;
    fix selinux label for hostname digest list;
    solve shutdown permission denied caused by dracut


author: luhuaxin <1539327763@qq.com> - 3.14.2-65
changelog:
  - selinux_requires macro shouldn't depend on policycoreutils-python
  - add avc for allowing systemd services to check selinux status
  - add avc for allowing dovecot to bind smtp port


author: luhuaxin <1539327763@qq.com> - 3.14.2-68
changelog:
  - backport some upstream patches
    backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch
    backport-Allow-auditd-manage-kerberos-host-rcache-files.patch
    backport-Add-dev_lock_all_blk_files-interface.patch
    backport-Allow-systemd-machined-create-userdbd-runtime-sock-f.patch
    backport-Define-named-file-transition-for-sshd-on-tmp-krb5_0..patch
    backport-Allow-nsswitch_domain-to-connect-to-systemd-machined.patch
    backport-Allow-unconfined_t-to-node_bind-icmp_sockets-in-node.patch
    backport-Create-macro-corenet_icmp_bind_generic_node.patch
    backport-Allow-traceroute_t-and-ping_t-to-bind-generic-nodes.patch
    backport-Allow-passwd-to-get-attributes-in-proc_t.patch
    backport-Allow-login_pgm-attribute-to-get-attributes-in-proc_.patch
    backport-Allow-syslogd_t-domain-to-read-write-tmpfs-systemd-b.patch
    backport-Allow-all-users-to-connect-to-systemd-userdbd-with-a.patch
    backport-Add-new-devices-and-filesystem-interfaces.patch
    backport-Add-lvm_dbus_send_msg-lvm_rw_var_run-interfaces.patch
    backport-Allow-domain-write-to-an-automount-unnamed-pipe.patch
    backport-Allow-dyntransition-from-sshd_t-to-unconfined_t.patch
    backport-Allow-initrc_t-create-run-chronyd-dhcp-directory-wit.patch
    backport-Update-systemd_resolved_read_pid-to-also-read-symlin.patch
    backport-Allow-systemd-resolved-manage-its-private-runtime-sy.patch
    backport-Allow-systemd-logind-manage-init-s-pid-files.patch
    backport-Add-systemd_resolved_write_pid_sock_files-interface.patch
    backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
    backport-sysnetwork.if-avoid-directly-referencing-systemd_res.patch
    backport-Allow-stub-resolv.conf-to-be-a-symlink.patch
    backport-Allow-domain-stat-proc-filesystem.patch
    backport-Allow-domain-write-to-systemd-resolved-PID-socket-fi.patch
    backport-Allow-systemd-machined-manage-systemd-userdbd-runtim.patch
    backport-Allow-domain-stat-the-sys-filesystem.patch
    backport-Allow-login_userdomain-write-inaccessible-nodes.patch
    backport-Allow-local_login_t-get-attributes-of-tmpfs-filesyst.patch
    backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
    backport-Allow-nsswitch_domain-read-cgroup-files.patch
    backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
    backport-Create-chronyd_pid_filetrans-interface.patch


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.01
changelog:
  - Type:update
  - ID:[任务#329159] 移植sp4策略
  - SUG:NA
  - DESC:
  - 增加selinux-policy补丁
  - add-patch: 
  -    add-allowed-avc-for-systemd.patch
  -    add-ukmcs-contrib.patch
  -    selinux-policy-20200320.patch
  -    add-ukmls-contrib.patch
  -    add-mls.patch
  -    modify-system-start.patch
  -    modify-system-policy.patch
  -    modify-mysql.patch
  -    modify-root-add-user.patch 
  -    modify-kysecsw.patch
  -    add-loogson_login.patch
  -    modify-kysec-and-no-load-disk.patch
  -    modify-quota-semodule-wireshark-xtrlock.patch
  -    del-access-user-home-and-add-kic.patch
  -    root-read-auditd-service-tripwire-and-screensaver.patch
  -    delete-root-rw-auditd-config-file.patch
  -    modify-kic_get-efi-and-ukey.patch
  -    fix-restorecond-kysec-box-useradd-sudo-and-3admin-po.patch 
  -    modify-useradd-security-switch-gnome-disks.patch
  -    fix-ukey-auditd-blivet-gnome-and-firewall-config.patch 
  -    selinux-policy-kylin-merge-release-56.patch
  -    modify-shutdown-reboot-poweroff-and-semodule.patch 
  -    fix-base-reboot-targeted.patch
  -    fix-reboot-loogarch.patch
  -    fix-security-switch-su-sudo.patch
  -    add-whlist-db.patch
  -    add-kysec-module.patch
  -    add-security-reinforce.patch
  -    modify-security-reinforce-dbus.patch
  -    modify-chpolicy-ukmcs.patch
  -    selinux-policy-disable-reboot-and-shutdown.patch
  -    modify-kysec-reinforce-for-user.patch
  -    modify-ksc-reinforce.patch
  -    selinux-policy-forbid-systemctl.patch
  -    modify-security-reinforce.patch
  -    selinux-policy-security-reinforce-account.patch
  -    chpolicy-ukmls-start.patch 
  -    selinux-policy-sudosu-auditd.patch
  -    selinux-policy-ss-tty.patch
  -    add-allow-to-be-access-to-sssd-dir-and-file.patch
  -    selinux-policy-mls-loong.patch
  -    selinux-policy-setstatus.patch
  -    selinux-policy-chp-telnet-reinforce.patch
  -    selinux-policy-loongson-netctl.patch
  -    selinux-policy-ksc.patch
  -    selinux-policy-vnc-deploy.patch
  -    security-reinforce-CAD-Screen.patch
  -    selinux-policy-audit.patch
  -    selinux-policy-reboot.patch
  -    kysec-adapter-SXF.patch
  -    add-apparmor-and-fix-squid.patch
  -    add-nmcli-and-ukmcs-ukmls-conf.patch
  -    add-podman-container-sysadm.patch
  -    selinux-policy-kysec-dmi.patch
  -    selinux-policy-sere-mem.patch
  -    selinux-policy-sere-sem.patch
  -    selinux-policy-sere-service.patch
  -    selinux-policy-kydima-tcsd-docker.patch 
  -    selinux-policy-vnc-alise-uid-log.patch
  -    selinux-policy-kydima-del-unlabel.patch
  -    selinux-policy-home-kydima-smb.patch
  -    selinux-policy-virt-kydima.patch
  -    selinux-policy-reboot-tmp-make.patch
  -    selinux-policy-target-mode-root-not-insmod-ko.patch
  -    selinux-policy-virt-create-failed.patch
  -    selinux-policy-add-usbguard-file-label.patch
  -    selinux-policy-fix-tpm-cmd-execute-failed.patch
  -    selinux-policy-fix-start-httpd-failed.patch
  -    selinux-policy-fix-auditadm-exec-auditctl-failed.patch
  -    selinux-policy-add-kytrust-module.patch
  -    selinux-policy-fix-kydima-not-rw-tpm-device.patch
  -    selinux-policy-fix-kydima-set-pcr-error.patch
  -    selinux-policy-fix-kytrust_config-add-file-failed.patch
  -    selinux-policy-add-unconfined_u-seuser.patch
  -    selinux-policy-fix-system-cannot-start-when-ukmcs-policy.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.02
changelog:
  - Type:update
  - ID:[任务#333247][BUG#234711][BUG#238186][BUG#238402][BUG#241163]
  - SUG:NA
  - DESC:
  -      [任务#333247] 修复许可协议和登录时策略拦截问题
  -          add patch: selinux-policy-fix-license-gui-not-display-during-initial-boot.patch
  -          add patch: selinux-policy-fix-first-login-error-in-ukmcs-mode.patch
  -      [BUG#234711]【V11】【B01】安装虚拟机时报错
  -      [BUG#238186]【V11】【国密】selinux为enforcing模式时，虚拟机勾选TPM2.0后安装失败
  -          add patch: selinux-policy-fix-create-virtual-host-failed.patch
  -      [BUG#238402]【V112409】【B02】【ARM】切换系统语言不生效 
  -          add patch: selinux-policy-fix-switch-system-lang-failed.patch
  -      [BUG#241163]【V11】【安全模式】【终端命令】selinux为enforing时无法切换模式 
  -          add patch: selinux-policy-fix-security-mode-switch-failed.patch 
  -      修复无效上下文问题
  -          add patch: selinux-policy-fix-invalid-context-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.03
changelog:
  - Type:update
  - ID:[BUG#242191]
  - SUG:NA
  - DESC: 修复strcit模式下,secadm和auditadm登录失败问题
  -          add patch9090: selinux-policy-fix-secadm-auditadm-login-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.04
changelog:
  - Type:update
  - ID:[BUG#238186]
  - SUG:NA
  - DESC: 修复无法创建虚拟机问题
  -          add patch9091: selinux-policy-fix-create-virt-host-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.05
changelog:
  - Type:update
  - ID:[BUG#248967]
  - SUG:NA
  - DESC: 修复普通用户无法登录问题
  -          add patch9092: selinux-policy-fix-normal-user-login-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.06
changelog:
  - Type:update
  - ID:[BUG#249583][BUG#249291][BUG#242839][BUG#249189]
  - SUG:NA
  - DESC:    修复strcit模式下,通过setstatus关闭kysec,重启失败
  -          修复targeted策略下,kbox服务启动失败
  -          修复targeted策略下,sm-example 禁用特定网卡,命令卡住
  -          add patch9093: selinux-policy-switch-security-mode-reboot-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.07
changelog:
  - Type:update
  - ID:[BUG#249885][BUG#249725][BUG#249551][BUG#249527][BUG#249073][BUG#249135][BUG#249041]
  - SUG:NA
  - DESC:    修复strict策略下,root可以修改shadow文件
  -          修复strict策略下,管理员界面登录认证时间较长
  -          修复sudo/su测试可以切换用户成功
  -          修复strict策略下,root用户可查看审计规则
  -          修复strict策略下,root用户可执行安全策略查询命令
  -          修复strict策略下,root可以添加审计规则
  -          add patch9094: selinux-policy-fix-3adm-permission.patch
  -
  -          修复strict策略下,secadm用户在安全中设置进程防杀死失败
  -          add patch9095: selinux-policy-fix-ksc-defender-set-ppro-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.08
changelog:
  - Type:update
  - ID:[任务#379849]
  - SUG:NA
  - DESC:    适配ksaf安全框架策略
  -        add patch9096: selinux-policy-add-ksaf-se-policy.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.09
changelog:
  - Type:update
  - ID:[BUG#294479]
  - SUG:NA
  - DESC:    strict模式下 普通用户无法打开设置
  -        add patch9097: selinux-policy-add-kysec_set-permission.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.10
changelog:
  - Type:update
  - ID:[BUG#294555]
  - SUG:NA
  - DESC:    strict模式下 普通用户无法截图
  -        add patch9098: selinux-policy-fix-user-open-screenshot-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-2.se.11
changelog:
  - Type:update
  - ID:[BUG#293899]
  - SUG:NA
  - DESC:    targeted模式下 虚拟机无法打开
  -        add patch9099: selinux-policy-fix-open-virt-host-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-3.se.11
changelog:
  - Type:update
  - ID:[TASK#431220]
  - SUG:NA
  - DESC:    同步上游补丁 Add support for secretmem anon inode
  -        add patch11: backport-Add-support-for-secretmem-anon-inode.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.12
changelog:
  - Type:update
  - ID:[BUG#347064]
  - SUG:NA
  - DESC:    同步国测补丁 解决secadm可以读取shadow文件问题
  -		add patch9100: selinux-policy-fix-secadm-login-failed-by-ssh.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.13
changelog:
  - Type:update
  - ID:[BUG#347704]
  - SUG:NA
  - DESC: 解决普通用户运行域不正常导致终端无法打开问题
  -		add patch9101: selinux-policy-fix-normal-user-domain-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.14
changelog:
  - Type:update
  - ID:[BUG#352649]
  - SUG:NA
  - DESC: 解决模式切换时自动重启失败的问题
  -		add patch9102: selinux-policy-fix-switch-mode-auto-reboot-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.15
changelog:
  - Type:update
  - ID:[BUG#353491][BUG#353491]
  - SUG:NA
  - DESC: 可惜启动适配三权策略
  -		add patch9103: selinux-policy-add-secadm-perms-for-kydima.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.16
changelog:
  - Type:update
  - ID:[TASK#474973]
  - SUG:NA
  - DESC: 修复升级ukui后 黑屏问题
  -		add patch9104: selinux-policy-fix-login-error-when-update-ukui.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.17
changelog:
  - Type:update
  - ID:[BUG#368341][BUG#365769]
  - SUG:NA
  - DESC: 入侵检测适配selinux,解决root用户能修改/etc/auditd/下的文件
  -		add patch9105: selinux-policy-20250624-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.18
changelog:
  - Type:update
  - ID:[BUG#368353]
  - SUG:NA
  - DESC: 解决入侵检测secadm、auditadm等其他用户无法打开问题
  -		add patch9106: selinux-policy-20250701-fix-kguard-some-bug.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.19
changelog:
  - Type:update
  - ID:[BUG#376643][BUG#376149]
  - SUG:NA
  - DESC: 解决strict模式下root无法插入ko的问题、安全加固偶现无法扫描的问题
  -		add patch9107: selinux-policy-20250704-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.20
changelog:
  - Type:update
  - ID:[BUG#377387]
  - SUG:NA
  - DESC: 解决ukmls策略下 登录界面和注销界面显示乱码问题
  -		add patch9108: selinux-policy-fix-ukmls-login-ui-display-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.21
changelog:
  - Type:update
  - ID:[BUG#381787][BUG#381725]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过控制面板修改密码
  -       解决strict模式下 root用户无法通过开始菜单打开防火墙软件
  -		add patch9109: selinux-policy-fix-root-open-firewall-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.22
changelog:
  - Type:update
  - ID:[BUG#382849]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过入侵检测工具无法导出报告问题
  -		add patch9110: selinux-policy-fix-kguard-export-doc-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.23
changelog:
  - Type:update
  - ID:[BUG#385099][BUG#383617]
  - SUG:NA
  - DESC: 解决开启selinux 非root用户打开终端过慢问题
  -       解决strict模式下【文件保护箱】strict模式下已锁定的保护箱写入文件成功
  -       其他: 解决ldap dovecot等开源服务strict模式下无法启动问题
  -		add patch9111: selinux-policy-20250722-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.24
changelog:
  - Type:update
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决targeted下kytrust与tpm dbus通信超时问题
  -		add patch9112: selinux-policy-fix-ktrust_config-dbus-timeout.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.25
changelog:
  - Type:update
  - ID:[BUG#431351]
  - SUG:NA
  - DESC: 解决targeted下 passwd 修改密码偶现卡主问题
  -		add patch9113: selinux-policy-20251030-fix-passwd-stuck.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.26
changelog:
  - Type:update
  - ID:[BUG#488491][BUG#478445][BUG#488485][BUG#489395][BUG#495043]
  - SUG:NA
  - DESC: 
  -		add patch9114: selinux-policy-fix-auditd-and-ai-bugs.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.28
changelog:
  - Type:update
  - ID:[BUG#498055]
  - SUG:NA
  - DESC:
  -		add patch9115: selinux-policy-fix-netflow-monitor-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.29
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启无法启动lightdm.service问题引起的桌面无法进入
  -		add patch9116: selinux-policy-fix-lightdm-service-start-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.30
changelog:
  - Type:update
  - ID:[BUG#502337]
  - SUG:NA
  - DESC: 1.修复切换strcit模式后重启root用户无权限执行ksaf-label-manager-tool工具的问题
  -		add patch9117: selinux-policy-fix-ksaf-label-manager-tool-exec-failed.patch
  -       add patch9118: selinux-policy-fix-auditadm-can-use-systemctl-change-status-of-the-kydima-service.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.31
changelog:
  - Type:update
  - ID:[BUG#504255]
  - SUG:NA
  - DESC: 1.修复targeted模式下切换default模式失败的问题
  -		add patch9119: selinux-policy-fix-targeted-switch-default-failed.patch


author: kangshiming<kangshiming@kylinos.cn> - 40.8-4.se.32
changelog:
  - Type:update
  - ID:[BUG#499261][BUG#504489][BUG#504521][BUG##505103][BUG#506197]
  - SUG:NA
  - DESC: 1.修复targeted模式下安装k8s服务后，running节点失败的问题;
  -       2.修复strict模式下box、kvm以及ukey等问题;
  -		add patch9120: selinux-policy-fix-k8s-box-kvm-ukey-bugs.patch


author: xiefangqi <xiefangqi2@huawei.com> - 0.1.92.6
changelog:
  - Fix split_digits support to SentencepieceTrainer spec parser
  - Add sentencepiece.pc install
  - Add spm_train --help option
  - Fix FTBFS problem on armel/mips/powerpc/m68k/sh4
  - Fix endian problem on android plarform
  - Fix pb protobuf header file can't find problem
  - Restore the sentence boundary


author: chenyanpanHW <chenyanpan@huawei.com> - 2.17-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/setserial-2.17-fhs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/setserial-2.17-rc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/setserial-2.17-spelling.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/setserial-hayesesp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/setserial-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Ondrej Vasik <ovasik@redhat.com> 2.8.38-1
changelog:
  - reserve 160:160 for swift (openstack-swift) - #732442
  - reserve 161:161 for glance (openstack-glance) - #732442
  - reserve 162:162 for nova (openstack-nova) - #732442
  - comment out 0/tcp spr-itunes /etc/services entry (#710185)
  - add hvc[01], xvc0, hvsi[012] to /etc/securetty (#728030)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.43-1
changelog:
  - gopher home dir in uidgid should be /var/gopher - #752885
  - reserve 163:163 for keystone (openstack-keystone) - #752842
  - reserve 164:164 for quantum (openstack-quantum) - #752842
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.45-1
changelog:
  - reserve :156 groupid for stapusr - #756807
  - reserve :157 groupid for stapsys - #756807
  - reserve :158 groupid for stapdev - #756807


author: Ondrej Vasik <ovasik@redhat.com> 2.8.48-1
changelog:
  - remove /bin and /sbin from /etc/profile(#789616)
  - require usrmove
  - add sbin paths in csh.login consistently with bash(#773268)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.51-1
changelog:
  - do not throw away the stderr output of profile.d scripts
    in noninteractive bash/ksh sessions(#805507)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.66-1
changelog:
  - assign :190 gid for systemd-journal (#918120)
  - assign 191:191 uidgid pair for systemd-journal-gateway (#918120)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.67-1
changelog:
  - assign 166:166 uidgid pair for ceilometer (#923891)
  - change 187:187 reservation from openstack-heat
    to just heat(#923858)
  - longer shell names support caused by UsrMove to
    the /etc/shells (#922527)
  - drop gopher (uid 13, gid 30) from groups created by default
    -> dropped completely - no gopher server in Fedora (#918206)
  - drop dip (gid 40) from groups created by default
    -> moved to ppp (#918206)
  - drop uucp (uidgid 14) from groups created by default
    -> moved to uucp (#918206)
  - create cdrom, tape, dialout, floppy groups in setup(#919285)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.74-1
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)
  - adjust the homedir for oprofile uid (#1068902)


author: Ondrej Vasik <ovasik@redhat.com> - 2.9.5-1
changelog:
  - assign uidgid for systemd-network(192:192) - FPC 481,bz#1102002
  - assign uidgid for systemd-resolve(193:193) - FPC 481,bz#1102002


author: Ondrej Vasik <ovasik@redhat.com> - 2.11.1-1
changelog:
  - saslauthd belongs to cyrus-sasl and cyrus-imap packages
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.0-1
changelog:
  - move /etc/networks from initscripts to setup
  - move /etc/profile.d/lang.{sh,csh} from initscripts to setup


author: Ondrej Vasik <ovasik@redhat.com> - 2.13.1-1
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    in default Fedora)
  - require systemd-rpm-macros instead of systemd


author: lipengyu <lipengyu@kylinos.cn> - 2.14.5-3.p01
changelog:
  - Type:update
  - ID: [TASK#529389]
  - SUG:NA
  - DESC: author:  liyulong <liyulong@kylinos.cn>
          Add optimization parameters for Unixbench.


author: liyulong <liyulong@kylinos.cn> - 2.14.5-3.p02
changelog:
  - Type:update
  - ID: [BUG#498941]
  - SUG:NA
  - DESC: Solve the issue of no lscpu command during installation


author: haowenchao <haowenchao@huawei.com> - 1.45-3
changelog:
  - Fix grammar problems caused by patch
    0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.45-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0000-sg3_utils-1.37-rescan-scsi-findremapped-enhance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-sg3_utils-1.37-rescan-downpress.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-bugfix-sg3_utils-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-sg3_utils-1.42-delete-lun-rescan-scsi-bus-report-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-sg3_utils-rescan-scsi-bus-list-all-LUNs-in-one-line.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liuqianya<liuqianya@huawei.com> - 2:4.6-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
    DESC:add ruserok to avoid compilation failure
        hulk shadow remove passwd param for useradd
        shadow 4.1.5.1 var lock


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2:4.6-2.h5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:su.c: run pam_getenvlist() after setup_env
         Log UID in nologin
         Fix some issues found in Coverity scan.
         useradd: fix segfault trying to overwrite const data with mkstemp
         Fix the default mentioned in man page for SUB_UID/GID_COUNT variables.


author: panxiaohe <panxh.life@foxmail.com> - 2:4.9-1
changelog:
  - update to 4.9
  - synchronized login.defs with upstream file
  - useradd: modify check ID range for system users


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: mengchaoming <mengchaoming@kylinos.cn> - 2:4.14.3-1.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch:支持香港繁体中文	 	 
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.01
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
  - add patch: kylin-shadow-add-user-UID-unique.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.02
changelog:
  - Type:update
  - ID:[BUG#241779]
  - SUG:NA
  - DESC: 【uid唯一性检验】uid唯一性提示语为英文
  - add patch: kylin-shadow-fix-zh_CN-po-0001.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.4-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#239817]
  - SUG:  NA
  - DESC: add fix-peony-filetype-not-translate-issue.patch


author: huayadong <huayadong@kylinos.cn> - 2.4-2.p01
changelog:
  - Type: update
  - ID:   [TASK#425693]
  - SUG:  NA
  - DESC: update to 2.4-2
          Remove locale files rather than exclude them
          fix build with libxml 2.12


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: Keqian Zhu <zhukeqian1@huawei.com> - 1.0.0-4
changelog:
  - guestinfo: Take another VM stop reason to account
  - cpu_qos: Add aditional setting for cpu QOS
  - cachembw_qos: Add a job to sync VM pids to resctrl


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-6
changelog:
  - cpu_qos: Register reset_domain_bandwidth as exit func after adding power_qos job
  - power_qos/cachembw_qos: Add type check for environment variables


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-7
changelog:
  - docs-Use-chinese-description-instead-of-English-in-R.patch
  - Makefile-Use-strip-option-in-gcc.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.2-9
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/slang-sighuptest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 1:6.6-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:os_linux.cpp/os_netbsd.cpp: fix crash on --scan if WITH_NVME_DEVICESC is not set and '-d <type>' is not specified
         ataprint.cpp: Fix detection of Device Statistics log with 256 sectors (#922)
         drivedb.h: - Western Digital Red: WD80EZZX - USB: WD
         update-smart-drivedb.in: Include configured PATH in help and error messages
         os_linux.cpp: Add missing braces to 3ware SELinux code
         drivedb.h: fix Innolite Satadom D150QV entry (#939)
         os_freebsd.cpp: on error was setting set_nvme_err() to 1
         os_linux.cpp: Fix device scan crash on missing /proc/devices
         smartd.cpp: Always ignore failure of ATA SMART ENABLE command if
         os_linux.cpp: Fix '-d megaraid' open crash on missing /proc/devices
         os_darwin.cpp, os_freebsd.cpp: fix return value in error paths
         ataprint.cpp: Fix Form Factor string with bits set in reserved area
  - Package init


author: openEuler Buildteam <buildteam@openeuler.org> - 1:6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the "-q never" option while executing smartd command in smartd.service


author: hanxinke<hanxinke@huawei.com> - 1.1.8-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add testcases and delete unnecessary test code for snappy


author: dillon chen<dillon.chen@gmail.com> -1.1.10-1
changelog:
  - update version to 1.1.10
  - Removed patch1(inline.patch) as it's no longer required.
  - repatch patch2(snappy-stubs-internal.h)


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: Daniel Kopecek <dkopecek@redhat.com> - 0-2.20150410git.211ce99
changelog:
  - don't build the debuginfo subpackage
  - require libstdc++-devel
  - don't generate a distribution specific pkg-config file


author: Daniel Kopecek <dkopecek@redhat.com> - 0-4.20150410git211ce99
changelog:
  - don't build the base package
  - remove a dot from the release tag
  - corrected -devel subpackage description


author: wangdi <wangdi@kylinos.cn> - 0.22.1-1.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: openEuler Buildteam <buildteam@openeuler.org> - 3.24.0-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix CVE-2019-19923 CVE-2019-19924 CVE-2019-19925 CVE-2019-19926 CVE-2019-20218


author: yanglongkang <yanglongkang@huawei.com> - 3.24.0-11
changelog:
  - Type:cves
  - ID:CVE-2020-13434 CVE-2020-13435 CVE-2020-13630 CVE-2020-13632
  - SUG:NA
  - DESC:fix CVE-2020-13434 CVE-2020-13435 CVE-2020-13630 CVE-2020-13632


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.1.10-2
changelog:
  - Fix errors due to wrong path in sqljet-build.xml
  - Add -Xconversiontimeout to avoid timeout errors for riscv64.


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: chenyanpanHW <chenyanpan@huawei.com> - 1.7.7-12
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-fix-maven-compiler-plugin-release-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 1.9.5p2-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-compilation-error-on-sw64-arch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-If-user-s-tty-goes-away-tell-monitor-to-revoke-the-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Avoid-using-ioctl-TIOCNOTTY-in-the-monitor.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2025-32462.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2025-32463.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 1.4-23
changelog:
  - Modify spec error information

   Sat Sep 07 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.4-22
  - Package init


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.0.0-5
changelog:
  - Type:update
  - ID:[TASK#592971]
  - SUG:NA
  - Desc: update BpfManager::loadObjectByPath with isValidElfPath


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-lib-Fixed-a-memory-leak-in-lib-sysfs_driver.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-lib-Fixed-memory-leaks-in-lib-sysfs_device.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-lib-Fixed-memory-leaks-in-lib-sysfs_attr.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhang_chunjing<zhang_chunjing@hoperun.com> - 1.3.2-1.1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC: add systemd to BuildRequires to fix install/uninstall errors


author: lifeifei <lifeifei@kylinos.cn> - 1.3.2-1.6.p01
changelog:
  - Type:compile
  - ID:TASK#424653
  - SUG:NA
  - DESC:support dkms and fix build error with kernel-6.6.0-13


author: peijiankang <peijiankang@kylinos.cn> - 1.5.11-25.p01
changelog:
  - Type: update
  - ID:   [TASK#425692]
  - SUG:  NA
  - DESC: sync kylin patch from 1.5.11-23.p02
          add Kylin-system-config-printer-change-CUPS-service-name.patch


author: xujing <xujing99@huawei.com> - 249-16
changelog:
  - systemd-journald: Fix journal file descriptors leak problems.
    systemd: Activation service must be restarted when it is already started and re-actived by dbus
    systemd-core: fix problem of dbus service can not be started
    systemd-core: Delay to restart when a service can not be auto-restarted when there is one STOP_JOB for the service
    core: fix SIGABRT on empty exec command argv
    journalctl: never fail at flushing when the flushed flag is set
    timesync: fix wrong type for receiving timestamp in nanoseconds
    udev: fix potential memleak


author: wangyuhang <wangyuhang27@huawei.com> - 249-19
changelog:
  - set dnssec to be allow-downgrade by default
    set mdns to be yes by default
    set llmnr to be yes by default


author: wangyuhang<wangyuhang27@huawei.com> -249-29
changelog:
  - fix build fail on meson-0.6
    1. delete invalid meson build option
    2. meson.build: change operator combining bools from + to and


author: yangmingtai <yangmingtai@huawei.com> -249-42
changelog:
  - 1.change /etc/systemd/journald.conf ForwardToWall to no
    2.change DefaultLimitMEMLOCK to 64M
    3.replace openEuler to vendor
    4.delete useless file udev-61-openeuler-persistent-storage.rules


author: wangyuhang <wangyuhang27@huawei.com> - 253-4
changelog:
  - add a new switch to control whether udev complies with the new SAT standards
    and add sense_data.py to check if the device meets the new SAT standards
    fix compilation failure with - O0 option


author: huyubiao <huyubiao@huawei.com> - 253-8
changelog:
  - backport: sync patches from systemd community
    add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
        backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-bus-add-some-minimal-bounds-check-on-signatures.patch
        backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
        backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
        backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
        backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch


author: huyubiao <huyubiao@huawei.com> - 255-3
changelog:
  - 1.add cpuset-cgv1 and freezer-cgv1 macros and enabled by default
    2.add missing sw_64 macro in prep phase


author: huyubiao <huyubiao@huawei.com> - 255-7
changelog:
  - DESC:add backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
         backport-resolved-limit-the-number-of-signature-validations-i.patch
         backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-12
changelog:
  - udevadm: allow override default log level for udevadm test-builtin commands 
    by environment variable


author: huyubiao <huyubiao@huawei.com> - 255-13
changelog:
  - add backport-login-user-runtime-dir-properly-check-for-mount-poin.patch
        backport-user-util-validate-the-right-field.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-14
changelog:
  - backport: sync patches from systemd community
    add backport-fix-conf-parser-oom-check-issue.patch
        backport-unit-check-for-correct-function-in-vtable.patch
        backport-fix-homed-log-message-typo-error.patch


author: zhangyao <zhangyao108@huawei.com> - 255-27
changelog:
  - DESC:network networkd address does not set up firewall rules
         add backport-network-networkd-address-don-t-set-up-firewall-rules.patch


author: zhangyao <zhangyao108@huawei.com> - 255-32
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: fuanan <fuanan3@h-partners.com> - 255-42
changelog:
  - backport: sync patches from systemd community
    add backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch


author: lijian<lijian01@kylinos.cn> - 255-44.p01
changelog:
  - Type: update
  - ID:   [TASK#529381]
  - SUG:  NA
  - DESC:  1  systemd-udev package contain kernel-install
           2  add Patch: 0001-Change-the-NTP-server.patch
              Change NTP server.
           3  add Patch: 0001-basic-add-missing-PIDFS-magic.patch
              Fix missing PIDFS magic issue when compile
           4 add Patch: 0001-basic-add-missing-BCACHEFS-magic.patch
              Fix missing BCACHEFS magic issue when compile
           5 Add 0001-rc-local-change-order-after-network-online.target.patch
              Change rc-local order after network-online.target, fix service or process start failed issue
  		 6 Revert patch to fix test performance regression
  		 7 Add zombie process recycling module component
  		 8 Add process monitoring, process self-healing and automatic pull up


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p05
changelog:
  - Type: update
  - ID:   [TASK#600247]
  - SUG:  NA
  - DESC: Optimize the code of the sysprocess-manage zombie process module,
          fix security vulnerabilities such as null pointer dereferences,
          and memory deallocation issues.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 255-44.p06
changelog:
  - Type: update
  - ID:   [TASK#603661]
  - SUG:  NA
  - DESC: Unified source to support sw64/x86_64/aarch64/loongarch64


author: langfei<langfei@huawei.com> - 4.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: zhangqiang <zhangqiang@kylinos.cn> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-80.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: huayadong <huayadong@kylinos.cn> - 4.1.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#340436]
  - SUG : NA
  - DESC: change install path /user/share/tesseract/tessdata/ to /user/share/tessdata/


author: chenyanpanHW <chenyanpan@huawei.com> - 5.0-15
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/texi2html-5.0-Do-not-install-Unicode-EastAsianWidth-if-external-is.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/texi2html-5.0-Do-not-install-libintl-perl-if-external-is-used.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: updmap-map, wasy2-ps
  - Add texlive-vntex back, because texlive#I29Y5F is false. See the
  - first paragraph of https://tug.org/fonts/utopia/LICENSE-utopia.txt


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: liyanan <liyanan32@-partners.com> - 8:2018-25
changelog:
  - Remove texlive-collection-fontsextra,texlive-collection-humanities who requires texlive-wsuipa
  - Del texlive-collection-langother who requires texlive-vntex


author: xu_ping <707078654@qq.com> - 9:2021-3
changelog:
  - License compliance rectification.
  - remove package texlive-cm-unicode-doc due to license Non-compliance.


author: liyanan <liyanan32@h-partners.com> - 8:2018-26
changelog:
  - Remove texlive-collection-fontsextra,texlive-collection-humanities who requires texlive-wsuipa
  - Remove texlive-collection-langother,texlive-scheme-full,texlive-scheme-tetex  who requires texlive-vntex


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: einfuehrung-doc, einfuehrung2-doc


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: ifetex, ifluatex, ifxetex,
  - hyperxmp


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: latex-bib-ex-doc, latex-bib2-ex.doc,
  - latex-referenz, latex-tabellen, latex-tds, ltxindex


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: math-e-doc, mbenotes
  - mathalfa was renamed to mathalpha


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: presentations, pst-spirograph,
  - pst-vue3d, psu-thesis


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: texlive-docindex, tabulars-e-doc


author: huayadong <huayadong@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type: update
  - ID:   [TASK#327372]
  - SUG:  NA
  - DESC: add tigervnc-1.13.1-kylin-vncpasswd-add-pwquality-check-and-translation.patch
  	add tigervnc-1.13.1-kylin-add-pwquality-check-and-translation.patch
  	add BuildRequires:libpwquality-devel  Requires:libpwquality


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop time-shutdown-4.10.0.0-ok0.11k0.3


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: weiyucheng<weiyucheng@kylinos.cn> - 0.19.0-1.p01
changelog:
  - Type: update
  - ID: [TASK#439666]
  - SUG: NA
  - DESC: provide the docker-init binary file in the form of a soft link in tini-static rpm


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: zhangxianjun <zhangxianjun@kylinos.cn> - 8.2.0-2.p01
changelog:
  - Type:compile
  - ID:TASK#425066
  - SUG:NA
  - DESC:modify require from java-latest-openjdk-headless to java-21-openjdk-headless,because java-latest-openjdk not support loongarch64


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决可信启动与tpm通信失败问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tabrmd-communication-with-kytrust-error.patch


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.02
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决tpm dbus服务读写设备文件错误问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tpm-wirte-device-failed.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 3.0.0-5.se.02
changelog:
  - Type:update
  - ID:TASK#533699
  - SUG:NA
  - DESC: 回合上游社区backport-fix-in-SELinux-interface-file-a-typo.patch补丁


author: bianxiuning <bianxiuning@kylinos.cn> - 3.0.0-6.se.02
changelog:
  - Type:update
  - ID:TASK#533699
  - SUG:NA
  - DESC: 回合上游社区backport-call-init_nnp_daemon_domain-for-domain-to-allow.patch补丁


author: chenyanpanHW <chenyanpan@huawei.com> - 5.0-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2024-29038.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2024-29039.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-revert-sm2-sign-and-verifysignature.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-newfeature-tpm-add-ecc-encrypt-decrypt-commands-supp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-newfeature-tcm-Add-tcm-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-newfeature-tpm-add-gm-test-case.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-tpm2-tools-update-automake-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-tpm2-nvreadpublic-segmentation-fault.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-bugfix-tcm-fix-tcm-getcap-command-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-newfeature-tcm-add-UndefineSpaceSpecial-command-in-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: bianxiuning <bianxiuning@kylinos.cn> - 5.5-3.p03
changelog:
  - Type:update
  - ID:TASK#544603
  - SUG:NA
  - DESC: 1.add hygon patch of fix the error returned by the TCM test case


author: panxiaohe <panxiaohe@huawe.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: jinlun <jinlun@huawei.com> - 4.0.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 4.0.1
    - Fix CVE-2023-22745
    - TPM version 1.59 support
    - libmu soname from 0:0:0 to 0:1:0.
    - tss2-sys soname from 1:0:0 to 1:1:0
    - FAPI ignores vendor properties on Fapi_GetInfo
    - FAPI Event Logging JSON format
    - Dead struct TPMS_ALGORITHM_DESCRIPTION
    - Dead field intelPttProperty from TPMU_CAPABLITIES
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal


author: bianxiuning <bianxiuning@kylinos.cn> - 4.0.1-4.p01
changelog:
  - Type:update
  - ID:TASK#424681
  - SUG:NA
  - DESC: 1.Hygon patch for rounds
          2.fix issues for integreation test of fapi PCR-sm3_256 bank


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.0-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Support-specify-CC.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Hon Ching(Vicky) Lo <lo1@us.ibm.com> - 713-4
changelog:
  - Used ExclusiveArch instead of BuildArch tag
  - Removed attr from symlink in devel subpackage 
  - Added manpages and modified the Source0
  - Added CCFLAGS and LNFLAGS to enforce hardening and optimization


author: Merlin Mathesius <mmathesi@redhat.com> - 1027-1
changelog:
  - Version bump. Now supported for all architectures.
  - Generate man pages since they are no longer included in source archive.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.10.0-10
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/bugfix-tuned-2.8.0-restart-after-kill-dbus.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/tuned-2.18.0-rhel-8-profiles.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/tuned-2.18.0-sd-load-balance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/change-the-default-percentage-when-dirty-data-starts.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/tuned-add-app-sensor-profile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/profiles-drop-sched_-tuning-where-appropriate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/bugfix-check_positive-has-some-contradictions.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/bugfix-expand-variables-in-Plugin.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/added-new-profile-containing-optimizations-for-filesystem-and-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-disk-IO-optimization-to-sbm-performance-profile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-jvm-flag-UseNUMA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/split-sbm-performance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/improve-fio-and-ub-performance-tuned2.20.0.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-ai-ds-profile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: gaoyukun <gaoyukun@kylinos.cn> - 2.24.1-1.p01
changelog:
  - Type: update
  - ID: [BUG#310621]
  - SUG: NA
  - DESC: Migrate patches corresponding to task#153403,task#186385,bug#217426,bug#217442 in v10:
        - split package tuned-utils-systemtap, reduce main package installation dependencies
        - add the tuned profile sbm-performance, optimize filesystem and network performance
        - add disk IO optimization to sbm-performance profile, optimize disk IO performance
        - add jvm flag UseNUMA, optimize jvm performance
        - split sbm-performance mode to sbm and sbm-performance mode
        - improve disk IO and exec performance


author: openEuler Buildteam <buildteam@openeuler.org> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: luochunsheng<luochunsheng@huawei.com> - 2019a-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: Revert "Bring back 2019-2037 Morocco Ramadan predictions" to
  	 fix Morocco zoneinfo.


author: luochunsheng<luochunsheng@huawei.com> - 2019a-4
changelog:
  - Type:fix
  - ID:NA
  - SUG:NA
  - DESC: Bring back 2019-2037 Morocco Ramadan predictions
  	https://www.timeanddate.com/news/time/morocco-changes-clocks-2019.html


author: openEuler Buildteam <buildteam@openeuler.org> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: liuchao<liuchao173@huawei.com> -2019b-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: use rearguard data set to fix Casablance DST display error since 2019


author: liuchao<liuchao173@huawei.com> - 2022a-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remake rearguard version of main.zi to fix check_zishrink_posix fail


author: qinyu<qinyu32@huawei.com> - 2022e-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: lipengyu <lipengyu@kylinos.cn> - 2024a-4.p01
changelog:
  - Type:update
  - ID:[TASK#529383]
  - SUG:NA
  - DESC:Change Urumqi to the time in Eastern District 8
         fix Hongkong timezone


author: huayadong <huayadong@kylinos.cn> - 20.04.10.1-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#238115]
  - SUG:  NA
  - DESC: Patch01:ubuntukylin-default-settings-20.04.10.1-kylin-add-default-application-to-empty-file.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: huayadong<huayadong@kylinos.cn> 4.10.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: delete Requires: kf5-bluez-qt-devel kf5-bluez-qt


author: peijiankang<peijiankang@kylinos.cn> 4.10.1.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add ukui-bluetooth-add-copyright.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.1.0-ok3.2k0.10


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-bluetooth-4.10.1.0-ok3.2k0.14
          upstream commtid:1dddb5543c1a61b7a19a412f73da010effd59666


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok3.12k0.7


author: peijiankang <peijiankang@kylinos.cn> - 4.0.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586743]
  - SUG : NA
  - DESC: sync code from desktop ukui-clock-4.0.0.0-ok3.12k0.49
          add kylin copyright head info


author: zhouying <zhouying@kylinos.cn> - 4.0.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#505791] [BUG#505739]
  - SUG : NA
  - DESC: fix hoverstyle and set mainwindowIcon =FocusPolicy


author: houhongxun <houhongxun@kylinos.cn> - 2.0.2-21.p01
changelog:
  - Type:bugfix
  - ID:[BUG#234598]
  - SUG:NA
  - DESC: fix the version number in kylin-system-version.conf


author: peijiankang <peijiankang@kylinos.cn> - 2.0.2-21.p02
changelog:
  - Type: update
  - ID:   [TASK#335765]
  - SUG:  NA
  - DESC: remove Requires: system-config-printer
          remove Recommends: fcitx fcitx-configtool fcitx-qt5
          remove Recommends: kylin-display-switch
          remove Recommends: pluma


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p06
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Recommends:kylin-installer; delete Recommends:kylin-user-guide


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p08
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add ukui-server Recommends: kylin-user-guide


author: houhongxun<houhongxun@kylinos.cn> - 2.0.2-21.p09
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: ukui-server now requires kylin-user-guide fcitx5
          fcitx5-chinese-addons, fcitx5-config-qt


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#408731]
  - SUG : NA
  - DESC: change Requires: ukui-wallpapers to Recommends: ukui-wallpapers


author: peijiankang<peijiankangkylinos.cn> - 2.0.2-21.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#422303][BUG#468605]
  - SUG : NA
  - DESC: modify system os_version and update_version information
          revert 2.0.2-21.p13


author: peijiankang<peijiankangkylinos.cn> - 2.0.2-22.p01
changelog:
  - Type: update
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: remove Recommends ukui-search and add Requires ukui-search-service


author: peijiankang<peijiankang@kylinos.cn> 4.10.0.1-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#295069]
  - SUG : NA
  - DESC: add ukui-globaltheme-4.10.0.1-update-ukui-globaltheme-settings-global-theme-name.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: ukui-greeter-4.10.0.0-adapt-kylin-server-systemname.patch


author: houhongxun<houhongxun@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix segmentation fault when click wlan label


author: houhongxun<houhongxun@kylinos.cn> - 4.10.1.10-1.p03
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix password edit losing focus after user name entered


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch6: ukui-greeter-4.10.0.0-kylin-remove-power-Button.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.1.10-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#294017]
  - SUG : NA
  - DESC: Patch7: ukui-greeter-4.10.0.0-kylin-fix-the-font-too-large.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-greeter-4.10.0.0-ok5.1k0.7
          upstream commtid:ba4854458f270994721d1348c774b8b41d2f8b0f


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#334467] [BUG#292059]
  - SUG : NA
  - DESC: fix greeterwindow and loginwindow translate bugs


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add ukui-greeter-4.10.0.0-fix-sonarqube-security-hotspots.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: delete file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok1k0.10
          upstream commitid: 1a9e6bbc2ee562d89d4cebfcc5fb2244b3e35513


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#504657]
  - SUG : NA
  - DESC: add Patch03:ukui-media-4.10.0.0-kylin-add-check-for-display.patch
          添加DISPLAY检测，修复KVE-2026-0320


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-menu-extensions-4.10.1.5-ok0.1k0.4
          upstream commtid:ae9c426aac757357b4b96cf5ae5feea89a18aa61


author: peijiankang <peijiankang@kylinos.cn> - 3.2.1.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-notebook-3.2.1.1-ok8.15k0.6
          upstream commtid:aadc85ce9310adfe64fed53cc7d6a4758e03dbd4


author: peijiankang <peijiankang@kylinos.cn> - 3.2.1.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586789]
  - SUG : NA
  - DESC: sync code from desktop ukui-notebook-3.2.1.1-ok8.15k0.7


author: houhongxun<houhongxun@kylinos.cn> 4.10.4.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix ukui control center icon showing twice problem


author: huayadong<huayadong@kylinos.cn> 4.10.4.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch3: ukui-panel-4.10.4.3-kylin-remove-s3-s4-reboot-poweroff.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-panel-4.10.4.3-ok0.1k0.11
          upstream commtid:9f40cceb1001001c1a767ce4335f31edf6f90a07


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#499247]
  - SUG : NA
  - DESC: disable search switch when ukui-search not installed


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [BUG#294119]
  - SUG : NA
  - DESC: add ukui-power-manager-4.10.0.0-kylin-remove-ukui-control-center-Suspend-and-Hibernate-and-wakeUpDisplay-no-passwd.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: ukui-power-manager-kylin-4.10.0.0-hide-shutdown.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-power-manager-4.10.0.0-ok1.34k2.0
          upstream commtid:cc25d6a66a8e679daef437d0f5d243116752e994


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Requires: gnome-keyring-pam 
          add patch: ukui-screensaver-4.10.0.0-kylin-fix-core-of-lightdm-and-password-auth-error.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch4: ukui-screensaver-4.10.0.0-kylin-remove-s3-s4-poweroff-reboot.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: ukui-screensaver-4.10.0.0-kylin-remove-reboot.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok34k0.22
          upstream commitid: 2b6e819fdf60ba10ebef6f675cec0bf008968982


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok34k0.24
          upstream commitid: 3d1d694ab65818d67801f9db45ebca22fd1e3936


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#346440]
  - SUG : NA
  - DESC: fix the problem that can't shutdown/reboot system


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#351391]
  - SUG : NA
  - DESC: add file install lightdm-session-setup.sh ukui-greeter.desktop 95-ukui-greeter.conf
          更换登录界面为ukui-screensaver,废弃ukui-greeter


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#347714]
  - SUG : NA
  - DESC: add patch8: ukui-screensaver-4.10.0.0-fix-auditadm-aecadm-name-is-Empty.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#297431]
  - SUG : NA
  - DESC: fix ukui-screensaver login greeter faillock countdown issue


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#364189]
  - SUG : NA
  - DESC: add Patch10: ukui-screensaver-4.10.0.0-kylin-update-zh_HK.ts.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#365953]
  - SUG : NA
  - DESC: add Patch11: ukui-screensaver-4.10.0.0-kylin-fix-xorg-high-memory-footprint.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#1571724]
  - SUG : NA
  - DESC: add Patch12: ukui-screensaver-4.10.0.0-kylin-increase-the-height-of-WIDGET_HEIGHT_PASSWDEDIT.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#363325][BUG#369099]
  - SUG : NA
  - DESC: add Patch14:ukui-screensaver-4.10.0.0-kylin-remove-black-drawPath.patch
          add Patch15:ukui-screensaver-4.10.0.0-kylin-change-message-rule.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch16: ukui-screensaver-4.10.0.0-kylin-remove-AuthDialog-onChangeUser.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-fix-ukui-screensaver-backend-coredump-in-vncdesktop.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p24
changelog:
  - Type: bugfix
  - ID  : [BUG#498405]
  - SUG : NA
  - DESC: Patch25: ukui-screensaver-4.10.0.0-add-dbus-signal-lock-for-session-tools.patch
          修复从电源管理器锁定屏幕没有lock dbus信号发出问题


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-system-monitor-4.10.0.0-ok5.20k0.3
          upstream commtid:0638cd951b12292ef9338a4de83a846366fba69f


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p02
changelog:
  - Type: update
  - ID  : [TASK#492845]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p03
changelog:
  - Type: update
  - ID  : [TASK#522795]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: Filipe Rosset <rosset.filipe@gmail.com> - 3.0.2-16
changelog:
  - Rebuilt to fix FTBFS on rawhide, fix compatibility with gtk-doc 1.26
  - Spec cleanup / modernization


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p01
changelog:
  - Type:update
  - ID:[任务#221084]
  - SUG:NA
  - add Patch0010: usbguard-kylin.patch
  - DESC: 221084 【设备管控】移植usbguard，修复历史遗留问题


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p02
changelog:
  - Type:update
  - ID:[BUG#238630][BUG#238129]
  - SUG:NA
  - add Patch0011:usbguard-parse.patch
  - DESC: 238129 【V11 B02】【龙芯】【USBGuard】USB设备及策略管理交互模式界面展示不友好
  - DESC: 238630 【V11 B02】【USBGuard】设备已有拦截策略，再次手动添加放行策略不生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p04
changelog:
  - Type:update
  - ID:[BUG#242968][BUG#245015]
  - SUG:NA
  - add Patch0012: usbguard-config.patch
  - DESC: 242968 【V11-B05】【安全SDK】全部设备管控策略查询-授权提示转储
  - DESC: 245015 【V11-B06】【安全SDK】设备授权取消授权大概率转储，usbguard服务起不来
  - 去除usbguard-selinux包,策略已在selinux-policy统一管理


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p05
changelog:
  - Type:update
  - ID:[BUG#242972]
  - SUG:NA
  - add Patch0013: usbguard-format.patch
  - DESC: 242972 【V11 B05】【USBGuard】导入错误格式策略，提示核心已转储
  - DESC: 243051 【V11 B05】【USBGuard】放行部分USB接口提示核心已转储
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p06
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0014:     usbguard-restore.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p07
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0015:     usbguard-restore2.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p08
changelog:
  - Type:update
  - ID:[BUG#310899]
  - SUG:NA
  - add Patch0016:     usbguard-hub.patch
  - DESC: 306393 【V11-B17】【USBGuard】root hub 1.0和2.0设备设置永久拦截和放行提示核心已转储
  - DESC: 310899 【V11-B18】【USBGuard】在设备策略管理中，修改策略失败，策略被删除


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p09
changelog:
  - Type:update
  - ID:[BUG#247155/347856]
  - SUG:NA
  - add Patch0017: usbguard-import.patch
  - DESC: 247155 【V11-B07】【安全SDK】通过设备信息删除设备管控策略，删除serial名字较长的设备管控策略失败
  - DESC: 347856 [V11 2503][B09][需求41823][USBGuard]管理设备策略-导入放行策略使被拦截U盘放行，导入拦截策略覆盖现有策略后没有及时生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p10
changelog:
  - Type:update
  - ID:[任务#479543]
  - SUG:NA
  - add Patch0018: usbguard-idnull.patch
  - DESC: 479543 【V11 2503】修改usbguard默认策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p11
changelog:
  - Type:update
  - ID:[BUG#383547]
  - SUG:NA
  - add Patch0019: usbguard-setdev.patch
  - DESC:[出厂测试][v11-2503][B19][需求42057][USBGuard]管理已连接设备,设备状态为拦截,修改为永久拦截,未生成策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p12
changelog:
  - Type:update
  - ID:[BUG#391973]
  - SUG:NA
  - add Patch0020: usbguard-hub2.patch
  - DESC: 391973 [同源测试][v11-2503][B20][需求42057]开启usbguard后，bmc的虚拟鼠标和键盘被拦截


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 0.1.0-4.p01
changelog:
  - Type:update
  - ID:[BUG#238812]
  - SUG:NA
  - add Patch1: usbguard-notifier-rev.patch
  - DESC: 238812 【V11 B02】【USBGuard】V11服务器无设备策略相关通知信息


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 0.1.0-4.p02
changelog:
  - Type:update
  - ID:[BUG#245315]
  - SUG:NA
  - add Patch2: usbguard-notifier-icon.patch
  - DESC: 245315 【V11 B06】【USBGuard】USB设备管控事件通知图标未显示，提示不友好


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 0.1.0-4.p03
changelog:
  - Type:update
  - ID:[BUG#245315][BUG#247137]
  - SUG:NA
  - add Patch2: usbguard-notifier-wait.patch
  - DESC: 245315 【V11 B06】【USBGuard】USB设备管控事件通知图标未显示，提示不友好
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.50.8-2
changelog:
  - Correct package depends
  - Delete unnecessary and uncorrect Requires, Provides, Obsoletes, Conflicts
  - Update Release to 2


author: Matthias Saou <http://freshrpms.net/>
changelog:
  - Fix xmlversion.h include path in configure since xml is disabled otherwise,
    thanks to Rudolf Kastl for spotting the problem.


author: Matthias Saou <http://freshrpms.net/> 0.7.14-3
changelog:
  - Tried and update to 0.7.20, but the looping libcd* deps are a problem.
  - Rebuild for Fedora Core 2.


author: Matthias Saou <http://freshrpms.net/> 0.7.21-1
changelog:
  - Update to 0.7.21 at last.
  - Split off new -devel package.
  - Added libcdio build requirement.
  - Update Source URL, it's not "UNSTABLE" anymore.
  - Remove vcddump.info and add vcd-info.info. Remove .gz from scriplets.


author: Matthias Saou <http://freshrpms.net/> 0.7.23-1
changelog:
  - Update to 0.7.23.
  - Update libcdio-devel requirement to >= 0.72.
  - Change source location from vcdimager.org to gnu.org for this release...


author: laokz <zhangkai@iscas.ac.cn> - 6.2.6.14-3
changelog:
  - Add RISC-V support (Patch by YukariChiba<i@0x7f.cc>)
  - Source of fence commands: RISC-V ISA Spec from riscv.org
  - Remove -Wcast-align flag, since it causes error in RISC-V gcc
  - Remove error-prone patch isolation macro


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-21
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: guozhaorui<guozhaorui1@h-partners.com> - 2:8.2-22
changelog:
  - Type:CVE
  - ID:CVE-2022-0213 CVE-2022-0261 CVE-2022-0318
  - SUG:NA
  - DESC:fix CVE-2022-0213 CVE-2022-0261 CVE-2022-0318


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-24
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-26
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-36
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: shixuantong <shixuantong@h-partners.com> - 2:9.0-2
changelog:
  - Type:CVE
  - ID:CVE-2022-2257 CVE-2022-2264 CVE-2022-2284 CVE-2022-2285 CVE-2022-2286 CVE-2022-2287 CVE-2022-2288 CVE-2022-2289 CVE-2022-2304 CVE-2022-2343 CVE-2022-2344 CVE-2022-2345 CVE-2022-2522
  - SUG:NA
  - DESC:fix CVE-2022-2257 CVE-2022-2264 CVE-2022-2284 CVE-2022-2285 CVE-2022-2286 CVE-2022-2287 CVE-2022-2288 CVE-2022-2289 CVE-2022-2304 CVE-2022-2343 CVE-2022-2344 CVE-2022-2345 CVE-2022-2522


author: shixuantong <shixuantong@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2022-2816 CVE-2022-2817 CVE-2022-2819 CVE-2022-2845 CVE-2022-2849 CVE-2022-2862 CVE-2022-2874
  - SUG:NA
  - DESC:fix CVE-2022-2816 CVE-2022-2817 CVE-2022-2819 CVE-2022-2845 CVE-2022-2849 CVE-2022-2862 CVE-2022-2874


author: shixuantong <shixuantong@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2022-2889 CVE-2022-2923 CVE-2022-2946
  - SUG:NA
  - DESC:fix CVE-2022-2889 CVE-2022-2923 CVE-2022-2946


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:9.0-19
changelog:
  - Type:CVE
  - ID:CVE-2022-3278 CVE-2022-3297 CVE-2022-3324
  - SUG:NA
  - DESC:fix CVE-2022-3278 CVE-2022-3297 CVE-2022-3324


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-25
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-35
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-36
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-41
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: lijian <lijian01@kylinos.cn> - 2:9.0.2092-15.p01
changelog:
  - Type:update
  - ID:[task#424803]
  - SUG:NA
  - DESC:1) 移植敏感词修改和zh_HK繁体字支持的补丁
  -      2) 移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      3) remove discriminatory language


author: houzhiwei <houzhiwei@kylinos.cn> - 2:9.0.2092-18.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-53905 and CVE-2025-53906
  - SUG:NA
  - DESC:1.fix some tests failed. 2.fix CVE-2025-53905 and CVE-2025-53906


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Add-loongarch-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Add-loongarch-support-in-guest-class.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Add-some-default-device-support-for-loongarch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Add-test-cases-for-loongarch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Update-chinese-translation-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-cli-disk-Add-driver.metadata_cache-options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-tests-cli-Fix-test-output-after-previous-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fsdetails-Fix-an-error-with-source.socket-of-virtiof.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-cli-Drop-unnecessary-disk-prop-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-tests-testdriver-Add-filesystem-socket-example.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-virtinstall-split-no_install-conditional-apart-to-tr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-virtinstall-fix-regression-with-boot-and-no-install-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-tests-Add-a-compat-check-for-linux2020-in-amd-sev-te.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-cli-cpu-Add-maxphysaddr.-mode-bits-options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-virt-install-help-required-options-are-wrong.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-cloner-Sync-uuid-and-sysinfo-system-uuid.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-virt-install-unattended-and-cloud-init-conflict.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-virt-install-Reuse-cli.fail_conflicting.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-cli-support-boot-loader.stateless.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-diskbackend-Drop-support-for-sheepdog.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Kylin-add-default-device-on-aarch64-when-inst-vm.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Kylin-correct-chinese-translation-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Kylin-add-support-for-neokylin-kylin-and-kylin-hostos-dist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Kylin-add-zh_HK-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Kylin-Add-default-usb-keyboard-for-x86.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Kylin-add-default-device-for-sw_64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-7
changelog:
  - tests: testdriver: Add filesystem socket example
  - cli: Drop unnecessary --disk prop aliases
  - fsdetails: Fix an error with source.socket of virtiofs
  - tests: cli: Fix test output after previous commit
  - cli: --disk: Add driver.metadata_cache options


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-8
changelog:
  - diskbackend: Drop support for sheepdog
  - cli: support --boot loader.stateless=
  - virt-install: Reuse cli.fail_conflicting
  - virt-install: --unattended and --cloud-init conflict
  - cloner: Sync and system uuid
  - virt-install: --help required options are wrong
  - cli: --cpu: Add maxphysaddr.{mode,bits} options
  - tests: Add a compat check for linux2020 in amd-sev test case
  - virtinstall: fix regression with --boot and no install method
  - virtinstall: split no_install conditional apart to track code coverage


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-8.p01
changelog:
  - Type: Update
  - ID:   [TASK#]
  - SUG:  NA
  - DESC: backport patch from v11-2409 to
  -	Add default device on aarch64 when inst vm
  -	correct Chinese translation error
  -	Add support for neokylin, kylin and kylin-hostos distro automatic detecting to remote installation mode


author: lijunwei <lijunwei@kylinos.cn> - 4.1.0-9.p01
changelog:
  - Type: Update
  - ID:   [BUG#499951]
  - SUG:  NA
  - DESC: Add default usb-keyboard for X86
          Sync arch for X86/Arm/LA/SW


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.6.2-4
changelog:
  - Update libdir patch for py3k.
  - Add patch to fix syntax error in extras/boost.py.
  - Remove hidden file.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.6.3-2
changelog:
  - Use python-sphinx10 where available.
  - Turn off standard brp-python-bytecompile only when building the
    python3 subpackage.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.6.8-1
changelog:
  - Update to 1.6.8.
  - Use rpm 4.9.X style provides/requires filtering.
  - Move Python3 version to a subpackage.
  - Move HTML documentation to a subpackage.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.8.11-2
changelog:
  - Patch to remove -W from sphinx-build call, in order to build with
    older sphinx.
  - Rebase libdir patch.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.8.14-1
changelog:
  - Update to 1.8.14.
  - Include waf-2 and waf-3 symlinks, respectively.
  - Add basic doc files to the python3 subpackage.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.9.14-2
changelog:
  - Spec file cleanups.
  - Add unpack_wafdir.py (rhbz#1509550).
  - Fix rpmlint issue (rhbz#1509716).
  - Fix doc building (rhbz#1512232).


author: Guoshuai Sun <sunguoshuai@huawei.com> - 5.15-5
changelog:
  - scripts when uninstall in %preun and %postun should watchdog-ping.service but not watchdog.ping.service


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: wangshuo <wangshuo@kylinos.cn> - 26.1.0-1.p01
changelog:
  - Type:compile
  - ID:[BUG#240473]
  - SUG:NA
  - DESC:Fix the strip error during compilation
         Preventing files/directories from being scanned for deps (pre-scan filtering)


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: Trond Eivind Glomsrød <teg@redhat.com> 25-1
changelog:
  - v25 - fixes encryption usage display, eternal loops for unknown 
    events and matches the v13 wireless extensions as shipped in
    kernel (#72582)


author: John W. Linville <linville@redhat.com> - 1:29-20
changelog:
  - Remove essentially unused pre_release tagging in spec file
  - Fixup Makefile patch to include LDFLAGS in all linking commands


author: Jan Pokorný <jpokorny+rpm-wlroots@fedoraproject.org> - 0.1-1
changelog:
  - Updated to historically first official release
  - Turned off implicit enablement of all 'auto' build features under Meson,
    since xcb-errors is not available at this time
  - Added BR: libpng
  - Expanding spec comment on source files not covered with MIT license


author: Jan Pokorný <jpokorny+rpm-wlroots@fedoraproject.org> - 0.5.0-1
changelog:
  - Updated to version 0.5.0 (0.2, 0.3, 0.4, 0.4.1 releases effectively skipped)
  - Avoid building some parts that are not shipped in binary form, anyway
  - Minor spec cleanup (clarify the licensing comment, licensecheck's NTP ~ MIT,
    ldconfig_scriptlets no longer relevant, arch-specific tweak no longer needed)


author: Jan Pokorný <jpokorny+rpm-wlroots@fedoraproject.org> - 0.6.0-1
changelog:
  - Updated to version 0.6.0
    (see https://github.com/swaywm/wlroots/releases/tag/0.6.0)
  - Overhaul dependencies and shipped examples in -devel


author: Joe Walker <grumpey0@gmail.com> - 0.10.0
changelog:
  - Updated to version 0.10.0 (https://github.com/swaywm/wlroots/releases/tag/0.10.0)

  Mon Jan 20 2020 Jan Staněk <jstanek@redhat.com> - 0.9.1-1
  - Upgrade to version 0.9.1 (https://github.com/swaywm/wlroots/releases/tag/0.9.1)


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.15.0-1
changelog:
  - Update to 0.15.0 (#2033651)
  - Update upstream URL to gitlab.freedesktop.org
  - Backport some patches from 0.15.1 milestone


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.16.0-1
changelog:
  - Update to 0.16.0 (#2142159)
  - Add patch for compatibility with older libdrm
  - Sync examples.meson.build with upstream, include all available examples


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.17.0-1
changelog:
  - Update to 0.17.0 (#2250885)
  - Use xcb-errors util library
  - Apply patches from 0.17.x bugfix branch


author: peijiankang <peijiankang@kylinos.cn> - 0.17.4.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop wlroots-0.17.4.0-ok4k0.2
          upstream commtid:17f5b0d80d015f5767385e35c02ad78b0f931ff6


author: peijiankang<peijiankang@kylinos.cn> - 1.07-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#290203]
  - SUG : NA
  - DESC: add 0001-Correct-64-Architecture-implementation-of-32-bit-data.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 3.1.9-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-xfsdump-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 5.9.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-xfsprogs-Add-sw64-architecture.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-xfs-fix-internal-error-from-AGFL-exhaustion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-xfs_db-don-t-hardcode-type-data-size-at-512b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-xfs_db-fix-leak-in-flist_find_ftyp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-xfs_io-fix-mread-with-length-1-mod-page-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-fix-failed-in-xfs_scrub_all-when-start-the-service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 6.1.1-2
changelog:
  - readline has been removed by bbe12eb9a0f9 (xfsprogs: remove libreadline support),
    we can use --enable-editline=yes to enable similar functions.
    fix issue: https://gitee.com/src-openeuler/xfsprogs/issues/I6Y8SU


author: huayadong <huayadong@kylinos.cn> - 2.39-4.p01
changelog:
  - Type: update
  - ID:   [TASK#425693]
  - SUG:  NA
  - DESC: update to 2.39-4.p01
          Increase tests timeout


author: lifeifei <lifeifei@kylinos.cn> - 1.59.02-2.p01
changelog:
  - Type:compile
  - ID:TASK#424653
  - SUG:NA
  - DESC:merge from sp3 patch, splits sub packages client,c++,client++,apps


author: lifeifei <lifeifei@kylinos.cn> - 1.59.02-2.p02
changelog:
  - Type:compile
  - Id:TASK#470115
  - SUG:NA
  - DESC:remove duplicate man file in xml-rpc-c-apps packages;


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Remove 'BuildArch: noarch' now that we ship a compiled object.
  - Run tests.
  - Ship xmlif.
  - Build requires docbook-xsl >= 1.52.0.


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.20
  - fop experimental support
  - possibility to read stylesheet from STDIN, using
    recursive cp in docbook formats, preparations
    for other source formats


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.21
  - added dblatex experimental support
  - non-mandatory libpaper support
  - fixed issue of cp -a option on non-gnu systems


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.22
  - added xhtml1 source format support
  - autodetection for tools/program paths, consolidated
    error code handling
  - fixed libpaper cleanup, validation check now uses
    --noent and --nonet option
  - fixed broken --stringparam option


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.23
  - added autodetection for more common tools like
    gnu cp or tail
  - added option --noautosize to prevent overriding
    of user-defined or system-default paper size
  - use shell built-in 'type -t' instead of 'which'
    utility for detection of file availability


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.24
  - use backend extensions by default (--noextensions
    to disable it)
  - basic support for epub format
  - workaround passivetex limitation for chapter titles
    starting with L (rhbz #526273)


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.25
  - fix the fop.extensions setting (based on fop version)
  - fix handling of external data objects with fop
    (deb #568894)


author: Ondrej Vasik <ovasik@redhat.com>
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: huayadong <huayadong@kylinos.cn> - 7.7-23.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#381027]
  - SUG : NA
  - DESC: Patch0002:xorg-x11-apps-7.7-kylin-fix-x11perf-4-bit-alpha-Segmentation-fault.patch


author: huayadong<huayadong@kylinos.cn> - 1.4.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#294153]
  - SUG : NA
  - DESC: add patch2: 0003-5-scroll-speed-support.patch


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: wangkerong <wangkerong@h-partners.com> - 7.8-1
changelog:
  - upgrade to setxkbmap-1.3.3
  - upgrade to xkbcomp-1.4.5
  - upgrade to xkbprint-1.0.6
  - upgrade to xkbutils-1.0.5


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: Jinze Xue <xuejinze@kylinos.cn> - 4.0.9-4.ky3
changelog:
  - backup grub.conf before edit it
  - add exit msgs when backup is finished
  - fix some bugs about QProcess
  - remove kernel and initrd with new name if it exist
  - add file kybackup.exec, for run program with root


author: lijiaan <lijiaan@kylinos.cn> - 4.0.11.1.0.9kord1{?ns_dist}01
changelog:
  - DeBug: I modified the calculation method of system backup data size by resolve-system-backup.patch


author: cuilei <cuilei@kylinos.cn> - 4.0.11.1.0.9kord1{?ns_dist}03
changelog:
  - Bug 3770:fix-delete-backup-page-banner-pic-layout.patch
  - Bug 3771:fix-data-inc-backup-error.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}17
changelog:
  - Type:bugfix
  - ID  :[bug#181281]
  - SUG :add patch 0001-fix-ghost-backup-oday.patch
  - DESC:fix ghost backup oday


author: HouHongxun <houhongxun@kylinos.cn> - 4.0.12kord1p18
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation-for-desktop-file.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}19
changelog:
  - Type: update
  - ID: [TASK#185224]
  - SUG: NA
  - DESC: add 0001-add-zh_HK-translate.patch 0001-add-zh_HK-qss-file.patch
          0001_backup_store_hk_png.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}21
changelog:
  - Type: buffix
  - ID: [BUG#215689]
  - SUG: NA
  - DESC: add 0001_add_ok_images.patch 0001-add-ok_btn-hk-translate.patch


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p22
changelog:
  - Type: bugfix
  - ID:   [BUG#469873]
  - SUG:  NA
  - DESC: add patch20: yhkylin-backup-tools-4.0.12-kylin-backup-management-add-selectable.patch
  	备份管理添加可选中.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p23
changelog:
  - Type: bugfix
  - ID:   [BUG#473555][BUG#473915]
  - SUG:  NA
  - DESC: add patch21: yhkylin-backup-tools-4.0.12-kylin-fix-an-empty-backup-size.patch
          add Patch22: yhkylin-backup-tools-4.0.12-kylin-update-UI.patch
          add Patch23: yhkylin-backup-tools-4.0.12-kylin-fix-log-file-could-not-be-created.patch
          修复备份管理中备份大小字段为零.
          更改UI使用窗口管理器接管所有窗口.
          修复日志文件/var/log/backup.txt无法创建.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p24
changelog:
  - Type: bugfix
  - ID:   [BUG#474743]
  - SUG:  NA
  - DESC: add patch24: yhkylin-backup-tools-4.0.12-kylin-update-translate.patch
          更新翻译文件.


author: huayadong <huayadong@kylinos.cn> - 4.0.12kord1.p25
changelog:
  - Type: bugfix
  - ID:   [TASK#583377]
  - SUG:  NA
  - DESC: add Patch25:yhkylin-backup-tools-4.0.12-kylin-fix-command-line-functionality-unavailable.patch
          add Patch26:yhkylin-backup-tools-4.0.12-kylin-update-Copyright.patch
          修复命令行备份还原功能不可用问题.


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.21-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#223306]
  - SUG:  NA
  - DESC: add 0002-fix-blank-of-youker-assistant-3.1.4.21.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.21-1.p02
changelog:
  - Type: update
  - ID:   [TASK#335765]
  - SUG:  NA
  - DESC: add youker-assistant-3.1.4.21-add-check-lshw-installinfo.patch
          remove Requires: lshw


author: huayadong <huayadong@kylinos.cn> - 3.1.4.21-1.p04
changelog:
  - Type: update
  - ID:   [TASK#591331]
  - SUG:  NA
  - DESC: add Patch05: youker-assistant-3.1.4.21-kylin-remove-useless-comments.patch
          删除无用的Python代码


author: chenyanpanHW <chenyanpan@huawei.com> - 4.2.3-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/yp-tools-2.12-hash.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/yp-tools-2.12-crypt.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/yp-tools-2.12-adjunct.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/yp-tools-4.2.2-strict-prototypes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-to-replace-random-with-RAND_priv_bytes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.7.2-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypbind-1.11-gettextdomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypbind-2.4-gettext_version.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: zengjianqi <zengjianqi@kylinos.cn> - 1.5.5-2.p01
changelog:
  - Type: update
  - ID: [TASK#424795]
  - SUG: NA
  - DESC: Build with ZSTD_LIB_DEPRECATED?=1.
          Add zstd-kycompat subpackage.
          Supply follow symbols to solve the ABI compatibility issue:
            ZSTD_getSequences
          Update kywrapper KYLIN_SUPPLY_LIB.


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


