# changelog

author: zhangzikang <zhangzikang@kylinos.cn> - 0.0.5-31.p01
changelog:
  - Type: bugfix
  - ID:[BUG#195263]
  - SUG:NA
  - DESC: Modify product information in the Summary and description


author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> 2.4.3-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: gaihuiying <gaihuiying1@huawei.com> - 1.26.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: houhongxun <houhongxun@kylinos.cn> - 0.6.55-2.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:sync kylin modification: fix user display problem in control center or when login
  	add patch: accountsservice-0.6.54-kylin-1000-users-issue.patch(liujilin)


author: openEuler Buildteam <buildteam@openeuler.org> -20190730-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Increase the ability to provide adobe-mappings-cmap-deprecated


author: liutao <liutao1@kylinos.cn> - 3.37.2-2.p01
changelog:
  - Move modification from 3.32.0-1.p02.ky10:
    Add Patch6002: Fixed icon/Adwaita distortion in mips machine installion


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: xuhe <xuhe@kylinos.cn> - 33.19-15.p18
changelog:
  - Add Patch anaconda-33.19-kylin-fix-text-string-cannot-be-recognized.patch
  - addition for p07 version


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p20
changelog:
  - Add Patch anaconda-33.19-kylin-modify-font-in-default-language-during-installation.patch
  - fix bug #54069, modify fonts in default language during installation,the default language means do not click manually to select


author: Shi Jingying <shijingying@kylinos.cn> - 33.19-15.p22
changelog:
  - skip 33.19-15.p21
  - add patch: anaconda-33.19-kylin-synchronous-u-boot-to-ks-file.patch
  - synchronous u-boot to ks file, add log files


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p23
changelog:
  - add Patch: anaconda-33.19-kylin-change-locale-to-en-in-text-mode.patch
  - fix Bug#68620: the install failed in text mode
  - only keep the zh_CN.UTF-8 for gui mode, do not set zh_CN.UTF-8 for tui mode


author: Xiao Zai<xiaozai@kylinos.cn> - 33.19-15.p24
changelog:
  - add Patch: anaconda-33.19-kylin-fix-bug86469.patch
  - fix Bug #86469, in PXE installation mode or other autoinstall mode, install the system in qemu, when the words such as shutdown,reboot or poweroff are written in the ks file, the shutdown or restart will be blocked after the system is installed


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: Shijie Luo<luoshijie1@huawei.com> - 2.4.48-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix error condition of while loop 
         in 0001-bypass-wrong-output-when-enabled-selinux.patch.


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: wanghao <wanghao2@kylinos.cn> - 3.0-5.se.10
changelog:
  - Type: bugfix
  - ID:[Bug#113316]
  - SUG:NA
  - DESC: 将audit.log文件权限改为600，pidfild文件权限改为644
  -         add patch: audit-3.0-modify-logfile-and-pidfile-permissions.patch


author: sunjin <sunjin@kylinos.cn> - 3.0-5.se.11
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:
  -     解决ausyscall --dump看不到系统符号问题
  -     添加补丁audit-3.0-fix-syscall-error.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.0-5.se.12
changelog:
  - Type:bugfix
  - ID: [Bug#146654]
  - SUG:NA
  - DESC:
  - 		mips服务器audit服务日志显示unknown
  - 		添加补丁 audit-3.0-fix-unkonw-machine-type-error.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 1.12.0-1
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:Reduce the amount of memory needed to evaluate complex path expressions
    against large files,Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556),update gnulib to 91584ed6.


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: wanglixing <wanglixing@kylinos.cn> - 0.8-5.p02
changelog:
  - Type:cve
  - ID:CVE-2023-38469,CVE-2023-38471,CVE-2023-38472,CVE-2023-38473,CVE-2023-38470,CVE-2023-1981
  - SUG:NA
  - DECS:add patch9001,patch9002,patch9003,patch9004,patch9005,patch9006,patch9007


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yuejiayan<yuejiayan@huawei.com> - 1:2.8-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:completions/Makefile: Fix check-local in VPATH builds
         __load_completion: Avoid bad array subscript on "commands" ending wit…
         _xspecs: Declare as global on bash >= 4.2
         completions/Makefile.am: Use install-data-hook, not install-data-local
         man: Fix completion when failglob option is enabled (#225)
         _longopt: don't complete --no-* with file/dirname arg


author: Rolf Fokkens <rolf@rolffokkens.nl> - 1.1-0
changelog:
  - Changed upstream to git://git.kernel.org/pub/scm/linux/kernel/git/colyli/bcache-tools.git
  - Updated to 1.1


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p02
changelog:
  - Type:update
  - ID:TASK#169384
  - SUG:NA
  - DESC: add loongarch support
          0001-kylin-bcc-add-loongarch-support.patch
          0002-kylin-bcc_fix_conv_regs_issue.patch
          0003-kylin-bcc_fix_uprobe_libc_so.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p03
changelog:
  -Type:bugfix
  -ID:Bug#194974
  -SUG:NA
  -DESC:Fix identifier BPF_PSEUDO_FUNC undeclared error
        add BTF_KIND_DATASEC for libbpf.h btf_is_datase when make bcc


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-15
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177
  - SUG:NA
  - DESC:fix CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: Yin Xiujiang <yinxiujiang@kylinos.cn> - 3.2.2-3.p02
changelog:
  -  add patch blivet-3.2.2-kylin-fix-zh_CN-swap-part-failed.patch
  -  fix lang=zh_CN.UTF-8 part swap failed


author: yueyuankun<yueyuankun@kylinos.cn> - 3.2.2-3.p03
changelog:
  - Type:update
  - ID:bug#118182
  - SUG:test with a ddf disk
  - DESC:Do not crash when a disk populator doesn't return kwargs


author: Xiao Zai<xiaozai@kylinos.cn> - 3.2.2-3.p04
changelog:
  - Type:bugfix
  - ID:task#83928
  - SUG:update together with the backport patch of anaconda  
  - DESC:backport two patches "backport-Convert-LVM-filter-lists-to-sets.patch" and "backport-Remove-action-device-from-LVM-reject-list.patch" to fix bug that the partition pages is incorrect in manual partition ui when multiple disks exist


author: Jonathan Wakely <jwakely@redhat.com> - 1.69.0-16
changelog:
  - Drop boost-1.57.0-mpl-print.patch patch that doesn't work
  - Remove vestigial parts of separate python2/python3 build
  - Generate version_enc automatically from version and drop version_suffix


author: Jonathan Wakely <jwakely@redhat.com> - 1.69.0-20
changelog:
  - Require boost-python3 for boost, fold boost-python3-devel into boost-devel
  - Do not link Python extensions to libpython


author: shuihengcheng <shuihengcheng@kylinos.cn> - 3.0.13-3.se.01
changelog:
  - add box-manager-fix-help-not-open-Manual.patch
  - spec BuildRequires add libkylinos-type-devel, nss
  - add box-manager-3.0.6kord-modify-nologin.patch
  - add box-manager-modify-rename-auth-passwd-error.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 3.0.13-3.se.04
changelog:
  - Add patch:box-manager-change-box-icon.patch
    Fix bug 48921: The Start Menu icon of Kylin Box is different from that in the taskbar.


author: haomeici <haomeici@kylinos.cn> - 3.1.5-1.se.02
changelog:
  - add desktop patch
    fix-owner-of-files-after-sharing
    chown-owner-of-normal-files
    fix-some-bugs
    only-allow-create-encrypt-box.patch
    add-mkdir-for-copy_files
    restrict-perm-for-share
    add-notification-for-gui-tools
    fix-some-bugs-2021-01-14
    check_old_password_logic
    ownername-error-tips
    add-chinesization
    adjust_chinesization_function


author: qinzheng <qinzheng@kylinos.cn> - 3.1.5-1.se.04
changelog:
  - Type:bugfix
  - ID:[BUG#146979]
  - SUG:NA
  - DESC:
  -       1.add fix-the-bug-about-verify-password-for-delete-the-box.patch
  -       2.add fix-dangrous-functions-and-coredump-problem.patch
  -       3.add box-utils-delete-len-bigger-than-6.patch
  -       4.add box-utils-fix-boxadm-l-data-error-bug.patch
  -       5.add box-utils-add-compile-options-of-security-program-fix-some-fortify-risk.patch


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.28.v2101
changelog:
  - NETSWIFT: ngbevf: set release version 1.2.0 (luoqing) [task:157307]
  - NETSWIFT: ngbevf: Modify print level (zhongxiangji) [task:157307]
  - NETSWIFT: ngbevf: FIX:fix bug that vf promisc not work (zhongxiangji) [task:157307]
  - NETSWIFT: ngbevf: FIX : make sure when vf load pf can not remove sriov (mengyuanlou) [task:157307]
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) [task:178770] {CVE-2023-35788}
  - nvme: force set affinity for nvme when config use_interrupt_adaptation (huhai) [task:155820]
  - genirq: Introduce irq_set_affinity_force() to force set interrupt affinity to CPUs (huhai) [task:155820]
  - RDMA/cma: Do not change route.addr.src_addr.ss_family (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Patrisious Haddad) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Do not change route.addr.src_addr outside state checks (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Make the locking for automatic state transition more clear (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" (Parav Pandit) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - fs/proc: task_mmu.c: don't read mapcount for migration entry (Yang Shi) [bug:166215] {CVE-2023-1582}
  - Makefile: Ignore debian and rpmbuild directory (Jackie Liu)
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong) [task:57649]
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong) [task:57649]
  - cifs: improve read performance for page size 64KB & cache=strict & vers=2.1+ (Jones Syue) [bug:175721]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.29.v2101
changelog:
  - security/box: add check inode point when check box dir (mengdehui) [bug:179672]
  - config: remove CONFIG_SECURITY_BOX_ENABLED_ALWAYS (mengdehui) [bug:179672]
  - security/box: set BOX_ENABLED_ALWAYS default n (mengdehui) [bug:179672]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.30.v2101
changelog:
  - ext4: Fix rec_len verify error (Shida Zhang) [task:165596]
  - backport-tools: add release-stable-kernel tool for SP1/SP2 (Jackie Liu)
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) [bug:186690] {CVE-2023-3117}
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [bug:185228] {CVE-2023-3611}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) [bug:185232] {CVE-2023-3776}
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) [bug:185223] {CVE-2023-3609}
  - net: sched: remove NET_CLS_IND config option (Jiri Pirko) [bug:18522]
  - arm64: Fix race condition on PG_dcache_clean in __sync_icache_dcache() (Catalin Marinas) [task:167147]
  - irqchip/gic-v3-its: Enable RESEND_WHEN_IN_PROGRESS for LPIs (James Gowans) [bug:184935]
  - genirq: Allow fasteoi handler to resend interrupts on concurrent handling (James Gowans) [bug:184935]
  - genirq: Expand doc for PENDING and REPLAY flags (James Gowans) [bug:184935]
  - genirq/PM: Introduce IRQCHIP_ENABLE_WAKEUP_ON_SUSPEND flag (Maulik Shah) [bug:184935]
  - genirq: Provide interrupt injection mechanism (Thomas Gleixner) [bug:184935]
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) [bug:186702] {CVE-2023-3812}
  - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang) [task:122626]
  - bpf, cpumap: Make sure kthread is running before map update returns (Hou Tao) [task:166213]
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem (Pu Lehui) [task:166213]
  - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) [bug:182698]
  - Remove DECnet support from kernel (Leon Romanovsky) [bug:182698] {CVE-2023-3338}
  - ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o)
  - ext4: fix potential htree index checksum corruption (Theodore Ts'o)
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) [bug:182682] {CVE-2023-35001}
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) {CVE-2023-0386}
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) [bug:181310] {CVE-2023-3090}
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang) [bug:179181] {CVE-2023-33288}
  - gfs2: Don't deref jdesc in evict (Bob Peterson) [bug:179231] {CVE-2023-3212}
  - swap: fix do_swap_page() race with swapoff (Miaohe Lin) [task:160285]
  - ixgbe: initialize the LED link active for LED blink support (Li ZhiGang) [task:146678]
  - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) [task:127145]
  - arm64/config: CONFIG_ARM_SPE_PMU=m (Jackie Liu)
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin) {CVE-2022-3633}
  - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) {CVE-2023-0615}
  - rds: rds_rm_zerocopy_callback() use list_first_entry() (Pietro Borrello) [bug:164070] {CVE-2023-1078}
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore) [task:119087] {CVE-2020-10751}
  - vc_screen: modify vcs_size() handling in vcs_read() (George Kennedy) [bug:182724]
  - vc_screen: don't clobber return value in vcs_read (Thomas Weißschuh) [bug:182724]
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) [bug:182724] {CVE-2023-3567}
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) {CVE-2023-31084}
  - NETSWIFT: txgbe: FIX: fix error when start and stop SRIOV (zhongxiangji) [task:160962]
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [bug:179189] {CVE-2023-34256}
  - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu) [bug:179193] {CVE-2023-2985}
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) [bug:179197] {CVE-2023-3111}
  - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) [bug:179197]
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) [bug:179202] {CVE-2023-3141}
  - fbcon: Check font dimension limits (Samuel Thibault) [bug:179208] {CVE-2023-3161}
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [bug:179212] {CVE-2023-3159}
  - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) [bug:179216] {CVE-2023-3268}
  - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) [bug:179216]
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) [bug:179219] {CVE-2023-35823}
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [bug:179223] {CVE-2023-35824}
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) [bug:179226] {CVE-2023-35828}
  - drm/msm/dpu: Add check for pstates (Jiasheng Jiang) [bug:179237] {CVE-2023-3220}
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) [bug:179240] {CVE-2023-3358}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.31.v2101
changelog:
  - scripts/release-stable-kernel: reword release log (Zhengyuan Liu)
  - kernel.spec: support 4k kernel-package (Jiangshan Yi) [task:170770]
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - x86: config: add generic_phy driver support (xiaolinkui) [task:170177]
  - x86/tsc: Extend watchdog check exemption to 4-Sockets platform (Feng Tang) [task:188913]
  - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang) [task:188913]
  - x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang) [task:188913]
  - x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner) [task:188913]
  - x86/tsc: Add option to disable tsc clocksource watchdog (Juri Lelli) [task:188913]
  - x86/tsc: Respect tsc command line paraemeter for clocksource_tsc_early (Michael Zhivich)
  - selftests: forwarding: tc_actions: Use ncat instead of nc (Ido Schimmel) [task:166265]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [task:166265] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [task:166265]
  - net/sched: act_mirred: refactor the handle of xmit (wenxu) [task:166265]
  - net: sched: don't expose action qstats to skb_tc_reinsert() (Vlad Buslov) [task:166265]
  - net: sched: extract qstats update code into functions (Vlad Buslov) [task:166265]
  - net: sched: protect against stack overflow in TC act_mirred (John Hurley) [task:166265]
  - net: sched: refactor reinsert action (John Hurley) [task:166265]
  - sched: fix warning of rq_cputimes (Jackie Liu)
  - ext4: fix bug_on ext4_mb_use_inode_pa (Baokun Li) [task:167485, task:162162]
  - backport-tools: release-stable-kernel: change patch title (Jiangshan Yi)
  - package: Complete the changelog details of the SP2 kernel package (Jiangshan Yi) [task:165835]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.32.v2101
changelog:
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [bug:194635]
  - Revert "NFS: Don't call generic_error_remove_page() while holding locks" (wolfgang huang) [bug:194658]
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo) [bug:189267]
  - vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle)) [bug:189270]
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [bug:189726] {CVE-2023-3772}
  - squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher) [task:158827, bug:195777]
  - squashfs: add more sanity checks in id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: add more sanity checks in xattr id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: fix inode lookup sanity checks (Sean Nyekjaer) [task:158827, bug:195777]
  - squashfs: add more sanity checks in inode lookup (Phillip Lougher) [task:158034, bug:195777]
  - sched/rt: Optimize checking group RT scheduler constraints (Konstantin Khlebnikov) [task:173985]
  - PCI: Allow VPD access for QLogic ISP2722 (Arun Easi) [bug:187138]
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) [bug:192894] {CVE-2023-4563}
  - sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (Vincent Guittot)
  - sched/fair: Fix enqueue_task_fair warning (Vincent Guittot)
  - resolve compiling error for previous rcu patches (lifangxu) [task:174840]
  - x86/cpu: Avoid cpuinfo-induced IPIing of idle CPUs (Paul E. McKenney) [bug:190769]
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney) [bug:190769]
  - x86/cpu: Disable frequency requests via aperfmperf IPI for nohz_full CPUs (Konstantin Khlebnikov) [bug:190769]
  - rcu: Provide rcu_irq_exit_check_preempt() (Thomas Gleixner) [bug:190769]
  - rcu: Provide rcu_irq_exit_preempt() (Thomas Gleixner) [bug:190769]
  - btrfs: don't use global reserve for chunk allocation (Josef Bacik) [task:169240]
  - btrfs: add new flushing states for the delayed refs rsv (Josef Bacik) [task:169240]
  - x86/config: enable CONFIG_TCM_QLA2XXX=y (liubaolin) [task:173621]
  - mips/config: remove CONFIG_HZ_256 and keep default Timer frequency (wangxuewen) [bug:188806]
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [bug:192919] {CVE-2023-4921}
  - dm: don't stop request queue after the dm device is suspended (Ming Lei) [task:172151]
  - dm rq: don't queue request to blk-mq during DM suspend (Ming Lei) [task:172151]
  - mm/memconrtol: Revert "REDHAT: mm/memcg: Free percpu stats memory of dying memcg's" (Jiangshan Yi) [bug:191720]
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [bug:192910] {CVE-2023-4623}
  - config/x86: add debug config support for xfstest (Shida Zhang) [bug:189811]
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) [task:162162] {CVE-2023-4459}
  - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long)
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [bug:189761] {CVE-2023-40283}
  - ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett) [task:171003, bug:190516]
  - ext4: add reserved GDT blocks check (Zhang Yi) [bug:190521, task:171003]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.33.v2101
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [task:177236] {CVE-2023-42753}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.34.v2101
changelog:
  - Revert "KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()" (chentao)
  - Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" (lijun)
  - Revert "integrity: Define a trusted platform keyring" (lijun)
  - Revert "integrity: Load certs to the platform keyring" (lijun)
  - Revert "efi: Add EFI signature data types" (lijun)
  - Revert "efi: Add an EFI signature blob parser" (lijun)
  - Revert "efi: Import certificates from UEFI Secure Boot" (lijun)
  - Revert "efi: Allow the "db" UEFI variable to be suppressed" (lijun)
  - Revert "ima: Support platform keyring for kernel appraisal" (lijun)
  - Revert "ima: Use inode_is_open_for_write" (lijun)
  - Revert "x86/efi: move common keyring handler functions to new file" (lijun)
  - Revert "kexec, KEYS: Make use of platform keyring for signature verify" (lijun)
  - Revert "PKCS#7: Refactor verify_pkcs7_signature()" (lijun)
  - Revert "certs: Add wrapper function to check blacklisted binary hash" (lijun)
  - Revert "certs: Replace K{U,G}IDT_INIT() with GLOBAL_ROOT_{U,G}ID" (lijun)
  - Revert "certs: Add EFI_CERT_X509_GUID support for dbx entries" (lijun)
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet) [task:179316, task:160493] {CVE-2020-36516}
  - char: pcmcia: remove all the drivers (Jiri Slaby) [task:177573] {CVE-2022-44033}
  - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski) [task:179318] {CVE-2021-38208}
  - xfs: drop submit side trans alloc for append ioends (Brian Foster) [task:168909]
  - xfs: turn io_append_trans into an io_private void pointer (Christoph Hellwig) [task:168909]
  - xfs: refactor the ioend merging code (Christoph Hellwig) [task:168909]
  - xfs: simplify xfs_ioend_can_merge (Christoph Hellwig) [task:168909]
  - xfs: allow merging ioends over append boundaries (Christoph Hellwig) [task:168909]
  - xfs: merge adjacent io completions of the same type (Darrick J. Wong) [task:168909]
  - xfs: remove unused m_data_workqueue (Darrick J. Wong) [task:168909]
  - xfs: implement per-inode writeback completion queues (Darrick J. Wong) [task:168909]
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) {CVE-2023-31083}
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) {CVE-2023-1206}
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319}
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [task:179857] {CVE-2023-20593}
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (xiaolinkui) [bug:195544]
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) [task:176709] {CVE-2022-45887}
  - Revert "NFS: Don't interrupt file writeout due to fatal errors" (ChenXiaoSong) [task:198290]
  - Revert "USB: core: Don't hold device lock while reading the "descriptors" sysfs file" (Hongyu Xie) [task:179861] {CVE-2023-37453}
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) [task:179858] {CVE-2022-45919}
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg) [task:179285] {CVE-2020-26541}
  - certs: Replace K{U,G}IDT_INIT() with GLOBAL_ROOT_{U,G}ID (Mickaël Salaün) [task:179285] {CVE-2020-26541}
  - certs: Add wrapper function to check blacklisted binary hash (Nayna Jain) [task:179285] {CVE-2020-26541}
  - PKCS#7: Refactor verify_pkcs7_signature() (Thiago Jung Bauermann) [task:179285] {CVE-2020-26541}
  - kexec, KEYS: Make use of platform keyring for signature verify (Kairui Song) [task:179285] {CVE-2020-26541}
  - x86/efi: move common keyring handler functions to new file (Nayna Jain) [task:179285] {CVE-2020-26541}
  - ima: Use inode_is_open_for_write (Nikolay Borisov) [task:179285] {CVE-2020-26541}
  - ima: Support platform keyring for kernel appraisal (Nayna Jain) [task:179285] {CVE-2020-26541}
  - efi: Allow the "db" UEFI variable to be suppressed (Josh Boyer) [task:179285] {CVE-2020-26541}
  - efi: Import certificates from UEFI Secure Boot (Josh Boyer) [task:179285] {CVE-2020-26541}
  - efi: Add an EFI signature blob parser (Dave Howells) [task:179285] {CVE-2020-26541}
  - efi: Add EFI signature data types (Dave Howells) [task:179285] {CVE-2020-26541}
  - integrity: Load certs to the platform keyring (Nayna Jain) [task:179285] {CVE-2020-26541}
  - integrity: Define a trusted platform keyring (Nayna Jain) [task:179285] {CVE-2020-26541}
  - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn) [bug:144320] {CVE-2022-42703}
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [task:179282] {CVE-2023-30456}
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) [task:179901] {CVE-2023-31085}
  - remove the lightnvm subsystem (Christoph Hellwig) [task:179254] {CVE-2022-2991}
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) [task:179859] {CVE-2022-45886}
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) [task:179292] {CVE-2022-2153}
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [task:166857] {CVE-2023-45862}
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - Revert "block: move blk_exit_queue into __blk_release_queue" (zhanggenjian) [task:177423]
  - Revert "block: free sched's request pool in blk_cleanup_queue" (zhanggenjian) [task:177423]
  - Revert "blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests" (zhanggenjian) [task:177423]
  - Revert "block: adjust the position of the code section" (zhanggenjian) [task:177423]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Hugh Dickins) [bug:163612, bug:188493, bug:188513, bug:189316]
  - tpm: add TCM2.0 support in tpm_tis_spi (Li ZhiGang) [task:175234]
  - ipv6: do not leave garbage in rt->fib6_metrics (Eric Dumazet) [task:178045]
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [bug:197488] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [bug:197492] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [bug:197496] {CVE-2023-39194}
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [bug:189769] {CVE-2023-4387}
  - fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu) [bug:189765] {CVE-2023-4385}
  - cec-api: prevent leaking memory through hole in structure (Hans Verkuil) [task:157172, bug:197484] {CVE-2020-36766}
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) [task:177575] {CVE-2023-42754}
  - gmjstcm: delete SMO0768 from TCM1 spi device id (Li ZhiGang) [task:175749]
  - netfilter: nft_exthdr: Search chunks in SCTP packets only (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) [bug:192914]
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [bug:192914] {CVE-2023-4881}
  - netfilter: nft_exthdr: Fix for unsafe packet data read (Phil Sutter) [bug:192914]
  - netfilter: nft_exthdr: Support SCTP chunks (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: add support for matching IPv4 options (Stephen Suryaputra) [bug:192914]
  - media: mceusb: Use USB_DIR_IN in read request (Hongyu Xie) [task:179257] {CVE-2022-3903}
  - media: mceusb: fix control-message timeouts (Johan Hovold) [bug:150405]
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) [bug:197566]
  - iomap: Use kzalloc to allocate iomap_page (Matthew Wilcox (Oracle)) [bug:197566]
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) {CVE-2023-45871}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) {CVE-2023-39189}
  - net/sched: Retire rsvp classifier (Jamal Hadi Salim) [bug:196033] {CVE-2023-42755}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [bug:196022] {CVE-2023-4622}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [bug:196026] {CVE-2023-42752}
  - ext4: prevent partial update of the extent blocks (Zhang Yi) [task:167485]
  - ext4: check for inconsistent extents between index and leaf block (Zhang Yi) [task:167485]
  - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (Zhang Yi) [task:167485]
  - ext4: flush s_error_work before journal destroy in ext4_fill_super (yangerkun) [task:167485]
  - ext4: fix e2fsprogs checksum failure for mounted filesystem (Jan Kara) [task:167485]
  - ext4: always panic when errors=panic is specified (Ye Bin) [task:167485]
  - ext4: fix ext4_error_err save negative errno into superblock (Ye Bin) [task:167485]
  - ext4: fix timer use-after-free on failed mount (Jan Kara) [task:167485]
  - ext4: remove set but not used variable 'es' in ext4_jbd2.c (Jason Yan) [task:167485]
  - ext4: remove set but not used variable 'es' (Jason Yan) [task:167485]
  - ext4: don't try to processed freed blocks until mballoc is initialized (Theodore Ts'o) [task:167485]
  - ext4: drop ext4_handle_dirty_super() (Jan Kara) [task:167485]
  - ext4: use sbi instead of EXT4_SB(sb) in ext4_update_super() (Jan Kara) [task:167485]
  - ext4: save error info to sb through journal if available (Jan Kara) [task:167485]
  - ext4: protect superblock modifications with a buffer lock (Jan Kara) [task:167485]
  - ext4: drop sync argument of ext4_commit_super() (Jan Kara) [task:167485]
  - ext4: combine ext4_handle_error() and save_error_info() (Jan Kara) [task:167485]
  - ext4: defer saving error info from atomic context (Jan Kara) [task:167485]
  - ext4: simplify ext4 error translation (Jan Kara) [task:167485]
  - ext4: move functions in super.c (Jan Kara) [task:167485]
  - ext4: make ext4_abort() use __ext4_error() (Jan Kara) [task:167485]
  - ext4: standardize error message in ext4_protect_reserved_inode() (Jan Kara) [task:167485]
  - ext4: save all error info in save_error_info() and drop ext4_set_errno() (Theodore Ts'o) [task:167485]
  - ext4: save the error code which triggered an ext4_error() in the superblock (Theodore Ts'o) [task:167485]
  - ext4: remove redundant sb checksum recomputation (Jan Kara) [task:167485]
  - ext4: add ext3 report error to userspace by netlink (lijinlin) [task:167485]
  - ext4: Fix not report exception message when mount with errors=continue (Ye Bin) [task:167485]
  - ext4: don't remount read-only with errors=continue on reboot (Jan Kara) [task:167485]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.35.v2101
changelog:
  - OPENEULER: xhci: fix USB xhci controller issue (Longfang Liu) [task:182993]
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) [task:166857, task:182934]
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) [task:182934]
  - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) [task:166857, task:182934]
  - netem: fix zero division in tabledist (Aleksandr Nogikh)
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) [task:166857, task:182934]
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:184636]
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324}
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross) [task:158827]
  - xen/events: don't use chip_data for legacy IRQs (Juergen Gross)
  - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. (Thomas Gleixner) [task:157358]
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs (Alexander Potapenko) [task:155707, task:183063]
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed (Xingui Yang) [task:182978]
  - drm/atomic-helper: Bump vblank timeout to 100 ms (Linus Walleij) [task:182959]
  - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) [task:183053]
  - mm: disable kernelcore=mirror when no mirror memory (Ma Wupeng) [task:182939]
  - mm, sl[aou]b: guarantee natural alignment for kmalloc(power-of-two) (Vlastimil Babka) [task:182892]
  - iommu/dma: Fix MSI reservation allocation (Marc Zyngier) [task:183064]
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop() (Frank Rowand) [task:183064]
  - bonding: add sending arp and NS packets on each bonding slave interface (Yun Lu) [task:181529]
  - Bonding: split bond_handle_vlan from bond_arp_send (Hangbin Liu) [task:181529]
  - ipv6: separate ndisc_ns_create() from ndisc_send_ns() (Hangbin Liu) [task:181529]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:99622, task:183477]
  - ipv6: Create init helper for fib6_nh (user) [task:99622, task:183477]
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) [task:179856] {CVE-2023-3863}
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: Fix to check for kmemdup failure (Aditya Pakki) [task:179856]
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson) [task:182171]
  - KVM: fix overflow of zero page refcount with ksm running (Zhuang Yanying) [task:157172]
  - ext4: fix check to prevent false positive report of incorrect used inodes (Zhang Yi) [bug:198263, bug:197767]
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) [task:181443] {CVE-2023-35827}
  - kallsyms: fix KYLIN_UNEXPORT_SYMBOLS logic error in kallsyms_on_each_symbol (xuping) [task:121424]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.36.v2101
changelog:
  - dm thin metadata: check fail_io before using data_sm (Li Lingfeng) [task:182982]
  - dm space maps: improve performance with inc/dec on ranges of blocks (Joe Thornber) [task:182982]
  - dm: don't lock fs when the map is NULL during suspend or resume (Li Lingfeng) [task:182983]
  - dm: don't lock fs when the map is NULL in process of resume (Li Lingfeng) [task:182983]
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jie Wang) [task:182948]
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao) [task:184449]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Ye Bin) [task:183005]
  - quota: fixup *_write_file_info() to return proper error code (Yangtao Li) [task:183005]
  - dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (Li Lingfeng) [task:183052]
  - dm bufio: do buffer cleanup from a workqueue (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global cache replacement (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global queue (Mikulas Patocka) [task:183052]
  - dm bufio: refactor adjust_total_allocated (Mikulas Patocka) [task:183052]
  - dm bufio: call adjust_total_allocated from __link_buffer and __unlink_buffer (Mikulas Patocka) [task:183052]
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) [task:183052]
  - dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [task:183052]
  - dm: add disk before alloc dax (Li Lingfeng) [task:183060]
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) [task:188435]
  - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) [task:188418]
  - ipmi_ssif: Rename idle state and check (Corey Minyard) [task:188419]
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen) [task:188423]
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen) [task:188424]
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) [task:188425]
  - of: Fix modalias string generation (Miquel Raynal) [task:188428]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:182968]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:162162]
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) [task:184474]
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) [task:184474]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng) [task:187896]
  - EULER: net: hns: fix wrong head when modify the tx feature when sending packets (Yonglong Liu) [task:182947]
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) [task:188433]
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) [task:188434]
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) [task:188412]
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig) [task:189180] {CVE-2023-6121}
  - KVM: arm64: Fix clean dcache when vcpu is 0 (zhanghao1) [task:186056]
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) [task:188414]
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima) [task:188413]
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - nvmet: fix setting ns queue's segment boundary (pengcan) [task:187823]
  - Revert "Revert "nvmet: fix building bvec from sg list"" (pengcan) [task:187823]
  - config: disable unprivileged eBPF by default (chenyuan) [task:178019, task:186859]
  - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs (Miklos Szeredi) [task:186656] {CVE-2023-32629}
  - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) [task:182970]
  - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) [task:182970]
  - perf/cgroups: Install cgroup events to correct cpuctx (Song Liu) [task:184204]
  - perf/core: Fix cgroup event list management (Namhyung Kim) [task:184204]
  - perf/core: Optimize perf_install_in_event() (Peter Zijlstra) [task:184204]
  - perf: Rework perf_event_exit_event() (Peter Zijlstra) [task:184204]
  - EULER: perf: Revert "perf: Paper over the hw.target problems" (Yang Jihong) [task:184204]
  - perf: Fix function pointer case (Peter Zijlstra) [task:184204]
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) [task:184204]
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) [task:184204]
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) [task:184204]
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter) [task:184204]
  - perf: Fix list corruption in perf_cgroup_switch() (Song Liu) [task:184204]
  - perf/core: Avoid put_page() when GUP fails (Greg Thelen) [task:184204]
  - events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers) [task:184204]
  - perf: Fix data race between pin_count increment/decrement (Marco Elver) [task:184204]
  - perf/core: Disable page faults when getting phys address (Jiri Olsa) [task:184204]
  - perf/ioctl: Add check for the sample_period value (Ravi Bangoria) [task:184204]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik) [bug:195544]
  - Revert "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test" (xiaolinkui) [bug:195544]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:184541, task:183477]
  - ipv6: Create init helper for fib6_nh (David Ahern) [task:184541, task:183477]
  - net/ipv6: Do not reset nl_net in ip6_route_info_create (David Ahern) [task:184541, task:183477]
  - ipv6: Move setting default metric for routes (David Ahern) [task:184541, task:183477]
  - net: rtmsg_to_fib6_config() - use new style struct initializer instead of memset (Maciej Żenczykowski) [task:184541, task:183477]
  - Revert "ipv6: Create init helper for fib6_nh" (luoqing) [task:183477]
  - Revert "ipv6: Fix use of anycast address with loopback" (luoqing) [task:183477]
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf) [task:185741]
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:183007]
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang) [task:182946]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - ext4: fix leaking sysfs kobject after failed mount (Eric Biggers)
  - nvmet: set loop queue's segment boundary mask as PAGE_SIZE - 1 (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - Revert "nvmet: fix building bvec from sg list" (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-25.37.v2101
changelog:
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (Eric Dumazet) [task:198156]
  - tcm: support tpmrm function of ax99100_spi interface TCM module (jiangxiujie) [task:198010]
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [task:199635] {CVE-2023-6931}
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [task:196095] {CVE-2023-6040}
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) [task:198453] {CVE-2024-23849}
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (Tuo Li) [task:198457] {CVE-2024-24855}
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [task:198455] {CVE-2023-52429}
  - dm ioctl: log an error if the ioctl structure is corrupted (Mikulas Patocka) [task:198455]
  - jfs: fix log->bdev_handle null ptr deref in lbmStartIO (Lizhi Xu) [task:196809]
  - scsi: fcoe: pass in fcoe_rport structure instead of fc_rport_priv (Hannes Reinecke) [task:197881]
  - scsi: libfc: Whitespace cleanup in libfc.h (Hannes Reinecke) [task:197881]
  - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (Yihang Li) [task:196398]
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) [task:196093] {CVE-2023-51043}
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) [task:196092] {CVE-2023-51042}
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) [task:196011] {CVE-2023-46343}
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [task:196363] {CVE-2024-0607}
  - block: fix NULL pointer dereference in account statistics with IDE (Logan Gunthorpe) [task:196111]
  - block: account statistics for passthrough requests (Logan Gunthorpe) [task:196111]
  - machine_t: Limit specific architecture judgment functions (Jackie Liu)
  - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) [task:182918]
  - stmmac: remove is_ft_mcu_ready when getting mac addr from nvmem (luyun) [task:18023, bug:210342]
  - smb: client: fix potential OOB in smb2_dump_detail() (Paulo Alcantara) [task:195442] {CVE-2023-6610}
  - smb: client: fix OOB in receive_encrypted_standard() (Paulo Alcantara) [task:196094] {CVE-2024-0565}
  - media: v4l2-mem2mem: fix epoll() by calling poll_wait first (Hans Verkuil) [task:193171]
  - net/sched: cbs: Fix not adding cbs instance to list (Vinicius Costa Gomes) [task:193171]
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) [task:196364] {CVE-2024-0639}
  - tty: fix hang on tty device with no_room set (Hui Li) [task:190651]
  - ZHAOXIN: drm/qxl: remove men_bus_offset set to 0 in qxl_ttm_io_mem_reserve (leoliu-oc) [task:194089]
  - ZHAOXIN: Add support for Zhaoxin GMI SM3 Secure Hash algorithm (leoliu-oc) [task:194087]
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy) [task:162162] {CVE-2022-48619}
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (Eric W. Biederman)
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [task:193171] {CVE-2024-0340}
  - iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi) [task:194968]
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [task:193171] {CVE-2023-6606}
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao) [task:193171] {CVE-2023-6932}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg (Hyunwoo Kim) [task:193171] {CVE-2023-51779}
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51782}
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51781}
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51780}
  - crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior) [task:184972]
  - ext4: turning quotas off if mount failed after enable quotas (Baokun Li) [task:184977]
  - OPENEULER: x86/kprobes: Fix the error judgment for debug exceptions (Li Huafei) [task:184976]
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) [task:184979]
  - quota: simplify drop_dquot_ref() (Baokun Li) [task:184966]
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) [task:184966]
  - quota: add new helper dquot_active() (Baokun Li) [task:184966]
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li) [task:184966]
  - quota: factor out dquot_write_dquot() (Baokun Li) [task:184966]
  - quota: add dqi_dirty_list description to comment of Dquot List Management (Chengguang Xu) [task:184966]
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) [task:184966]
  - security/selinux: Add selinux process security attributes (chengang) [task:192443]
  - KVM: SVM: Add 5-level page table support for SVM (Wei Huang) [bug:197000]
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [task:193171] {CVE-2023-7192}
  - OPENEULER: net: hns3: fixes a promoiscuous mode (Yun Lu) [bug:203954]
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) [task:188430]
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)


author: jinzhiguang <jinzhiguang@kylinos.cn> - 0.11.0-8.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-fix-non-trivial-designated-initializers.patch
  	0001-use-btf_dump__new_deprecated.patch


author: lijian1 <lijian1@kylinos.cn> - 0.11.0-8.p02
changelog:
  - Type: Bugfix
  - ID: TASK#218577
  - SUG: NA
  - DESC: fix percpu map without args, c07f23af3507e0b4971ec4343523d976a048b078,
          3f2b438c8b497129f952531375429b1a93e7620d,39f3996d17f88124acc0170b8659e0856555043a
          3fbe73909e009a6741faed1c444daffed478395e;add patch 0005 for so path;add 0006 for tcpdrop.bt.


author: huayadong <huayadong@kylinos.cn>-3.12.2-8.p05
changelog:
  - add Patch:kylin-brasero-fix-bug-42668-after-switching-the-language-to-English-the-name-is-still-Chinese.patch


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.07
changelog:
  - Type:update
  - ID: [TASK#121480]
  - SUG:NA
  - DESC: 解决chpolicy切换策略，强制重启后，策略切换失败的问题
  -         add patch: chpolicy-fix-selinux-error-after-force-reboot.patch


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liquor <lirui130@huawei.com> - 11-5
changelog:
  - Delete remaining references to the removed http pin
    Install cryptsetup and tpm2_pcrlist in the initramfs
    Add device TCTI library to the initramfs


author: yanjianqing <yanjianqing@kylinos.cn> -19.4-6.p03
changelog:
  - Type:CVE
  - ID:[Task#154159]
  - SUG:NA
  - DESC:fix CVE-2022-2084
  -      Fix test_net.py testcase fail
  -      Fix a unitest error


author: Liang yangang <liangyangang@kylinos.cn> - 196.3-1.01.p01
changelog:
  - add mips64el arch support,
  - add Requires for storaged to support lvm: libblockdev libblockdev-devel libudisks2 udisk2-lvm2


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: lvxiangcong<lvxiangcong@kylinos.cn> - 1.2.0-209.p03
changelog:
  - Type:update
  - ID:[TASK#206575]
  - SUG:NA
  - DESC:fix cve-2023-39325 and cve-2022-41723 skipping p02 due to the presence of koji


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.6.18-3.1
changelog:
  - update containerd binary to v1.6.18, which includes fixes for CVE-2023-25153
    and CVE-2023-25173.
  - update Golang runtime to 1.19.6, which includes fixes for CVE-2022-41722,
    CVE-2022-41725, CVE-2022-41724, and CVE-2022-41723.


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.6.20-3.1
changelog:
  - update containerd binary to v1.6.20.
  - update runc binary to v1.1.5, which includes fixes for CVE-2023-25809,
    CVE-2023-27561, and CVE-2023-28642.


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.6.21-3.1
changelog:
  - update containerd binary to v1.6.21
  - update runc binary to v1.1.7
  - Update Golang runtime to 1.19.9


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.6.22-3.1
changelog:
  - update containerd binary to v1.6.22
  - update runc binary to v1.1.8
  - Update Golang runtime to 1.19.11


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.6.24-3.1
changelog:
  - update containerd binary to v1.6.24
  - update runc binary to v1.1.9
  - Update Golang runtime to 1.20.8


author: Lihx <lihaoxiang@kylinos.cn> - 8.32-1.p03
changelog:
  - update to 8.32 for kylin
  - Migrate patch p01 and p02 to version 8.32-1
  - Add color display.zhangqiang <zhangqiang@kylinos.cn>
  - disable check.ouyangkang <ouyangkang@kylinos.cn>


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: Shi Jingying <shijingying@kylinos.cn> - 7.3.0-20190804.35.p01
changelog:
  - modify gcc description
  - from This is compiler for arm64
  - to The gcc package contains the GNU Compiler Collection version 7.
    You'll need this package in order to compile C code.


author: lijian1 <lijian1@kylinos.cn> - 7.3.0-20190804.35.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify gcc.spec: Add file libstdc++fs.a to package libstdc++-static


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: liyanan <liyanan32@huawei.com> - 2.1.27-11
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: wangxiao <wangxiao65@huawei.com> - 10.13.1.1-2
changelog:
  - fix CVE-2018-1313
  - a specially-crafted network packet can be used to request the
  - Derby Network Server to boot a database whose location and contents
  - are under the user's control.


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: Miroslav Suchý <msuchy@redhat.com> 1.30-1
changelog:
  - Deleted old Copr keys and added new Copr keys
  - readme: add note about Debian, Ubuntu and Arch
  - update list of keys in README
  - add brave key
  - Add remi 2019 key


author: Miroslav Suchý <msuchy@redhat.com> 1.34-1
changelog:
  - update copr keys
  - fix whitespace error in fedora-32 key (rhbz#1743422)
  - Add RPM Fusion keys for fedora 32


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-201
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-202
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)


author: lvxiangcong<lvxiangcong@kylinos.cn> - 18.09.0-202.p03
changelog:
  - Type:CVE
  - CVE: CVE-2023-25173 && CVE-2023-25153
  - SUG:NA
  - DESC:fix CVE-2023-25173 && CVE-2023-25153 && Rebuild docker-engine


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-202.p05
changelog:
  - Type: BUG
  - ID:   [BUG#197029]
  - SUG:  NA
  - DESC: rebuild docker engine for golang update to 1.15.7-32.p01


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-202.p08
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: wanglixing <wanglixing@kylinos.cn> -1.0.0.rc3-205.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix connect container failed when reading partially written state.json content


author: yinzhiwei <yinzhiwei5@huawei.com> - 4.1-6.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix signed integer overflow in FSTART
         Avoid returning deleted directory entries as labels
         src check.c: Fix up mtools created bad dir entries
         Remove long file name when changing short file name
         Fix gcc sprintf length warnings
         fsck.fat: Fix Year 2038 Bug
         mkfs.fat: Fix parsing of block number
         device_info: Fix parsing partition number
  -Package init


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: wanghao<wanghao2@kylinox.cn> - 050-3.se.p04.07
changelog:
  - Type: update
  - ID: [Task#129149]
  - SUG:NA
  - DESC: 添加magic配置文件,修复执行控制白名单初始化时类型判断失败的问题
  -         add patch: dracut-050-add-magic-config-file.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-3.se.p05.07
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-3.se.p05.08
changelog:
  - Type:update
  - ID:[Task#195740]
  - SUG:NA
  - DESC:同步sp4补丁,
  -      [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  -      add dracut-fix-mount-home-failed.patch


author: Wenhua Huang <huangwenhua@kylinos.cn> - 050-3.se.p06.08
changelog:
  - Type:update
  - ID:[TASK#174208]
  - SUG:NA
  - DESC: nvme 安装盘系统在安装dracut-config-generic 软件包重新生成initramfs.img 系统重启失败
  -	add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: Neal Gompa <ngompa13@gmail.com> 0.4.0-1
changelog:
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0038-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0039-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0040-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: gaoguanghui <gaoguanghui1@huawei.com> - 2.0.10-30
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:this patch made future ebtables processes wait indefinitely for the lock to
         become free


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-7.p02
changelog:
  - Type:	Update
  - ID:	[TASK#138646]
  - SUG:	NA
  - Desc:	fix CVE-2022-4450 CVE-2023-0286 CVE-2023-0215 CVE-2023-0401
  	from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: yanjianqing <yanjianqing@kylinos.cn> - 202011-7.p04
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304
          from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: cuiyudong <cuiyudong@kylinos.cn> - 202011-7.p05
changelog:
  - Type: Update
  - ID:   [TASK#204640]
  - SUG:  NA
  - Desc: fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、
          CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、
          CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、
          CVE-2023-45235


author: panxiaohe <panxh.life@foxmail.com> - 0.180-7
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.1.2-4-p03
changelog:
  - modify file esc.desktop, smart card manager description chinese local
  - Add Comment[zh_CN]=企业安全客户端智能卡管理器


author: xiehongyu <xiehongyu@kylin.cn> - 3.30.1-4.01
changelog:
  - Add evince-3.30.1-kylin-perfect-Internationalization.patch
  - Fixed BUG #12046, #11966, perfect Internationalization


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: shenyangyang <shenyangyang4@huawei.com> - 2:4.6.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo and gettext-devel to slove the build problem


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix test failures ran as root and enable -xautofs and disable leaf opt


author: lvfei <lvfei@huawei.com> - 3.0.3.32900-7.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p09
changelog:
  -  Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967 CVE-2022-25235
    CVE-2022-25236 and CVE-2022-25315 CVE-2022-40674


author: wangwenfeng <wangwenfeng@kylinos.cn> - 79.0-4.p11
changelog:
  - Type:compile
  - ID:[TASK#148328]
  - SUG:NA
  - DESC:Make Firefox dependent on the Freetype package. add dependency.


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p14
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: openEuler Buildteam <buildteam@openeuler.org> - 2.9.9-0
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update fuse2 from 2.9.7 to 2.9.9,
         update fuse3 from 3.2.3 to 3.9.0


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch0:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p02
changelog:
  - Type: cve
  - ID:   [TASK#133075]
  - SUG:  NA
  - DESC: add patch1:gdm-3.38.2.1-kylin-use-autoptr-to-handle-errors-in-look-for-existing-users.patch
  	Fix CVE-2020-16125


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#160751]
  - SUG:  NA
  - DESC: add patch2:gdm-3.38.2.1-kylin-fix-fix-the-problem-of-failing-to-start.patch


author: liujilin <liujilin@kylinos.cn> - 4.0.20-5.p01
changelog:
  - modify spec for mips64el, "XLDFLAGS='-Wl,-z,relro   -Wl,-z,now -specs=/usr/lib/rpm/kylin/kylin-hardened-ld -m elf64ltsmip' "


author: huayadong <huayadong@kylinos.com> - 2.5.6-1.p01
changelog:
  - Type:bugfix
  - ID  :[bug#135451]
  - SUG :NA
  - DESC:add patch0: geoclue-2.5.6-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: fandeyuan <fandeyuan@kylinos.cn> - 2.62.5-7.p01
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: majian <majian@kylinos.cn> - 2.28-49.p09
changelog:
  - cves: CVE-2023-0687
  - ID: [TASK#141422]
  - SUG: NA
  - DESC: Fix CVE-2023-0687.
    https://gitee.com/src-openeuler/glibc/pulls/555


author: majian <majian*kylinos.cn> - 2.28-49.p10
changelog:
  - Type: bugfix
  - ID: [TASK#148359]
  - SUG: NA
  - DESC: move <lua> script in '%posttrans' and '%postun' from all-langpacks subpackage to common subpackage.


author: majian <majian@kylinos.cn> - 2.28-49.p13
changelog:
  - Type: update
  - ID: [TASK#200535]
  - SUG: NA
  - DESC: Patch60: Disable threads in Intel vm environment to avoid performance degradation.


author: <majian@kylinos.cn> - 2.28-49.p14
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813.


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: peijiankang <peijiankang@kylinos.cn>- 3.30.1-2.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add gnome-calculator-update-translations-for-hk.patch


author: lvfei <lvfei@kylinos.c> - 3.30.0-2.p01
changelog:
  - add patch:0001-update-the-package-name.patch
  - add patch:0002-fix-some-translate.patch 
  - add patch:0003-disable-popup-dialog-warning.patch


author: huayadong <huayadong@kylinos.cn> - 3.30.1-10.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#165420]
  - SUG:  NA
  - DESC: add Requires: llvm-libs >= 8.0.1-1.6.p01 only for loongarch64


author: changjie.fu <changjie.fu@cs2c.com.cn> - 1.1-0.11
changelog:
  - Add patch :Neokylin-Arc-Menu-remove-ArcMenu-Setting.patch .
  - and add software-center to main-Menu.


author: Liu Tao <tao1.liu@cs2c.com> - 3.32.1-2.08
changelog:
  - Modified spec file and patch100 for Network function
  - Add patch101 patch102 for Services function


author: hanchao <hanchao63@huawei.com> - 1.15.7-39.p01
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42.p01
changelog:
  - Type:bugfix
  - ID:[TASK#206034]
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-43.p02
changelog:
  - Type:update
  - ID:[TASK#213363]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.1.0-2
changelog:
  - fix source link
  - fix description
  - fix packaging shared libraries
  - add upstream patch to fix include dir


author: Zhang Zeyang<zhangzeyang@kylinos.cn> - 2.04-5.se.01.p07
changelog:
  - Type:CVE
  - CVE:CVE-2021-3981 CVE-2020-27779 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233
  - SUG:NA
  - DESC:Fix CVE:CVE-2021-3981 CVE-2020-27779 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233


author: Like<like@kylinos.cn> - 2.04-5.se.01.p08
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - SUG:NA
  - DESC:Fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: Xiao Zai<xiaozai@kylinos.cn> - 2.04-5.se.01.p09
changelog:
  - Type:NA
  - ID:BUG#134276
  - SUG:NA
  - DESC: remove executable permission bit for grub-boot-indeterminate.service


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-5.se.01.p10
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: jiangping <jiangping@kylinos.cn> - 1.16.2-2.p02
changelog:
  - Type:bug
  - ID:87466
  - SUG:NA
  - DESC:fix yum update conflicting  with Obsoletes: gstreamer-help < 1.16.2-2


author: liqian <liqian@kylinos.cn> - 2.24.32-7.p01
changelog:
  - install gtk3-immodules need gtk2-immodules package 
  - modify spec file enable_immodules_package 1  build gtk2-immodules packages


author: GuoCe <guoce@kylinos.cn> 2.24.32-7.p02
changelog:
  - gtk/gtkscale.c (gtk_scale_class_init): Change Up, Down, Kp up, Kp down,
  - Page Up, Page Down, Kp page up, Kp page down, Left, Right, Kp left and Kp Right
  - bindings for logical movement.
  - add file gtk+-2.24.32-kylin-13336.patch


author: lvfei <lvfei@kylinos.cn> - 3.24.21-1.p01
changelog:
  - sync liqian spec modify code 
  - Handle the mouse block problem of virt-manager virtual machine
  - loss buildrequire packages libXcursor-devel 
  - Handle the mouse block problem of virt-manager virtual machine
  - modify gtk3 spec file enable_immodules_package 1


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: yueyuankun <yueyuankun@kylinos.cn> 1.40.2-7.p01
changelog:
  - Add patch01: gvfs-1.40.2-kylin-fixed-place-sidebar-safe-remove-issue.patch
  - coldplug not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel
  - Add Patch02, 解决“我的电脑”中“收藏夹”报错问题，解决U盘有时无法自动挂载的问题
  - Add Patch03, 解决U盘有时无法自动挂载的问题
  - Add Patch04, 解决窗口界面显示为“网络”


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: huayadong <huayadong@kylinos.cn>-0.5.1-10.70
changelog:
  - add Patch77: hardinfo-0.5.1-fix-bug-101193-bug-101305-x86.patch
  - add Patch78: hardinfo-0.5.1-fix-bug-101193-bug-101305-ARM.patch


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-23.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: zhangyulong <zhangyulong@kylinos.com> - 2.4.43-23.p02
changelog:
  - Type:TASK
  - ID:195905
  - SUG:NA
  - DESC:add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: lifeng68<lifeng68@huawei.com> - 2.0.7-20201125.165149.git7d150c3c
changelog:
  - Type: update base version to v2.0.7
  - ID:NA
  - SUG:NA
  - DESC: 1. update with upstream version v2.0.7, release notes: https://gitee.com/openeuler/iSulad/releases/v2.0.7 2. add chrpath for isula and isulad

  +* Thu Nov 12 2020  <gaohuatao@huawei.com> - 2.0.5-20201112.192302.gitedce3879
  +- Type:update from openeuler
  +- ID:NA
  +- SUG:NA
  +- DESC: update from openeuler

  +* Mon Sep 14 2020  <lifeng68@huawei.com> - 2.0.5-20200914.172527.gitae86920a
  +- Type:bugfix
  +- ID:NA
  +- SUG:NA
  +- DESC: remove unused config


author: lifeng<lifeng68@huawei.com> - 2.0.7-20201128.095506.git1e1623a5
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: Mounts: only qsort the configed mounts and make possible to bind mount /proc and /sys/fs.
  - related lxc PR fixed:
  - 1.add check whether have /proc mounts entry, if has, skip the auto
  - 2.mount cgroup before do mount entrys
  - 3.pass if the mount on top of /proc and the source of the mount is a proc filesystem


author: xuhe <xuhe@kylinos.cn> - 1.7.1-11.p01
changelog:
  - Type: bugfix
  - ID: BUG#131728
  - SUG: NA
  - DESC: Fix yum install fail on x86_64 platform and fix build error due to files missing


author: Simone Caronni <negativo17@gmail.com> - 3.8.3-47
changelog:
  - Use macros for build, install and setup.
  - Minor cleanups to SPEC file.
  - Use valid URL for Debian patches.


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.21.pre4
changelog:
  - Added patch from upstream to choose first "running" interface,
    rather than first "up" interface (#1403025)
  - Added patch from upstream to support scales beyond 1 Gbps


author: liyunqing <liyunqing@kylinos.cn> - 0.3.82-1.p02
changelog:
  - Add p10002: bug#48052、47928 add ChineseHK and capitalized the first letter
  - Add p10003: solve the problem of license's bad display


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: wangjia <wangjia55@huawei.com> - 0.6-18.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix prio field for ppc and aarch64
         fix data value unpack with latest kernels
  - Package init


author: Xiao Zai<xiaozai@kylinos.cn> - 4.5.0-1.p01
changelog:
  - Add Patch iso-codes-4.5.0-kylin-remove-zhonghuaminguo-string.patch
  - remove the "zhong hua min guo" string


author: lixiang <lixiang172@huawei.com> - 0.9.4-14
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:Modify gen-version script and add changelog automatically


author: leizhongkai<leizhongkai@huawei.com> - 0.9.5-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:make `isula-build ctr-img images` display comfortably


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: Rex Dieter <rdieter@fedoraproject.org> - 2.0.14-7
changelog:
  - cleanup cmake usage, move to %build
  - %build: explicitly disable doc generation
  - kill hard-coded rpath
  - -libs: explicit soname so bumps aren't a surprise
  - use %license, %make_build, 'make install/fast'


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: jiangpengf<jiangpengfei9@huawei.com> - 1.11.1-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix del-iface doesn't delete the tap interface in the host problem


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:directly copy kata binary files instead of building them


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert the kata-containers.spec to still build kata-containers components into one package


author: yueyuankun <yueyuankun@kylinos.cn> - 30-13.p06
changelog:
  - Type:bugfix
  - ID:task#200351
  - SUG:NA
  - DESC:fix the issue of missing changelog during compilation


author: likai01 <likai01@kylinos.cn> 2.0.20-14.p03
changelog:
  - Type:cves
  - ID:CVE-2021-20269
  - SUG:NA
  - DESC:FIX CVE-2021-20269,modify kdump-lib-initramfs.sh under SOURCES directly


author: Kevin Fenzi <kevin@scrye.com> - 1.17.0-6
changelog:
  - Switch kojid back to python3 as imagefactory and oz have moved.
  - Backport patch to download only repomd.xml instead of all repodata.
  - Backport patch to allow 'bare' repo merging for modularity.
  - Backport patch to allow for seperate srpm repos in buildroot repos.


author: Kevin Fenzi <kevin@scrye.com> - 1.17.0-7
changelog:
  - Add patch to fix koji kerberos auth with python3.
  - Drop internal mergerepos so we can go all python3. Fixes bug #1715257


author: luofei <fei.luo@cs2c.com.cn> - 1.18.1-1.ns7.01
changelog:
  - 0001-Add-password-login-function.patch
  - 0002-Add-password-modify-function.patch
  - 0003-Add-web-display-koji-host-ip.patch
  - 0004-Need-web-login-to-download-src-rpm.patch


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: zhangbowei <zhangbowei@kylinos.cn> - 1.15.7-2.p01
changelog:
  - Type:bug
  - ID:[BUG#139325]
  - SUG:NA
  - DESC:remove the "--allow-privileged=true" in patches/orig/kubeadm.conf


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#117856]
  - SUG : NA
  - DESC: add Patch18 kylin-computer-viewer-3.9.1s1-kylin-delete-comment.patch


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p20
changelog:
  - Type: bugfix
  - ID  : [TASK#90519]
  - SUG : NA
  - DESC: add Patch19 kylin-computer-viewer-3.9.1s1-kylin-fix-fortify-3.patch


author: huayadong <huayadong@kylinos.cn> -p63
changelog:
  - Type: bugfix
  - ID  : [BUG#144468]
  - SUG : NA
  - DESC: add Patch65 kylin-control-center-3.9.5-kylin-fix-password-verification-problems.patch
          修复root用户密码更新不对原密码进行校验.


author: huayadong <huayadong@kylinos.cn> -p64
changelog:
  - Type: bugfix
  - ID  : [BUG#151189]
  - SUG : NA
  - DESC: add Patch66 kylin-control-center-3.9.5-fix-crash-when-switching-lock-screen-mode.patch 
  	修复切换屏保模式时的崩溃问题。


author: huayadong <huayadong@kylinos.cn> -p65
changelog:
  - Type: bugfix
  - ID  : [Bug#158569]
  - SUG : NA
  - DESC: add Patch67 kylin-control-center-3.9.5-kylin-Merge-display-in-control-panel-for-users-with-the-same-UID.patch
  	为具有相同UID的用户在控制面板合并显示.


author: huayadong <huayadong@kylinos.cn> -p66
changelog:
  - Type: bugfix
  - ID  : [Bug#159672]
  - SUG : NA
  - DESC: add Patch68 kylin-control-center-3.9.5-kylin-fix-the-problem-that-the-screensaver-image-appears-black.patch
  	修复每次打开控制面板屏保预览都是黑色问题.


author: huayadong <huayadong@kylinos.cn> -p67
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: add Patch69 kylin-control-center-3.9.5-kylin-fix-the-same-uid-user-deletion-problem.patch


author: huayadong <huayadong@kylinos.cn> -p69
changelog:
  - Type: bugfix
  - ID  : [Bug#173828]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-network-browser-error-in-default-application.patch


author: huayadong <huayadong@kylinos.cn> -p70
changelog:
  - Type: bugfix
  - ID  : [Bug#173825]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-change-gtk-theme-blue-icon-for-kylin-blue-theme.patch


author: peijiankang <peijiankang@kylinos.cn> - p72
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: kylin-control-center-update-translations-for-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - p73
changelog:
  - Type: bugfix
  - ID:   [BUG#211927]
  - SUG:  NA
  - DESC: add 0001-kylin-control-center-memory-leak-fixs.patch


author: peijiankang <peijiankang@kylinos.cn> - p74
changelog:
  - Type: bugfix
  - ID:   [BUG#231576]
  - SUG:  NA
  - DESC: add kylin-control-center-3.9.5-kylin-fix-coredump-about-memory-leak.patch


author: jiangping <jiangping@kylinos.cn> - 7-14.1.01
changelog:
  - Add kylin-indexhtml-7-14.1-kylin-change-Desktop-to-Advanced-Server.patch
  - Fixed kylinbz#1360, change Desktop to Advanced Server


author: huayadong <huayadong@kylinos.cn> - 1.0-6.8.p02
changelog:
  - Type: bugfix
  - ID  : [Bug#226228]
  - SUG : NA
  - DESC: add Patch01:kylin-logos-1.0-change-KylinSoft-Corporation-COPYING.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p19
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch15: kylin-menu-5.5.9-delete-comment.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p20
changelog:
  - Type:bugfix
  - ID  :[bug#138701][bug#123656]
  - SUG :NA
  - DESC:add Patch16: kylin-menu-5.5.9-kylin-non-root-users-hide-shutdown-and-restart-functions.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p22
changelog:
  - Type:bugfix
  - ID  :[bug#139752]
  - SUG :NA
  - DESC:add patch17:kylin-menu-5.5.9-kylin-fix-the-default-mode-The-start-menu-has-no-gnome-logs.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p24
changelog:
  - Type:bugfix
  - ID  :[bug#169280]
  - SUG :NA
  - DESC:add patch18:kylin-menu-5.5.9-kylin-fix-clicking-on-MyComputer-twice-will-bring-up-three-folders.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p25
changelog:
  -Type:bugfix
  -ID:[BUG#195923]
  -SUG:NA
  -DESC:add patch 0001-fix-the-problem-that-windows-can-t-be-activated-when.patch
        fix the problem that windows can't be activated when start menu open


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p26
changelog:
  -Type:bugfix
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-traditional-chinese-translation-for-Logout.patch
        add missing traditional chinese translation for "Logout"


author: peijiankang <peijiankang@kylinos.cn> - 5.5.9-3.1.p27
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: update-timing-shutdown.desktop-and-kylinmenu.py-about-ranslations-of-hk-and-tw.patch


author: yangxudong <yangxudong@kylinos.cn> - 1.0-24.6p40
changelog:
  - add Patch kylin-release-add-traditional-chinese-licence-text.patch
  - add licence files for zh_HK and zh_TW


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.04
changelog:
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: KYLIN-kylin-security-daemon-fix-sql-inject-by-retrieve.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.05
changelog:
  - Type: update
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复kysec-sync-notify中的sub_3960函数存在命令注入漏洞
  -         add patch: kylin-security-daemon-fix-fix-notify-get-file-type.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.06
changelog:
  - Type: bugfix 
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kylin-security-daemon-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#147906]
  - SUG:NA
  - DESC: 修复文件保护无法添加含有特殊字符文件名的文件
  -         add patch: kylin-security-daemon-fix-fpro-not-add-special-character-file-name-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题 
  -         add patch: kylin-security-daemon-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#154600]
  - SUG:NA
  - DESC: 修复设置模块防卸载是提示kmod_whlist不存在的错误
  -         add patch: kylin-security-daemon-fix-kmod-set-protect-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kylin-security-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.12
changelog:
  - Type: update 
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kylin-security-daemon-fix-parse-pyc-file-error-in-sp2-version.patch


author: xiaoyiwu <wuxiaoyi@kyinos.cn>
changelog:
  - delete /etc/adjtime /usr/share/polkit-1/actions/org.mate.settingsdaemon.datetimemechanism.policy
  - add greeter-show-manual-login=true 、/etc/lsb-release


author: lvfei <lvfei@kyinos.cn>.p03
changelog:
  - modify spec remove  gtksourceview
  - usr/share/gtksourceview-2.0/styles/classic.xml
  - usr/share/gtksourceview-2.0/styles/cobalt.xml
  - usr/share/gtksourceview-2.0/styles/kate.xml
  - usr/share/gtksourceview-2.0/styles/oblivion.xml
  - usr/share/gtksourceview-2.0/styles/tango.xml


author: zhangjun <zhangjun@kylinos.cn> - p10
changelog:
  - Type:task
  - ID:[TASK#89131]
  - SUG:NA
  - DESC:add patch kylin_verify_add_command_help_for_task_89131.patch


author: liwenchong <liwenchong@kylinos.cn> - p11
changelog:
  - Type:task
  - ID:[TASK#90991]
  - SUG:NA
  - DESC:add patch kylin_verify_code_modification_for_fortify_scan.patch


author: longyuxiang <longyuxiang@kylinos.cn> - 1.0.0-1
changelog:
  - from kylincloud-1.0.1-73
  - rename to kylincloud-settings
  - remove kylincloud-init.service /usr/bin/kylinstart.sh kolla.conf kylincloud.conf limit.conf


author: caoshuhao <caoshuhao@kylinos.cn> - 1.0.10kord-se.06
changelog:
  - Add patch 0001-change-version-1.0.10.patch
    This patch only updated the tool's version to 1.0.10 from 1.0.7.


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-7kord.se.01
changelog:
  - add Patch0: kysec-auth-fix-common-user-authorize-passwd-failed-error.patch
  - add Patch1: kysec-auth-fix-authorize-failed-for-none-of-sudoer.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.09
changelog:
  - Type: update
  - ID: [Task#104022]
  - SUG:NA
  - DESC: 修复kysec_get和kysec_set通过rpm查询命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-rpm-query-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#138162]
  - SUG:NA
  - DESC: dnf和dnf-3添加kysoft的执行标记
  -         add patch: kysec-utils-exectl-dnf-add-kysoft-label.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#127829]
  - SUG:NA
  - DESC: 修复模块标签是unknown是可以insmod的bug
  -       修复sh执行脚本，无法执行修改后还原的脚本
  -       修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kysec-utils-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.12
changelog:
  - Type: bugfix 
  - ID: [BUG#128013]
  - SUG:NA
  - DESC: 从audadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-audadm-list.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.13
changelog:
  - Type: bugfix 
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题
  -         add patch: kysec-utils-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.14
changelog:
  - Type: update
  - ID: [TASK#122582]
  - SUG:NA
  - DESC: 修复arm平台编译错误的问题
  -         add patch: kysec-utils-fix-arm-build-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.15
changelog:
  - Type: update
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kysec-uitls-fix-parse-pyc-file-error-in-sp2-version.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866


author: Xiaole He <hexiaole@kylinos.cn> - 2.2-2
changelog:
  - Initial build of libabigail package using source code from git revision
  - 24a219d905ad61710d2a04a1a5e94bb15d3687dd (fix comparing array subrange DIEs)


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-10.p09
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: gaoyi <gaoyi15@huawei.com> - 0.1.8-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:CVE for libcomps
         https://github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046


author: Kou Wenqi <kouwenqi@kylinos.cn> - 5.3.28-37.p01
changelog:
  - Rebuild for Kylin
  - Add BuildRequires:  java       >= 1:1.6.0
  - Add BuildRequires:  java-devel <  1:1.11.0
  - Add BuildRequires:  java       <  1:1.11.0


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 1:1.40.2-9.p04
changelog:
  - Type: bugfix
  - ID: [task#77405]
  - SUG: NA
  - DESC: add rhsrvany.exe to run Windows guests first boot scripts.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 1:1.40.2-9.p05
changelog:
  - Type: update
  - ID:   [TASK#132491]
  - SUG:  NA
  - DESC: add patches to make libguestfs support detecting kylin os in /etc/os-release and converting neokylin os and kylin os.
  -       Note: the real modified codes must be in supermin.d-x86.tar.gz in /usr/lib64/guestfs/supermin.d/daemon.tar.gz!


author: haowenchao <haowenchao@huawei.com> - 1.19.0-2
changelog:
  - Split rpm package to avoid main rpm package CUnit dependency
    Previous implement place executable files in main package which leading
    to dependency of CUnit. This change add a package utils and move
    these executable files to utils package to avoid main package's CUnit
    dependency, making main package weak depend on libiscsi-utils


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: zhangdashuang <zhangdashuang@kylinos.cn> - 8.16.1-3
changelog:
  - from 8.15.2-33.p01 transplant
  - modified spec, sendmail.mc from "include(`cf/m4/cf.m4')dnl" 
  - to "include(`/usr/share/sendmail-cf/m4/cf.m4')dnl"


author: shenyangyang <shenyangyang4@huawei.com> - 1.6.4-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of gobject-introspection-devel to solve build problem


author: liujilin <liujilin@kylinos.cn> - 1.18.22-4.p02
changelog:
  - add patch4: network-manager-applet-1.8.22-kylin-tooltip-shows-error.patch
  - network-manager-applet tooltips display error.


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.18.22-4.p03
changelog:
  - Add patch5 resolve bug2846
  - The desktop operating system has been resolved,modify the prompt content


author: mengchaoming<mengchaoming@kylinos.cn>--1.18.22-4.p09
changelog:
  -add patch10: nm-applet-1.8.22-kylin-fix-bug49556.patch
  -strict模式下，只有root用户显示左键菜单; 
  -strict模式下, 右键菜单只有root用户会显示全,其他用户只显示“连接信息"、“启用联网”
  -非strict 模式下,流程不变;


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Guoshuai Sun <sunguoshuai@huawei.com> - 1.2.57-12
changelog:
  - ID:CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
  - SUG:restart
  - DESC:fix CVE-2013-7353 CVE-2013-7354 CVE-2017-12652
    And we have check CVE-2014-9495 CVE-2011-3045 CVE-2008-3964 CVE-2015-8126 CVE-2015-0973 alreadyi been fixed before.
    And CVE-2016-3751 CVE-2013-6954 didn'd involved.


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 5.0-1
changelog:
  - New upstream release, migrated to python
  - Turn off automatic python byte-compilation and use py_byte_compile for the
    extension files


author: zhangjun <zhangjun@kylinos.cn> 1.0-1.11.1.p01
changelog:
  - update spec:Install libRockeyARM.s0.0.3 library to /usr/lib/xxx-linux-gnu directory
  - bug102904平安银行定制iso授权Key激活失败
  - 本次更新修复将动态库安装到对应架构指定目录


author: RPM Fusion Release Engineering <leigh123linux@gmail.com> - 2.4-13.20160224.gitfa8646d
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
  - Remove Group tag
  - Add BuildRequires:  gcc


author: wanghao <wanghao2@kylinos.cn> - 1.0-8kord.se.01
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: gaoyusong<gaoyusong1@huawei.com> - 3.1-1.se.01
changelog:
  - Patch1: libselinux-20200318.patch
  - Patch2: add-selinux_restorecon.patch
  - Patch3: libselinux-20200326.patch
  - Patch4: libselinux-20200427.patch


author: caoshuhao<caoshuhao@kylinos.com> - 3.1-1.se.04
changelog:
  - Add patch: libselinux-fix-ston-wrong.patch
  - Author: Meng Dehui
  - Resume USER_AVC checks

  - Remove patch: libselinux-20200326.patch
  - Author: Jiang Xingsong
  - Fix user_avc wrong: Audit cannot be controlled by policy.


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1-1.se.02
changelog:
  - Type:update
  - ID:[任务#195739]同步libsemanage的补丁到sp2-libsemanage
  - SUG:NA
  - DESC:
  - [BUG#209238]【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  - add patch: libsemanage-homedircon.patch
  - desc:secadm和auditadm不存在,genhomedircon生成adm_home_t的定义。


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-4
changelog:
  - fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
  - Related: #1821193


author: xingxing <xingxing9@h-partners.com> - 0.7.14-5
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: gaoyi<gaoyi15@huawei.com> - 2.1.14-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport patches from https://github.com/samba-team/samba
  - Package init


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:compile
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: Harald Hoyer <harald@redhat.com> - 16-1
changelog:
  - libvarlink 16
  - fixed coverity issues
  - Resolves: #1638294 - Interface name validation rule update


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-13.p02
changelog:
  - Type: bugfix
  - ID: [task#77405]
  - SUG: NA
  - DESC: open with_esx to support libguestfs use v2v from VMware ESXi


author: lizhanchun <lizhanchun@kylinos.cn> - 6.2.0-13.p03
changelog:
  - Type:update
  - ID:[TASK#107738]
  - SUG:NA
  - DESC:
  - add phytium support host-model on aarch64
  - Kunpeng-920 skip virQEMUCapsInitCPUModel() for host-model functional.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-13.p05
changelog:
  - Type: bugfix
  - ID:   [BUG#216112]
  - SUG:  NA
  - DESC: fix failing to start vm without device-mapper support


author: lilong <lilong@kylinos.cn> - 6.2.0-13.p06
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: Danilo de Paula <ddepaula@redhat.com> - 1.2.0-3
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Cai Yinan <caiyinan@kylinos.cn> - 1.7.0-10.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: openEuler Buildteam <buildteam@openeuler.org> - 1.3-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:change the directory of the license file and add the help package for libxshmfence


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: wuxu <wuxu.wu@hotmail.com> - 3.6.0-4
changelog:
  - update license consistent with upstream community:
    The library (libsensors) is released under the GNU Lesser General Public
    License (LGPL), as included in the file COPYING.LGPL. The rest of this
    package may be distributed according to the GNU General Public License
    (GPL), as included in the file COPYING.


author: Bjorn <bjorn1@users.sourceforge.net> 7.5.1-1
changelog:
  * Fri Dec 28 2018 Bjorn <bjorn1@users.sourceforge.net> 7.5.0
  - simplified files section
  - using symbolic links for some man files


author: shixuantong <shixuantong@huawei.com> - 2.1.49-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:move mime.types to mailcap rpm and change mime.types to mime_mailcap.types


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylin.cn> - 1.16.1-4.p01
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p01
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: Zhao Penghui <zhaopenghui@kylinos.cn> - 20150918kord0ukui58.xgs.09
changelog:
  - Add Patch9: 修复服务器日志中dpkg报错的问题，添加服务器和桌面的判断.
    Modify the SPEC, add BuildRequires: libkylinos-type-devel;Requires: libkylinos-type


author: GuoCe <guoce@kylinos.cn> - 1.12.1-1.p01
changelog:
  - Add patch: mate-media-1.12.1-1kord24~rc1-kylin-tooltip-shows-error.patch
  - Disable tooltips display of speaker.


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn> - 1.16.1-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus, add  Requires: kylin-menu


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: peijiankang <peijiankang@kylinos.cn>- 1.12.2-1kord13.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#194919]
  - SUG : NA
  - DESC: add Patch4 mate-session-manager-1.12.2-kylin-add-min-and-max-for-idle-delay.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.12.2-1kord13.p07
changelog:
  -Type:bugfix
  -ID:[BUG#203419]
  -SUG:NA
  -DESC:add patch 0001-mate-session-manager-add-missing-translations-for-zh.patch


author: douyan <douyan@kylinos.cn>- 1.12.2-1kord13.p08
changelog:
  -Type:bugfix
  -ID:[BUG#205945]
  -SUG:NA
  -DESC:add patch mate-session-manager-1.12.2-kylin-fix-autostart-process-no-quit-when-loggingout.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: guoshengsheng<guoshengsheng@kylinos.cn>1.12.2-1kord1k10.p02
changelog:
  - Add %post 
  - dconf reset /org/mate/terminal/profiles/default/font
  - dconf write /org/mate/terminal/profiles/default/font "'Courier 10 Pitch 12'"


author: Lu lijun<lulijun@kylinos.cn>1.12.2-1kord1k10.p03
changelog:
  - add Patch:mate-terminal-1.12.1-kylin-modify-setting-default-font.patch
  - fix bug20234 and bug18836.


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: chengguipeng <chengguipeng11@huawei.com> - 8.3.0-14
changelog:
  - BuildRequires:add libglvnd-devel, libXext-devel and remove mesa-libGLES-devel to solve compilation failture.


author: Miroslav Suchý <msuchy@redhat.com> 1.4.12-1
changelog:
  - Don't try to use a spec we've already cleaned up (otaylor@fishsoup.net)
  - only set print_main_output when not set in configs
    (chuck.wilson+github@gmail.com)
  - Try to get the proxy from environment (brunovern.a@gmail.com)
  - stop after first failure if -c or --recurse is not used
  - fallback to C.UTF-8 locale (tomek@pipebreaker.pl)
  - completion: improve --copy(in|out), --cwd, --macro-file, --rootdir, and
    --sources (tmz@pobox.com)
  - do not get spec from command line when using scm [GH#203]
  - enable cap_ipc_lock in nspawn container [RHBZ#1580435]
  - use host's resolv.conf when --enable-network is set on cml [RHBZ#1593212]
    (jskarvad@redhat.com)
  - add --forcearch to bash_completion


author: Miroslav Suchý <msuchy@redhat.com> 1.4.14-1
changelog:
  - config['decompress_program'] default (praiskup@redhat.com)
  - add example for jinja templates
  - implement templated configs using jinja2
  - move live defaults from site-defaults.cfg to utils.py
  - introduce "decompress_program" option for root_cache for bsdtar
  - fix exclude patter for bsdtar
  - delete old changelog entries
  - use f29 for tests
  - update the default in sitec-defaults.cfg
  - Recommend dnf-utils (fzatlouk@redhat.com)
  - ignore useless-object-inheritance pylint warning
  - add scientific linux on list of rhel clones [GH#228]
  - Use 32-bit personality for armv7*/armv8* builds (bero@lindev.ch)
  - create custom error message for dnf-utils not being installed
    (pjunak)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.15-1
changelog:
  - ignore weird distro.version() [RHBZ#1690374]
  - switch to string rpm's API [RHBZ#1693759]
  - FileNotFoundError is not defined in Python 2 [RHBZ#1696234]
  - Fix python2-devel build require
  - temporary do not make errors from createrepo_c fatal [GH#249]
  - allow to configure disabled DNF plugins [GH#210]
  - print warning when user is not in the mock group [GH#244]
  - implement Dynamic Build Dependencies (msuchy@redhat.com)
  - Allow mock to be built for epel 8, and without tests
    (vanmeeuwen@kolabsys.com)
  - Add debug logging for systemd-nspawn and related args (riehecky@fnal.gov)
  - Fix mock for non-ascii paths on python2 (a.badger@gmail.com)
  - require python-jinja2 rather than python2-jinja2
  - Fix --enable-network documentation in man page (directhex@apebox.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.16-1
changelog:
  - switch to python3 on el7
  - respect use_host_resolv config even with use_nspawn (praiskup@redhat.com)
  - Fix crash on non-ascii dnf log messages (bkorren@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.17-1
changelog:
  - change of exit code during transition from mockchain to mock --chain
  - support run in Fedora Toolbox (otaylor@fishsoup.net)
  - add cheat sheet
  - Adding tool for parsing build.log (sisi.chlupova@gmail.com)
  - load secondary groups [RHBZ#1264005]
  - pass --allowerasing by default to DNF [GH#251]
  - make include() functional for --chain [GH#263]
  - Removing buildstderr from log - configurable via 
    _mock_stderr_line_prefix (sisi.chlupova@gmail.com)
  - Fixup: Use rpm -qa --root instead of running rpm -qa in chroot
    (miro@hroncok.cz)
  - DynamicBuildrequires: Detect when no new packages were installed
    (miro@hroncok.cz)
  - Allow more loop devices (sisi.chlupova@gmail.com)
  - Fix binary locations in /bin for split-usr setups (bero@lindev.ch)
  - describe behaviour of resultdir together with --chain [GH#267]
  - repeat dynamic requires if needed [GH#276]
  - Fix compatibility with pre-4.15 RPM versions with DynamicBuildRequires
    (i.gnatenko.brain@gmail.com)
  - Enable dynamic BuildRequires by default (i.gnatenko.brain@gmail.com)
  - bootstrap: independent network configuration (praiskup@redhat.com)
  - Update the man page about ~/.config/mock/FOO.cfg (miro@hroncok.cz)
  - explicitely convert releasever to string [GH#270]
  - grant anyone access to bind-mounted /etc/resolv.conf (praiskup@redhat.com)
  - -r FOO will try to read first ~/.mock/FOO.cfg if exists
  - enhance man page of mock about --chain
  - bash completion for --chain
  - respect use_host_resolv config even with use_nspawn (praiskup@redhat.com)
  - Fix crash on non-ascii dnf log messages (bkorren@redhat.com)
  - add deprecation warning to mockchain
  - replace mockchain with `mock --chain` command (necas.marty@gmail.com)
  - switch to python3 on el7 (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.18-1
changelog:
  - use forcearch even when --forcearch is not specified
    (turecek.dominik@gmail.com)
  - requires systemd-container on rhel8 [RHBZ#1744538]
  - mock: only make /sys and /proc mounts rprivate (praiskup@redhat.com)
  - Add Red Hat subscription-manager support (praiskup@redhat.com)
  - Turn jinja ON a bit later, once configs are loaded (praiskup@redhat.com)
  - bootstrap-chroot: always explicitly install shadow-utils
    (praiskup@redhat.com)
  - Add procenv plugin for more detailed buildtime information
    (riehecky@fnal.gov)
  - enable selinux plugin for nspawn [RHBZ#1740421]
  - Added signals handling by calling orphansKill for signals: SIGTERM, SIGPIPE
    and SIGHUP (janbuchmaier@seznam.cz)
  - Mention user configuration file in a man page (jkonecny@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.19-1
changelog:
  - results should be owned by unpriv user [GH#322]
  - do not build with tests by default
  - Resultdir variable is missing in config. (sisi.chlupova@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.20-1
changelog:
  - /bin/mockchain wrapper around 'mock --chain' (praiskup@redhat.com)
  - mock: options for retrying packager managers' actions (praiskup@redhat.com)
  - remove mockchain [RHBZ#1757388]
  - chain: don't skip local repository (praiskup@redhat.com)
  - chain: propagate local repository to bootstrap chroot (praiskup@redhat.com)
  - hw_info: don't create root-owned files (praiskup@redhat.com)
  - ignore ./var/log when creating root_cache - fixes #309
    (jiri.novak@ghorland.net)
  - mock: don't create root files if possible (praiskup@redhat.com)
  - add commandline options for using bootstrap image (frostyx@email.cz)
  - Use podman to pull and export an image as a bootstrap chroot
    (dmach@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.21-1
changelog:
  - copy distribution-gpg-keys if this is boostrap and we use container image
  - move podman initialization to buildroot.py [GH#380]
  - bootstrap: fix --install and --installdeps [RHBZ#1447627]
  - mock: selinuxfs, one more fix for nspawn [RHBZ#1756972]
  - mock: fix broken rpmbuildstate [GH#349]


author: Miroslav Suchý <msuchy@redhat.com> 30.4-1
changelog:
  - Add 'fastestmirror=1' to Mageia mock configs (ngompa13@gmail.com)
  - bootstrap: disable sclo* repos for epel --installroot (praiskup@redhat.com)
  - drop Fedora ppc64 configs [RHBZ#1714489]


author: Miroslav Suchý <msuchy@redhat.com> 30.5-1
changelog:
  - disable updates-modulare repos for now
  - buildrequire systemd-srpm-macros to get _sysusersdir
  - removed info about metadata expire (khoidinhtrinh@gmail.com)
  - added updates-modular to 29 and 30 (khoidinhtrinh@gmail.com)
  - replace groupadd using sysusers.d
  - core-configs: epel-7 profiles to use mirrorlists (praiskup@redhat.com)
  - EOL Fedora 28
  - do not protect packages in chroot [GH#286]
  - Fix value for dist for OpenMandriva 4.0 configs (ngompa13@gmail.com)
  - Add initial OpenMandriva distribution targets (ngompa13@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com>
changelog:
  - add fedora 31 configs and rawhide is now 32
  - Add local-source repo definition to Fedora Rawhide (miro@hroncok.cz)


author: Miroslav Suchý <msuchy@redhat.com> 31.2-1
changelog:
  - revert sysusers setting [RHBZ#1740545]
  - add rhelepel-8 configs (praiskup@redhat.com)
  - add RHEL 7/8 (praiskup@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.3-1
changelog:
  - mock-core-configs: installroot fix for fedora 31+ i386 (praiskup@redhat.com)
  - Moving templates into templates dir (sisi.chlupova@gmail.com)
  - Changing cfg files for fedora 30 to use tpl file (sisi.chlupova@gmail.com)
  - Moving fedora-30-x86_64.cfg into templates/fedora-30.tpl
    (sisi.chlupova@gmail.com)
  - baseurl for f30-build was changed (sisi.chlupova@gmail.com)
  - no i686 repositories [GH#325]
  - adds equation sign to --disablerepo (thrnciar@reedhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.4-1
changelog:
  - provide explanation why modular repos are disabled
  - add epel-8
  - Changing cfg files for fedora rawhide to use tpl file
    (sisi.chlupova@gmail.com)
  - Changing cfg files for fedora 31 to use tpl file (sisi.chlupova@gmail.com)
  - Changing cfg files for fedora 29 to use tpl file (sisi.chlupova@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.5-1
changelog:
  - expand contentdir for now
  - expand $stream for now
  - add extra_chroot_dirs to centos8
  - use dnf for centos8
  - add centos-stream-8
  - rhelepel: reuse epel-8.tpl (praiskup@redhat.com)
  - Add Amazon Linux 2 configs (haroldji@amazon.com)
  - centos-8: enable PowerTools repo (praiskup@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.6-1
changelog:
  - disable modular repo for f29
  - configure podman containers for Fedora, EPEL and Mageia (frostyx@email.cz)
  - Fix baseurl typo in centos-stream config (dollierp@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 31.7-1
changelog:
  - Add configs for epel8-playground (mmathesi@redhat.com)
  - add 3 base packages to epel-playground buildroot [RHBZ#1764445]
  - add 3 base packages to epel buildroot [RHBZ#1764445]


author: Like <like@kylinos.cn> - 4.0.1-4.p01
changelog:
  - Type: cves
  - ID: CVE-2020-7921 CVE-2021-32036
  - SUG: restart
  - DESC: add Patch600 and Patch6001 fix CVE-2020-7921 and CVE-2021-32036


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.20070926-18
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Caolán McNamara <caolanm@redhat.com> - 3.0-22
changelog:
  - Related: rhbz#1604911 convert python2 to python3, verified
    that output th_en_US_v2.dat and th_en_US_v2.idx are identical
    before and after


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: likai01 <likai01@kylinos.cn> - 5.9-4.p01
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: baiguo <baiguo@kylinos.cn> - 5.9-3.p04
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is null


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: Fyodor (fyodor(a)insecure.org)
changelog:
  - Removed changelog entries as SVN is a more authoritative source. Execute:
  - svn log --username guest --password "" https://svn.nmap.org/nmap/nmap.spec.in


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: likai01 <likai01@kylonos.cn> - 3.54.0-9.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: yanghua<yanghua21@huawei.com> - 0.9.9-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Create /var/run/nslcd/socket after dropping privileges
         Fix crash in chsh.ldap


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: wangxiaomeng <wangxiaomeng@kylinos.com> - 2.1.1-18.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug#138766, backport upstream patch to solve crash on Hygon


author: Senlin Xia <xiasenlin1@huawei.com> 1.3.2-5
changelog:
  - Fix scap-workbench compilation failure: declaration of 'operator' as parameter in oval_definitions.h


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p12
changelog:
  - Type:update
  - ID:TASK#184873
  - SUG:NA
  - DESC:fix ssh-agent core dump when ssh-add exec add library


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p15
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC: support sm3 hmac feature, add ssh change mode script, 
  	enable ssh login without password and fix algo show problem,
          update ssh finger print hash and fix memory leak


author: shaoning <shaoning@kylinos.cn> - 1:1.1.1f-4.p11
changelog:
  - Type:cves
  - ID:CVE-2023-0464、CVE-2023-0466、CVE-2023-0465
  - SUG:NA
  - DESC:Fix CVE-2023-0464、CVE-2023-0466、CVE-2023-0465


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p17
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190504-1
changelog:
  - Update to v20190504 release
  - Resolves: rhbz#1699990 - Rebase to the latest upstream release
  - Resolves: rhbz#1689817 - virt-manager cannot detect operating system name
                             for rhel8.0.0 tree automatically
  - Resolves: rhbz#1703480 - rhel8.0.x is not detected as rhel8.0
  - Resolves: rhbz#1685364 - Add win2019 to libosinfo


author: Fabiano Fidêncio <fidencio@redhat.com> - 20191125-1
changelog:
  - Updated to v20191125 release
  - Resolves: rhbz#1780529 - Update to the latest upstream release
  - Add rhel8.2 & rhel7.8 entries
  - Remove upstream virtio-win / spice-guest-tools drivers


author: jiangping <jiangping@kylinos.cn> - 20200203-1.01
changelog:
  - Add osinfo-db-20200203-neokylin-and-kylin-release.patch 
  - Resolves: kylinbz#12970 - Add to v20200203 release for NeoKylin and Kylin


author: jiangping <jiangping@kylinos.cn> - 20200203-1.02
changelog:
  - Add osinfo-db-20200203-kylin-modify-autodetecting-entry.patch 
  - Resolves: kylinbz#12970 - modify autodetecting entry to v20200203


author: huangwenhua <huangwenhua@kylinos.cn> - 20200203-1.p04
changelog:
  - Type: bugfix
  - ID: [Bug#69916]
  - SUG: NA
  - DESC: add patch:0002-add-eol-date.patch 
  	add eol-date for kylin-10.0.xml


author: huangwenhua <huangwenhua@kylinos.cn> - 20200203-1.p05
changelog:
  - Type: bugfix
  - ID: [Bug#217996]
  - SUG: NA
  - DESC: add patch:0003-fixbug-virt-manager-min-memory.patch


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: zhangqiang <zhangqiang@kylinos.cn> - 5.6.0-8.p01
changelog:
  -Type:bugfix
  -ID:[任务#117911]
  -SUG:NA
  -DESC:fixup SIGSEGV crash & add kunpeng920 support & add hygon cpu support


author: hy-euler <eulerstoragemt@huawei.com> - 3.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: delete -Sgit in 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-Switch-gpt-header-move-and-msdos-overlap-to-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/6000-add-support-of-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/9000-Add-extra-judgment-for-a-partition-created-success.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/9001-bugfix-parted-fix-failure-of-mklabel-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: hy-euler <eulerstoragemt@huawei.com> - 3.6.2-5
changelog:
  - Type:enhancemnet
  - ID:NA
  - SUG:NA
  - DESC:add fedora patches for displaying more information while running lspci


author: wangwenfeng <wangwenfeng@kylinos.cn> - 4.1.3-12.p04
changelog:
  - Type:bugfix
  - ID:TASK#149556
  - SUG:NA
  - DESC:ensure culled instances are not accumulated in the total. from pcp-5.1.1


author: wangwenfeng <wangwenfeng@kylinos.cn> - 4.1.3-12.p05
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:TASK#154714
  - DESC:remove the modification of version p01, and fix the wrong output location


author: xuchenchen <xuchenchen@kylinos.cn> - 4.1.3-12.p06
changelog:
  - Type: Bugfix
  - ID: [TASK#161277]
  - SUG: NA
  - DESC:
  - 修复解析IPI0字段异常引起的coredump问题
  - add 0001-fix-analysis-proc-interrupts-name-error.patch


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: shenyangyang<shenyangyang4@huawei.com> - 1:2.081-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:add build requires of perl-devel and add Epoch for updating


author: Paul Howarth <paul@city-fan.org> - 2.33-25
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Make %files list more explicit


author: wangxiao<wangxiao65@huawei.com> - 1.58-3.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:Handle unknown op in DBD SQLite VirtualTable PerlData
         added a boilerplace for test
         fixed for older DBI
  - Package init


author: shenyangyang <shenyangyang4@huawei.com> - 2.066-2
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:delete the /certs that used by test which contains the Unencrypted
         private key


author: shenyangyang <shenyangyang4@huawei.com> - 1.88-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl-Test-Warn and perl-Test-Exception


author: shenyangyang <shenyangyang4@huawei.com> - 0.35-420
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(Test::Portability::Files) 
         and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 0.625-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(IO::Scalar) and perl(Test::Pod::Coverage)


author: shenyangyang <shenyangyang4@huawei.com> - 2.29-398
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl(BSD::Resource) 
         perl(Import::Into) >= 1.002004 and perl(Sub::Identify)


author: Ruzhao Zhu <zhuruzhao@kylinos.com> - 4.10.1-4.1
changelog:
  - modify spec: define __cmake3 as 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/kylin/kylin-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro   -Wl,-z,now -specs=/usr/lib/rpm/kylin/kylin-hardened-ld}" ; export LDFLAGS ; 
    /usr/bin/cmake \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON instead of


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: Lzhichao<zhichao.liu@cs2c.com.cn> - 1.16.2-1.4
changelog:
  - add patch:0004-cs2c-pluma-Complete-the-non-chinese-content-of-the-help-documen.patch
  - Complete the non-chinese content of the help document


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: openEuler Buildteam <buildteam@openeuler.org> - 0.4.9-4
changelog:
  -Type:enhancement
  -Id:NA
  -SUG:NA
  -DESC:Increase the ability of encoding files for use with libpoppler


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p02
changelog:
  - Type: BUG fix 
  - ID: bug#142478
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel resolved conflicts


author: wangjia <wangjia55@huawei.com> - 42.2.4-1.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:disable the failed tests that caused by BEP to repair binary diffrence


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: Michal Sekletár <msekleta@redhat.com> - 0.1.0-5
changelog:
  - if interface has name in expected format print it to stdout (#1643515)
  - don't assign names to virtual devices (#1644294)


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: shenyangyang <shenyangyang4@huawei.com> - 12.2-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add provides of pulseaudio-libs-devel(aarch-64) needed by libmikmod-devel


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.2.3-1
changelog:
  - Move test for unsigned packages with pkgset_koji_scratch_tasks to PkgsetPhase
    class. (jkaluza)
  - Allow building compose with scratch builds defined by
    `pkgset_koji_scratch_tasks`. (jkaluza)
  - createrepo: Allow making productid glob stricter (lsedlar)
  - docs: Remove outdated note (lsedlar)
  - createrepo: Add extra modulemd files to the repo (lsedlar)
  - pkgset: handle exception when using dogpile cache (hlin)
  - notification: Add compose_path into the messages (hlin)
  - gather: handle mirrorlist in kickstart (frederic.pierret)
  - Allow only creating unified ISO for specified arch (hlin)
  - docs: update doc for gather_lookaside_repos option (hlin)
  - Include the output of getisoimage in the error message (hlin)
  - tests: Patch time in CTS related tests (lsedlar)
  - Allow using Pungi Koji plugin for ostree phases. (jkaluza)
  - Allow getting the compose id from CTS (Compose Tracking Service). (jkaluza)
  - Fix flake8 issues (lsedlar)
  - Optimize the _link_file function to not call os.stat redundantly. This will
    eliminate 2 calls to os.stat per one invocation of the _link_file function.
    Assuming during the compose build 50000 files are linked, this change will
    eliminate 100000 redundant calls to os.stat. (bkhomuts)
  - doc: explain sigkey behavior (kdreyer)
  - doc: explain tradeoffs with pkgset_allow_reuse (kdreyer)
  - doc: fix grammar for pkgset_allow_reuse setting (kdreyer)
  - Support --skip-branding option in lorax (hlin)
  - docs: Embed phases.svg directly (hlin)
  - Execute image_checksum phase right after the dependent phases (hlin)


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 0.6.7-1
changelog:
  - Update to 0.6.7 (#1609253).
  - https://dogpilecache.readthedocs.io/en/latest/changelog.html#change-0.6.7


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: shixuantong <shixuantong@huawei.com> - 4.15.1-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-28.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118587]
  - SUG:NA
  - DESC:update and modify spec file,delete cron.daily of rpm


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.16-25
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Reversed "Removed Python 2 bindings"


author: mengchaoming <mengchaoming@kylinos.cn> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.cn> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.cn> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: xuyujun <xuyujun@kylinos.cn> - 3.7.9-20.se.01
changelog:
  - add Python3-judge-python-file-run.patch
  - devel package add require libkysec-devel libsecurity1-devel
  - add buildrequire libsecurity1-devel


author: zhangchaorui <zhangchaorui@kylinos.cn> - 3.7.9-20.se.02
changelog:
  - Type:cves 
  - ID:CVE-2015-20107
  - SUG:NA
  - DESC:Fix CVE-2015-20107 and make test suite support upstream Expat >=2.4.5


author: likai01 <likai01@kylinos.cn> - 3.7.9-20.p04.se
changelog:
  - Type:cves
  - ID:CVE-2020-10735 CVE-2022-45061 CVE-2022-37454
  - SUG:NA
  - DESC:Fix CVE-2020-10735 CVE-2022-45061 CVE-2022-37454


author: Miro Hrončok <mhroncok@redhat.com> - 2.39-14
changelog:
  - Subpackage python2-distutils-extra has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.14.1-18
changelog:
  - Subpackage python2-fasteners has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Kevin Fenzi <kevin@scrye.com> - 2.0.0-7
changelog:
  - Review fixes: drop python3 dep, Update obsoletes, add python_provide
  - Review fixes: Use pypi_source, fixed files globbing.


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch10 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488
  -- add unbound pid dir to fix unbound.service faild


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.2-9
changelog:
  - Subpackage python2-xlwt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.2-9
changelog:
  - Subpackage python2-xmltodict has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-60.p14
changelog:
  - Type:Update
  - ID: [Task#142040]
  - SUG: NA
  - DESC: Synchronize patches in SP1 and SP3
  - 	add 125 patches, from patch 368 to 423
  -	add BuildRequires: krb5-devel, libssh-devel,glib2,mesa-libgbm-devel,spice-protocol,spice-server
  - 	addRequires: qemu-block-iscsi, qemu-block-curl, edk2-ovmf
  -	add package: block-rbd，block-ssh,block-iscsi, block-curl
  -	add configure parameters: enable-modules ,enable-libssh ,enable-tpm ,enable-opengl 
  - 	add the delete path for the install phase
  -	add files: vgabios-qxl.bin，block-rbd，block-ssh,block-iscsi, block-curl
  -  	fix compilation errors caused by G_SIZEOF_MEMBER


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-60.p15
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-60.p17
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-60.p18
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.


author: wangguochun <wangguochun@kylinos.cn> - 4.1.0-60.p20
changelog:
  - Type: update
  - ID:   [Task#198750]
  - SUG:  NA
  - DESC: update qemu and merger v10-sp2 kylin server change to qemu-4.1.0-60.oe1
          merge change between qemu-4.1.0-60.oe1 qemu-4.1.0-66.oe1


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-60.p23
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: openEuler Buildteam <buildteam@openeuler.org> - 5.11.1-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Delete the dependency include qt5-qt3d qt5-qtenginio-devel qt5-qtwebkit-devel


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: lvying<lvying6@huawei.com> - 0.6.3-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix file descriptor leak in ras-report.c:setup_report_socket()


author: shixuantong<shixuantong@huawei.com> - 3.7.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add python3-Cython and python3-devel to BuildRequires for check fail


author: Yeqing Peng <pengyeqing@huawei.com> - 6.5-1
changelog:
  - since 6.6, jitterentropy-library is independed from rng-tools,
    no any entropy source will lead to rng-tools service fail.


author: liujilin<liujilin@kylinos.com> - 8.2006.0-2.p01
changelog:
  - modify rsyslog.conf StateFile="/run/log/imjournal.state" to StateFile="imjournal.state"
  - 解决journal日志重复刷入messages的问题


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: sunjin <sunjin@kylinos.cn> - 1.2.4kord-se.05
changelog:
  - Type:update
  - ID:[Bug#145066]
  - SUG:NA
  - DESC:security-switch版本拉齐
  -     【sp1sp2】只开selinux，grub里会多出kysec_3adm=0这个参数


author: Han Shuang <hanshuang@kylinos.cn> - 2.0-1.50.p02
changelog:
  - Add Cancel_etc_grub.d_00_header_superusers_password_pbkdf2.patch
  - modify etc_grub.d_00_header cancel superusers_password_pbkdf2 logout fn_harden_grub2 function


author: mengchaoming <mengchaoming@kylinos.cn> - 2.0-1.50.p03
changelog:
  - Type:bugfix
  - ID: NA
  - SUG: do not create allow file while the command does not exist
  - DESC:sync from 2.0-1.75 patch:do-not-create-allow-file-while-the-command-does-not-.patch


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.21
changelog:
  - Type:update
  - ID:[BUG#165348]
  - SUG:NA
  - add Patch7007: selinux-policy-audit.patch
  - DESC:165348 【20230328内网源测试】开启selinux模式后无法安装audit软件包


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.22
changelog:
  - Type:update
  - ID:[BUG#170799]
  - SUG:NA
  - add Patch7008: selinux-policy-reboot.patch
  - DESC:170799 [SP3]开启selinux模式target后重启系统异常


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.23
changelog:
  - Type:update
  - ID:[BUG#169925][BUG#169921] [BUG#169400]
  - SUG:NA
  - add Patch7009: kysec-adapter-SXF.patch
  - DESC:bug[169925]【安全模式】strict模式下第一次开启exectl报错	深信服源码授权	    
  -      bug[169921]【访问控制】【白名单访问控制】【strict模式】系统初始化白名单后，/etc/kysec/db/whlist.db文件的relabel_status表rebabel字段的值为0
  -      bug[169400]【安全模式切换】【前端设置】安全中心设置中安全优先模式切换成关闭，secadm用户点击重启后未重启


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.24
changelog:
  - Type:update
  - ID:[BUG#170799]
  - SUG:NA
  - add Patch7010: add-apparmor-and-fix-squid.patch
  - DESC:	[Bug#184746]【sp3堆栈化】strict模式，无法打开加密保护箱 
  -       [Bug#184603]【sp3堆栈化】strict模式下aa-complain执行无权限 	    
  -       [Bug#184566]【sp3堆栈化】squid服务无法启动 	    
  -       [Bug#184511]【sp3堆栈化】selinux强制模式下，执行aa-genprof 后，aa-status无结果		    
  -       [Bug#184500]【sp3堆栈化】selinux强制模式下，执行podman报权限不足:


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.25
changelog:
  - Type:update
  - ID:[BUG#186515]
  - SUG:NA
  - add Patch7011:add-nmcli-and-ukmcs-ukmls-conf.patch
  - DESC:	[Bug#186515]【管理员分权】nmcli不受三员管控
  -       ukmcs与ukmls配置拉齐


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.26
changelog:
  - Type:update
  - ID:[BUG#184500][任务#137354]
  - SUG:NA
  - add Patch7012:add-podman-container-sysadm.patch
  - DESC:	[Bug#184500]【sp3堆栈化】selinux强制模式下，执行podman报权限不足
  - DESC: [任务#137354]sp3中排查先切换strict模式后，setstatus切换kysec disable重启后策略为ukmcs的原因


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.27
changelog:
  - Type:update
  - ID:[BUG#191552/191602/191624/191633/192716/192871/192946]
  - SUG:NA
  - add Patch7013: selinux-policy-kysec-dmi.patch
  - DESC:191552 【selinux】策略开启时，安全用户无法给家目录下的文件添加执行控制标记
  - DESC:191602 【安全日志】策略开启时，安全日志服务重启失败
  - DESC:191624 【selinux】策略开启时，属性界面闪退
  - DESC:191633 【selinux】策略开启时，无法生成安全日志
  - DESC:192716 【安全加固】设置审计存储阈值加固项在开启selinux时无法加固成功
  - DESC:192871 【安全加固】加固项“设置守护进程的umask值”在开启selinux的开启下加固和还原都失败
  - DESC:192946 【selinux】开启selinux无法下载和启动docker


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.28
changelog:
  - Type:update
  - ID:[BUG#184979/185104/191471/192506/192946/193040/193229/193729]
  - SUG:NA
  - add Patch7014: selinux-policy-sere-mem.patch
        Patch7015: selinux-policy-sere-sem.patch
  - DESC:184979 【安全加固】非root用户无法导出模板
  - DESC:185104 【安全加固】设置守护进程的umask值项加固失败
  - DESC:191471 【安全加固】【文件权限】禁止日志文件全局可写加固失败
  - DESC:192358 【安全加固】【系统设置】禁用ctrl+alt+del组合键加固后，tty界面未禁用
  - DESC:192506 【安全加固】【系统审计】检查文件完整性检测配置在strict模式下检测失败
  - DESC:192946 【selinux】开启selinux无法拉取容器镜像
  - DESC:193040 【安全内存】在开启selinux安全的情况下，打开安全内存的系统调用表会失败
  - DESC:193229 【selinux】开启selinux策略，secadm用户没有权限修改联网管控策略
  - DESC:193729 【外接设备】strict模式下，鼠标无法使用
  - DESC:192864 【安全加固】在交互命令执行过程中注销用户，登录一个用户后执行security-reinforce提示命令正在使用中


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.29
changelog:
  - Type:update
  - ID:[BUG#184979/195015/195020/195056/195075/195434/195927]
  - SUG:NA
  - add Patch7016: selinux-policy-sere-service.patch
  - DESC:184979 【安全加固】非root用户无法导出模板
  - DESC:195015 【selinux】策略开启时，auth.socket无法启动
  - DESC:195020 【安全加固】【安全服务】ntalk服务还原后无法恢复运行状态，手动开启后再次加固依然处于运行状态
  - DESC:195056 【安全加固】【安全服务】dhcpd服务加固后仍处于运行状态，手动停止后还原仍处于停止状态
  - DESC:195075 【安全加固】【安全服务】ypbind服务运行状态不受加固还原影响
  - DESC:195434 【访问控制】strict安全模式下，白名单初始化失败
  - DESC:195927 【安全加固】若相关文件在/目录下，关闭系统信任机制和删除潜在危险文件加固失败


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.29.01
changelog:
  - Type:update
  - ID:[BUG#197027]【selinux】仅策略开启时，开启kysec后无法进入系统
  - SUG:NA
  - add Patch7017: selinux-policy-kydima-tcsd-docker.patch
  - [BUg#195595]【可信软件栈】strict模式下，无法开启TCM可信软件栈服务进程 
  - [BUg#192771]【安全加固】【安全服务】nfs-lock服务启动时，禁用nfs-lock服务扫描结果为无需加固 
  - [BUg#192759]【安全加固】【安全服务】加固“禁用nfs服务”后，nfs服务仍处于运行状态
  - [BUg#196191]【selinux】策略开启时，无法启动容器 
  - [BUG#197879]【selinux】策略开启时，无法打开动态度量 
  - [BUG#197027]【selinux】仅策略开启时，开启kysec后无法进入系统


author: Ondrej Vasik <ovasik@redhat.com> - 2.13.1-1
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    in default Fedora)
  - require systemd-rpm-macros instead of systemd


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.13.7.p03
changelog:
  - Type:bugfix
  - ID:BUG#220276
  - SUG:NA
  - DESC: Add Patch4: 0001-optimization-obtain-hostname-slow-when-login.patch
          Optimization obtain hostname, Avoid long login times caused by obtaining the host name during SSH login


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-2.se.03
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch:backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-2.se.04
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-2.se.05
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: fix CVE-2013-4235
  -     add patch(from cve):shadow-backport-CVE-2013-4235.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 1:6.6-5.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:os_linux.cpp/os_netbsd.cpp: fix crash on --scan if WITH_NVME_DEVICESC is not set and '-d <type>' is not specified
         ataprint.cpp: Fix detection of Device Statistics log with 256 sectors (#922)
         drivedb.h: - Western Digital Red: WD80EZZX - USB: WD
         update-smart-drivedb.in: Include configured PATH in help and error messages
         os_linux.cpp: Add missing braces to 3ware SELinux code
         drivedb.h: fix Innolite Satadom D150QV entry (#939)
         os_freebsd.cpp: on error was setting set_nvme_err() to 1
         os_linux.cpp: Fix device scan crash on missing /proc/devices
         smartd.cpp: Always ignore failure of ATA SMART ENABLE command if
         os_linux.cpp: Fix '-d megaraid' open crash on missing /proc/devices
         os_darwin.cpp, os_freebsd.cpp: fix return value in error paths
         ataprint.cpp: Fix Form Factor string with bits set in reserved area
  - Package init


author: openEuler Buildteam <buildteam@openeuler.org> - 1:6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add the "-q never" option while executing smartd command in smartd.service


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 1.4-23
changelog:
  - Modify spec error information

   Sat Sep 07 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.4-22
  - Package init


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: Jun Zhang <jun.zhang@cs2c.com.cn> - 1.0.9-7.3
changelog:
  - add patch:0001-system-config-users-docs-cs2c-update-companyName-to-NeoKylin.patch
  - fix bug#40722 remove red hat and update Project name to NeoKylin


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p10
changelog:
  - Type:bugfix
  - ID:rhbz#1970945
  - SUG:NA
  - DESC: Fix Systemd memory corruption (rhbz#1970945)
          Fix bunch of memory management bugs uncovered by dfuzzer and UBSAN (rhbz#2047373)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p12
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          fix mips64el build
          Remove gnu-efi check when in loongarch64 and mips64
          support systemd-detect-virt for Loongarch64


author: huangwenhua <huangwenhuag@kylinos.cn> - 243-31.se.p14
changelog:
  - Type:bugfix
  - ID:[TASK#172942]
  - SUG:NA
  - DESC: add patch 0001-fix-soft-link-missing.patch
          fix soft link missing


author: Shen Zhongwei <shenzhongwei@kylinos.cn> - 243-31.se.p15
changelog:
  - Type:bugfix
  - ID:[TASK#171982]
  - SUG:NA
  - DESC: add patch 0002-rc-local-order-after-network-online.target.patch
          fix rc-local service start failed


author: yinyongkang <yinyongkang@kylinos.cn> - 243-31.se.p17
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch100719: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p18
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SBUG:NA
  - DESC: add patch10720: 0001-backport-donot-open-cdrom-use-exclusive-mode.patch
          fix eject cdrom issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p19
changelog:
  - Type:bugfix
  - ID:[TASK#205426]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: Shi Jingying <shijingying@kylinos.cn> - 1.10.1-5.p01
changelog:
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error
  - add patch 102: tigervnc-1.10.1-kylin-xstart1.patch
  - the autokill parameter cannot creat port


author: openEuler Buildteam <buildteam@openeuler.org> - 0.5.9
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC:Solve the problem of service cannot restart when upgrading


author: cenhuilin<cenhuilin@kylinos.cn> - 2020a-8.p02
changelog:
  - Type:bugfix
  - ID:task#154455
  - SUG:NA
  - DESC:The northern edge of Chihuahua changes to US rules.
  -      Most of Mexico will no longer observe DST.
  -      Treat 1931 changes in Mexico as DST.


author: wangshuo <wangshuo@kylinos.cn> - 2020a-8.p03
changelog:
  - Type:bugfix
  - ID:[TASK#196761]
  - SUG:NA
  - DESC:Add Patch9010, Kazakhstan unifies on UTC+5 beginning 2024-03-01


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.5-1
changelog:
  - update to 1.3.5
  - update upstream location
  - include SO version in files list to avoid unexpected bumps
  - use modern macros
  - drop obsolete comments


author: huayadong<huayadong@kylinos.cn> -p25
changelog:
  - Type: bugfix
  - ID  : [Bug#128021]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-1.2.1-kylin-Prevent-failure-to-connect-to-xserver.patch
          修复因无法连接xserver而出现的登录界面键盘输入后闪屏问题.


author: huayadong<huayadong@kylinos.cn> -p26
changelog:
  - Type:bugfix
  - ID  :[Bug#137537]
  - SUG :NA
  - DESC:add patch24:ukui-greeter-1.2.1-kylin-prompt-for-password-expiration.patch


author: huayadong<huayadong@kylinos.cn> -p27
changelog:
  - Type:bugfix
  - ID  :[Bug#158569]
  - SUG :NA
  - DESC:add patch25:ukui-greeter-1.2.1-kylin-Add-login-status-detection-function-for-users-with-the-same-UID.patch
         为具有相同UID的用户添加登录状态检测功能，在用户列表合并显示相同UID用户


author: huayadong<huayadong@kylinos.cn> -p28
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch26:ukui-greeter-1.2.1-kylin-fix-crash-with-the-same-uid-user.patch


author: huayadong<huayadong@kylinos.cn> -p29
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch27:ukui-greeter-1.2.1-kylin-fix-the-problem-that-the-users-avatar-of-the-same-uid-is-not-centered.patch


author: huayadong<huayadong@kylinos.cn> -p30
changelog:
  - Type:bugfix
  - ID  :[Bug#164455]
  - SUG :NA
  - DESC:add patch28:ukui-greeter-1.2.1-kylin-increase-name-label-height.patch


author: huayadong<huayadong@kylinos.cn> -p31
changelog:
  - Type:bugfix
  - ID  :[Bug#167602]
  - SUG :NA
  - DESC:add patch29:ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch


author: huayadong<huayadong@kylinos.cn> -p32
changelog:
  - Type: bugfix
  - ID  : [Bug#161924]
  - SUG : NA
  - DESC: add patch14 ukui-greeter-1.2.1-kylin-fix-kyreplace3.0-4-lightdm-unable-to-start.patch


author: houhongxun<houhongxun@kylinos.cn> -p33
changelog:
  -Type:bugfix
  -ID:[BUG#194488]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-locked-user-on-login-window.patch
        don't show locked user on login window


author: huayadong <huayadong@kylinos.cn> -p34
changelog:
  - Type:bugfix
  - ID:[BUG#196489]
  - SUG:NA
  - DESC:add patch:0001-ukui-greeter-1.2.1-kylin-remove-xhost.patch


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: lizhanchun <lizhanchun@kylinos.cn> 2.2.1-2.p15
changelog:
  - Type:	update
  - ID:	BUG#114583
  - SUG:	NA
  - DESC:	KYLIN-add-default-device-on-aarch64-when-inst-vm.patch 
  -		add default device on aarch64 when inst vm.


author: wangdi <wangdi@kylinos.cn> - 2.2.1-2.p16
changelog:
  - Type: update
  - ID:   BUG#129269
  - SUG:  NA
  - DESC: KYLIN-fix-virt-install-error-message-zh_CN-translation.patch 
  -               fix redundant characters in virt-install error message zh_CN translation.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p17
changelog:
  - Type: update
  - ID:   [TASK#159711]
  - SUG:  NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add kylin-virt-manager-2.2.1-4-fix-bug-68049-translation-of-tchinese.patch
  -       Add 0001-Set-minimum-memory-2048M-for-virt-install.patch
  -	Add 0001-Bug-119136-set-default-memory-2048.patch
  -	Add 0001-BUG-102438-Modify-is_loongarch64-to-is_loongarch.patch
  -	Add 0001-add-translations-for-zh_CN.patch
  -	Add 0001-temporarily-modify-version-V10-to-version-10.0.patch
  -	Delete duplicate machine types.
  -	Add mips64 loongarch support


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p18
changelog:
  - Type: update
  - ID:   [BUG#199984] [BUG#200170]
  - SUG:  NA
  - DESC: KYLIN-fix-virt-manager-error-message-zh_CN-translation.patch
  -               Fixed the issue that the virt-manager interface preference menu was displayed in English


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p19
changelog:
  - Type: update
  - ID:   TASK#187051
  - SUG:  NA
  - DESC: Add 0001-add-Chinese-traditional-translation-HK.po.patch
  -               add traditional Chinese translations for the HK versions.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p21
changelog:
  - Type: update
  - ID:   TASK#187713
  - SUG:  NA
  - DESC: add 0001-fix-cockpit-reboot-error-issue.patch
  -               fix-cockpit-reboot-error-issue.


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: yue yuankun <yueyuankun@kylinos.cn> - 2.30-1.p01
changelog:
  - Add patch:xkeyboard-config-2.30-kylin-fixbug-54226.patch
  - remove unknown character and modify some po


author: zhanzhimin<zhanzhimin@huawei.com> - 1.20.8-2
changelog:
  - Type:CVE
  - Id:CVE-2020-14346,CVE-2020-14361,CVE-2020-14362
  - SUG:NA
  - DESC:fix CVE-2020-14346,CVE-2020-14361,CVE-2020-14362


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-3.p02
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p06
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}17
changelog:
  - Type:bugfix
  - ID  :[bug#181281]
  - SUG :add patch 0001-fix-ghost-backup-oday.patch
  - DESC:fix ghost backup oday


author: HouHongxun <houhongxun@kylinos.cn> - 4.0.12kord1p18
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-add-traditional-chinese-translation-for-desktop-file.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}19
changelog:
  - Type: update
  - ID: [TASK#185224]
  - SUG: NA
  - DESC: add 0001-add-zh_HK-translate.patch 0001-add-zh_HK-qss-file.patch
          0001_backup_store_hk_png.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}21
changelog:
  - Type: buffix
  - ID: [BUG#215689]
  - SUG: NA
  - DESC: add 0001_add_ok_images.patch 0001-add-ok_btn-hk-translate.patch


