# changelog

author: Xiong Zhou <xiongzhou4@huawei.com> - v1.0-4
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patches from openeuler/A-FOT
         Add reboot action to fasten the second compilation,
         fix bugs and format codes.
  	   Reuse calcsum, delay pre-reboot operations and fixs typos.


author: wenxin<wenxin32@foxmail.com> - v1.4.1-3
changelog:
  - fix the query error of cve associated host
  - update verification method for host ip fieldl;fix repo field filter error
  - update TimedCorrectTask method


author: wenxin<wenxin32@foxmail.com> - v2.0.0-3
changelog:
  - Added support for cluster features.
  - Adjusted Task Module logic to use Celery for task management and execution.


author: luxuexian<luxuexian@huawei.com> - v2.1.0-2
changelog:
  - Fixed exceptions in calling stored procedures and cases caused by SQLschema upgrade
  - Fixed errors reported in calling cve summary interface


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-12
changelog:
  - to maintain functional stability, da-tool only releases network related analysis
  - it is not allowed to modify the configuration file of the da-tool


author: wangguangge<wangguangge@huawei.com> - v1.4.1-1
changelog:
  - update to v1.4.1
  - update cve fix logic
  - support rollback operation for kernel hotpatch/coldpatch


author: zhuyuncheng<zhuyuncheng@huawei.com> - v1.1.3-3
changelog:
  - Bugfix: fix the alert count error
  - Bugfix: for ai model, increase queried data length and add
    a time range for error judgment.


author: gongzhengtang<gong_zhengtang@163.com> - v1.2.0-1
changelog:
  - update the structure of response body; update how to get session used to
  - connect to the database


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Adjusted configuration file loading method: changed format from INI to YAML.
  - Added support for reading and writing configuration through Zookeeper.
  - Added support for reading and writing cache through Redis, including logic for current cache keys.
  - Implemented RSA signature verification for data.
  - Removed deprecated files.
  - Optimized Prometheus import statements.
  - Added retry mechanism to `response` method.


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Split the existing service module into distinct modules:
    - Task Module: Handles task management and execution.
    - Host Module: Manages host configurations and interactions.
    - User Module: Manages user accounts and permissions.
    - Interface Dispatch Module: Manages the dispatching of requests to appropriate interfaces.
  - Added a new command line tool for enhanced functionality and management.
  - Introduced support for clustering, allowing for more robust and scalable deployments.
  - Reorganized the service architecture to improve modularity and maintainability.
  - Fixed various issues to enhance stability and performance.


author: xiaowen <xiaowen@kylinsec.com.cn> - 23.08.4-3.kb1
changelog:
  - Treat absolute path as relative path during extraction (b:106494)[CVE-2024-57966]
  - Revert CMake macros, because build failed. (f:106906)


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: wangdi <wangdi@kylinos.cn> - 0.15.0-3
changelog:
  - Change hardcoded deafult hash algorithm from legacy md4 to sha512
  - Change dependecy from ansible-2.9 to ansible since ansible version has bumped to 2.9


author: liweiganga <liweiganga@uniontech.com> - 2021.06.30-2
changelog:
  - remove unused and duplicate packages
  - Delete and create a common user, log in with an existing user


author: Miroslav Suchý <msuchy@redhat.com> 1.82-1
changelog:
  - move symlink of fedora-rawhide to fedora-39
  - add openEuler new key
  - update copr keys
  - add fedora 40 gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.84-1
changelog:
  - add tumbleweed key
  - Added RPM Fusion keys for Fedora 39.
  - update copr keys
  - add elastic gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.86-1
changelog:
  - update copr keys
  - Add Jenkins 2023
  - Add keys for Bacula & Baculum
  - Add keys for Google Cloud
  - Add VeraCrypt keys
  - add Element keys


author: Hanecak <hany@hany.sk> - 9.15.1-2
changelog:
  - Custom /usr/lib/ocf/resource.d/linbit/drbd is broken, upstream variant works
    (#1908265, PR by robert)


author: Peter Hanecak <hany@hany.sk> - 9.18.2-1
changelog:
  - Upstream release of 9.18.2 (note: /lib/drbd/drbd moved to /lib/drbd/scripts/drbd)
  - Adjusted URL of the source package
  - Custom drbd.service dropped, upstream variant used, since upstream reworked
    quite a lot
  - Build now requires rubygem-asciidoctor


author: queyanwen<queyanwen@huawei.com> - 1.0.1-2
changelog:
  - Optimize the accuracy of non-steady-state data prediction and training.
  - The anbient temperature check is added befor the collection is started. If the temperature is
  - greater than 28°C, the collection will not be started.


author: queyanwen<queyanwen@huawei.com> - 1.0.1-3
changelog:
  - The current condition for determining whether the system enters the stable state is that
  - the difference between the maximum temperature and the minimum temperature within 60s is less than 0.2 degrees.
  - This judgment is too strict and needs to be changed to 2 degrees.
  - In addition, the average fuzzy processing in five windows is used to prevent data jitter.
  - When the entire system can obtain the CPU power consumption data, the obtained CPU power consumption
  - is directly used during training, instead of obtaining the CPU power consumption by inferring.


author: heppen<hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: Ctrl Auth request on main thread, but release on socket thread.
  - Bug fix: Modify policy file but do not take effect.
  - Bug fix: IsNumStr returns false when the input string is a negative number.
  - Add instructions to the config file.


author: jinye<jinye10@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: Default policy can't restore after stop eagle service
  - Bug fix: Some spell bugs
  - Bug fix: Modify watt_sched_enable don't take effect
  - Bug fix: Set watt_sched_enable as zero SetWattFirstDomain return error
  - Reconstruct eagle init and load part


author: chenyanpanHW <chenyanpan@huawei.com> - 0.5.0-16
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Add-PL_ARCH-for-AArch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/coverity.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-add-loongarch64-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-add-riscv-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yuanqin <yuanqin@kylinsec.com.cn> - 4.2.9.7-3.kb1
changelog:
  - modified fcitx-configtool.desktop.in (f:28100)
  - solve Pallet icon replacement does not work (f:106695)


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 128.11.0-1
changelog:
  - Update to 128.11.0
  - Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
  - Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269


author: wangkai <13474090681@163.com> - 128.13.0-1
changelog:
  - Update to 128.13.0
  - Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
    CVE-2025-8033 CVE-2025-8034 CVE-2025-8035


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 128.14.0-1.kb1
changelog:
  - Update resource URLs for newtab page (b:24719)
  - New translation of open the profile manager.(b:47784)
  - Change the logo of openeuler to KylinSec.(f:39662)
  - Change the official website address of the first startup.(b:49674)
  - Modify home page (f:54944)


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: tangjie02 <tangjie02@kylinos.com.cn> - 1.0.1-1.ky3
changelog:
  - KYOS-F: Modify the python3-jinja2 to Requires from BuildRequires.
  - KYOS-F: Remove gdbus_codegen.glibmm*egg-info directory after install.


author: zhanglin <lin.zhang@turbolinux.com.cn> - 1:3.38.2-4
changelog:
  - fix build when Meson >= 0.61.5
  - add patch modify-meson-build-tepl6.patch
  - add patch fix-i18n-merge-file.patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-4
changelog:
  - Add four patches to make gome-boxes avoid setting qemu unsupported modules
    add vnc instead of spice


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.2-2
changelog:
  - Move '%find_lang gnome-initial-setup' to %install, fix not found gnome-initial-setup.lang if disable %check build


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.0-2
changelog:
  - Move '%find_lang gnome-photos' to %install, fix not found gnome-photos.lang if disable %check build


author: tangjie02 <tangjie02@kylinsec.com.cn> - 44.5-1.kb1
changelog:
  - Remove curated minimal number limited. (f:106699)
  - Move appstore category data to xml configure file. (f:106699)
  - support update online if it is graphical application. (f:106699)
  - exit the program when you close the application. (f:34789)
  - no check network status when install a local file. (f:33806)
  - sort by timestamp for featured in overview page. (f:106699)
  - refresh metadata before calls gs_plugin_appstream_check_silo function. (f:106699)
  - Add tooltip for back button and update styles. (f:106699)
  - Add MATE into compatible projects by default. (f:25625)
  - disable odrs, fwupd and stream plugins. (f:27903)
  - modify the name of application and window. (f:106699)


author: xuqing <xuiqng@kylinsec.com.cn> - 44.5-1.kb3
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 ppc64le s390x loongarch64 sw_64 (f:108358)


author: yaoxin <1024769339@qq.com> - 9.2.10-1
changelog:
  - Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
    CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
    CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097


author: Funda Wang <fundawang@yeah.net> - 8.0.32-27.5
changelog:
  - greatsql-mysql-config was removed previously, my.cnf was moved
    into greatsql-server package without conflicts and obsoletes


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.13-3
changelog:
  - Solve bug of "PANIC: unprotected error in call to Lua API
    (attempt to call a nil value) Aborted"


author: chenchen <chen_aka_jan@163.com> - 2019.3-4
changelog:
  - fix build error due to gcc upgrade to gcc 12.3.4
  - add variable OMPI_ALLOW_RUN_AS_ROOT=1 for fix test error


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-68.0.0.72
changelog:
  - !14161  drm/rockchip: vop: Fix a dereferenced before check warning
  - drm/rockchip: vop: Fix a dereferenced before check warning
  - !14143 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !14177 v2  kabi: restrict the KABI fix to a specific architecture and dist
  - kabi: enable KABI_COMPAT series by default on x86_64 & ARM64
  - kabi: restrict the KABI fix to a specific architecture and dist
  - !14151  CVE-2024-53142
  - initramfs: avoid filename buffer overrun
  - !14183  mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - !13999 add iommu support for loongarch
  - LoongArch: add iommu support
  - LoongArch: Fix cpu hotplug issue
  - !13998 Synchronization with patch for loongarch virtualization
  - LoongArch: Fix AP booting issue in VM mode
  - LoongArch: KVM: Remove unnecessary CSR register saving during enter guest
  - LoongArch: KVM: Remove undefined a6 argument comment for kvm_hypercall()
  - LoongArch: KVM: Add vcpu mapping from physical cpuid
  - LoongArch: KVM: Remove unnecessary definition of KVM_PRIVATE_MEM_SLOTS
  - LoongArch: KVM: Add cpucfg area for kvm hypervisor
  - LoongArch: KVM: Add KVM hypercalls documentation for LoongArch
  - LoongArch: KVM: Implement function kvm_para_has_feature()
  - LoongArch: KVM: Enable paravirt feature control from VMM
  - LoongArch: KVM: Add PMU support for guest
  - LoongArch: KVM: Add vm migration support for LBT registers
  - LoongArch: KVM: Add Binary Translation extension support
  - LoongArch: KVM: Add VM feature detection function
  - LoongArch: Revert qspinlock to test-and-set simple lock on VM
  - LoongArch: KVM: Invalidate guest steal time address on vCPU reset
  - KVM: Discard zero mask with function kvm_dirty_ring_reset
  - perf kvm: Add kvm-stat for loongarch64
  - LoongArch: KVM: Add PV steal time support in guest side
  - LoongArch: KVM: Add PV steal time support in host side
  - LoongArch: KVM: always make pte young in page map's fast path
  - LoongArch: KVM: Mark page accessed and dirty with page ref added
  - LoongArch: KVM: Add dirty bitmap initially all set support
  - LoongArch: KVM: Add memory barrier before update pmd entry
  - LoongArch: KVM: Discard dirty page tracking on readonly memslot
  - LoongArch: KVM: Select huge page only if secondary mmu supports it
  - LoongArch: KVM: Delay secondary mmu tlb flush until guest entry
  - LoongArch: KVM: Sync pending interrupt when getting ESTAT from user mode
  - LoongArch: KVM: Add mmio trace events support
  - LoongArch: KVM: Add software breakpoint support
  - LoongArch: KVM: Add PV IPI support on guest side
  - LoongArch: KVM: Add PV IPI support on host side
  - !14163  LeapIOraid： Remove Unnecessary header file references: version.h
  - LeapIOraid： Remove Unnecessary header file references: version.h
  - !13997 Add interrupt controller emulation in the kernel
  - LoongArch: KVM: Add irqfd support
  - LoongArch: KVM: Add PCHPIC user mode read and write functions
  - LoongArch: KVM: Add PCHPIC read and write functions
  - LoongArch: KVM: Add PCHPIC device support
  - LoongArch: KVM: Add EXTIOI user mode read and write functions
  - LoongArch: KVM: Add EXTIOI read and write functions
  - LoongArch: KVM: Add EXTIOI device support
  - LoongArch: KVM: Add IPI user mode read and write function
  - LoongArch: KVM: Add IPI read and write function
  - LoongArch: KVM: Add IPI device support
  - LoongArch: KVM: Add iocsr and mmio bus simulation in kernel
  - !14111  LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - !14162  LeapIOraid： Fix too many invalid interruptes in arm64
  - LeapIOraid： Fix too many invalid interruptes in arm64
  - !11509 [OLK-6.6] Enhanced Hygon processor's processing capabilities for large memory copying
  - mm: Enhanced copy capabilities for Hygon processor
  - !14155  drm/amd/display: Adjust VSDB parser for replay feature
  - drm/amd/display: Adjust VSDB parser for replay feature


author: Xie XiuQi <xiexiuqi@huawei.com> - 6.6.0-68.0.0.73
changelog:
  - kabi: add kabi_ext1 list for checking
  - check-kabi: fix kabi check failed when no namespace
  - kernel.spec: fix with_kabichk on non-arm64 platform


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-69.0.0.75
changelog:
  - !14221  KABI for cgroup
  - cgroup: add more reserve kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Move rcu_head up near the top of cgroup_root
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - !14220  fs: Allow fine-grained control of folio sizes
  - fs: Allow fine-grained control of folio sizes
  - !12108  include/msi: modify kabi size of msi_desc
  - include/msi: modify kabi size of msi_desc
  - !14195 [OLK-6.6]Hygon: Enable CONFIG_CMA by default on X86 architecture
  - x86/Kconfig: Select CONFIG_CMA if CONFIG_HYGON_CSV=y
  - x86/config: Enable CONFIG_CMA by default in openeuler_defconfig
  - !14215  iommu: Reserve extra KABI entry for struct iopf_group
  - iommu: Reserve extra KABI entry for struct iopf_group
  - !14223 v2  kabi: net: reserve space for xdp subsystem related structure
  - kabi: net: reserve space for xdp subsystem related structure
  - !14224  net/kabi: Reserve space for net structures
  - net/kabi: Reserve space for net structures
  - !14236 v2  statx: kabi: KABI reservation for kstat
  - statx: kabi: KABI reservation for kstat
  - !14218  seq_file: kabi: KABI reservation for seq_file
  - seq_file: kabi: KABI reservation for seq_file
  - !14203  tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - !14191  nfs: fix the loss of superblock's initialized flags
  - nfs: fix the loss of superblock's initialized flags


author: chengyechun <chengyechun1@huawei.com> - 2.24.6-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update i40e version to 2.24.6 to fix kernel-6.6 based build error


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yanglu <yanglu72@h-partners.com> - 4.7.0-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update iavf version to 4.7.0 to fix kernel-6.1 based build error


author: liukuo <liukuo@kylinos.cn> - 2.18.0-1
changelog:
  - upgrade version to 2.18.0, featuring selective inclusion of the dracut module in initramfs upon request and added support for Scaleway


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 1.6.6-7.kb1
changelog:
  - feature(bbold): add support for sw_64 (f:125528)
  - fix(schedcore): add missing definitions for sw_64 (b:125528)
  - fix(moby): remove unsupported signal definition for sw_64 (b:125528)
  - fix(vendor): add missing definition for sw_64 (b:125528)


author: herengui <herengui@kylinsec.com.cn> - 2.8.2-17.kb1
changelog:
  - Fix the issue where build dependency packages cannot be fetched in an offline environment (b:111120)


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: modify kernel config for supporting shared_fs:virtio-fs option


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: xiaowen <xiaowen@kylinsec.com.cn> - 5.27.10-4.kb1
changelog:
  - %patchN is deprecated (2 usages found), use %patch N (or %patch -P N) (f:106836)
  - Adapt to the new CMake macros to fix build failure; use License GPLv2+ in doc package (f:106836)
  - Add function to authenticate local clients (v:106836)[CVE-2024-36041]


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.0.8-1
changelog:
  - Update to 2.0.8, using BuildRequires xfce4-dev-tools replace exo-devel(new version of exo not contains exo-csource).


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.1-1.kb1
changelog:
  - Move desktop-file-validate to execute after find_lang,in order to resolve the build error. (b:108340)


author: yaoxin <yao_xin001@hoperun.com> - 2.0.20-1
changelog:
  - Update to 2.0.20
    * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
    * Open files with appropriate access on Windows. Closes #3119.
    * Don't allow invalid response topic values.
    * Fix some strict protocol compliance issues. Closes #3052.
    * Fix cmake build on OS X. Closes #3125.
    * Fix build on NetBSD
    * Fix mismatched subscribe/unsubscribe with normal/shared topics.
    * Fix crash on bridge using remapped topic being sent a crafted packet.
    * Don't allow SUBACK with missing reason codes in client library.
    * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
    * Fix mosquitto_rr not honouring -R. Closes #2893.
    * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
    * Fix max_inflight_messages not being set correctly. Closes #2876.
    * Fix mosquitto_passwd -U backup file creation. Closes #2873.


author: tangjie <tangjie@kylinsec.com.cn> - 0.35.1-2.kb1
changelog:
  - Do not close the window on exit. (f:9831)
  - update-desktop-database after install sucess. (b:25213)


author: pengmeng <pengmeng@kylinsec.com.cn> - 0.35.1-2.kb3
changelog:
  - Enable mpv decoder vaapi and vdpau. (f:114112)
  - change mpv video playback configuration when using JM cards. (f:114112)


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: zhangxingrong <zhangxingrong@uniontech.cn> - 44.6-4
changelog:
  - delete: Don't wrongly set window as not alive when pings are disabled
  - window: Add IS_ALIVE to get_property
  - core/window: Propagate focus appearance to all ancestors
  - clutter/actor: Don't write uninitialized out values on failed transform
  - clutter/pick-stack: Add an allocation check to calculate_clear_area ()


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: will_niutao <niutao2@huawei.com> - 1.5.1-1
changelog:
  - Change upstream to https://github.com/orocos/orocos_kinematics_dynamics, and rename the package to orocos-kdl


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.4.4.1-2
changelog:
  - Change requires from postgresql-13-contrib and postgresql-13-server to postgresql-contrib and postgresql-server


author: Pengju Jiang <jiangpengju2@huawei.com> - 2.2.0-2
changelog:
  - when the command line is parsing a single package of json data, there will be none in the
  - required_by_bin and required_by_bin lists in the json data, resulting in parsing errors,
  - increase the judgment condition to prevent the existence of none value


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-3
changelog:
  - When the input parameters of the script that executes the installation of es and redis are incorrect, 
  - the prompt message is incorrect.
  - When the redis port setting is unreasonable, the prompt message for starting the service is incorrect.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-4
changelog:
  - Due to the inappropriate mapping rules between the binary package and the source package, 
  - the source package corresponding to the binary package cannot be found when the query bedepend require, 
  - and an error is reported.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-5
changelog:
  - When the query is dependent, a list containing only None is entered, 
  - which causes an error in the es query. 
  - Modify the es query encapsulation interface to filter the None value.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-7
changelog:
  - Due to a problem with docker, when pkgship is used in docker,
  - it must be created with the --privileged parameter, otherwise it will fail. So update the instructions.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-8
changelog:
  - Solve the problem of patch application failure due to the file encoding format being crlf.
  - Solve the problem of json serialization caused by flask's new dependency on simple-json.


author: Haiwei Li <lihaiwei8@huawei.com> - 2.2.0-9
changelog:
  - TerminalTable class Use the deprecated method of PrettyTable, resulting in compilation failure, delete the file.


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
changelog:
  - Update to 5.0.0:
    * Breaking: Change default to disable private network access
      This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71


author: GuoCe <guoce@kylinso.cn> - 3.8.1-1
changelog:
  - Update package to version 3.8.1
  - Corrects WSGI adapter handling of root path.
  - Handles case where `"client"` is ``None`` in WsgiToAsgi adapter.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.1-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-fix-build-erro.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-delete-import-m2r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <yao_xin001@hoperun.com> - 4.2.15-1
changelog:
  - Update to 4.2.15
    * CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
    * CVE-2024-41990: Potential denial-of-service vulnerability in ``django.utils.html.urlize()``
    * CVE-2024-41991: Potential denial-of-service vulnerability in ``django.utils.html.urlize()`` and ``AdminURLFieldWidget``
    * CVE-2024-42005: Potential SQL injection in ``QuerySet.values()`` and ``values_list()``
    * Fixed a regression in Django 4.2.14 that caused a crash in ``LocaleMiddleware`` when processing a language code over 500 characters


author: xu_ping <707078654@qq.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Add support for pyhon3.11 and python3.12
  - Added a new valid PGP key to sign the package
  - python3.7 is not supported and Remove support for python3.6


author: jiangxinyu <jiangxinyu@kylinos.cn> - 5.3.5-1
changelog:
  - Update package to version 5.3.5
    Fix crash when using global_keyprefix with a sentinel connection


author: xu_ping <707078654@qq.com> - 9.0.1-1
changelog:
  - Upgrade version to 9.0.1
  - add Raw UDP and DTLS support.
  - Deprecate add_log event hook and mitmproxy.ctx.log.


author: tanyulong <tanyulong@kylinos.cn> - 2.4.0-2
changelog:
  - delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/opentracing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: zhaojingyu <zhaojingyu@klinos.cn> - 5.4.1-1
changelog:
  - Update package to version 5.4.1
    fixed a regression from version 5.4.0 that incorrectly handled files opened twice via file descripto


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-1
changelog:
  - Update package to version 0.15.0
  - FIX Copy JupyterLite contents early so it runs before jupyterlite_sphinx build-finished


author: xiaozai <xiaozai@kylinos.cn> - 1.7.0-1
changelog:
  - Update package to version 1.7.0
    - Remove deprecated plugins
    - Remove python 2 declaration
    - Add static method Tree.from_map


author: wangkai <13474090681@163.com> - 1.1.0-3
changelog:
  - Compling package with pyproject
  - Obsoletes subpackage python-blurb-help
  - Add check for blurb command


author: Miro Hrončok <mhroncok@redhat.com> - 3.3.4-5
changelog:
  - Subpackage python2-empy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: wangjunqi <wangjunqi@kylinos.cn> - 2.1.0-1
changelog:
  - Update package to version 2.1.0 
  	Add support for sys/policies endpoint (GH-1100)
  	add quota support to system backend (GH-1092)
  	Add support to PKI class to perform CRUD on issuers (GH-1102)


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.10.6-1
changelog:
  - Update package to version 2.10.6
    Remove Cython & Move to pyproject.toml
    Move settings to pydantic-settings
    Add hooky config to pyproject.toml
    Add github token to cherry-pick
    Add strict option to BaseConfig


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.27.2-1
changelog:
  - Update package to version 2.27.2
    Fix linux PGO wheel build
    Forward default_value calls to the underlying schema for DefinitionRefValidator
    Include JSON Schema input core schema in function schemas


author: wangkai <13474090681@163.com> - 0.4.4-1
changelog:
  - Update package to version 0.4.4
  - Fix CVE-2023-30608
  - Compling package with pyproject
  - Obsoletes subpackage python-sqlparse-help


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync upstream patches to support isulad container engine and systemd cgroup driver


author: wutao <wutao61@huawei.com> - 0.7.0-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/http_parser.rb-0.7.0/http_parser.rb/ to
    /usr/lib64/gems/ruby/http_parser.rb-0.7.0/ to solve fluentd loaderror problem


author: wutao <wutao61@huawei.com> - 1.4.1-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl-ruby/
    to /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl/ to solve fluentd loaderror problem


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: quanaiguo <quanaiguo@kylinsec.com.cn> - 0.0.2-0.03.kb1
changelog:
  - Add Patch: 0003-fix-loongarch64-architecture.patch. (f:114175)
  - Add Patch: 0004-fix-sw64-architecture.patch. (f:114175)
  - add loongarch64 and sw64 support. (f:114175)


