# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 1.20.10-2.kb2
changelog:
  - Fix missing _Apply/_Cancel translations. Regenerate .pot and .gmo from source to include all UI strings (b:115530).


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yuanqin <yuanqin@kylinsec.com.cn> - 1.2.8-1.kb1
changelog:
  - Use appropriate callbacks for client / task async calls (f:106695)
  - Revert PkClient: Replace the GSimpleAsyncResult with the GTask API(f:106695)
  - feature(backend-dnf): support "depends-on" & "required-by" (f:53196)


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: wangce <wangce@kylinsec.com.cn> - 36.16.5-38.kb19
changelog:
  - reapply language settings to ensure fonts are correctly loaded (b:121257) 
  - revert set default lang to locale and amend welcome glade (b:121257)


author: tangjie02 <tangjie02@kylinsec.com.cn> - 0.16.1-1.kb1
changelog:
  - Support to parse appstream-icons.tar.gz file from software source.(f:106695)
  - Explicitly set format style when installing catalog metadata.(b:106695)


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.1-1.kb1
changelog:
  - Update package to version 1.28.1-1.oe2403sp2 (f:108340)
  - Remove CVE-2023-51698.patch、CVE-2023-52076.patch, because 1.28 already integrated. (f:108340)


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 1:3.1.2-1
changelog:
  - update version to 3.1.2
    - When processing a run level change, make auditd exit
    - In auditd, fix return code when rules added in immutable mode
    - In auparse, when files are given, also consider EUID for access
    - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
    - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
    - Update all lookup tables for the 6.5 kernel
    - Don't be as paranoid about auditctl -R file permissions
    - In ausearch, correct subject/object search to be an and if both are given
    - Adjust formats for 64 bit time_t
    - Fix segfault in python bindings around the feed API
    - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: liutie <liutie4@huawei.com> -5.2.15-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:remove path /usr/bin for sub package relocation and fix issue


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: Zhou Bowen <zhoubowen@kylinsec.com.cn> - 0.29.1-3.kb1
changelog:
  - bcc: import subprocess in __init__.py (b:106833)
  - fix larchintrin.h not found error for loongarch64 (b:106833)


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: Funda Wang <fundawang@yeah.net> - 2.41-14
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: Tan Jun <tanjun@kylinsec.com.cn> - 1.3-6
changelog:
  - When the data pushed by the arbitration node exceeds 1500 mtu bytes in size, it is sent in multiple packets


author: Tan Jun <tanjun@kylinsec.com.cn> - 1.3-7
changelog:
  - Modify the configuration file path. The default path has been changed from /etc/bond_cross_fault.conf to /home/nusp/conf/bond_cross_fault.conf.


author: tanjun <tanjun@kylinsec.com.cn> - 1.3-9
changelog:
  - The path of the accessory file is first determined by using "echo ~nusp". If it does not exist, then it is determined by using "getpwuid(getuid())".


author: tanjun <tanjun@kylinsec.com.cn> - 1.3-10
changelog:
  - Convert the sent message from a non-char type to network byte order, and convert the received message from a non-char type to host byte order.


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: herengui <herengui@kylinsec.com.cn> - 2.0-1
changelog:
  - KYOS-F: normative storage catalogue structure. (#31163)
  - KYOS-F: provide keystore update tool. (#31163)


author: herengui <herengui@kylinsec.com.cn> - 3.0.1-1
changelog:
  - Optimize the code structure and upgrade to version 3.0.1
  - Introduce the newly added SM (Guomi) root certificate. (f:101526)


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-1.kb26
changelog:
  - Remove the location bar show and hide item(f:48506)
  - Fix the locaction path can not show all(b:48472)
  - Fixed a crash caused by passing empty strings to g_locale_to_utf8(b:107366)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-1.kb27
changelog:
  - add the caja icons file(f:43154)
  - add the caja ui get drive icon name func and change error icon name(f:43154)
  - Change the ip svg icon(f:48473)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-1.kb32
changelog:
  - fix desktop icon move abnormal after refresh (b:119938)
  - fix desktop menu don't have action of "icon size" and "sort by xxx" (b:119936)
  - repatch the patches. (b:119938)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-1.kb34
changelog:
  - fix some memory leak problem and simplify process_new_files function(b:121165)
  - fix that background abnormal when change the scale to 200%. (b:121360)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-1.kb35
changelog:
  - fix some memory leak problems that report by valgrind (b:133533)
  - add enable-glib-log-override option (f:138327)


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-16
changelog:
  - Ignored the `-Wa,--generate-missing-build-notes=` option, update llvm-lit config to support macro `build_for_openeuler`


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/cmake-3.27.9-8.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: yuanxing <yuanxing@kylinsec.com.cn> - 309-2.kb5
changelog:
  - Fix Add team Chinese translation (f:108319)
  - remove incorrect provides cockpit-machines and cockpit-machines-ovirt (f:108319)
  - remove require libvirt and libvirt-client (f:108319)


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: Wang Qi <wangqi@kylinsec.com.cn> - 12.3.1-98.kb1
changelog:
  - sync patches of oe2403sp2 (f:108833)
  - sync patches for fixing CPU architecture info display for aarch64 (f:108833)


author: panchenbo <panchenbo@kylinsec.com.cn> - 12.3.1-98.kb2
changelog:
  - refactor 0003-Sw64-Port-add-multi-prefetch-support-for-sw64.patch to solve conflict problem (b:110008)


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: xu_ping <xuping33@h-partners.com> - 1.0.0-20
changelog:
  - Type: fix warning
  - ID: NA
  - SUG: NA
  - DESC: fix install custom_build_tool warning due to new rpm-build not provides find-debuginfo.sh


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: liuxingxiang <liuxingxiang@kylinsec.com.cn> - 4.16.2-6.kb1
changelog:
  - Fix fastestmirror not effective.(f:35273)
  - feature(*) add fastestmirror True in the etc dnf dnf.conf file;(f:106892)
  - fix(*) default execution time of dnf makecache is changed to once a day.(f:106892)
  - add lost patches;(f:106892)
  - always apply the patch of sw_64. (f:33003)
  - always apply the patch of loongarch64.(f:106892)


author: liuxingxiang <liuxingxinag@kylinsec.com.cn> 1.0-2
changelog:
  - KYOS-B: CSV file header modification.
  - KYOS-B: Add processing for null fields in CSV files.
  - KYOS-B: Fix the issue of abnormal writing of kernel version and compatibility information to CSV during rollback.
  - KYOS-B: When adding rollback, non kernel software package errata information is obtained and written to a CSV file (Related #63600).


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.7-2
changelog:
  - Type:cves
  - ID:CVE-2023-39976
  - SUG:NA
  - DESC:fix CVE-2023-39976
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: huangdengdui <huangdengui@huawei.com> - 23.11-24
changelog:
  Sync some patchs from upstreaming, includind some bugfixes, hns3 pmd
   flow rule priority feature, hns3 pmd outer VLAN flow match feature,
   and support dump reigser names and filter.
   This patch set is modified as follows:
   - net/hns3: fix cannot fully use hardware flow director table
   - net/hns3: fix error code for repeatedly create counter
   - net/hns3: support flow rule priority
   - common/nfp: use new kvargs process API
   - net/tap: use new kvargs process API
   - net/sfc: use new kvargs process API
   - kvargs: rework process API
   - net/hns3: fix variable type
   - net/hns3: fix pointer offset
   - net/hns3: fix error log
   - net/hns3: support filtering registers by module names
   - net/hns3: support reporting names of registers
   - net/hns3: refactor register dump
   - net/hns3: remove separators between register module
   - net/hns3: fix dump counter of registers
   - net/hns3: remove some basic address dump
   - telemetry: register command with private argument
   - ethdev: fix race on ports in telemetry endpoints
   - ethdev: add telemetry command for registers
   - ethdev: add report of register names and filter
   - net/hns3: support outer VLAN flow match
   - net/hns3: register VLAN flow match mode parameter
   - net/hns3: support general tunnel flow match
   - net/hns3: restrict tunnel flow rule to one header
   - net/hns3: remove ROH devices
   - net/hns3: dump queue head and tail pointer info
   - dmadev: fix potential null pointer access
   - net/hns3: verify reset type from firmware
   - ethdev: verify queue ID in Tx done cleanup


author: huangdengdui <huangdengui@huawei.com> - 23.11-30
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - net/hns3: fix unrelease some resources on reset case
   - net/hns3: fix divide by zero
   - net/hns3: fix incorrect failed rollback
   - net/hns3: fix memory leakage for indirect action
   - net/hns3: fix extra waiting for link up
   - net/hns3: fix variable overflow
   - net/hns3: fix memory leakage in failure path
   - net/hns3: remove weak symbols
   - net/hns3: fix reset timeout
   - net/hns3: fix copper port initialization
   - net/hns3: rename RAS module
   - net/hns3: remove PVID info dump for VF
   - net/hns3: fix mbuf freeing in simple Tx path
   In addition, sync a bugfix for devtools:
   - devtools: fix symbol listing


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: Liu Dalin <liudalin@kylinsec.com.cn> - 059-14.kb1
changelog:
  - fix(resume): enable hibernate if the kernel supports it (b:107475)
  - fix(resume): include in hostonly mode if resume= on cmdline (b:107475)
  - fix(resume): add new systemd-hibernate-resume.service (b:107475)
  - feat(resume): also consider resume= in the cmdline as enabling hibernation (b:107475)
  - dracut append kylin custom cpio into initramfs image (f:107475)
  - fix adapt to KSVD Related 49949 (b:107475)
  - fix change gob runing time for device live rw (b:107475)


author: - Chenxi Mao <chenxi.mao@suse.com> - 1.25-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Upgrade dwarves version to 1.25 to fix build error
          if kernel version upgrade to 6.4


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.47.0-2
changelog:
  - For openeuler 24.03 LTS, remove metadata_csum_seed and orphan_file
    to keep same with openeuler 22.03 LTS.


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: gaobo <gaobo@kylinsec.com.cn> - 1.25.1-2.kb1
changelog:
  - Build ecore_sdl versioned so. So efl no longer requires efl-devel (f:106906)
  - remove from start menu (b:51029)


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 1.26.2-1.kb1
changelog:
  - Fix opening non UTF8 encoded compressed files in non UTF8 environments with garbled titles. (b:106906)
  - Fix garbled compressed files generated by dragging and dropping files in non-UTF8 environments. (b:106906)
  - Fix archive name encoding error when drag multiple files to create archives (b:31192)
  - remove compress option in computer trash and root folder. (b:27922)
  - change chinese translation. (b:28543)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.2-1.kb1
changelog:
  - Upgrade version of package to 1.28.2-1.oe2403sp2 (f:106906)
  - Change the way of decode title name, because the title charset are may not same as the locale. (f:106906)


author: Ouuleilei <wangliu@iscas.ac.cn> - 3.3.0-14
changelog:
  - remove texlive packages from exclude list and fix riscv64 devstation livecd config not found 
  - add 24.03SP2 rpmlist_riscv64.xml normal_riscv64.xml


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 3.3.0-14.kb1
changelog:
  - update version to 3.3.0-14 (b:123256)
  - kylinsec custom oemaker (b:123256)
  - fix automatic installation without user license agreement (b:118569) 
  - kylinsec support sw_64 efi boot (b:118958)
  - feature grub add SP1 identifier in grub (f:118593)
  - support autoinstall for sw_64 and remove vga (f:121273)
  - add ngbe driver in initrd.img (f:123277)
  - install ngbe kmod in runtime install (f:123277)


author: mazhiguo <mazhiguo@kylinsec.com.cn> - 3.3.0-14.kb2
changelog:
  - remove kernel-source from rpmlist (b:123277)
  - remove group container-management in normal_sw_64.xml (b:133427)


author: mazhiguo <mazhiguo@kylinsec.com.cn> - 3.3.0-14.kb3
changelog:
  - fix ks.cfg for x86_64 (b:137585)
  - fix to install ks.cfg for aarch64 and sw_64 (b:137585)
  - install selinux-policy-mls default (b:137585)


author: mazhiguo <mazhiguo@kylinsec.com.cn> - 3.3.0-14.kb7
changelog:
  - revert again: fix default install sxe-kmod for base (b:140061)
  - install mwv207d-mesa-dkms in group x11 (f:116790)


author: Wang Qi <wangqi@kylinsec.com.cn> - 3.4.14-17.kb2
changelog:
  - update oe2403sp2 to KS-6-SP1 ,batch fix cve through rebuild (f:108833)
  - resolve cryptographic vulnerabilities in Go FIPS OpenSSL mode (v:108833)[CVE-2024-9355]
  - fixed net/http HTTP/1.1 client vulnerability (v:108833)[CVE-2024-24791]
  - fixed HTTP/2 resource exhaustion via excessive CONTINUATION frames (v:108833)[CVE-2023-45288]
  - fixed panic in TLS certificate verification for unknown key algorithms (v:108833)[CVE-2024-24783]
  - fixed html/template auto-escaping bypass vulnerability (v:108833)[CVE-2024-24785]
  - fixed memory exhaustion in multipart form parsing (v:108833)[CVE-2023-45290]
  - fixed HTTP chunk extension memory amplification (v:108833)[CVE-2023-39326]
  - fixed information disclosure in proxy authentication (v:108833)[CVE-2025-4673]


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 ppc64le s390x loongarch64


author: Funda Wang <fundawang@yeah.net> - 5.1.10-2
changelog:
  - adopt to new cmake macro
  - drop useless desktop-file-install
  - move metainfo validation into check section
  - disable dbus daemon test, as it does not pass during eulermaker


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: lishengsong <lishengsong@kylinsec.com.cn> - 1.2.6-7.kb1
changelog:
  - Fixed the issue where the authentication window pulled up by the firewall command had an English prompt(f:125539)


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: Wang Qi <wangqi@kylinsec.com.cn> - 1.10.2-10.kb1
changelog:
  - rw bind app and add default remote. (b:41058)
  - add provides flatpak-lib for install gnome-software. (f:38372)


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Jiayi Chen <chenjiayi22@huawei.com> - 5.2.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport five patches from upstream to fix double free bug in 5.2.0-1
         backport-Fix-a-bug-with-Node_elem_new.patch
         backport-Additional-fix-for-Node_elem_new.patch
         backport-Yet-another-fix-and-test-for-Node_elem_new.patch
         backport-Fix-a-memory-leak.patch
         backport-Code-simplification-in-interpret.h.patch


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.0.2-85.kb1
changelog:
  - sync 1.0.2-85 from openEuler 24.03 LTS SP2(f:110008)
  - remove -march=native for allarch to avoid Illegal instruction (b:80036)


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: yefeng <yefeng@kylinsec.com.cn> - 2:3.0.2-4.kb1
changelog:
  - update to version 3.0.2-4.kb1 (f:109480)
  - Fix CVE-2025-10920, CVE-2025-10922, CVE-2025-10923, CVE-2025-10924 and CVE-2025-10925 (v:109480)[CVE-2025-10920][CVE-2025-10922][CVE-2025-10923][CVE-2025-10924][CVE-2025-10925]
  - Fix CVE-2025-6035 (v:109480)[CVE-2025-6035]
  - Fix CVE-2025-5473 (v:109480)[CVE-2025-5473]
  - Fix CVE-2025-2761 (v:109480)[CVE-2025-2761]


author: zhangxiaoqi <zhangxiaoqi@kylinsec.com.cn> - 2:3.0.2-4.kb3
changelog:
  - sync patchfile from openEuler 24.03 LTS SP2(f:131294)
  - modify Epoch same as openEuler 24.03 LTS SP2(f:131294)


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: gaobo <gaobo@kylinsec.com.cn> - 3.30.0-2.kb1
changelog:
  - Downgrade to 3.30.0-2.oe2203sp1, as it does not work properly with PackageKit version 1.2.8 (b:36040)


author: Vanient <xiadanni1@huawei.com> - 1.21.4-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: allow update of system stack bounds on callback from C thread


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: mazhiguo <mazhiguo@kylinsec.com.cn> - 1:2.12-40.kb1
changelog:
  - Subject: [PATCH 1/2] cryptodisk: add OS provided secret support (f:109597)
  - Subject: [PATCH] newfeature: tpcm: add tpcm support (f:109597)
  - Subject: [PATCH 2/2] efi: Add API for retrieving the EFI secret for cryptodisk (f:109597)
  - Subject: [PATCH] blscfg: add blscfg module to parse Boot Loader Specification (f:109597)
  - Subject: [PATCH] Add BLS support to grub-mkconfig (f:109597)
  - Subject: [PATCH] Add grub2-switch-to-blscfg (f:109597)
  - Subject: [PATCH] 10_linux: fix missing "ro" in kernel boot parameters (f:109597)
  - Subject: [PATCH 01/73] misc: Implement grub_strlcpy() (f:109597)
  - Subject: [PATCH 02/73] fs/ufs: Fix a heap OOB write (f:109597)
  - Subject: [PATCH 03/73] fs/hfs: Fix stack OOB write with grub_strcpy() (f:109597)
  - Subject: [PATCH 04/73] fs/tar: Initialize name in grub_cpio_find_file() (f:109597)
  - Subject: [PATCH 05/73] fs/tar: Integer overflow leads to heap OOB write (f:109597)
  - Subject: [PATCH 06/73] fs/f2fs: Set a grub_errno if mount fails (f:109597)
  - Subject: [PATCH 07/73] fs/hfsplus: Set a grub_errno if mount fails (f:109597)
  - Subject: [PATCH 08/73] fs/iso9660: Set a grub_errno if mount fails (f:109597)
  - Subject: [PATCH 09/73] fs/iso9660: Fix invalid free (f:109597)
  - Subject: [PATCH 10/73] fs/jfs: Fix OOB read in jfs_getent() (f:109597)
  - Subject: [PATCH 11/73] fs/jfs: Fix OOB read caused by invalid dir slot index (f:109597)
  - Subject: [PATCH 12/73] fs/jfs: Use full 40 bits offset and address for a data (f:109597)
  - Subject: [PATCH 13/73] fs/jfs: Inconsistent signed/unsigned types usage in (f:109597)
  - Subject: [PATCH 14/73] fs/ext2: Fix out-of-bounds read for inline extents (f:109597)
  - Subject: [PATCH 15/73] fs/ntfs: Fix out-of-bounds read (f:109597)
  - Subject: [PATCH 16/73] fs/ntfs: Track the end of the MFT attribute buffer (f:109597)
  - Subject: [PATCH 17/73] fs/ntfs: Use a helper function to access attributes (f:109597)
  - Subject: [PATCH 18/73] fs/ntfs: Implement attribute verification (f:109597)
  - Subject: [PATCH 19/73] fs/xfs: Fix out-of-bounds read (f:109597)
  - Subject: [PATCH 20/73] fs/xfs: Ensuring failing to mount sets a grub_errno (f:109597)
  - Subject: [PATCH 21/73] kern/file: Ensure file->data is set (f:109597)
  - Subject: [PATCH 22/73] kern/file: Implement filesystem reference counting (f:109597)
  - Subject: [PATCH 23/73] disk/cryptodisk: Require authentication after TPM unlock for (f:109597)
  - Subject: [PATCH 24/73] disk/loopback: Reference tracking for the loopback (f:109597)
  - Subject: [PATCH 25/73] kern/disk: Limit recursion depth (f:109597)
  - Subject: [PATCH 26/73] kern/partition: Limit recursion in part_iterate() (f:109597)
  - Subject: [PATCH 27/73] script/execute: Limit the recursion depth (f:109597)
  - Subject: [PATCH 28/73] net: Unregister net_default_ip and net_default_mac variables (f:109597)
  - Subject: [PATCH 29/73] net: Remove variables hooks when interface is (f:109597)
  - Subject: [PATCH 30/73] net: Fix OOB write in grub_net_search_config_file() (f:109597)
  - Subject: [PATCH 31/73] net/tftp: Fix stack buffer overflow in tftp_open() (f:109597)
  - Subject: [PATCH 32/73] video/readers/jpeg: Do not permit duplicate SOF0 (f:109597)
  - Subject: [PATCH 33/73] kern/dl: Fix for an integer overflow in grub_dl_ref() (f:109597)
  - Subject: [PATCH 34/73] fs/ext2: Rework out-of-bounds read for inline and external (f:109597)
  - Subject: [PATCH 35/73] kern/dl: Check for the SHF_INFO_LINK flag in (f:109597)
  - Subject: [PATCH 36/73] commands/extcmd: Missing check for failed allocation (f:109597)
  - Subject: [PATCH 37/73] commands/ls: Fix NULL dereference (f:109597)
  - Subject: [PATCH 38/73] commands/pgp: Unregister the "check_signatures" hooks (f:109597)
  - Subject: [PATCH 39/73] normal: Remove variables hooks on module unload (f:109597)
  - Subject: [PATCH 40/73] gettext: Remove variables hooks on module unload (f:109597)
  - Subject: [PATCH 41/73] gettext: Integer overflow leads to heap OOB write or (f:109597)
  - Subject: [PATCH 42/73] gettext: Integer overflow leads to heap OOB write (f:109597)
  - Subject: [PATCH 43/73] commands/read: Fix an integer overflow when supplying (f:109597)
  - Subject: [PATCH 44/73] commands/test: Stack overflow due to unlimited (f:109597)
  - Subject: [PATCH 45/73] commands/minicmd: Block the dump command in lockdown (f:109597)
  - Subject: [PATCH 46/73] commands/memrw: Disable memory reading in lockdown mode (f:109597)
  - Subject: [PATCH 47/73] commands/hexdump: Disable memory reading in lockdown (f:109597)
  - Subject: [PATCH 48/73] fs/bfs: Disable under lockdown (f:109597)
  - Subject: [PATCH 49/73] fs: Disable many filesystems under lockdown (f:109597)
  - Subject: [PATCH 50/73] disk: Use safe math macros to prevent overflows (f:109597)
  - Subject: [PATCH 51/73] disk: Prevent overflows when allocating memory for (f:109597)
  - Subject: [PATCH 52/73] disk: Check if returned pointer for allocated memory is (f:109597)
  - Subject: [PATCH 53/73] disk/ieee1275/ofdisk: Call grub_ieee1275_close() when (f:109597)
  - Subject: [PATCH 54/73] fs: Use safe math macros to prevent overflows (f:109597)
  - Subject: [PATCH 55/73] fs: Prevent overflows when allocating memory for arrays (f:109597)
  - Subject: [PATCH 56/73] fs: Prevent overflows when assigning returned values (f:109597)
  - Subject: [PATCH 57/73] fs/zfs: Use safe math macros to prevent overflows (f:109597)
  - Subject: [PATCH 58/73] fs/zfs: Prevent overflows when allocating memory for (f:109597)
  - Subject: [PATCH 59/73] fs/zfs: Check if returned pointer for allocated memory (f:109597)
  - Subject: [PATCH 60/73] fs/zfs: Add missing NULL check after grub_strdup() call (f:109597)
  - Subject: [PATCH 61/73] net: Use safe math macros to prevent overflows (f:109597)
  - Subject: [PATCH 62/73] net: Prevent overflows when allocating memory for (f:109597)
  - Subject: [PATCH 63/73] net: Check if returned pointer for allocated memory is (f:109597)
  - Subject: [PATCH 64/73] fs/sfs: Check if allocated memory is NULL (f:109597)
  - Subject: [PATCH 65/73] script/execute: Fix potential underflow and NULL (f:109597)
  - Subject: [PATCH 66/73] osdep/unix/getroot: Fix potential underflow (f:109597)
  - Subject: [PATCH 67/73] misc: Ensure consistent overflow error messages (f:109597)
  - Subject: [PATCH 68/73] bus/usb/ehci: Define GRUB_EHCI_TOGGLE as grub_uint32_t (f:109597)
  - Subject: [PATCH 69/73] normal/menu: Use safe math to avoid an integer overflow (f:109597)
  - Subject: [PATCH 70/73] kern/partition: Add sanity check after grub_strtoul() (f:109597)
  - Subject: [PATCH 71/73] kern/misc: Add sanity check after grub_strtoul() call (f:109597)
  - Subject: [PATCH 72/73] loader/i386/linux: Cast left shift to grub_uint32_t (f:109597)
  - Subject: [PATCH 73/73] loader/i386/bsd: Use safe math to avoid underflow (f:109597)
  - Subject: [PATCH] lib/libtasn1: Fix ETYPE_OK off by one array size check (f:109597)
  - Subject: [PATCH] Export all variables from the initial context when creating a (f:109597)
  - Subject: [PATCH] acpi: Fix out of bounds access in grub_acpi_xsdt_find_table() (f:109597)
  - Subject: [PATCH] commands/efi/tpm: Re-enable measurements on confidential (f:109597)
  - Subject: [PATCH] commands/legacycfg: Avoid closing file twice (f:109597)
  - Subject: [PATCH] disk/mdraid1x_linux: Prevent infinite recursion (f:109597)
  - Subject: [PATCH] fix CVE-2024-56738 (f:109597)
  - Subject: [PATCH] fix not verifying grub.cfg when loading it (f:109597)
  - Subject: [PATCH] fix bug about petitboot doesn't ignore EFI entries for (f:109597)
  - Subject: [PATCH 2/5] sw64: Add Linux load logic (f:109597)
  - Subject: [PATCH 4/5] sw64: Add auxiliary files (f:109597)
  - Subject: [PATCH 3/5] sw64: Add awareness for SW64 reloations (f:109597)
  - Subject: [PATCH 1/5] sw64: Add early startup code (f:109597)
  - Subject: [PATCH 5/5] sw64: Add to build system (f:109597)
  - Subject: [PATCH] LoongArch: bugfix: clear buffer for screen info (f:109597)


author: mazhiguo <mazhiguo@kylinsec.com.cn> - 1:2.12-40.kb2
changelog:
  - fix backspace in username prompt (f:56805)
  - add text grub entry (f:56641)
  - fix simplify standard and rescue system title (f:106723)
  - fix solve the problem of incorrect display of the se (f:106723)
  - optimize backup and restore configuration files (f:106723)
  - Add trusted integrity measurement feature (f:31781)
  - support trusted integrity measurement feature on loongarch64 (f:31781)


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: huangjiawen <huangjiawen@kylinsec.com.cn> - 3.24.41-2.kb1
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed (b:39562)
  - Update xscreen size when x11 screen size change (b:26300)


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: gaobo <gaobo@kylinsec.com.cn> - 1.50.2-7.kb1
changelog:
  - Detect data disk mount points in the root directory and provide them for display in Computer. (f:55036)


author: xiaowen <xiaowen@kylinsec.com.cn> - 1.50.2-7.kb2
changelog:
  - Client async invocation of GetConnection triggering daemon socket leakage.(b:36538)
  - Detect data disk mount points in the root directory and provide them for display in Computer (f:55036)
  - Merge some memory leak patch.(f:138552)


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chenyanpanHW <chenyanpan@huawei.com> - 9.58-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-hdparm-fallocate-close-fd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-hdparam-Remove-security_password-printing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-hdparm-fix-fd-leak-in-sysfs_write_attr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: gaobo <gaobo@kylinsec.com.cn> - 1.3.23-2.kb1
changelog:
  - revert fix sw_64 build error, it will cause libguestfs build failed, and even if reverting, hivex can still be successfully built.(b:113454)


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-32
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Increase input parameter checks and adjust inline data size.


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: Wang Qi <wangqi@kylinsec.com.cn> - 1:1.8.0.462.b08-4.kb1
changelog:
  - Enabling ShangMi Support for LoongArch64. (f:47864)
  - Support SM2/3/4 algorithms. (f:31880)
  - Add a test suite for ShangMi. (f:34885)


author: herengui <herengui@kylinsec.com.cn> - 1:1.8.0.462.b08-4.kb2
changelog:
  - Fix the build failure on the sw_64 architecture (b:111120)
  - Correct architecture name variable references in the %check section (b:111120)


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: Wang Qi <wangqi@kylinsec.com.cn> - 1:11.0.27.6-1.kb1
changelog:
  - Enabling ShangMi Support for LoongArch64. (f:47864)
  - Delete the useless files generated during the adaptation of ShangMi. (f:34887)
  - Support SM2/3/4 algorithms. (f:34887)


author: herengui <herengui@kylinsec.com.cn> - 1:17.0.15.6-5.kb2
changelog:
  - Fix the build failure on the sw_64 architecture (b:111120)
  - Correct architecture name variable references in the %check section (b:111120)
  - Add SM patch support for the sw_64 architecture (f:34888)


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Zhou Bowen <zhoubowen@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb7
changelog:
  - config: sw64: fixes build errors on sw64 (b:119704)
  - config: loongarch: enable CRYPTO_XTS (f:119876)
  - security: rbac: biba: add missing header (b:120292)
  - security: rbac: biba: fix return type of biba_from_skb() (b:120292)
  - security: rbac: add missing dependencies (b:120292)
  - security: fix delete_module hook (b:120244)
  - config: loongarch/sw64: enable ps3stor driver (f:119704)
  - config: loongarch/sw64: enable smifb drm driver (f:119704)
  - config: loongarch/sw64: enable mucse ethernet driver (f:119704)
  - config: loongarch/sw64: enable sxe and sxevf driver (f:119704)
  - security: rbac: add missing initialization (b:119604)
  - config: x86/arm64: enable DRM_MWV207D (f:116790)
  - drm/mwv207d: Add mwv207d driver (f:116790)
  - net/bonding: add bond3+ kunit tests (f:114525)


author: zhengwei <zhengwei@zhengwei@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb8
changelog:
  - config: loongarch/sw64: fix build errors (f:121229)
  - config: sw: enable bonding driver (f:121557)
  - config: loongarch/sw64: enable mwv driver (f:121229)
  - loongarch: config: enable rbac (f:121554)
  - sw64: config: enable rbac (f:121554)
  - sw64: config: enable SM2, SM3 and SM4 crypto algorithms (f:121224)
  - drm/mwv207: update to 1.6.0 (f:121251)
  - video: logo: Update kernel boot logo (f:120971)


author: zhengwei <zhengwei@zhengwei@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb9
changelog:
  - arm64: Add missing includes for mem_encrypt (b:131009)
  - smcs: fix NULL check for current->nsproxy in dentry_fullpath_raw() (b:128440)
  - smcs: delete unnecessary comments (b:128440)
  - smcs: fix return value of smcs_set_clean() (b:128440)
  - config: sw_64: enable cgroup blkio (f:131307)
  - config: sw_64: enable kdump (f:126946)
  - mm/mempolicy: Add MPOL_MF_LAZY support for NUMA affinity scheduling (f:128579)
  - smcs: change serial (f:126957)
  - security/integrity/dima/dima/dima_main.c: fix sw64 build error (b:125541)
  - config: sw_64: enable stack protector (f:125541)
  - smcs: fix typo in error code string "UndefineD" (b:128440)
  - smcs: fix return value for invalid event type (b:128440)
  - smcs: fix typo in smcs_item_event_to_str() (b:128440)
  - smcs: fix memory leak before BUG() in netflow_set_insert_policy (b:128440)
  - smcs: fix potential null pointer dereference in devctl_set_delete (b:128440)
  - smcs: Switch to standard LSM hooks infrastructure (f:128440)
  - USB: core: simplify locking in usbdev_do_ioctl smcs check (b:128440)
  - config: sw: enable yt6801 driver (f:123240)
  - security/integrity/ima: centralize control of trusted features and disable defaults (f:126080)
  - config: sw_64: enable ima (f:121679)
  - config: sw_64: fix duplicate DRM_SCHED and typo in NUMA_KEEP_MEMINFO (b:121679)


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb10
changelog:
  - scsi: qla2xxx: fix NULL pointer dereference in qla24xx_async_abort_cmd() (b:124477)
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (v:134681)[CVE-2025-71096]
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() (v:134681)[CVE-2025-68819]
  - RDMA/cm: Fix leaking the multicast GID table reference (v:134681)[CVE-2025-71084]
  - net: openvswitch: fix middle attribute validation in push_nsh() action (v:134681)[CVE-2025-68785]
  - net: openvswitch: remove never-working support for setting nsh fields (v:134681)[CVE-2025-68785]
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (v:134681)[CVE-2026-23038]
  - f2fs: fix to avoid potential deadlock (v:134681)[CVE-2025-71065]
  - mlx5: Fix default values in create CQ (v:134681)[CVE-2025-68209]
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (v:134681)[CVE-2025-68192]
  - iommu/s390: Implement blocking domain (v:134681)[CVE-2024-53232]
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (v:134681)[CVE-2025-71147]
  - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure (v:134681)[CVE-2025-71154]
  - wifi: avoid kernel-infoleak from struct iw_point (v:134681)[CVE-2026-22978]
  - mm/secretmem: fix use-after-free race in fault handler (v:134681)[CVE-2025-40272]
  - mm/page_alloc: change all pageblocks migrate type on coalescing (v:134681)[CVE-2025-71134]
  - libceph: make decode_pool() more resilient against corrupted osdmaps (v:134681)[CVE-2025-71116]
  - net/mlx5: fw_tracer, Validate format string parameters (v:134681)[CVE-2025-68816]
  - Bluetooth: bcsp: receive data only if registered (v:134681)[CVE-2025-40308]
  - riscv: stacktrace: Disable KASAN checks for non-current tasks (v:134681)[CVE-2025-40358]
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (v:134681)[CVE-2026-23035]
  - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (v:134681)[CVE-2025-39713]
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (v:134681)[CVE-2025-40346]
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (v:134681)[CVE-2025-40096]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (v:134681)[CVE-2025-38676]
  - HID: core: Harden s32ton() against conversion to 0 bits (v:134681)[CVE-2025-38556]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (v:134681)[CVE-2025-37900]
  - rcu: Protect ->defer_qs_iw_pending from data race (v:134681)[CVE-2025-39749]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (v:134681)[CVE-2025-71130]
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (v:134681)[CVE-2025-71131]
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (v:134681)[CVE-2025-68724]
  - net/mlx5e: Fix crash on profile change rollback failure (v:134681)[CVE-2026-23000]
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (v:134681)[CVE-2026-22996]
  - PCI/AER: Fix NULL pointer access by aer_info (v:134681)[CVE-2025-68309]
  - gfs2: No more self recovery (v:134681)[CVE-2025-38659]
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (v:134681)[CVE-2025-40277]
  - crypto: qat - flush misc workqueue during device shutdown (v:134681)[CVE-2025-39721]
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (v:134681)[CVE-2026-22998]
  - nvmet-tcp: remove boilerplate code (v:134681)[CVE-2026-22998]
  - scsi: target: Reset t_task_cdb pointer in error case (v:134681)[CVE-2025-68782]
  - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (v:134681)[CVE-2025-68818]
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (v:134681)[CVE-2025-68756]
  - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size (v:134681)[CVE-2025-39942]
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer (v:134681)[CVE-2025-39942]
  - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (v:134681)[CVE-2025-39942]
  - smb: server: remove separate empty_recvmsg_queue (v:134681)[CVE-2025-39942]
  - PCI: cadence: Check for the existence of cdns_pcie::ops before using it (v:134681)[CVE-2025-68176]
  - bpf: Check skb->transport_header is set in bpf_skb_check_mtu (v:134681)[CVE-2025-68363]
  - bpf: Do not let BPF test infra emit invalid GSO types to stack (v:134681)[CVE-2025-68725]
  - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (v:134681)[CVE-2025-68188]
  - netfilter: nft_ct: add seqadj extension for natted connections (v:134681)[CVE-2025-68206]
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (v:134681)[CVE-2025-40215]
  - xfrm: delete x->tunnel as we delete x (v:134681)[CVE-2025-40215]
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue (v:134681)[CVE-2025-40083]
  - bpf: Reject narrower access to pointer ctx fields (v:134681)[CVE-2025-38591]
  - Bluetooth: eir: Fix possible crashes on eir_create_adv_data (v:134681)[CVE-2025-38303]
  - IB/mlx5: Fix potential deadlock in MR deregistration (v:134681)[CVE-2025-38373]
  - vfs: Don't leak disconnected dentries on umount (v:134681)[CVE-2025-40105]
  - gfs2: Prevent recursive memory reclaim (v:134681)[CVE-2025-68356]
  - amd/amdkfd: enhance kfd process check in switch partition (v:134681)[CVE-2025-68174]
  - drm/amdkfd: allow compute partition mode switch with cgroup exclusions (v:134681)[CVE-2025-68174]
  - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (v:134681)[CVE-2025-68259]
  - pinctrl: check the return value of pinmux_ops::get_function_name() (v:134681)[CVE-2025-40030]
  - iommu/amd/pgtbl: Fix possible race while increase page table level (v:134681)[CVE-2025-39961]
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() (v:134681)[CVE-2025-38480]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (v:134681)[CVE-2025-39838]
  - ksmbd: Fix refcount leak when invalid session is found on session lookup (v:134681)[CVE-2025-71150]
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again (v:134681)[CVE-2025-38489]
  - sched/deadline: only set free_cpus for online runqueues (v:134681)[CVE-2025-68780]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (v:134681)[CVE-2026-23005]
  - io_uring/poll: correctly handle io_poll_add() return value on update (v:134681)[CVE-2025-71149]
  - shmem: fix recovery on rename failures (v:134681)[CVE-2025-71072]
  - io_uring: fix filename leak in __io_openat_prep() (v:134681)[CVE-2025-68814]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (v:134681)[CVE-2025-68183]
  - fs/proc: fix uaf in proc_readdir_de() (v:134681)[CVE-2025-40271]
  - io_uring/net: commit partial buffers on retry (v:134681)[CVE-2025-38730]
  - nvme: fix admin request_queue lifetime (v:134681)[CVE-2025-68265]
  - fs/notify: call exportfs_encode_fid with s_umount (v:134681)[CVE-2025-40237]
  - iomap: adjust read range correctly for non-block-aligned positions (v:134681)[CVE-2025-68794]
  - fuse: fix livelock in synchronous file put from fuseblk workers (v:134681)[CVE-2025-40220]
  - tpm: Cap the number of PCR banks (v:134681)[CVE-2025-71077]
  - nfsd: provide locking for v4_end_grace (v:134681)[CVE-2026-22980]
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (v:134681)[CVE-2025-68817]
  - NFSD: NFSv4 file creation neglects setting ACL (v:134681)[CVE-2025-68803]
  - nfsd: set security label during create operations (v:134681)[CVE-2025-68803]
  - Bluetooth: HCI: Set extended advertising data synchronously (b:134681)
  - scsi: smartpqi: Fix device resources accessed after device removal (v:134681)[CVE-2025-68371]
  - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (v:134681)[CVE-2025-68310]
  - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (v:134681)[CVE-2025-38455]
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (v:134681)[CVE-2025-39828]
  - drm/mediatek: Disable AFBC support on Mediatek DRM driver (v:134681)[CVE-2025-68184]
  - usb: typec: ucsi: Handle incorrect num_connectors capability (v:134681)[CVE-2025-71108]
  - cifs: Fix memory and information leak in smb3_reconfigure() (v:134681)[CVE-2025-71151]
  - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (v:134681)[CVE-2025-68296]
  - drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info (v:134681)[CVE-2025-68296]
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (v:134681)[CVE-2024-58012]
  - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory (v:134681)[CVE-2025-40311]
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (v:134681)[CVE-2025-71113]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (v:134681)[CVE-2025-37800]
  - perf/x86/amd: Check event before enable to avoid GPF (v:134681)[CVE-2025-68798]
  - powerpc/kexec: Enable SMT before waking offline CPUs (v:134681)[CVE-2025-71119]
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (v:134681)[CVE-2025-71087]
  - e1000: fix OOB in e1000_tbi_should_accept() (v:134681)[CVE-2025-71093]
  - tracing: Do not register unsupported perf events (v:134681)[CVE-2025-71125]
  - fuse: fix readahead reclaim deadlock (v:134681)[CVE-2025-68821]
  - fsnotify: do not generate ACCESS/MODIFY events on child for special files (v:134681)[CVE-2025-68788]
  - mlxsw: spectrum_router: Fix neighbour use-after-free (v:134681)[CVE-2025-68801]
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (v:134681)[CVE-2025-68800]
  - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (v:134681)[CVE-2024-57994]
  - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (v:134681)[CVE-2025-68367]
  - cifs: parse_dfs_referrals: prevent oob on malformed input (v:134681)[CVE-2025-40099]
  - smb: client: fix return value of parse_dfs_referrals() (v:134681)[CVE-2025-40099]
  - smb: client: Fix refcount leak for cifs_sb_tlink (v:134681)[CVE-2025-40103]
  - ceph: fix race condition validating r_parent before applying state (v:134681)[CVE-2025-39927]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (v:134681)[CVE-2025-39929]
  - NFSv4: Don't clear capabilities that won't be reset (v:134681)[CVE-2025-39798]
  - NFS: Fix the setting of capabilities when automounting a new filesystem (v:134681)[CVE-2025-39798]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (v:134681)[CVE-2025-39730]
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (v:134681)[CVE-2025-38393]
  - smb3: fix for slab out of bounds on mount to ksmbd (v:134681)[CVE-2025-38728]
  - smb: client: fix potential deadlock when reconnecting channels (v:134681)[CVE-2025-38244]
  - smb: client: add NULL check in automount_fullpath (v:134681)[CVE-2025-38208]
  - smb: client: Avoid race in open_cached_dir with lease breaks (v:134681)[CVE-2025-37954]
  - net/mdiobus: Fix potential out-of-bounds read/write access (v:134681)[CVE-2025-38111]
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (v:134681)[CVE-2025-38110]
  - net: phy: clear phydev->devlink when the link is deleted (v:134681)[CVE-2025-38149]
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (v:134681)[CVE-2025-38162]
  - drm/sysfb: Do not dereference NULL pointer in plane reset (v:134681)[CVE-2025-40360]
  - binfmt_misc: restore write access before closing files opened by open_exec() (v:134681)[CVE-2025-68239]
  - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (v:134681)[CVE-2025-68379]
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (v:134681)[CVE-2025-68305]
  - smb: client: fix incomplete backport in cfids_invalidation_worker() (v:134681)[CVE-2025-40328]
  - smb: client: fix potential UAF in smb2_close_cached_fid() (v:134681)[CVE-2025-40328]
  - smb: client: fix memory leak in cifs_construct_tcon() (v:134681)[CVE-2025-68295]
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (v:134681)[CVE-2025-68219]
  - smb: client: fix potential cfid UAF in smb2_query_info_compound (v:134681)[CVE-2025-40320]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (v:134681)[CVE-2025-40268]
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup (v:134681)[CVE-2025-68245]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (v:134681)[CVE-2025-68241]
  - net: ipv6: fix field-spanning memcpy warning in AH output (v:134681)[CVE-2025-40363]
  - udp_tunnel: use netdev_warn() instead of netdev_WARN() (v:134681)[CVE-2025-68191]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (v:134681)[CVE-2025-40350]
  - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead (v:134681)[CVE-2025-40350]
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (v:134681)[CVE-2025-40252]
  - net/mlx5: Clean up only new IRQ glue on request_irq() failure (v:134681)[CVE-2025-40250]
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed (v:134681)[CVE-2025-40284]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (v:134681)[CVE-2025-40304]
  - nbd: defer config unlock in nbd_genl_connect (v:134681)[CVE-2025-68366]
  - nbd: defer config put in recv_work (v:134681)[CVE-2025-68372]
  - md: fix rcu protection in md_wakeup_thread (v:134681)[CVE-2025-68374]
  - nvme-multipath: fix lockdep WARN due to partition scan work (v:134681)[CVE-2025-68218]
  - blk-cgroup: fix possible deadlock while configuring policy (v:134681)[CVE-2025-68178]
  - usbnet: Prevents free active kevent (v:134681)[CVE-2025-68312]
  - scsi: sg: Do not sleep in atomic context (v:134681)[CVE-2025-40259]
  - erofs: avoid infinite loops due to corrupted subpage compact indexes (v:134681)[CVE-2025-68251]
  - scsi: bfa: Double-free fix (v:134681)[CVE-2025-38699]
  - mISDN: hfcpci: Fix warning when deleting uninitialized timer (v:134681)[CVE-2025-39833]
  - jfs: truncate good inode pages when hard link is 0 (v:134681)[CVE-2025-39743]
  - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (v:134681)[CVE-2025-38681]
  - hfsplus: remove mutex_lock check in hfsplus_free_extents (v:134681)[CVE-2025-38650]
  - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (v:134681)[CVE-2025-38578]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (v:134681)[CVE-2025-40273]
  - NFSD: fix race between nfsd registration and exports_proc (v:134681)[CVE-2025-38232]
  - ksmbd: fix refcount leak causing resource not released (v:134681)[CVE-2025-39720]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (v:134681)[CVE-2025-40087]
  - driver core: introduce device_set_driver() helper (b:134681)
  - Revert "Revert "Revert "driver core: Fix uevent_show() vs driver detach race""" (b:134681)
  - kernel.h: Move ARRAY_SIZE() to a separate header (f:134681)
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (v:134681)[CVE-2025-68304]
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX (v:134681)[CVE-2025-68304]
  - Bluetooth: ISO: free rx_skb if not consumed (v:134681)[CVE-2025-68304]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (v:134681)[CVE-2025-68304]
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (v:134681)[CVE-2025-68304]
  - Bluetooth: SCO: remove the redundant sco_conn_put (v:134681)[CVE-2025-68304]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (v:134681)[CVE-2025-68304]
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (v:134681)[CVE-2025-68304]
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (v:134681)[CVE-2025-71104]
  - ceph: fix crash in process_v2_sparse_read() for encrypted directories (v:134681)[CVE-2025-68297]
  - net: atlantic: fix fragment overflow handling in RX path (v:134681)[CVE-2025-68301]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (v:134681)[CVE-2025-40318]
  - gfs2: Fix unlikely race in gdlm_put_lock (v:134681)[CVE-2025-40242]
  - gfs2: Add proper lockspace locking (v:134681)[CVE-2025-40242]
  - xfs: do not propagate ENODATA disk errors into xattr code (v:134681)[CVE-2025-39835]
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex (v:134681)[CVE-2025-68354]
  - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() (v:134681)[CVE-2025-68362]
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (v:134681)[CVE-2025-68214]
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (v:134681)[CVE-2025-68331]
  - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot (v:134681)[CVE-2025-68235]
  - bpf: Free special fields when update [lru_,]percpu_hash maps (v:134681)[CVE-2025-68744]
  - net_sched: prio: fix a race in prio_tune() (v:134681)[CVE-2025-38083]
  - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (v:134681)[CVE-2025-39925]
  - can: j1939: implement NETDEV_UNREGISTER notification handler (v:134681)[CVE-2025-39925]
  - Bluetooth: hci_core: Disable works on hci_unregister_dev (v:134681)[CVE-2024-58241]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (v:134681)[CVE-2025-68349]
  - bpf: Fix stackmap overflow check in __bpf_get_stackid() (v:134681)[CVE-2025-68378]
  - bpf: Refactor stack map trace depth calculation into helper function (v:134681)[CVE-2025-68378]
  - scsi: qla2xxx: Clear cmds after chip reset (v:134681)[CVE-2025-68745]
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() (v:134681)[CVE-2025-68734]
  - futex: Don't leak robust_list pointer on exec race (v:134681)[CVE-2025-40341]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (v:134681)[CVE-2025-40294]
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (v:134681)[CVE-2025-40301]
  - ppp: fix race conditions in ppp_fill_forward_path (v:134681)[CVE-2025-39673]
  - scsi: qla2xxx: Fix improper freeing of purex item (v:134681)[CVE-2025-68741]
  - coresight: ETR: Fix ETR buffer use-after-free issue (v:134681)[CVE-2025-68376]
  - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (v:134681)[CVE-2025-68337]
  - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock (v:134681)[CVE-2025-40361]
  - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (v:134681)[CVE-2025-68261]
  - ext4: refresh inline data size before write operations (v:134681)[CVE-2025-68264]
  - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (v:134681)[CVE-2025-40351]
  - nvmet-fc: avoid scheduling association deletion twice (v:134681)[CVE-2025-40343]
  - ftrace: Fix softlockup in ftrace_module_enable (v:134681)[CVE-2025-68173]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (v:134681)[CVE-2025-68208]
  - bpf: Add bpf_prog_run_data_pointers() (v:134681)[CVE-2025-68200]
  - x86/fpu: Ensure XFD state on signal delivery (v:134681)[CVE-2025-68171]
  - usb: storage: Fix memory leak in USB bulk transport (v:134681)[CVE-2025-68288]
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (v:134681)[CVE-2025-68229]
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (v:134681)[CVE-2025-68185]
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (v:134681)[CVE-2025-40261]
  - usb: storage: sddr55: Reject out-of-bound new_pba (v:134681)[CVE-2025-40345]
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (v:134681)[CVE-2025-40314]
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (v:134681)[CVE-2025-40321]
  - be2net: pass wrb_params in case of OS2BMC (v:134681)[CVE-2025-40264]
  - NFSD: Fix crash in nfsd4_read_release() (v:134681)[CVE-2025-40324]
  - i40e: remove read access to debugfs files (v:134681)[CVE-2025-39901]
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (v:134681)[CVE-2025-40322]
  - iommufd: Prevent ALIGN() overflow (v:134681)[CVE-2025-38688]
  - net/packet: fix a race in packet_set_ring() and packet_notifier() (v:134681)[CVE-2025-38617]
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (v:134681)[CVE-2025-38664]
  - ipv6: prevent infinite loop in rt6_nlmsg_size() (v:134681)[CVE-2025-38588]
  - KVM: arm64: Check the untrusted offset in FF-A memory share (v:134681)[CVE-2025-40266]
  - drm/amd/display: Check dce_hwseq before dereferencing it (v:134681)[CVE-2025-38361]
  - riscv: uprobes: Add missing fence.i after building the XOL buffer (v:134681)[CVE-2025-37822]
  - Squashfs: fix uninit-value in squashfs_get_parent (v:134681)[CVE-2025-40049]
  - media: venus: Add a check for packet size after reading from shared memory (v:134681)[CVE-2025-39710]
  - eventpoll: Fix semi-unbounded recursion (v:134681)[CVE-2025-38614]
  - kernfs: Relax constraint in draining guard (v:134681)[CVE-2025-38282]
  - ksmbd: fix overflow in dacloffset bounds check (v:134681)[CVE-2025-22039]
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (v:134681)[CVE-2025-39732]
  - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() (v:134681)[CVE-2025-39675]
  - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() (v:134681)[CVE-2025-39684]
  - comedi: Fix initialization of data for instructions that write to subdevice (v:134681)[CVE-2025-39684]
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (v:134681)[CVE-2025-38706]
  - net/mlx5: Fix ECVF vports unload on shutdown flow (v:134681)[CVE-2025-38109]
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (v:134681)[CVE-2025-22022]
  - usb: xhci: move link chain bit quirk checks into one helper function. (v:134681)[CVE-2025-22022]
  - rv: Use strings in da monitors tracepoints (v:134681)[CVE-2025-38636]
  - drm/scheduler: signal scheduled fence when kill job (v:134681)[CVE-2025-38436]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (v:134681)[CVE-2025-38457]
  - kernfs: Fix UAF in polling when open file is released (v:134681)[CVE-2025-39881]
  - smb: client: fix race with concurrent opens in rename(2) (v:134681)[CVE-2025-39825]
  - NFS: Fix a race when updating an existing write (v:134681)[CVE-2025-39697]
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (v:134681)[CVE-2025-39697]
  - media: tuner: xc5000: Fix use-after-free in xc5000_release (v:134681)[CVE-2025-39994]
  - media: tunner: xc5000: Refactor firmware load (v:134681)[CVE-2025-39994]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (v:134681)[CVE-2025-40058]
  - mm/ksm: fix flag-dropping behavior in ksm_madvise (v:134681)[CVE-2025-40040]
  - sunrpc: fix handling of server side tls alerts (v:134681)[CVE-2025-38566]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). (v:134681)[CVE-2025-40139]
  - smb: client: fix crypto buffers in non-linear memory (v:134681)[CVE-2025-40052]
  - usb: typec: ucsi: displayport: Fix NULL pointer access (v:134681)[CVE-2025-37994]
  - x86/mm: Check return value from memblock_phys_alloc_range() (v:134681)[CVE-2025-38071]
  - wifi: ath11k: update channel list in reg notifier instead reg worker (v:134681)[CVE-2025-23133]
  - ksmbd: fix use-after-free in session logoff (v:134681)[CVE-2025-37899]
  - RDMA/rxe: Fix race in do_task() when draining (v:134681)[CVE-2025-40061]
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (v:134681)[CVE-2025-39677]
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (v:134681)[CVE-2025-38477]
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate (v:134681)[CVE-2025-38477]
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (v:134681)[CVE-2025-39911]
  - net/mlx5e: Harden uplink netdev access against device unbind (v:134681)[CVE-2025-39947]
  - ixgbevf: fix mailbox API compatibility by negotiating supported features (v:134681)[CVE-2025-40104]
  - ixgbevf: fix getting link speed data for E610 devices (v:134681)[CVE-2025-40104]
  - ixgbevf: Add support for Intel(R) E610 device (v:134681)[CVE-2025-40104]
  - PCI: Add PCI_VDEVICE_SUB helper macro (v:134681)[CVE-2025-40104]
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (v:134681)[CVE-2025-39996]
  - media: uvcvideo: Use heuristic to find stream entity (v:134681)[CVE-2025-40016]
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (v:134681)[CVE-2025-40016]
  - nfsd: don't ignore the return code of svc_proc_register() (v:134681)[CVE-2025-22026]
  - nbd: fix uaf in nbd_genl_connect() error path (v:134681)[CVE-2025-38443]
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (v:134681)[CVE-2025-39866]
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (v:134681)[CVE-2025-38058]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (v:134681)[CVE-2025-37861]
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (v:134681)[CVE-2025-39817]
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (v:134681)[CVE-2025-37973]
  - Input: mtk-pmic-keys - fix possible null pointer dereference (v:134681)[CVE-2025-37972]
  - ksmbd: prevent rename with empty string (v:134681)[CVE-2025-37956]
  - ksmbd: move leading slash check to smb2_get_name() (v:134681)[CVE-2025-37956]
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (v:134681)[CVE-2025-38231]
  - dmaengine: ti: k3-udma: Add missing locking (v:134681)[CVE-2025-38005]
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region (v:134681)[CVE-2025-37997]
  - netfilter: ipset: fix region locking in hash types (v:134681)[CVE-2025-37997]
  - ksmbd: add max ip connections parameter (v:134681)[CVE-2025-38501]
  - ksmbd: extend the connection limiting mechanism to support IPv6 (v:134681)[CVE-2025-38501]
  - ksmbd: limit repeated connections from clients with the same IP (v:134681)[CVE-2025-38501]
  - jfs: add check read-only before txBeginAnon() call (v:134681)[CVE-2024-58095]
  - ksmbd: add free_transport ops in ksmbd connection (v:134681)[CVE-2025-37777]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (v:134681)[CVE-2025-37777]
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (v:134681)[CVE-2025-39810]
  - bnxt_en: Fix possible crash after creating sw mqprio TCs (v:134681)[CVE-2025-39810]
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (v:134681)[CVE-2025-39801]
  - net: use dst_dev_rcu() in sk_setup_caps() (v:134681)[CVE-2025-40074]
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (v:134681)[CVE-2025-40074]
  - ipv6: use RCU in ip6_output() (v:134681)[CVE-2025-40074]
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (v:134681)[CVE-2025-40074]
  - net: dst: Fix kabi-breakage for struct dst_entry (v:134681)[CVE-2025-40074]
  - ipv6: use RCU in ip6_xmit() (v:134681)[CVE-2025-40074]
  - ipv4: start using dst_dev_rcu() (v:134681)[CVE-2025-40074]
  - tcp_metrics: use dst_dev_net_rcu() (v:134681)[CVE-2025-40074]
  - net: dst: introduce dst->dev_rcu (v:134681)[CVE-2025-40074]
  - net: Add locking to protect skb->dev access in ip_output (v:134681)[CVE-2025-40074]
  - net: dst: add four helpers to annotate data-races around dst->dev (v:134681)[CVE-2025-40074]
  - drm/vmwgfx: Fix Use-after-free in validation (v:134681)[CVE-2025-40111]
  - pid: Add a judgment for ns null in pid_nr_ns (v:134681)[CVE-2025-40178]
  - dm-stripe: fix a possible integer overflow (v:134681)[CVE-2025-39940]
  - sched/rt: Fix race in push_rt_task (v:134681)[CVE-2025-38234]
  - usbnet: Fix using smp_processor_id() in preemptible code warnings (v:134681)[CVE-2025-40164]
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (v:134681)[CVE-2025-21693]
  - mm: zswap: move allocations during CPU init outside the lock (v:134681)[CVE-2025-21693]
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug (v:134681)[CVE-2025-21693]
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx (v:134681)[CVE-2025-21693]
  - mm/hugetlb: unshare page tables during VMA split, not before (v:134681)[CVE-2025-38084]
  - netfilter: nft_objref: validate objref and objrefmap expressions (v:134681)[CVE-2025-40206]
  - net/ip6_tunnel: Prevent perpetual tunnel growth (v:134681)[CVE-2025-40173]
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails (v:134681)[CVE-2025-40176]
  - sunrpc: fix null pointer dereference on zero-length checksum (v:134681)[CVE-2025-40129]
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (v:134681)[CVE-2025-40183]
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (v:134681)[CVE-2025-40187]
  - sctp: Fix MAC comparison to be constant-time (v:134681)[CVE-2025-40204]
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock (v:134681)[CVE-2025-40120]
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (v:134681)[CVE-2025-39964]
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (v:134681)[CVE-2025-39964]
  - ext4: align max orphan file size with e2fsprogs limit (v:134681)[CVE-2025-40179]
  - ext4: free orphan info with kvfree (v:134681)[CVE-2025-38220]
  - ext4: verify orphan file size is not too big (v:134681)[CVE-2025-38220]
  - ext4: use kmalloc_array() for array space allocation (v:134681)[CVE-2025-38220]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (v:134681)[CVE-2025-40211]
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (v:134681)[CVE-2025-40035]
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast (v:134681)[CVE-2025-40140]
  - net: dlink: handle copy_thresh allocation failure (v:134681)[CVE-2025-40053]
  - ipmi: Fix handling of messages with provided receive message pointer (v:134681)[CVE-2025-40202]
  - ipmi: Rework user message limit handling (v:134681)[CVE-2025-40202]
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg (v:134681)[CVE-2025-39931]
  - Squashfs: reject negative file sizes in squashfs_read_inode() (v:134681)[CVE-2025-40200]
  - Squashfs: add additional inode sanity checking (v:134681)[CVE-2025-40200]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (v:134681)[CVE-2025-40192]
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (v:134681)[CVE-2025-37891]
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies (v:134681)[CVE-2025-38100]
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (v:134681)[CVE-2025-38214]
  - ACPICA: fix acpi parse and parseext cache leaks (v:134681)[CVE-2017-13694]
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (v:134681)[CVE-2025-38581]
  - net: appletalk: Fix use-after-free in AARP proxy probe (v:134681)[CVE-2025-38666]
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper (v:134681)[CVE-2025-40110]
  - ocfs2: fix double free in user_cluster_connect() (v:134681)[CVE-2025-40055]
  - ext4: guard against EA inode refcount underflow in xattr update (v:134681)[CVE-2025-40190]
  - ext4: detect invalid INLINE_DATA + EXTENTS flag combination (v:134681)[CVE-2025-40167]
  - net: rose: fix a typo in rose_clear_routes() (v:134681)[CVE-2025-39827]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (v:134681)[CVE-2025-40141]
  - net: nfc: nci: Add parameter validation for packet data (v:134681)[CVE-2025-40043]
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (v:134681)[CVE-2025-40012]
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (v:134681)[CVE-2025-39692]
  - s390/sclp: Fix SCCB present check (v:134681)[CVE-2025-39694]
  - net: rose: include node references in rose_neigh refcount (v:134681)[CVE-2025-39827]
  - net: rose: convert 'use' field to refcount_t (v:134681)[CVE-2025-39827]
  - net: rose: split remove and free operations in rose_remove_neigh() (v:134681)[CVE-2025-39827]
  - dm: fix NULL pointer dereference in __dm_suspend() (v:134681)[CVE-2025-40134]
  - net, hsr: reject HSR frame if skb can't hold tag (v:134681)[CVE-2025-39703]
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (v:134681)[CVE-2025-40088]
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op (v:134681)[CVE-2025-40171]
  - ksmbd: transport_ipc: validate payload size before reading handle (v:134681)[CVE-2025-40084]
  - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed (v:134681)[CVE-2025-39938]
  - ext4: fix string copying in parse_apply_sb_mount_options() (v:134681)[CVE-2025-40198]
  - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() (v:134681)[CVE-2025-40198]
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (v:134681)[CVE-2025-40125]
  - batman-adv: fix OOB read/write in network-coding decode (v:134681)[CVE-2025-39839]
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (v:134681)[CVE-2025-40194]
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free (b:134681)
  - ALSA: usb-audio: Kill timer properly at removal (v:134681)[CVE-2025-38105]
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (v:134681)[CVE-2025-38713]
  - uio_hv_generic: Let userspace take care of interrupt mask (v:134681)[CVE-2025-40048]
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (v:134681)[CVE-2025-39766]
  - jfs: upper bound check of tree index in dbAllocAG (v:134681)[CVE-2025-38697]
  - mm: swap: check for stable address space before operating on the VMA (v:134681)[CVE-2025-39992]
  - net: ethernet: cortina: Use TOE/TSO on all TCP (v:134681)[CVE-2025-38331]
  - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (v:134681)[CVE-2025-39736]
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (v:134681)[CVE-2025-38712]
  - bus: mhi: host: Detect events pointing to unexpected TREs (v:134681)[CVE-2025-39790]
  - drm/amd/pm: fix null pointer access (v:134681)[CVE-2025-38705]
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (v:134681)[CVE-2025-38729]
  - net: kcm: Fix race condition in kcm_unattach() (v:134681)[CVE-2025-38717]
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (v:134681)[CVE-2025-39751]
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (v:134681)[CVE-2025-38714]
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (v:134681)[CVE-2025-39737]
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (v:134681)[CVE-2025-38713]
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (v:134681)[CVE-2025-22107]
  - nilfs2: reject invalid file types when reading inodes (v:134681)[CVE-2025-38663]
  - mtd: inftlcore: Add error check for inftl_read_oob() (v:134681)[CVE-2025-37892]
  - crypto: rng - Ensure set_ent is always present (v:134681)[CVE-2025-40109]
  - selftests/bpf: Add test case for different expected_attach_type (v:134681)[CVE-2025-40123]
  - bpf: Enforce expected_attach_type for tailcall compatibility (v:134681)[CVE-2025-40123]
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (v:134681)[CVE-2025-40153]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (v:134681)[CVE-2025-40169]
  - bpf: Reject negative offsets for ALU ops (v:134681)[CVE-2025-40169]
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller (v:134681)[CVE-2025-40157]
  - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() (v:134681)[CVE-2025-40172]
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC (v:134681)[CVE-2025-40126]
  - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() (v:134681)[CVE-2025-40207]
  - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (v:134681)[CVE-2025-40038]
  - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() (v:134681)[CVE-2025-39846]
  - ocfs2: prevent release journal inode after journal shutdown (v:134681)[CVE-2025-39842]
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early (v:134681)[CVE-2025-39861]
  - ARM: tegra: Use I/O memcpy to write to IRAM (v:134681)[CVE-2025-39794]
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (v:134681)[CVE-2025-39863]
  - net_sched: ets: fix a race in ets_qdisc_change() (v:134681)[CVE-2025-38107]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (v:134681)[CVE-2025-38126]
  - f2fs: fix to do sanity check on sit_bitmap_size (v:134681)[CVE-2025-38218]
  - hwmon: (ftsteutates) Fix TOCTOU race in fts_read() (v:134681)[CVE-2025-38217]
  - jfs: validate AG parameters in dbMount() to prevent crashes (v:134681)[CVE-2025-38230]
  - fs/jfs: consolidate sanity checking in dbMount (v:134681)[CVE-2025-38230]
  - jfs: add sanity check for agwidth in dbMount (v:134681)[CVE-2025-38230]
  - media: imx-jpeg: Cleanup after an allocation error (v:134681)[CVE-2025-38225]
  - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead (v:134681)[CVE-2025-38225]
  - drm/amdgpu: csa unmap use uninterruptible lock (v:134681)[CVE-2025-38011]
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() (v:134681)[CVE-2025-39916]
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() (v:134681)[CVE-2025-39909]
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (v:134681)[CVE-2025-38259]
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (v:134681)[CVE-2025-38259]
  - ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe() (v:134681)[CVE-2025-38259]
  - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap (v:134681)[CVE-2025-39781]
  - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (v:134681)[CVE-2025-38696]
  - bpf: Disable migration in nf_hook_run_bpf(). (v:134681)[CVE-2025-38640]
  - parisc: Revise __get_user() to probe user read access (v:134681)[CVE-2025-39716]
  - LoongArch: Optimize module load time by optimizing PLT/GOT counting (v:134681)[CVE-2025-39767]
  - drm/amd/display: Avoid a NULL pointer dereference (v:134681)[CVE-2025-39693]
  - wifi: wilc1000: avoid buffer overflow in WID string configuration (v:134681)[CVE-2025-39952]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (v:134681)[CVE-2025-38349]
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (v:134681)[CVE-2025-38348]
  - f2fs: fix to do sanity check on ino and xnid (v:134681)[CVE-2025-38347]
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (v:134681)[CVE-2025-38328]
  - aoe: clean device rq_list in aoedev_downdev() (v:134681)[CVE-2025-38326]
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (v:134681)[CVE-2025-38185]
  - exfat: fix double free in delayed_free (v:134681)[CVE-2025-38206]
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation (v:134681)[CVE-2025-38199]
  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls (v:134681)[CVE-2025-39711]
  - iio: imu: bno055: fix OOB access of hw_xlate array (v:134681)[CVE-2025-39719]
  - s390/ism: fix concurrency management in ism_cmd() (v:134681)[CVE-2025-39726]
  - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ (v:134681)[CVE-2025-39934]
  - btrfs: avoid NULL pointer dereference if no valid csum tree (v:134681)[CVE-2025-38059]
  - fs/ntfs3: handle hdr_first_de() return value (v:134681)[CVE-2025-38167]
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (v:134681)[CVE-2025-38160]
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() (v:134681)[CVE-2025-38155]
  - net: usb: aqc111: debug info before sanitation (b:134681)
  - net: usb: aqc111: fix error handling of usbnet read calls (v:134681)[CVE-2025-38153]
  - coresight: fix indentation error in cscfg_remove_owned_csdev_configs() (b:134681)
  - coresight: holding cscfg_csdev_lock while removing cscfg from csdev (v:134681)[CVE-2025-38132]
  - coresight: change coresight_device lock type to raw_spinlock_t (b:134681)
  - hfs: fix slab-out-of-bounds in hfs_bnode_read() (v:134681)[CVE-2025-38715]
  - jfs: Regular file corruption check (v:134681)[CVE-2025-38698]
  - usb: renesas_usbhs: Reorder clock handling and power management in probe (v:134681)[CVE-2025-38136]
  - powerpc/eeh: Make EEH driver device hotplug safe (v:134681)[CVE-2025-38576]
  - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (v:134681)[CVE-2025-39808]
  - sctp: linearize cloned gso packets in sctp_rcv (v:134681)[CVE-2025-38718]
  - net/smc: fix UAF on smcsk after smc_listen_out() (v:134681)[CVE-2025-38734]
  - um: virtio_uml: Fix use-after-free after put_device in probe (v:134681)[CVE-2025-39951]
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (v:134681)[CVE-2025-37781]
  - wifi: ath12k: fix invalid access to memory (v:134681)[CVE-2025-38292]
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (v:134681)[CVE-2025-38336]
  - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (v:134681)[CVE-2025-38335]
  - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (v:134681)[CVE-2025-38275]
  - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() (v:134681)[CVE-2025-38274]
  - crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() (v:134681)[CVE-2025-38300]
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (v:134681)[CVE-2025-38295]
  - wifi: ath11k: fix node corruption in ar->arvifs list (v:134681)[CVE-2025-38293]
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (v:134681)[CVE-2025-38204]
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (v:134681)[CVE-2025-38077]
  - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt() (b:134681)
  - regulator: max20086: fix invalid memory access (v:134681)[CVE-2025-38027]
  - dmaengine: ti: Add NULL check in udma_probe() (v:134681)[CVE-2025-38138]
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (v:134681)[CVE-2025-38203]
  - ksmbd: fix null pointer dereference in destroy_previous_session (v:134681)[CVE-2025-38191]
  - tty: serial: uartlite: register uart driver in init (v:134681)[CVE-2025-38262]
  - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write (v:134681)[CVE-2025-38258]
  - f2fs: zone: fix to avoid inconsistence in between SIT and SSA (v:134681)[CVE-2025-38164]
  - spufs: fix a leak on spufs_new_file() failure (v:134681)[CVE-2025-22073]
  - smb: client: fix wrong index reference in smb2_compound_op() (v:134681)[CVE-2025-39975]
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (v:134681)[CVE-2025-40026]
  - nbd: restrict sockets to TCP and UDP (v:134681)[CVE-2025-40080]
  - fs: udf: fix OOB read in lengthAllocDescs handling (v:134681)[CVE-2025-40044]
  - Bluetooth: hci_conn: Use disable_delayed_work_sync (v:134681)[CVE-2024-56591]
  - KVM: arm64: Prevent access to vCPU events before init (v:134681)[CVE-2025-40102]
  - i40e: fix idx validation in i40e_validate_queue_map (v:134681)[CVE-2025-39972]
  - i40e: add validation for ring_len param (v:134681)[CVE-2025-39973]
  - i40e: increase max descriptors for XL710 (v:134681)[CVE-2025-39973]
  - wifi: ath12k: fix node corruption in ar->arvifs list (v:134681)[CVE-2025-38290]
  - qed: Don't collect too many protection override GRC elements (v:134681)[CVE-2025-39949]
  - i40e: fix validation of VF state in get resources (v:134681)[CVE-2025-39969]
  - i40e: fix input validation logic for action_meta (v:134681)[CVE-2025-39970]
  - futex: Prevent use-after-free during requeue-PI (v:134681)[CVE-2025-39977]
  - cnic: Fix use-after-free bugs in cnic_delete_task (v:134681)[CVE-2025-39945]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (v:134681)[CVE-2025-37998]
  - pinctrl: at91: Fix possible out-of-boundary access (v:134681)[CVE-2025-38286]
  - ptp: Add a upper bound on max_vclocks (v:134681)[CVE-2025-40057]
  - tty: n_gsm: Don't block input queue by waiting MSC (v:134681)[CVE-2025-40071]
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (v:134681)[CVE-2025-40042]
  - tracing: dynevent: Add a missing lockdown check on dynevent (v:134681)[CVE-2025-40021]
  - ACPI: pfr_update: Fix the driver update version check (v:134681)[CVE-2025-39701]
  - comedi: pcl726: Prevent invalid irq number (v:134681)[CVE-2025-39685]
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (v:134681)[CVE-2025-39782]
  - ppp: fix memory leak in pad_compress_skb (v:134681)[CVE-2025-39847]
  - Bluetooth: hci_event: Fix not using key encryption size when its known (v:134681)[CVE-2025-39889]
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level (v:134681)[CVE-2025-39889]
  - Bluetooth: l2cap: Check encryption key size on incoming connection (v:134681)[CVE-2025-39889]
  - libceph: fix invalid accesses to ceph_connection_v1_info (v:134681)[CVE-2025-39880]
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (v:134681)[CVE-2025-39860]
  - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (v:134681)[CVE-2025-39742]
  - net/mlx5: Fix lockdep assertion on sync reset unload event (v:134681)[CVE-2025-39832]
  - net/mlx5: Add support for sync reset using hot reset (v:134681)[CVE-2025-39832]
  - net/mlx5: Add device cap for supporting hot reset in sync reset flow (v:134681)[CVE-2025-39832]
  - net/mlx5: Reload auxiliary drivers on fw_activate (v:134681)[CVE-2025-39832]
  - net: atm: add lec_mutex (v:134681)[CVE-2025-38323]
  - Revert "config: sw_64: remove EXT4_DEBUG and DEBUG_WW_MUTEX_SLOWPATH" (b:120790)
  - config: x86/arm64/loongarch: enable yhgch drm driver (f:133501)
  - drm/inspur: add yhgch drm driver (f:133501)
  - sw64: adapt arch_tlbbatch_add_pending according to upstream (f:133580)
  - sw64: fix the compilation error when CONFIG_DEBUG_VIRTUAL is enabled (f:133580)
  - sw64: add support for batched TLB flushing during unmap (f:133580)
  - sw64: fix the parameter passing logic of memblock_mark_nomap (f:133580)
  - sw64: add HUGE_VMAP support for c4 (f:133580)
  - sw64: define get_cycles macro (f:133580)
  - sw64: cpuidle: refine C6 state stability (f:133580)
  - sw64: add barriers and tlb flush for set_atc (f:133580)
  - sw64: adapt kernel page table for kdump (f:133580)
  - sw64: adapt kernel page table for memory hotplug (f:133580)
  - sw64: set PTBR_SYS before accessing vmalloc area (f:133580)
  - sw64: set execute permission for virtual machine's hmcode text section (f:133580)
  - sw64: adjust the marking and definitions of some kernel mapping functions (f:133580)
  - sw64: adapt kernel page table for S4 (f:133580)
  - sw64: fix an inappropriate lock in __set_memory (f:133580)
  - sw64: enable kernel page table (f:133580)
  - sw64: use ioremap to map IO address in functions like __get_cpu_nums() (f:133580)
  - sw64: move non-boot core's kernel page table enabling logic to hmcode (f:133580)
  - sw64: use ioremap to map IO address (f:133580)
  - sw64: map legacy I/O to K segment (f:133580)
  - sw64: setup early_ioremap (f:133580)
  - sw64: reset ATC for kvm (f:133580)
  - sw64: setup mapping for efi_mm (f:133580)
  - sw64: set protection for kernel page table (f:133580)
  - sw64: modify codes with fixmap (f:133580)
  - sw64: map the early and the final page table (f:133580)
  - sw64: add fixmap support (f:133580)
  - sw64: fix mmap_base exceeding Java assertion address (f:133580)
  - sw64: add memb before/after atomic (f:133580)
  - sw64: add EDAC support with dynamic node and MC detection (f:133580)
  - sw64: fix: getcpu passed a null pointer error (f:133580)
  - sw64: iommu: refactor iommu v2 initialization (f:133580)
  - sw64: cache: fix shared_cpu_map when PPTT is invalid (f:133580)
  - sw64: add alternative runtime patching (f:133580)
  - sw64: pci: fix IO_BASE if numa_off (f:133580)
  - sw64: use ioremap to map spaces for cpufreq and S3 (f:133580)
  - sw64: pci: add sunway pci controller for Command Completed errata (f:133580)
  - sw64: add definitions for kernel-required CPU capabilities (f:133580)
  - sw64: kvm: add qemu-gdb watchpoint support (f:133580)
  - sw64: kvm: fix srcu lock leak in pv steal time (f:133580)
  - sw64: ebpf: port arch_prepare_bpf_trampoline() (f:133580)
  - sw64: fix random mmap base range (f:133580)
  - sw64: paravirt: add pv steal_time support in guest side (f:133580)
  - sw64: kvm: add pv steal time support (f:133580)
  - sw64: pci: remove redundant debug control (f:133580)
  - config: sw_64: remove EXT4_DEBUG and DEBUG_WW_MUTEX_SLOWPATH (b:120790)
  - smcs: fix disable smcs compile error (b:128440)
  - btrfs: check-integrity: remove CONFIG_BTRFS_FS_CHECK_INTEGRITY option (f:126738)
  - sw64: config: disable CONFIG_BTRFS_FS_CHECK_INTEGRITY (b:123268)
  - config: sw_64: enable ecryptfs (f:132526)
  - loongarch: stackprotector: Use get_random_canary() for stack canary init (f:125541)
  - sw64: Add basic stack protector support (f:125541)
  - security: rbac: load per-user process attributes from config (f:120722)
  - KVM: arm64: fix kvm kabi conflict (f:103249)
  - smccc: kvm_guest: Align with DISCOVER_IMPL_CPUS ABI (f:103249)
  - smccc: kvm_guest: Fix kernel builds for 32 bit arm (f:103249)
  - smccc/kvm_guest: Enable errata based on implementation CPUs (f:103249)
  - arm64: Make  _midr_in_range_list() an exported function (f:103249)
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (f:103249)
  - KVM: arm64: Specify hypercall ABI for retrieving target implementations (f:103249)
  - arm64: Modify _midr_range() functions to read MIDR/REVIDR internally (f:103249)
  - KVM: arm64: Allow userspace to change the implementation ID registers (f:103249)
  - KVM: arm64: Load VPIDR_EL2 with the VM's MIDR_EL1 value (f:103249)
  - KVM: arm64: Maintain per-VM copy of implementation ID regs (f:103249)
  - KVM: arm64: Set HCR_EL2.TID1 unconditionally (f:103249)
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (v:103249)[CVE-2025-39982]
  - net: hns3: fix null pointer in debugfs issue (f:103249)
  - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled (f:103249)
  - net: hns3: fixed vf get max channels bug (f:103249)
  - net: hns3: `req_autoneg` for fiber is initialized to `support_autoneg` instead of OFF. (f:103249)
  - net: hns3: use user configure after hardware reset when using kernel PHY. (f:103249)
  - net: hns3: Return error code when function fails. (f:103249)
  - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx (f:103249)
  - net: hns3: using the num_tqps in the vf driver to apply for resources (f:103249)
  - net: hns3: add support to query tc map info of VF queues (f:103249)
  - net: hns3: merge rss tc configuration (f:103249)
  - net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf (f:103249)
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (f:103249)
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (f:103249)
  - tools/include: Sync arm64 headers with the kernel sources (f:103249)
  - tools/include: Sync arm64 asm/cputype.h with the kernel sources (f:103249)
  - openeuler_defconfig: enable CONFIG_PFN_RANGE_ALLOC by default (f:103249)
  - mm/pfn_range_alloc: check if folio is hwpoisoned in pfn_range_free (f:103249)
  - mm/pfn_range_alloc: add a interface to show borrowable physical range (f:103249)
  - mm/pfn_range_alloc: support update cachable attribue of linear mapping (f:103249)
  - mm/pfn_range_alloc: introduce set_linear_mapping_invalid (b:103249)
  - mm/pfn_range_alloc: introduce hugetlb_pool_alloc_size (b:103249)
  - mm/pfn_range_alloc: add tracepoint for hugetlb_pool_alloc and hugetlb_pool_free (f:103249)
  - mm/pfn_range_alloc: add tracepoint for pfn_range_alloc and pfn_range_free (f:103249)
  - mm/pfn_range_alloc: support allocate and free from hugetlb pool (f:103249)
  - mm/pfn_range_alloc: add interfaces to alloc/free for drivers (f:103249)
  - mm/pfn_range_alloc: reserve memory for each node (f:103249)
  - mm/contig_alloc: fix alloc_contig_range when __GFP_COMP and order < MAX_ORDER (b:103249)
  - mm: page_alloc: speed up fallbacks in rmqueue_bulk() (b:103249)
  - mm/page_alloc: clarify should_claim_block() commentary (b:103249)
  - mm/page_alloc: clarify terminology in migratetype fallback code (b:103249)
  - mm/page_alloc: add some detailed comments in can_steal_fallback (b:103249)
  - mm: page_alloc: remove remnants of unlocked migratetype updates (b:103249)
  - mm: page_alloc: don't steal single pages from biggest buddy (b:103249)
  - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() (b:103249)
  - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() (b:103249)
  - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess (b:103249)
  - mm/page_alloc: make __alloc_contig_migrate_range() static (b:103249)
  - mm/page_isolation: don't pass gfp flags to isolate_single_pageblock() (b:103249)
  - mm/contig_alloc: support __GFP_COMP (b:103249)
  - mm: remove unused has_isolate_pageblock (b:103249)
  - mm: page_alloc: simpify page del and expand (b:103249)
  - mm: remove migration for HugePage in isolate_single_pageblock() (b:103249)
  - mm/page_alloc: keep track of free highatomic (b:103249)
  - mm: page_alloc: fix highatomic typing in multi-block buddies (b:103249)
  - mm: page_alloc: batch vmstat updates in expand() (b:103249)
  - mm: page_alloc: change move_freepages() to __move_freepages_block() (b:103249)
  - mm: page_alloc: consolidate free page accounting (b:103249)
  - mm: page_isolation: prepare for hygienic freelists (b:103249)
  - mm: page_alloc: set migratetype inside move_freepages() (b:103249)
  - mm: page_alloc: close migratetype race between freeing and stealing (b:103249)
  - mm: page_alloc: fix freelist movement during block conversion (b:103249)
  - mm: page_alloc: fix move_freepages_block() range error (b:103249)
  - mm: page_alloc: move free pages when converting block during isolation (b:103249)
  - mm: page_alloc: fix up block types when merging compatible blocks (b:103249)
  - mm: page_alloc: optimize free_unref_folios() (b:103249)
  - mm: page_alloc: remove pcppage migratetype caching (b:103249)
  - mm: page_alloc: simplify __free_pages_ok() (b:103249)
  - mm/page_alloc: remove unnecessary next_page in break_down_buddy_pages (b:103249)
  - mm/page_alloc: remove unnecessary check in break_down_buddy_pages (b:103249)
  - mm: add memory reclaim notifier (f:103249)
  - mm: fix __count_zid_vm_events when CONFIG_ZONE_EXTMEM is enabled (b:103249)
  - panic: add notifier call before other cpu shutdown (f:103249)
  - crypto: essiv - Check ssize for decryption and in-place encryption (v:103249)[CVE-2025-40019]
  - KVM: arm64: use KABI_EXTEND to revert struct kvm kabi change (f:103249)
  - KVM: arm64: Make AA64PFR1_EL1.NMI writeable (f:103249)
  - KVM: arm64: Expose S1PIE to guests (f:103249)
  - KVM: arm64: Sanitise ID_AA64MMFR3_EL1 (f:103249)
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (f:103249)
  - KVM: arm64: Make ID_AA64MMFR1_EL1.{HCX, TWED} writable from userspace (f:103249)
  - KVM: arm64: Remove duplicated AA64MMFR1_EL1 XNX (f:103249)
  - KVM: arm64: Make the L1Ip feature bits in CTR_EL0 writable from userspace (f:103249)
  - KVM: arm64: rename functions for invariant sys regs (f:103249)
  - KVM: arm64: show writable masks for feature registers (f:103249)
  - KVM: arm64: Treat CTR_EL0 as a VM feature ID register (f:103249)
  - KVM: arm64: Add helper for writing ID regs (f:103249)
  - KVM: arm64: Use read-only helper for reading VM ID registers (f:103249)
  - KVM: arm64: Only reset vCPU-scoped feature ID regs once (f:103249)
  - KVM: arm64: Reset VM feature ID regs from kvm_reset_sys_regs() (f:103249)
  - KVM: arm64: Rename is_id_reg() to imply VM scope (f:103249)
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (f:103249)
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace (f:103249)
  - KVM: arm64: Document vCPU feature selection UAPIs (f:103249)
  - KVM: arm64: Allow userspace to change ID_AA64ZFR0_EL1 (f:103249)
  - KVM: arm64: Allow userspace to change ID_AA64PFR0_EL1 (f:103249)
  - KVM: arm64: Allow userspace to change ID_AA64MMFR{0-2}_EL1 (f:103249)
  - KVM: arm64: Allow userspace to change ID_AA64ISAR{0-2}_EL1 (f:103249)
  - KVM: arm64: Bump up the default KVM sanitised debug version to v8p8 (f:103249)
  - KVM: arm64: Reject attempts to set invalid debug arch version (f:103249)
  - KVM: arm64: Advertise selected DebugVer in DBGDIDR.Version (f:103249)
  - KVM: arm64: Use guest ID register values for the sake of emulation (f:103249)
  - KVM: arm64: Document KVM_ARM_GET_REG_WRITABLE_MASKS (f:103249)
  - KVM: arm64: Allow userspace to get the writable masks for feature ID registers (f:103249)
  - net: hibmcge: support pci_driver.shutdown() (f:103249)
  - net: hibmcge: select FIXED_PHY (f:103249)
  - regulator: core: fix NULL dereference on unbind due to stale coupling data (v:103249)[CVE-2025-38668]
  - mm/numa_remote: add kernel doc for numa remote feature (f:103249)
  - mm/numa_remote: extend cmdline numa_remote to limit the max number of remote node (f:103249)
  - mm: memory-failure: use kill_accessing_process() in ghes (f:103249)
  - mm: memory-failure: remove task_struct from kill_accessing_process() (b:103249)
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (b:103249)
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (b:103249)
  - arm64: configs: enable NUMA_REMOTE by default (f:103249)
  - mm/numa_remote: enable oom_kill_cpuless_numa_allocating_task when numa_remote is enabled (f:103249)
  - mm/oom_kill: kill current in OOM when binding to cpu-less nodes (f:103249)
  - mm/numa_rmeote: add preonline interface for each memory device (f:103249)
  - mm/numa_remote: add pre-online count in meminfo (f:103249)
  - mm/numa_remote: add sysfs to distinguish whether a remote node (f:103249)
  - mm/numa_remote: introduce hugetlb_nowatermark mode for remote node (f:103249)
  - mm/numa_remote: undo isolation of remote memory asynchronously (f:103249)
  - mm/numa_remote: introduce pre-online mode to support hotplug unready memory (f:103249)
  - mm/numa_remote: introduce nofallback mode for remote node (f:103249)
  - mm/numa_remote: support to set node distance (f:103249)
  - mm/numa_remote: support to hotplug/hotremove remote memory (f:103249)
  - mm/numa_remote: prepare numa node for remote memory (f:103249)
  - mm/memory_hotplug: support to hotplug memory on ZONE_EXTMEM (f:103249)
  - mm/hugetlb: fix folio is still mapped when deleted (b:103249)
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (b:103249)
  - arm64/mpam: Fix L2 MBWU monitor multiplexing issue (b:103249)
  - arm64/mpam: Print MPAM register operation for debug (b:103249)
  - arm64/mpam: Fix MBWU monitor overflow handling (b:103249)
  - cpu/SMT: recover global num_threads after disable smt switch fail (b:103249)
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (v:103249)[CVE-2025-39806]
  - fs/resctrl: Re-allocate rmid for the monitor when migrating across control groups (b:103249)
  - arm-smmu-v3: add 'HIP10C' for 162100602 errata (b:103249)
  - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2 (b:103249)
  - media: rc: fix races with imon_disconnect() (v:103249)[CVE-2025-39993]
  - arm64: Add support for HIP09 Spectre-BHB mitigation (f:103249)
  - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). (v:103249)[CVE-2025-39679]
  - serial: 8250: fix panic due to PSLVERR (v:103249)[CVE-2025-39724]
  - fbcon: Fix OOB access in font allocation (v:103249)[CVE-2025-39967]
  - fbcon: fix integer overflow in fbcon_do_set_font (v:103249)[CVE-2025-39967]
  - config: enable CONFIG_MITIGATION_TSA and CONFIG_KVM_HYPERV by default on x86 (f:103249)
  - x86/cpu: Shorten CPU matching macro (b:103249)
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines (f:103249)
  - x86/microcode/AMD: Handle the case of no BIOS microcode (f:103249)
  - KVM: SVM: Advertise TSA CPUID bits to guests (f:103249)
  - tools headers: Sync x86 headers with the kernel source (f:103249)
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (f:103249)
  - x86/microcode/AMD: Add some forgotten models to the SHA check (f:103249)
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (f:103249)
  - x86/microcode/AMD: Split load_microcode_amd() (f:103249)
  - x86/microcode/AMD: Pay attention to the stepping dynamically (f:103249)
  - KVM: x86: hyper-v: Remove unused inline function kvm_hv_free_pa_page() (f:103249)
  - x86/microcode/intel: Set new revision only after a successful update (f:103249)
  - x86/platform/atom: Switch to new Intel CPU model defines (f:103249)
  - x86/process: Move the buffer clearing before MONITOR (f:103249)
  - x86/microcode/AMD: Add TSA microcode SHAs (f:103249)
  - x86/microcode/AMD: Load only SHA256-checksummed patches (f:103249)
  - x86/microcode/AMD: Add get_patch_level() (f:103249)
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (f:103249)
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (f:103249)
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (f:103249)
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (f:103249)
  - x86/microcode/AMD: Avoid -Wformat warning with clang-15 (f:103249)
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (f:103249)
  - x86/microcode/AMD: Flush patch buffer mapping after application (f:103249)
  - x86/microcode: Rework early revisions reporting (f:103249)
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (f:103249)
  - x86/bugs: Rename MDS machinery to something more generic (f:103249)
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (f:103249)
  - KVM: x86: Swap incoming guest CPUID into vCPU before massaging in KVM_SET_CPUID2 (f:103249)
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup (f:103249)
  - KVM: x86: Rename kvm_cpu_cap_mask() to kvm_cpu_cap_init() (f:103249)
  - x86/cpu: Expose only stepping min/max interface (f:103249)
  - x86/cpu: Introduce new microcode matching helper (f:103249)
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (f:103249)
  - cpufreq: Switch to new Intel CPU model defines (f:103249)
  - EDAC/skx: Switch to new Intel CPU model defines (f:103249)
  - EDAC/i10nm: Switch to new Intel CPU model defines (f:103249)
  - x86/aperfmperf: Switch to new Intel CPU model defines (f:103249)
  - x86/apic: Switch to new Intel CPU model defines (f:103249)
  - x86/bugs: Switch to new Intel CPU model defines (f:103249)
  - x86/CPU/AMD: Improve the erratum 1386 workaround (f:103249)
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (f:103249)
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (f:103249)
  - KVM: x86: Make Hyper-V emulation optional (f:103249)
  - KVM: nVMX: Split off helper for emulating VMCLEAR on Hyper-V eVMCS (f:103249)
  - KVM: VMX: Split off hyperv_evmcs.{ch} (f:103249)
  - net: ubl: add CONFIG_UB_UBL definition and UBL interface (f:103249)
  - RDMA/hns: Fix wrong WQE data when QP wraps around (b:103249)
  - arm64: add cnp verification on Hisilicon erratum 162100125 (f:103249)
  - net:nebula-matrix:Add S1000 SNIC driver support (f:103249)
  - sdei_watchdog: Add CPU_PM_ENTER_FAILED handling in sdei_watchdog_pm_notifier (b:103249)
  - crypto: hisilicon/qm - clear all VF configurations in the hardware (b:103249)
  - Revert "crypto: hisilicon/qm - fix vfs_num error" (b:103249)
  - crypto: hisilicon/qm - invalidate queues in use (b:103249)
  - Revert "crypto: hisilicon/qm - invalidate queues in use" (b:103249)
  - Revert "crypto: hisilicon/qm - clear the memory before enabling the device" (b:103249)
  - crypto: hisilicon/zip - add hashjoin, gather, and UDMA data move features (f:103249)
  - crypto: hisilicon/zip - add lz4 and lz77_only to algorithm sysfs (f:103249)
  - crypto: hisilicon/sec2 - Fix false-positive warning of uninitialised qp_ctx (b:103249)
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (v:103249)[CVE-2025-39998]
  - e1000e: fix heap overflow in e1000_set_eeprom (v:103249)[CVE-2025-39898]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (b:103249)
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (b:103249)
  - RNPGBE: NET: Fix dmesg 'unknow speed' show when 1000M (b:103249)
  - perf vendor events arm64: Add V3 events/metrics (b:103249)
  - perf vendor events arm64: Add N3 events/metrics (b:103249)
  - perf vendor events arm64: Add FUJITSU-MONAKA PMU event (b:103249)
  - perf vendor events arm64: Update N2/V2 events from source (b:103249)
  - arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register (b:103249)
  - config: sw_64: enable rtc-efi and some other rtc configs (b:132387)


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb11
changelog:
  - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove (v:134681)[CVE-2026-23272]
  - LoongArch: Add more instruction opcodes and emit_* helpers (b:134681)
  - apparmor: fix race between freeing data and fs accessing it (v:134681)[CVE-2026-23411]
  - xen/privcmd: add boot control for restricted usage in domU (v:134681)[CVE-2026-31788]
  - xen/privcmd: unregister xenstore notifier on module exit (v:134681)[CVE-2026-31788]
  - xen/privcmd: restrict usage in unprivileged domU (v:134681)[CVE-2026-31788]
  - apparmor: replace recursive profile removal with iterative approach (v:134681)[CVE-2026-23404]
  - apparmor: fix: limit the number of levels of policy namespaces (v:134681)[CVE-2026-23405]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (v:134681)[CVE-2026-23399]
  - xdp: produce a warning when calculated tailroom is negative (v:134681)[CVE-2026-23343]
  - xdp: use modulo operation to calculate XDP frag tailroom (v:134681)[CVE-2026-23343]
  - apparmor: fix differential encoding verification (v:134681)[CVE-2026-23409]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (v:134681)[CVE-2026-23272]
  - net/sched: act_gate: snapshot parameters with RCU on replace (v:134681)[CVE-2026-23245]
  - wifi: libertas: fix use-after-free in lbs_free_adapter() (v:134681)[CVE-2026-23281]
  - netfilter: nf_tables: always walk all pending catchall elements (v:134681)[CVE-2026-23278]
  - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (v:134681)[CVE-2026-23324]
  - nvme-fc: release admin tagset if init fails (v:134681)[CVE-2026-23261]
  - tls: Purge async_hold in tls_decrypt_async_wait() (v:134681)[CVE-2026-23414]
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (v:134681)[CVE-2026-23351]
  - clsact: Fix use-after-free in init/destroy rollback asymmetry (v:134681)[CVE-2026-23413]
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (v:134681)[CVE-2026-23340]
  - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded (v:134681)[CVE-2026-23310]
  - netfilter: nf_tables: release flowtable after rcu grace period on error (v:134681)[CVE-2026-23392]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (v:134681)[CVE-2026-23391]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (v:134681)[CVE-2026-23274]
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (v:134681)[CVE-2026-23270]
  - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (v:134681)[CVE-2026-23277]
  - bridge: cfm: Fix race condition in peer_mep deletion (v:134681)[CVE-2026-23393]
  - apparmor: Fix double free of ns_name in aa_replace_profiles() (v:134681)[CVE-2026-23408]
  - net: prevent NULL deref in ip[6]tunnel_xmit() (v:134681)[CVE-2026-23276]
  - net: add xmit recursion limit to tunnel xmit functions (v:134681)[CVE-2026-23276]
  - net: gro: fix outer network offset (v:134681)[CVE-2026-23254]
  - net: annotate data-races around sk->sk_{data_ready,write_space} (v:134681)[CVE-2026-23302]
  - net: add proper RCU protection to /proc/net/ptype (v:134681)[CVE-2026-23255]
  - apparmor: fix race on rawdata dereference (v:134681)[CVE-2026-23410]
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (v:134681)[CVE-2026-23401]
  - apparmor: fix memory leak in verify_header (v:134681)[CVE-2026-23403]
  - net: usb: kalmia: validate USB endpoints (v:134681)[CVE-2026-23365]
  - regmap: maple: free entry on mas_store_gfp() failure (v:134681)[CVE-2026-23260]
  - tls: Fix race condition in tls_sw_cancel_work_tx() (v:134681)[CVE-2026-23240]
  - mm: thp: deny THP for files on anonymous inodes (v:134681)[CVE-2026-23375]
  - net: usb: pegasus: validate USB endpoints (v:134681)[CVE-2026-23290]
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (v:134681)[CVE-2026-23395]
  - nfnetlink_osf: validate individual option lengths in fingerprints (v:134681)[CVE-2026-23397]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (v:134681)[CVE-2026-23371]
  - mptcp: pm: in-kernel: always mark signal+subflow endp as used (v:134681)[CVE-2026-23321]
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (v:134681)[CVE-2026-23300]
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (v:134681)[CVE-2026-23381]
  - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (v:134681)[CVE-2026-23368]
  - can: bcm: fix locking for bcm_op runtime updates (v:134681)[CVE-2026-23362]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (v:134681)[CVE-2026-23293]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (v:134681)[CVE-2026-23304]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (v:134681)[CVE-2026-23303]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (v:134681)[CVE-2026-23231]
  - ntfs3: Fix uninit buffer allocated by __getname() (v:134681)[CVE-2025-68727]
  - f2fs: fix to detect potential corrupted nid in free_nid_list (v:134681)[CVE-2025-68315]
  - net: phy: Don't register LEDs for genphy (b:134681)
  - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (v:134681)[CVE-2026-23317]
  - i40e: Fix preempt count leak in napi poll tracepoint (v:134681)[CVE-2026-23313]
  - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (v:134681)[CVE-2026-23319]
  - bpf: export bpf_link_inc_not_zero. (v:134681)[CVE-2026-23319]
  - bpf: Fix stack-out-of-bounds write in devmap (v:134681)[CVE-2026-23359]
  - Squashfs: check metadata block offset is within range (v:134681)[CVE-2026-23388]
  - apparmor: fix unprivileged local user can do privileged policy management (v:134681)[CVE-2026-23268]
  - RDMA/umad: Reject negative data_len in ib_umad_write (v:134681)[CVE-2026-23243]
  - nvme: fix admin queue leak on controller reset (v:134681)[CVE-2026-23360]
  - scsi: target: Fix recursive locking in __configfs_open_file() (v:134681)[CVE-2026-23292]
  - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size (b:134681)
  - x86/efi: defer freeing of boot services memory (v:134681)[CVE-2026-23352]
  - audit: add fchmodat2() to change attributes class (v:134681)[CVE-2025-71239]
  - scsi: core: Fix error handling for scsi_alloc_sdev() (v:134681)[CVE-2026-23296]
  - scsi: core: Fix refcount leak for tagset_refcnt (v:134681)[CVE-2026-23296]
  - blktrace: fix __this_cpu_read/write in preemptible context (v:134681)[CVE-2026-23374]
  - nvme: fix memory allocation in nvme_pr_read_keys() (v:134681)[CVE-2026-23244]
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (v:134681)[CVE-2026-23271]
  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (v:134681)[CVE-2026-23253]
  - xattr: switch to CLASS(fd) (v:134681)[CVE-2024-14027]
  - arm64: Set __nocfi on swsusp_arch_resume() (v:134681)[CVE-2026-23128]
  - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (v:134681)[CVE-2025-39981]
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (v:134681)[CVE-2025-39981]
  - overflow: Introduce __DEFINE_FLEX for having no initializer (v:134681)[CVE-2025-39981]
  - overflow: Fix direct struct member initialization in _DEFINE_FLEX() (v:134681)[CVE-2025-39981]
  - overflow: Change DEFINE_FLEX to take __counted_by member (v:134681)[CVE-2025-39981]
  - overflow: add DEFINE_FLEX() for on-stack allocs (v:134681)[CVE-2025-39981]
  - Bluetooth: MGMT: Fix possible UAFs (v:134681)[CVE-2025-39981]
  - Bluetooth: hci_sync: fix set_local_name race condition (b:134681)
  - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (v:134681)[CVE-2025-39981]
  - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags (b:134681)
  - Bluetooth: Prevent unintended pause by checking if advertising is active (b:134681)
  - Bluetooth: MGMT: mesh_send: check instances prior disabling advertising (b:134681)
  - Bluetooth: MGMT: set_mesh: update LE scan interval and window (b:134681)
  - Bluetooth: hci_sync: revert some mesh modifications (b:134681)
  - platform/x86: classmate-laptop: Add missing NULL pointer checks (v:134681)[CVE-2026-23237]
  - pps: Fix a use-after-free - fix kabi (v:134681)[CVE-2024-57979]
  - pps: Fix a use-after-free (v:134681)[CVE-2024-57979]
  - iommu: disable SVA when CONFIG_X86 is set (v:134681)[CVE-2025-71089]
  - vsock/virtio: cap TX credit to local buffer size (v:134681)[CVE-2026-23086]
  - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref (v:134681)[CVE-2026-23145]
  - bus: fsl-mc: fix use-after-free in driver_override_show() (v:134681)[CVE-2026-23221]
  - ALSA: aloop: Fix racy access at PCM trigger (v:134681)[CVE-2026-23191]
  - ALSA: usb-audio: Use the right limit for PCM OOB check (v:134681)[CVE-2026-23208]
  - ALSA: usb-audio: Prevent excessive number of frames (v:134681)[CVE-2026-23208]
  - of: unittest: Fix memory leak in unittest_data_add() (v:134681)[CVE-2026-23137]
  - scsi: qla2xxx: Fix bsg_done() causing double free (v:134681)[CVE-2025-71238]
  - mm/rmap: fix two comments related to huge_pmd_unshare() (v:134681)[CVE-2026-23100]
  - mm/hugetlb: fix two comments related to huge_pmd_unshare() (v:134681)[CVE-2026-23100]
  - mm/hugetlb: fix hugetlb_pmd_shared() (v:134681)[CVE-2026-23100]
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (v:134681)[CVE-2026-23100]
  - vsock/virtio: fix potential underflow in virtio_transport_get_credit() (v:134681)[CVE-2026-23069]
  - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path (v:134681)[CVE-2026-23140]
  - bpf, test_run: Subtract size of xdp_frame from allowed metadata size (v:134681)[CVE-2026-23140]
  - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN (v:134681)[CVE-2026-23140]
  - bpf: Make variables in bpf_prog_test_run_xdp less confusing (v:134681)[CVE-2026-23140]
  - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K (v:134681)[CVE-2026-23140]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (v:134681)[CVE-2026-23120]
  - KVM: Don't clobber irqfd routing type when deassigning irqfd (v:134681)[CVE-2026-23198]
  - ipv6: annotate data-race in ndisc_router_discovery() (v:134681)[CVE-2026-23124]
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (v:134681)[CVE-2026-23209]
  - macvlan: fix error recovery in macvlan_common_newlink() (v:134681)[CVE-2026-23209]
  - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (v:134681)[CVE-2026-23169]
  - net: fix segmentation of forwarding fraglist GRO (v:134681)[CVE-2026-23154]
  - libceph: reset sparse-read state in osd_fault() (v:134681)[CVE-2026-23136]
  - mm, shmem: prevent infinite loop on truncate race (v:134681)[CVE-2026-23177]
  - mm/shmem, swap: fix race of truncate and swap entry split (v:134681)[CVE-2026-23177]
  - bonding: fix use-after-free due to enslave fail after slave array update (v:134681)[CVE-2026-23171]
  - net/sched: cls_u32: use skb_header_pointer_careful() (v:134681)[CVE-2026-23204]
  - net: add skb_header_pointer_careful() helper (v:134681)[CVE-2026-23204]
  - regmap: Fix race condition in hwspinlock irqsave routine (v:134681)[CVE-2026-23071]
  - crypto: virtio - Add spinlock protection with virtqueue notification (v:134681)[CVE-2026-23229]
  - net/mlx5e: TC, delete flows only for existing peers (v:134681)[CVE-2026-23173]
  - ceph: fix oops due to invalid pointer for kfree() in parse_longname() (v:134681)[CVE-2026-23201]
  - bonding: annotate data-races around slave->last_rx (v:134681)[CVE-2026-23212]
  - netfilter: nf_conncount: update last_gc only when GC has been performed (v:134681)[CVE-2026-23139]
  - bonding: provide a net pointer to __skb_flow_dissect() (v:134681)[CVE-2026-23119]
  - netdevsim: fix a race issue related to the operation on bpf_bound_progs list (v:134681)[CVE-2026-23126]
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (v:134681)[CVE-2026-23111]
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (v:134681)[CVE-2026-23060]
  - arm64/fpsimd: signal: Fix restoration of SVE context (v:134681)[CVE-2026-23102]
  - arm64/fpsimd: signal: Consistently read FPSIMD context (v:134681)[CVE-2026-23102]
  - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (v:134681)[CVE-2026-23102]
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (v:134681)[CVE-2026-23099]
  - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (v:134681)[CVE-2026-23105]
  - net/sched: Enforce that teql can only be used as root qdisc (v:134681)[CVE-2026-23074]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (v:134681)[CVE-2026-23125]
  - dmaengine: xilinx: xdma: Fix regmap max_register (v:134681)[CVE-2025-71195]
  - leds: led-class: Only Add LED to leds_list when it is fully ready (v:134681)[CVE-2026-23101]
  - wifi: ath10k: fix dma_free_coherent() pointer (v:134681)[CVE-2026-23133]
  - smb/server: fix refcount leak in parse_durable_handle_context() (v:134681)[CVE-2025-71204]
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray (v:134681)[CVE-2026-23226]
  - ipvlan: Make the addrs_lock be per port (v:134681)[CVE-2026-23103]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (v:134681)[CVE-2026-23230]
  - efivarfs: fix error propagation in efivar_entry_get() (v:134681)[CVE-2026-23156]
  - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (v:134681)[CVE-2026-23113]
  - kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of KVM shadow with KVM (b:134681)
  - scsi: qla2xxx: Free sp in error path to fix system crash (v:134681)[CVE-2025-71232]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (v:134681)[CVE-2025-71235]
  - scsi: qla2xxx: Validate sp before freeing associated memory (v:134681)[CVE-2025-71236]
  - smb: client: fix potential UAF and double free in smb2_open_file() (v:134681)[CVE-2026-23205]
  - smb/client: fix memory leak in smb2_open_file() (v:134681)[CVE-2026-23205]
  - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (v:134681)[CVE-2026-23220]
  - uacce: fix cdev handling in the cleanup path (v:134681)[CVE-2026-23096]
  - Revert "uacce: fix for cdev memory leak" (v:134681)[CVE-2026-23096]
  - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove (v:134681)[CVE-2026-23163]
  - drm/amdkfd: Don't use sw fault filter if retry cam enabled (v:134681)[CVE-2026-23163]
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (v:134681)[CVE-2026-23179]
  - ASoC: amd: fix memory leak in acp3x pdm dma ops (v:134681)[CVE-2026-23190]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (v:134681)[CVE-2026-23193]
  - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (v:134681)[CVE-2026-23084]
  - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() (v:134681)[CVE-2025-71221]
  - uacce: fix isolate sysfs check condition (v:134681)[CVE-2026-23094]
  - Revert "uacce: fix isolate sysfs check condition" (v:134681)[CVE-2026-23094]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (v:134681)[CVE-2026-23216]
  - smb/server: fix refcount leak in smb2_open() (v:134681)[CVE-2025-71223]
  - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() (v:134681)[CVE-2025-71220]
  - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() (v:134681)[CVE-2026-23228]
  - md: suspend array while updating raid_disks via sysfs (v:134681)[CVE-2025-71225]
  - scsi: core: Wake up the error handler when final completions race against each other (v:134681)[CVE-2026-23110]
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (v:134681)[CVE-2026-23112]
  - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES (b:134681)
  - migrate: correct lock ordering for hugetlb file folios (v:134681)[CVE-2026-23097]
  - libceph: make calc_target() set t->paused, not just clear it (v:134681)[CVE-2026-23047]
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (v:134681)[CVE-2026-23054]
  - irqchip/gic-v3-its: Avoid truncating memory addresses (v:134681)[CVE-2026-23085]
  - mm: try skipping pinned page before unmapping in migration (b:134681)
  - drm: fix kabi for struct drm_framebuffer (v:134681)[CVE-2025-38449]
  - drm/framebuffer: Acquire internal references on GEM handles (v:134681)[CVE-2025-38449]
  - drm/gem: Acquire references on GEM handles for framebuffers (v:134681)[CVE-2025-38449]
  - mm: slub: avoid wake up kswapd in set_track_prepare (v:134681)[CVE-2025-39843]
  - scsi: qla2xxx: Sanitize payload size to prevent member overflow (v:134681)[CVE-2026-23059]
  - libceph: return the handler error from mon_handle_auth_done() (v:134681)[CVE-2026-22992]
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (v:134681)[CVE-2025-40251]
  - mptcp: avoid deadlock on fallback while reinjecting (v:134681)[CVE-2025-38491]
  - mptcp: plug races between subflow fail and subflow creation (v:134681)[CVE-2025-38491]
  - mptcp: make fallback action and fallback decision atomic (v:134681)[CVE-2025-38491]
  - ice: fix Rx page leak on multi-buffer frames (v:134681)[CVE-2025-39948]
  - ice: fix incorrect counter for buffer allocation failures (v:134681)[CVE-2025-39948]
  - ice: stop storing XDP verdict within ice_rx_buf (v:134681)[CVE-2025-39948]
  - ice: gather page_count()'s of each frag right before XDP prog call (v:134681)[CVE-2025-39948]
  - ice: Introduce ice_xdp_buff (v:134681)[CVE-2025-39948]
  - netfilter: ctnetlink: remove refcounting in expectation dumpers (v:134681)[CVE-2025-39764]
  - netfilter: nf_tables: reject duplicate device on updates (v:134681)[CVE-2025-38678]
  - netfilter: nf_tables: Introduce functions freeing nft_hook objects (v:134681)[CVE-2025-38678]
  - netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c (v:134681)[CVE-2025-38678]
  - err.h: add ERR_PTR_PCPU(), PTR_ERR_PCPU() and IS_ERR_PCPU() macros (v:134681)[CVE-2025-38678]
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. (v:134681)[CVE-2025-39913]
  - x86/CPU/AMD: Add RDSEED fix for Zen5 (v:134681)[CVE-2025-68313]
  - x86/rdrand: Disable RDSEED on AMD Cyan Skillfish (b:134681)
  - x86: uaccess: don't use runtime-const rewriting in modules (v:134681)[CVE-2024-50102]
  - x86: fix off-by-one in access_ok() (v:134681)[CVE-2024-50102]
  - x86: fix user address masking non-canonical speculation issue (v:134681)[CVE-2024-50102]
  - x86/uaccess: Zero the 8-byte get_range case on failure on 32-bit (v:134681)[CVE-2024-50102]
  - x86/uaccess: Improve the 8-byte getuser() case (v:134681)[CVE-2024-50102]
  - x86: fix whitespace in runtime-const assembler output (v:134681)[CVE-2024-50102]
  - dcache: keep dentry_hashtable or d_hash_shift even when not used (v:134681)[CVE-2024-50102]
  - runtime constants: add x86 architecture support (v:134681)[CVE-2024-50102]
  - runtime constants: deal with old decrepit linkers (v:134681)[CVE-2024-50102]
  - x86/uaccess: Add missing __force to casts in __access_ok() and valid_user_address() (v:134681)[CVE-2024-50102]
  - pNFS: Fix a deadlock when returning a delegation during open() (v:134681)[CVE-2026-23050]
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (v:134681)[CVE-2025-68822]
  - mm/vmalloc: fix data race in show_numa_info() (v:134681)[CVE-2025-38383]
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (v:134681)[CVE-2025-39902]
  - config: enable CONFIG_MITIGATION_VMESCAPE by default on x86 (v:134681)[CVE-2025-40300]
  - x86/vmscape: Enable the mitigation (v:134681)[CVE-2025-40300]
  - x86/vmscape: Enumerate VMSCAPE bug (v:134681)[CVE-2025-40300]
  - x86/vmscape: Add conditional IBPB mitigation (v:134681)[CVE-2025-40300]
  - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb (v:134681)[CVE-2025-40329]
  - parse_longname(): strrchr() expects NUL-terminated string (v:134681)[CVE-2025-38660]
  - media: imon: make send_packet() more robust (v:134681)[CVE-2025-68194]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (v:134681)[CVE-2025-68211]
  - fbcon: Set fb_display[i]->mode to NULL when the mode is released (v:134681)[CVE-2025-40323]
  - iio: common: st_sensors: Fix use of uninitialize device structs (v:134681)[CVE-2025-38531]
  - mm/mempool: fix poisoning order>0 pages with HIGHMEM (v:134681)[CVE-2025-68231]
  - mm/page_poison: replace kmap_atomic() with kmap_local_page() (v:134681)[CVE-2025-68231]
  - mm/mempool: replace kmap_atomic() with kmap_local_page() (v:134681)[CVE-2025-68231]
  - usb: gadget: udc: fix use-after-free in usb_gadget_state_work (v:134681)[CVE-2025-68282]
  - net: dsa: properly keep track of conduit reference (v:134681)[CVE-2025-71152]
  - net/sched: sch_qfq: do not free existing class in qfq_change_class() (v:134681)[CVE-2026-22999]
  - macvlan: fix possible UAF in macvlan_forward_source() (v:134681)[CVE-2026-23001]
  - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (v:134681)[CVE-2025-38627]
  - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (v:134681)[CVE-2025-38627]
  - libceph: make free_choose_arg_map() resilient to partial allocation (v:134681)[CVE-2026-22991]
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload (v:134681)[CVE-2025-71078]
  - mm/huge_memory: fix NULL pointer deference when splitting folio (v:134681)[CVE-2025-68293]
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (v:134681)[CVE-2026-22984]
  - net: usb: pegasus: fix memory leak in update_eth_regs_async() (v:134681)[CVE-2026-23021]
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (v:134681)[CVE-2026-22990]
  - team: fix check for port enabled in team_queue_override_port_prio_changed() (v:134681)[CVE-2025-71091]
  - mm/page_alloc: prevent pcp corruption with SMP=n (v:134681)[CVE-2026-23025]
  - rcu: Fix racy re-initialization of irq_work causing hangs (v:134681)[CVE-2025-39744]
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (v:134681)[CVE-2025-39744]
  - drm/tilcdc: Fix removal actions in case of failed probe (v:134681)[CVE-2025-71141]
  - drm/tilcdc: request and mapp iomem with devres (v:134681)[CVE-2025-71141]
  - dmaengine: stm32: dmamux: fix device leak on route allocation (v:134681)[CVE-2025-71186]
  - null_blk: fix kmemleak by releasing references to fault configfs items (v:134681)[CVE-2026-23032]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (v:134681)[CVE-2025-68768]
  - inet: frags: add inet_frag_queue_flush() (v:134681)[CVE-2025-68768]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (v:134681)[CVE-2026-23003]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (v:134681)[CVE-2025-71118]
  - LoongArch: BPF: Sign extend kfunc call arguments (v:134681)[CVE-2025-71129]
  - genirq/msi:: Fix kabi break of struct msi_desc (b:134681)
  - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (v:134681)[CVE-2025-38062]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (v:134681)[CVE-2025-71083]
  - svcrdma: bound check rq_pages index in inline path (v:134681)[CVE-2025-71068]
  - ipv6: Fix use-after-free in inet6_addr_del(). (v:134681)[CVE-2026-23010]
  - ipv4: ip_gre: make ipgre_header() robust (v:134681)[CVE-2026-23011]
  - net: fix memory leak in skb_segment_list for GRO packets (v:134681)[CVE-2026-22979]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (v:134681)[CVE-2026-22977]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (v:134681)[CVE-2025-71097]
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (v:134681)[CVE-2025-71120]
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (v:134681)[CVE-2025-38685]
  - udp: Deal with race between UDP socket address change and rehash (v:134681)[CVE-2024-57974]
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (v:134681)[CVE-2025-21931]


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb12
changelog:
  - sw64/cpu: avoid duplicate cpu device registration and reboot hang (b:139364)
  - sw64: config: enable exFAT (f:139611)
  - kvm/arm64: add gpu passthrough support for arm64 (f:117423)
  - init: add new kernel boot parameter ksvd (f:117423)
  - config: Disable unprivileged BPF syscall by default (v:134681)[CVE-2022-23960]
  - arm64: Add support for TSV110 Spectre-BHB mitigation (v:134681)[CVE-2022-23960]
  - md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen (v:134681)[CVE-2024-35808]
  - md/dm-raid: don't call md_reap_sync_thread() directly (v:134681)[CVE-2024-35808]
  - md: prevent incorrect update of resync/recovery offset (b:134681)
  - md/raid1: Fix data corruption for degraded array with slow disk (b:134681)
  - md/raid1: set max_sectors during early return from choose_slow_rdev() (b:134681)
  - md-cluster: fix no recovery job when adding/re-adding a disk (b:134681)
  - md-cluster: fix hanging issue while a new disk adding (b:134681)
  - md/raid5: recheck if reshape has finished with device_lock held (b:134681)
  - md-cluster: Constify struct md_cluster_operations (b:134681)
  - md: Remove unneeded semicolon (b:134681)
  - md/raid5: fix spares errors about rcu usage (b:134681)
  - dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume (b:134681)
  - md: pass in max_sectors for pers->sync_request() (b:134681)
  - md: factor out helpers for different sync_action in md_do_sync() (b:134681)
  - md: replace last_sync_action with new enum type (b:134681)
  - md: use new helpers in md_do_sync() (b:134681)
  - md: don't fail action_store() if sync_thread is not registered (b:134681)
  - md: remove parameter check_seq for stop_sync_thread() (b:134681)
  - md: replace sysfs api sync_action with new helpers (b:134681)
  - md: factor out helper to start reshape from action_store() (b:134681)
  - md: add new helpers for sync_action (b:134681)
  - md: add a new enum type sync_action (b:134681)
  - md: rearrange recovery_flags (b:134681)
  - md/raid0: don't free conf on raid0_run failure (b:134681)
  - md: make md_flush_request() more readable (b:134681)
  - md: change the return value type of md_write_start to void (b:134681)
  - md: Revert "md: Fix overflow in is_mddev_idle" (b:134681)
  - md: don't account sync_io if iostats of the disk is disabled (b:134681)
  - md: Fix overflow in is_mddev_idle (b:134681)
  - md: add check for sleepers in md_wakeup_thread() (b:134681)
  - md: add a mddev_is_dm helper (b:134681)
  - md: add a mddev_add_trace_msg helper (b:134681)
  - md: add a mddev_trace_remap helper (b:134681)
  - dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (b:134681)
  - dm-raid: add a new helper prepare_suspend() in md_personality (b:134681)
  - dm-raid: really frozen sync_thread during suspend (b:134681)
  - md: add a new helper reshape_interrupted() (b:134681)
  - md: export helper md_is_rdwr() (b:134681)
  - md: export helpers to stop sync_thread (b:134681)
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (b:134681)
  - md/raid1: factor out helpers to choose the best rdev from read_balance() (b:134681)
  - md/raid1: factor out the code to manage sequential IO (b:134681)
  - md/raid1: factor out choose_bb_rdev() from read_balance() (b:134681)
  - md/raid1: factor out choose_slow_rdev() from read_balance() (b:134681)
  - md/raid1: factor out read_first_rdev() from read_balance() (b:134681)
  - md/raid1-10: factor out a new helper raid1_should_read_first() (b:134681)
  - md/raid1-10: add a helper raid1_check_read_range() (b:134681)
  - md/raid1: fix choose next idle in read_balance() (b:134681)
  - md/raid1: record nonrot rdevs while adding/removing rdevs to conf (b:134681)
  - md/raid1: factor out helpers to add rdev to conf (b:134681)
  - md: add a new helper rdev_has_badblock() (b:134681)
  - md: check mddev->pers before calling md_set_readonly() (b:134681)
  - md: clean up openers check in do_md_stop() and md_set_readonly() (b:134681)
  - md: sync blockdev before stopping raid or setting readonly (b:134681)
  - md: factor out a helper to sync mddev (b:134681)
  - md: return directly before setting did_set_md_closing (b:134681)
  - md: changed the switch of RAID_VERSION to if (b:134681)
  - md: merge the check of capabilities into md_ioctl_valid() (b:134681)
  - md: Don't suspend the array for interrupted reshape (b:134681)
  - md: Don't register sync_thread for reshape directly (b:134681)
  - md: Make sure md_do_sync() will set MD_RECOVERY_DONE (b:134681)
  - md: Don't ignore read-only array in md_check_recovery() (b:134681)
  - md: Don't ignore suspended array in md_check_recovery() (b:134681)
  - md: get rdev->mddev with READ_ONCE() (b:134681)
  - md: remove redundant md_wakeup_thread() (b:134681)
  - md: remove redundant check of 'mddev->sync_thread' (b:134681)
  - md: fix a suspicious RCU usage warning (b:134681)
  - raid: Remove now superfluous sentinel element from ctl_table array (b:134681)
  - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (v:134681)[CVE-2025-22090]
  - mm: (un)track_pfn_copy() fix + doc improvements (v:134681)[CVE-2025-22090]
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (v:134681)[CVE-2025-22090]
  - mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() (v:134681)[CVE-2025-39910]
  - kasan: avoid sleepable page allocation from atomic context (v:134681)[CVE-2025-39910]
  - kasan: use unchecked __memset internally (b:134681)
  - fuse: Track process write operations in both direct and writethrough modes (f:19541)


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb13
changelog:
  - drm: Add inspur directory to Kconfig and Makefile (b:133501)
  - smcs: add const qualifier for smcs_bus_register (b:118373)


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb14
changelog:
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (v:139683)[CVE-2026-31431]
  - crypto: authencesn - Fix src offset when decrypting in-place (v:139683)[CVE-2026-31431]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (v:139683)[CVE-2026-31431]
  - crypto: authenc - use memcpy_sglist() instead of null skcipher (v:139683)[CVE-2026-31431]
  - crypto: algif_aead - snapshot IV for async AEAD requests (v:139683)[CVE-2026-31431]
  - crypto: algif_aead - Revert to operating out-of-place (v:139683)[CVE-2026-31431]
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher (v:139683)[CVE-2026-31431]
  - crypto: scatterwalk - Backport memcpy_sglist() (v:139683)[CVE-2026-31431]
  - crypto: algif_aead - Fix minimum RX size check for decryption (v:139683)[CVE-2026-31431]


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 6.6.0-113.0.0.119.kb15
changelog:
  - netfilter: nf_conntrack_expect: use expect->helper (v:140929)[CVE-2026-31414]
  - netfilter: nf_conntrack_expect: honor expectation helper field (v:140929)[CVE-2026-31414]
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (v:140929)[CVE-2026-43027]
  - ptrace: Fix kabi breakage in struct task_struct (v:142424)[CVE-2026-46333]
  - ptrace: slightly saner 'get_dumpable()' logic (v:142424)[CVE-2026-46333]
  - sw64: config: disable swap to fix LTP test (b:139711)
  - net: hibifur: Fix unconditional rebuild due to embedded timestamp in ccflags (b:142087)
  - net: sssnic: Fix unconditional rebuild due to embedded timestamp in ccflags (b:142087)
  - KVM: x86: use array_index_nospec with indices that come from guest (v:140952)[CVE-2025-39823]
  - config: sw_64: remove EXT4_DEBUG and DEBUG_WW_MUTEX_SLOWPATH (b:120790)
  - net: linkdata: Remove useless debug message (b:140061)
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers (f:140061)
  - software node: Correct a OOB check in software_node_get_reference_args() (v:140952)[CVE-2026-38342]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (v:140950)[CVE-2025-22025]
  - nfsd: put dl_stid if fail to queue dl_recall (v:140950)[CVE-2025-22025]
  - ext4: fix off-by-one error in do_split (v:140951)[CVE-2025-23150]
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (v:140951)[CVE-2025-22083]
  - ext4: fix OOB read when checking dotdot dir (v:140951)[CVE-2025-37785]
  - jbd2: remove wrong sb->s_sequence check (v:140951)[CVE-2025-37839]
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (v:140951)[CVE-2025-38061]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (v:140381)[CVE-2026-43284]


author: guoqinglan <guoqinglan@kylinsec.com.cn> - 30-49.kb1
changelog:
  - add sw-arch support from upstrem 22.03 branch (f:31866)
  - remove sw arch from valgrind_arches macro (b:67203)
  - add provides of kylin-rpm-config (b:31866)
  - change some openeuler information to kylinsec information (f:64854)


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-ksmtp-23.08.4-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-libgravatar-23.08.4-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j16 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-libkleo-23.08.4-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-modemmanager-qt-5.113.0-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-plasma-5.113.0-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j16 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-prison-5.113.0-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-purpose-5.113.0-2.ks6.kb1.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-sonnet-5.113.0-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j16 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/kf5-syntax-highlighting-5.113.0-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: Fix touch screen taskbar button click judged as drag.(#23600)
  - KYOS-F: Other workspace Windows are not displayed by default.
  - KYOS-B: Fixed an issue where recent documents were not sorted.(#24803)
  - KYOS-B: Fixed an issue where the x11 tray icon did not match the size of the icon container, causing the tray icon to display abnormally.(#22117)
  - KYOS-B: Fix Pinyin search failed when /etc/locale.conf is not LANG="zh_CN.UTF-8".(#21369)
  - KYOS-F: Replace "mate-panel --run-dialog" with "kiran-panel --run-dialog".(#24810)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.0-3
changelog:
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-4
changelog:
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-8
changelog:
  - KYOS-B: Fix window thumbnails not being fetched by window manager takeover(#56152)
  - KYOS-B: fix some memory leak(#54376)
  - KYOS-B: Fix some related issues in recent documents(#55119)
  - KYOS-F: adding apps to the desktop, copy them to a temporary file and change the permissions.(#37790)
  - KYOS-F: Added configuration items: Fixed application to the taskbar(#37152)
  - KYOS-B: change 'Recently files' to 'Recent files'(#38303)
  - kYOS-B: fix interference caused by tooltip and popup type windows
  - KYOS-F: taskbar add "simply window previewer" mode(only show window title)(#45321) 
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-6
changelog:
  - when the SDK is not installed, the vein driver destruction crashes.
  - change the cmake required minimum version. (b:105353)
  - set file permissions for existing database files.
  - stop enroll retry on acquire feature failure. (b:116373)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.0-2
changelog:
  - fix expression input box being too short in programmer hex mode causing text bottom clipping(b:115485)
  - change the minimum version of CMake to a range(b:105353)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.1-2
changelog:
  - Fix system upgrade defects and add upgrade history recording. 
  - Improve upgrade code review issues. 
  - Improve system upgrade translation. (b:115530)
  - Add upgrade history recording feature. (f:115666)
  - Store install percentage in install log. (b:115789)
  - Prevent operations while cache is updating. 
  - Handle repo load failures when creating sack and refresh cache if repos are missing. (b:115372)
  - Jump to system upgrade subitem from update reminder and adjust translations. (b:115333)
  - Fix dbus reply error for authenticated interface. (b:115424)
  - Initialize advisory kind to ADVISORY_KIND_NONE. (b:115257)
  - Fix compile warnings and scaling not taking effect. 
  - Fix test compile warnings and add test README. (f:103622)
  - Fix slow sync of QT scale factor to session manager. (b:115935)
  - Add system upgrade unit test. 
  - Add system upgrade unit test. (f:113965)
  - Fix desktop exception when changing fonts. 
  - Fix desktop exception when changing fonts. (b:115787)
  - Fix compatibility issues in personalization plugin and settings. 
  - Support cursor theme and size distribution to KDE items with update notifications. (f:115555)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.2-2
changelog:
  - Add Xcursor-devel dependency and enable Xcursor synchronization for Root window cursor code(b:115346)


author: tangjie02 <tangjie02@kylinsec.com.cn> - 2.8.2-3
changelog:
  - add default kglobalaccel blacklist config. (f:115901)
  - remove dynamic scaling window feature and fix restore scaling factor. (b:115935)


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.8.2-5
changelog:
  - fix all repo count incorrect when scan. (b:119662)
  - add "--" before user/group name in spawn calls to prevent option injection. (b:121814)
  - guard SetModeBySize overflow. (b:121814)
  - keep system shortcuts in sync. (b:114258)
  - return translated tips immediately. (b:125539)
  - only record once when same package name and nvr in diffirent repo. (b:129501)
  - get repo loader from dnf context when update cache. (b:121611)
  - fix memory leak and possible crash. (b:121890)
  - control monitor rotation and reflect by gsettings. (b:123278)
  - drop unnecessary KGlobalAccel MatchType registration. (b:114258)
  - create sack when no enabled repo,only compare remote repo num when scan. (b:131503,119662)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.2-6
changelog:
  - notify AutoSwitchWindowTheme on settings change(b:129303)
  - drop unnecessary KGlobalAccel MatchType registration. (b:114258)
  - create sack when no enabled repo,only compare remote repo num when scan. (b:131503)
  - avoid treating VMware VMMouse as touchpad. (b:34878)
  - handle getgrouplist failure and free groups buffer. (b:123369)


author: yujingmin <yujingmin@kylinsec.com.cn> - 2.8.2-8
changelog:
  - add kiran-system-daemon and kiran-session-daemon require (b:132922)
  - fix the error changes in dnf sack caused by multiple operations occurring simultaneously. (b:132922)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.3-3
changelog:
  - KYOS-B: untranslated error message when UKey feature enrollment fails (#95205)
  - KYOS-B: UI updates incorrectly when authorization is cancelled during hostname setting (#94554)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.0-1
changelog:
  - Update window positions when a single display's resolution changes to prevent gaps between screens.(b:103625)
  - add Decoration theme preview and configuration support(f:103629)
  - Refactor CMake logic and integrate plugin resources into main framework
  - Remove Kwin color temperature settings from power management(b:103624)
  - Fix the issue where the prompt content is not fully displayed when changing from a low resolution to a higher one.(b:108453)
  - compatible with kylinsec and kylin release dir,and show agreement only if file exists(b:107748,35818)
  - Adapt to higher KDecoration version
  - Fix build compilation error


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.1-2
changelog:
  - improve code review problem and add message dialog.
  - add upgrade history function. (f:115666)
  - update install percentage when backend status is UPGRADING. (b:115789)
  - update translation of upgrade finished. (b:115759)
  - add CustomTextBrowser to draw text browser border. (b:115262)
  - Dynamically adjust the width of table column when the pagee size changes. (b:115255)
  - call dbus interface only when reminder interval changed. (b:115424)
  - fix error popup when non-admin users change hostname. (b:115755)
  - prioritize exact match for icon preview.


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.8.2-3
changelog:
  - fix can't move groupInterface to thread after change category. (b:115423)
  - delay handle upgrade log and use QPlainTextEdit to store log. (b:116134)
  - set plain text editor read only. (b:116134)
  - update history in dialog when upgrade finished. (b:219316)
  - hide version license. (b:126107)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.0-11
changelog:
  - KYOS-F: Refactor dependencies convert most dependencies to weak dependencies
  - KYOS-B: Fix incorrect default Caja background issue(#90417)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.0-7
changelog:
  - Add dejavu-fonts dependency to avoid misalignment from monospace font fallback(b:119756)
  - Update default values of backend power plugin configuration in service version(b:115649)
  - Replace input method dependency with fcitx5(f:117665)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-2.kb1
changelog:
  - KYOS-B: Fix style error of install and launch button on gnome-software
  - KYOS-F: distinguish icon and cursor theme for meta theme.


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: add icon of gnome software with correct icon name in Kiran.(#28021)
  - KYOS-B: update icons to smaller size to fix the slowly problem when open caja.(#33978)


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.1-2
changelog:
  - remove unused window icons from Kiran theme. (b:118607)
  - add 48x48 manual app icons. (b:115342)
  - Integrate modified fcitx icons to fix missing input method icons caused by Qt5 lookup strategy. (b:115466)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-5
changelog:
  - Reorganize patch numbers in spec file
  - Add "program" option to rotate lock file configuration for finer-grained rotation locks (b:113752)
  - change the minimum version of CMake to a range(b:105353)
  - rebuild for KiranUI-2.6-next (f:118607)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-2.kb1
changelog:
  - Fix error caused by missing overload implementation on lower version C++standard library (b:142439)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.2-1
changelog:
  - KYOS-B: Fix the problem of input box losing focus when the screensaver is switched.
  - KYOS-B: Adjusting zlog category name, output to standard error, will redirect to lightdm/seat-greeter.log
  - KYOS-B: Setting focus when switching control buttons or input boxes on the authentication screen
  - KYOS-B: Fix the problem that the login screen cannot be popped up by clicking the menu on the right screen


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.2-3
changelog:
  - Repair the garbled display of PAM prompts in the lock screen interface under LANG=zh_CN env(b:86656)


author: gaobo <gaobo@kylinsec.com.cn> - 2.7.2-8
changelog:
  - Add tray indicator for authorization status. (f:103623)
  - Fix timer not set to single-shot causing repeated Polkit temporary authorization enumeration calls. (b:118607)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.2-10
changelog:
  - Migrate server power config to kiran-session-guard to avoid overwrite during session-guard upgrades(b: 126789)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.1-2
changelog:
  - KYOS-B: fix sonarqube scanning problem
  - KYOS-B: change .gitlab-ci.yml
  - KYOS-B: Fix the problem that Menu style difference GTK is too large(#77737)
  - KYOS-B: improve QLineEdit bg color, same with QCombobox(#57766)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.1-5
changelog:
  - KYOS-F: replace xsettings marco with settings-i.h header file.(#90078)
  - KYOS-F: add kiran-session-window to whitelist.(#91057)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.0-2
changelog:
  - Improve color mixing precision with float values and add Inactive color palette handling(f:111543)
  - Get title bar color based on client active state in KDecoration plugin(f:111543)


author: gaobo <gaobo@kylinsec.com.cn> - 2.8.0-3
changelog:
  - Fix file dialog not supporting save with provided filename (b:115516)
  - defer context-menu shortcut suppression for Kiran apps (b:115801)
  - Fix KWin title bar not scaling after scaling adaptation (b:115935)
  - fix right buttons clipping on theme switch (b:115425)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.0-4
changelog:
  - disable blur and extra effects in default config. (b:115579)
  - fix resource leaks in Configuration and ThemedIconEngine. (b:121166)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.3-12.kb1
changelog:
  - KYOS-B: Fix the problem of closing the screensaver window in idle shutdown/logout process after locking the screen


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-1.kb1
changelog:
  - KYOS-B: fix sonarqube scanning problem.
  - KYOS-B: Fix conflict with Display dims when idle
  - KYOS-F: Support XEmbed Screensaver theme(#78377,#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-5
changelog:
  - Improve compatibility by reading lock background directly via GSettings (f:118607)
  - update CMake structure and add basic unit test functionality (f:113505)
  - fix sonarqube scanning problem (b:118607)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-6
changelog:
  - fix animation parent for screensaver and remove redundant xcb_connect call. (b:121166)
  - simplify visibility monitor restack handling.(b:115411)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.7.0-3
changelog:
  - KYOS-F: Add mate-settings-daemon to auto app blacklist.
  - KYOS-F: use new CI.
  - KYOS-F: add XDG_MENU_PREFIX env to support custom start menu category(#73618)


author: tangjie02 <tangjie02@kylinsec.com.cn> - 2.7.1-1
changelog:
  - KYOS-F: adjust the log level and content.
  - KYOS-F: reformat code.
  - KYOS-F: Remove mate-settings-daemon code logic because of mate-settings-daemon is added to autostart blacklist.
  - KYOS-F: add translation for main.cpp.


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.7.1-2
changelog:
  - KYOS-B: Fix memory growth caused by caching standard output into memory when QProcess pulls up a child process(#83175)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.0-2
changelog:
  - Implement app registration wait skipping functionality(f:111533)
  - add session start time test(f:111010)


author: gaobo <gaobo@kylinsec.com.cn> - 2.8.0-3
changelog:
  - fix the memory leak for IceConn and coredump when call SmsCleanUp because of iceConn is already closed (b:116395)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.8.0-4
changelog:
  - fix session manager end session phase1 failed issue during logout. (b:119781)
  - fix some memory leak problem. (b:121165)
  - add multi-screen support for session exit window. (b:121359)
  - Enhance display server monitoring and session management(f:117344)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.7.6-5
changelog:
  - avoid showing untranslated NetworkManager errors (b:121560)
  - fix missing icons for new apps in start menu (b:121551)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.7.6-6
changelog:
  - set autostart phase to panel (b:128942)
  - add containers to each plugin to follow panel changes (b:125569)
  - make all plugins auto-scale with panel size (b:126111)
  - fix crash when requesting wireless connection password (b:125569)
  - fix panel coordinate calculation in multi-screen HiDPI environment (b:125568)
  - fix crash when switching orientation with multi-row apps (b:131490)
  - fix occasional crash when displaying app names (b:131504)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.7.6-7
changelog:
  - fallback to KIconLoader when theme icon lookup fails (b:121551)
  - fix new app icon display fallback in taskbar/workspace (b:121551)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-2.kb1
changelog:
  - KYOS-F: install different default wallpapers based on the release versions of OpenEuler and Kylinsec(#31792)


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.7.1-1
changelog:
  - KYOS-F:set KiranSidebar item backround color and highlight color when selected.(#52378)
  - KYOS-F:set kiran color block background color.(#52378)
  - KYOS-F:improve KiranSwitchButton color in different status(#52378)
  - KYOS-F:KiranColorBlock support for specifying colors(#52378)
  - KYOS-F:remove setInvertIconPixelsEnable method in KiranSidebarWidget(#52378)
  - KYOS-F:add KiranIcon to show icon(#52378)
  - KYOS-F:load SVG icons that need to follow the theme changes from the system icon theme(#52378)


author: gaobo <gaobo@kylinsec.com.cn> - 2.7.3-2
changelog:
  - Fix HoverTips display occlusion issue. (b:94259)
  - window menu right-click trigger position detection. (b:103627)
  - When changing from a low resolution to a higher one, the prompt content displays line breaks. (b:108453)
  - Fix window menu position error under scaling by converting coordinates to physical pixels. (b:115935)


author: wangzhiqiang <wangzhiqiang95@huawei.com> - 0.9.5-1
changelog:
  - upgrade version to 0.9.5:
    - add requires libmount and libmount-devel
    - add multipath.conf multipathc and libmpathutil.so
    - delete README.alua


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.9-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove .export_symbol section newly added in 6.6 kernel to avoid compile error


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.7.11-1
changelog:
  - Modify the wording of the warranty period translation.(b:86873)
  - Fix activation validity period permanently valid discription.(b:86768)
  - Fix shell license notification Chinese translations.(b:86829)
  - Modify license shell notification infomation(b:86985)
  - Increase configuration to lower the priority of activation code calculation for specified MAC addresses.(f:86826)


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.7.11-7
changelog:
  - Fix a crash issue caused by loading an activation file encoded in GB18030.(b:95978)
  - Increase the functionality of linking one service account to multiple machines.(f:73689)
  - Add netlink listening for mac address changes.(b:92205)


author: xiaowen<xiaowen@kylinsec.com.cn> -2.7.9-1
changelog:
  - Fix two translations. (b:87991)
  - Fix the issue where the expiration time lacks a hover tooltip in subscription mode.(b:86834)


author: mazhiguo <mazhiguo@kylinsec.com.cn> - 1.0.1-1
changelog:
  - fix(rescue): 修复救援模式下mount_point支持问题（b:118895）
  - fix(rescue): 修复对比结果输出相关问题（b:119910）
  - fix(rescue): 修复交互式命令行输入问题（b:119923）


author: wangyucheng <wangyucheng@kylinsec.com.cn> - 1.1.2-1
changelog:
  - Fix the SSHD reinforcement not effective(b:119733)
  - Fix the treat a string as an array(b:119520)
  - Cannot change soft/hard mode when trust closed(b:119280)
  - Fix the format issues of reinforcements(b:114052)
  - fix the description of Reinforcements(b:115083)
  - Fix string not equal(b:119506)
  - Add loading prompt when cancel repair(b:120645)
  - Change export PDF picture, show the unfinished reinforcement items(b:119873)
  - Unabled open account separation when invaild users(b:120374)
  - Fix button blocking and lag(b:120587)


author: wangyucheng <wangyucheng@kylinsec.com.cn> - 1.1.3-1
changelog:
  - fix unit test error(b:126186)
  - Optimize memory leak(b:125537)
  - Check minlen value when focus out(b:120311)
  - fix the private box shell command injection(b:116609)
  - remove the user created this time when failed(b:128443)
  - fix failed to init se user when trusted is enabled(b:128441)
  - fix cannot get trusted storage mode when trusted initialization(b:128419)
  - Fetch cache before each operator(b:128359)
  - fix cdrom control not working(b:128383)
  - Move the FP in TP as subpage,make app manager independent module(b:126081)
  - Add users to wheel group(b:126567)
  - Support reinforce firewalld(b:120625)
  - Disable desktop compose-key restart(b:114258)
  - Describe the modifications to the system in the software log(b:115086)
  - Add new app management icon(f:126081)
  - Do not load when the plugin is not supported(b:119705)
  - Adjust font size(b:128420)
  - change kss to Recommends(b:126557)


author: wangyucheng <wangyucheng@kylinsec.com.cn> - 1.1.4-1
changelog:
  - fix the judgment condition for the pwd policy(b:128572)
  - Fix the misalignment issue of the navigation bar plugin(b:116820)
  - Adjust the logo(f:128420)
  - fix the failed to login failure lockout(b:126993)
  - fix the issue of incorrect return value type in dbus(b:121308)
  - Rename the file to resolve file conflict issues(b:121550)


author: wangyucheng <wangyucheng@kylinsec.com.cn> - 1.1.5-1
changelog:
  - fix failed to reinforce SSHD security protocol(b:131852)
  - fix the issue with incorrect reboot's compose-key scanning(b:131920)
  - fix the sftpuser reinforce succee but scan failure(b:132120)
  - move desktop icon(b:131922)
  - dont close the dialog box when the password does not valid(b:114282)
  - add some unit test(f:126186)
  - Update the help manual(b:114273)


author: wangyucheng <wangyucheng@kylinsec.com.cn> - 1.1.5-2
changelog:
  - fix memory leak(b:125537)
  - fix not modify PASS_MAX_DAY when turn off password complexity(b:132600)
  - Fix the show logs belong unavailable module(b:132449)
  - Resolve CI compilation errors(f:133539)


author: wangjiang <wangjiang37@h-partners.com> - 1:2020.0.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix backport-Fix-hist_nearend.patch
         backport-functions-with-not-loaded-autoloaded-functions.patch
         backport-Fix-interactive-restricted-shell-behavior.patch


author: wangyuhang <wangyuhang27@huawei.com> - 2:1.0.8-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:due to the upstream community no longer maintaining the previous version,
         we have rolled back to the stable branch and switched to an active code repository.
         new upstream release and update version to 1.0.8


author: liuchengran <liuchengran@kylinsec.com.cn> - 1.0.1-2
changelog:
  - Fix remove health path from nginx configuration and change nginx listen port from 8443 to 8096. (b:119872)


author: ChenYanpan <chenyanpan@xfusion.com> - 1.5.2-2
changelog:
  - use 
    /usr/bin/cmake --build "sw_64-kylinsec-linux-gnu" -j8 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/ktextaddons-1.5.2-2.ks6.sw_64" /usr/bin/cmake --install "sw_64-kylinsec-linux-gnu" to fix build failure


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 5.27.10-2.kb1
changelog:
  - remove the QT_FONT_DPI restriction for HiDPI. (b:115935)
  - connect the theme change signal to update cursors across all windows. (f:115555)
  - fix the window state not being restored when clicking "Show Desktop". (b:115414)
  - fix file browser windows not being overlaid when showing desktop. (b:112619)
  - skip Kiran registration wait for the kwin_x11 desktop identifier. (f:111533)
  - add an XDG desktop entry for the kwin_x11 WM. (f:87025)
  - expose an interface to detect the current app color palette theme. (f:87025)
  - simplify the KWin window context menu to basic operations. (f:87025)
  - fix gnome-terminal and mate-terminal not maximizing to full size. (b:87025)
  - minimize other windows when "show desktop" is canceled by focus. (f:87025)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 5.27.10-2.kb5
changelog:
  - fix bottom strut clamping condition for mixed-height outputs. (b:129547)
  - adapt to system theme changes and improve border rendering. (b:133375)


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.3-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-Add-getentropy-emulation-through-syscall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liuxingxiang <liuxingxiang@kylinsec.com.cn> - 0.70.2-6.kb1
changelog:
  - Modify loongarch64 patch use all arch.(b:33003)
  - add lost patch:0001-libdnf-0.65.0-add-loongarch-support.patch. (f:33003)


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: Hu Bin <hubin73@huawei.com> - 0.1.3-10
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add libmetalink testcases for api and error handling, fix automake error


author: Hu Bin <hubin73@huawei.com> - 0.1.3-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport patches to fix NULL pointer dereference and memory leak bug


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: wuguanghao <wuguanghao3@huawei.com> - 5.0.2-1
changelog:
  - upgrade to 5.0.2:
    - fix double free in nfs3_pread_mcb()
    - Multithread support for Linux and Windows
    - fix NFS4 behavior of chmod/chown/utimes
    - Add nfs_umount() to NFSv3
    - Add nfs_statvfs64()
    - NFSv4 fix for directory handling
    - NFSv4 support
    - lockf() support(NFSv4 only)
    - fcntl() support (FNSv4 only)
    - Added nfs-fh: a simple utility to print the filehandle for a nfs file


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0000-libpciaccess-rom-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-libpciaccess-add-sw64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 1.4.5-2.kb1
changelog:
  - fix translation update failed.(b:35292)
  - 9000-modify-the-password-error-prompt-message.patch.(b:41834)
  - 9001-repair-password-prompt-information.patch.(b:10268)


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.4-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/libquvi-0.9.4-lua-5.2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 ppc64le s390x loongarch64


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.20-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/libtar-1.2.11-missing-protos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/libtar-1.2.11-mem-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/libtar-1.2.20-fix-resource-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/libtar-1.2.11-bz729009.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/libtar-1.2.20-no-static-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2013-4420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openEuler-CVE-2021-33643-CVE-2021-33644.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openEuler-CVE-2021-33645-CVE-2021-33646.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2021-33640-fix-memory-leak-and-use-after-free-bugs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: fangyi <eric.fangyi@huawei.com> - 9.10.0-15
changelog:
  - cpu-Add-new-Dharma-CPU-model.patch
  - qemu-cvm-support-uefi-boot-by-rom.patch
  - iommufd-Support-configuring-iommufd-backends-for-qem.patch
  - vdpa-iommufd-Support-associating-iommufd-with-vDPA-h.patch
  - capabilities-add-fun-to-determine-if-binary-is-strat.patch
  - qemu_command-unsupport-command-line-will-not-built-f.patch
  - chardev-use-path-instead-of-fd-for-stratovirt.patch
  - Revert-qemu-command-Delegate-qemuBuildDriveStr-to-SD.patch
  - Revert-qemu-Remove-pre-blockdev-PFLASH-setup.patch
  - qemu_command-get-disk-alias-from-disk-instead-of-nod.patch


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-17
changelog:
  - Revert "Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM."


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-18
changelog:
  - add qemu VIRTCCA capability detection
  - add virtcca test xml
  - virtcca use hugepage disable bind numa
  - util: resctrl: add parsing process for the new parameters cache id
  - util:resctrl:add L3 priority parse and format method
  - conf: add support for cachetune/L3 priority
  - util: resctrl: define memory bandwidth types & add parse and format method
  - conf: add support for memorytune XML processing for MB hardlimit
  - conf: add support for memorytune XML processing for MB priority
  - conf: add support for memorytune XML processing for MB min_bandwidth
  - [backport]domcaps: Report launchSecurity
  - [backport]qemu: Fill launchSecurity in domaincaps
  - [v4-1-4]src: Add ARM CCA support in qemu driver to launch VM
  - [v4-2-4]src: Add ARM CCA support in domain capabilities command
  - [v4-3-4]src: Add ARM CCA support in domain schema
  - hostdev: add numa configure for host pci device


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-19
changelog:
  - Fix the translation problem of libvirtd.policy's prompts.
  - cpu: Add new Chengdu CPU model
  - util:resctrl:add L3 min/max parse and format method
  - conf: add support for cachetune/L3 min/max
  - conf: add support for hugepage hugepage pod
  - backends:add support of one guest numa node alloc memory from multi host nodes
  - migration: support vfio-pci device migration


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-41
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.2
  - add a small patch for backport testcase issue fix


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-43
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.3


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-44
changelog:
  - [ICP] Enable promotion of more targets
  - [bugfix] Constant folding for long double type lib call is only supported for logl.
  - switch to gcc build for bootstrap building failure


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-45
changelog:
  - update to llvm-for-oe-17.0.6-2506.0.4
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2506.0.4


author: yangchenguang <yangchenguang@kylinsec.com.cn> - B.02.19.2-3.kb1
changelog:
  - Change the SPEC file to prevent gnome software from displaying the application(b:79607)
  - remove from start menu. (f:28100)


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: Dingli Zhang <dingli@iscas.ac.cn> - 0:7.7.0-2
changelog:
  - Update spec for RISCV64 due to OOM compilation error
  - Add Requires of several packages to resolve conflicts during installation


author: chenyanpanHW <chenyanpan@huawei.com> - 9-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: change workspace titlebar and font and composite
  - KYOS-B: fix disabled Alt+F1 to popop mate menu
  - KYOS-F: feature [menu] : pop up start menu when press super key


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: gaobo <gaobo@kylinsec.com.cn> - 1.22.2-3.kb1
changelog:
  - add KIRAN in OnlyShowIn and fix translation. (f:73846)
  - set window display effect and action. (f:73846)
  - disable mate-appearance-properties supports_files in desktop. (b:35592)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-1.kb1
changelog:
  - Update the package version to 1.28.0-1.oe2403sp2 (f:106906)
  - Remove mate-control-center_0001-icons-Force-uniform-size-on-icons-505.patch, because package already integrated. (f:106906)
  - Modify Patch0001、Patch0002、Patch0003 to adapt version of 1.28. (f:106906)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.2-1.kb1
changelog:
  - sync a patch from upstream. (b:138327)
  - changed font and document font to Noto (b:138327)
  - Add api to check hotplug_mode_update property for outputs (f:138327)
  - Fix mate-settings-daemon crash (b:138327)
  - add the gdk window scale settings (f:25310)
  - Add lockdown settings for reboot and suspend (f:29094)
  - Fix virtual screens not recognized (b:138327)
  - Synchronize requests to XServer after UnGrabServer (b:138327)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - Properly update the set of monitors when it changes
  - KYOS-F: add kiran theme
  - KYOS-F: set default position to right-bottom


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1.kb2
changelog:
  - sync upstream memory leak. (b:138326)
  - fix memory leak of GSettings and preview in mate-notification-properties. (b:126226)
  - fix consolidate daemon and kiran memory leak. (b:133589)
  - fix the issue of the program crashing when the number of notifications exceeds MAX_NOTIFICATIONS. (b:138763)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1.kb1
changelog:
  - update source to mate-system-monitor-1.28.1-1 from openeuler sp2. (f:108319)
  - fix hardware-cpuinfo display anomalously. (b:108319)
  - fix could not get name of Loongson processor. (b:108319)
  - get pcpu with double to solvo cpu% don't changed. (b:108319)
  - fix abnormal resource page, app crash if CPU > 31. (b:45073)
  - modify desktop to hide in kiran start menu and change categories. (b:108319)


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.1-1
changelog:
  - Upgrade the version of package to 1.28.1-1.oe2403sp2 (f:108340)
  - add kylin mask and part of translations (b:108340)
  - set text preview content (b:108340)
  - add a action in mate-terminal.desktop.in.in (b:108340)
  - change default color and system color to Dracula Dark (b:30872)
  - select the default charset by locale (b:108340)


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: chenyanpanHW <chenyanpan@huawei.com> - 4.0.26-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-comment-invalid-info-in-conf-file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 2:0.94-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if detach the GTK package from the master package
         modify changelog  to add epoch:2


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: yaoxin <yao_xin001@hoperun.com> - 1.2.2-1
changelog:
  - Update to 1.2.2:
    * XML declaration must produce a START_DOCUMENT event.
    * Fix processing of PIs.
    * Unit test with subsequent dashes in a PI.
    * Replace project license Indiana 1.1.1 with explicit license 1.2 of MXParser.


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.2-11
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/neon-0.32.2-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: luoqing <luoqing@kylinsec.com.cn> - 1.36.0-1.kb1
changelog:
  - Change Wifi security and default mode.(b:33332)
  - Fix-the-problem-that-the-menu-don-t-display-the-netw.(b:28100)
  - add network menu to icon.(b:39573)
  - fix disable addr-when use dhcp.(b:39916)
  - let the status icon color change with system gtk theme.(b:46026)
  - fix build error in KY3.4-5.(b:48788)


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: hdliu <dev03108@linx-info.com> - 1:1.0.8-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch to adapt iproute2 config path datatype: adjust rt_symbol_table_init() to search /usr/share/iproute2 update paths for rt_marks, group and rt_realms


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: leiju <leiju4@huawei.com> - 0.1.3-2
changelog:
  - delete ExclusiveArch:i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl noarch


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: chenyanpanHW <chenyanpan@huawei.com> - 1.6-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-0001-w32-Use-cast-by-uintptr_t-for-thread-ID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/add-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-0002-posix-Add-npth_poll-npth_ppoll.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: Ruozhu Li <liruozhu@huawei.com> - 1.00.029-1
changelog:
  - Added the function of sending a notification message to the switch when the software starts, and the switch sending domain members to the host, improving the reliability of software upgrade scenarios.
  - Add more connection parameter support, consistent with nvme cli.
  - Bond ports can join the domain and automatically establish a connection.


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: laokz <zhangkai@iscas.ac.cn> - 4.1.5-5
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 ppc64le s390x loongarch64


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: fly_fzc <2385803914@qq.com> - 1:3.0.12-24
changelog:
  - fix CVE-2025-15467,CVE-2025-69418,
        CVE-2025-69419,CVE-2025-69420,
        CVE-2025-69421,CVE-2026-22795,
        CVE-2026-22796


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: chenyanpanHW <chenyanpan@huawei.com> - 1.77-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-mdraidfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-bootpart-name-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-mounted-partitions-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-umount-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-grub2-parsefix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/os-prober-grepfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: mazhiguo <mazhiguo@kylinsec.com.cn> - 1.5.3-9.kb1
changelog:
  - support unlock permanently locked user (f:73769)
  - set unlock_time_increment=60 maxtries=5 default for desktop (f:73769)
  - fixed lock error with admin users (b:73769)
  - add pam_pwquality.so settings in password-auth and system-auth (f:57373)
  - support para maxtries and unlock_time_increment (f:53269)
  - Solve the prompt error of entering the correct password for the first time (b:32928)


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.13-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-Drop-module-long-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.7-13
changelog:
  - fix: Support for other distributions and delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/do-not-support-cluster-setup-with-udp-u-transport.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-feature-pcs-support-for-kylinsec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/fix-do-not-put-empty-uid-gid-options-to-an-uidgid-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/fix-stonith-level-validation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/Fix-pcsd-ruby.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/update-crm_mon-schemas-for-tests.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/add-dtos-and-converting-functions-for-resources-stat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/fixes-after-review.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/store-clone-instance-id-in-resource-status-dtos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/increase-a-timeout-in-a-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/fix-tests-for-tornado-6.5.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.206-1
changelog:
  - upgrade version to 2.206:
    - fix version checks to use correct method
    - drop rt.cpan from SUPPORT section


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: chenyanpanHW <chenyanpan@huawei.com> - 6.07-8
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangyao <zhangyao108@huawei.com> - 0.047-1
changelog:
  - Upgrade version to 0.047
  - Filter out script documentation from scripts
  - Don't manify podless modules/scripts 
  - Compile all .c files in src/
  - Add module sharedirs
  - Add src/ to include paths


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: woody2918 <wudi1@uniontech.com> - 1.94-1
changelog:
  - update version to 1.94
  - supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5 - 3.8.
  - Enhancements to the API.


author: woody2918 <wudi1@uniontech.com> - 0.45-1
changelog:
  - update version to 0.45
  - Make sure to stringify versions so that they are quoted when they are encoded in JSON
  - Allow to parse class|role NAME VERSION


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: woody2918 <wudi1@uniontech.com> 0.242-1
changelog:
  - update version to 0.242
  - Corrected test dependencies
  - Packaging fix to stop installing boilerplate.pl


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: add chinese translation
  - KYOS-B: Fixed garbled toolTips path in tab page with GB18030 encoding(#7248)


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: pengmeng <pengmeng@kylinsec.com.cn> - 22.02.122-2.kb1
changelog:
  - Add default kernel_command_line parameter for plymouth(f:33689)
  - Make frames_per_second and throbber_duration configurable(f:33689)
  - Add throbonly plugin(f:33689)
  - fix progress bar can't go through(b:33689)
  - Add ship label plugin(f:33689)


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 123-2.kb1
changelog:
  - ordinary users can perform power management (b:52572)
  - fix polkit-agent-helper-1 PAM translations (b:29452)


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: Chenxi Mao <chenxi.mao@suse.com> - 13.01.0000-3
changelog:
  - Add libpq-devel version dependency.
  - Bump version release to 3, because previous change didn't bump release number.


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-2
changelog:
  - Type: CVE
  - CVE: CVE-2023-39326 CVE-2024-24789 CVE-2024-24791
  - SUG: NA
  - DESC: Rebuild to fix CVE-2023-39326 CVE-2024-24789 CVE-2024-24791


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differe
  nces


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 25.1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: luoqing <luoqing@kylinsec.com.cn> - 17.0-1.kb1
changelog:
  - Fix the problem that the muted function in mate-volume-control-status-icon doesn't work when the system is boot. (b:39686)


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: zhangxingrong <zhangxingrong@uniontech.com> - 1.4.6-1
changelog:
  - Update to version 1.4.6
    - Nothing in the library's logic. Just a fix in one of the test cases.
      And some changes to prevent same situation from happening again.
    - Fixed incorrect handling of newlines.
    - STARTTLS is now fully enforced if used.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.13.1-1
changelog:
  - Update package to version 1.13.1
    Improve re-writer implementation, fixing chain and adding support to callables


author: yueyuankun <yueyuankun@kylinos.cn> - 23.1.0-1
changelog:
  - Update to 23.1.0
  - The InvalidHash exception is deprecated in favor of InvalidHashError
  - argon2.hash_password(), argon2.hash_password_raw(), and argon2.verify_password() that have been soft-deprecated since 2016 are now hard-deprecated
  - Official support for Python 3.11 and 3.12
  - Python 3.6 is not supported anymore
  - argon2.exceptions.InvalidHashError as a replacement for InvalidHash
  - salt parameter to argon2.PasswordHasher.hash() to allow for custom salts


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.5-1
changelog:
  - Update package to version 1.0.5
  - fix error handling that might result in null exception
    cleanups of exception handling : errors must now have an exception
    Handling NameError is not working


author: yaoxin <1024769339@qq.com> - 1.0.6-1
changelog:
  - Update to 1.0.6:
    * drop testing and support for Python3.8, add Python 3.13, change document to reflect this.
    * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
    * make all procedure attributes private to curb access to AST nodes, which can be exploited
    * improvements to error messages, including use ast functions to construct better error messages
    * remove import of numpy.linalg, as documented
    * update doc description for security advisory


author: GuoCe <guoce@kylinso.cn> - 1.34.79-1
changelog:
  - update to version 1.34.79
  - A lot of functions have been updated, 
  - such as adding IAMIdentityCenterInstanceArn parameter to CreateAccountSubscription.


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xu_ping <707078654@qq.com> - 1.3.0-1
changelog:
  - Update package to version 1.3.0
  - Python 3.12 support.
  - fix some bugfix
  - Update internally pinned pytest-flask to 1.3.0 for Flask >=3.0.0 support


author: xigaoxinyan <xigaoxinyan@huawei.com> - 18.0.0-11
changelog:
  - Drop docs package: sphinx Update make docs build error and Fix build error caused by py3.10+ wildcard


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.22.1-1
changelog:
  - Update package to version 8.22.1
    Use check_same_thread=False by default for history sqlite db
    Use prompt_toolkit.application.create_app_session for debugger prompt
    Provide and easier way to generate magics and pre-post hooks
    Refuse to install event loop hooks when not using prompt_toolkit
    Add hack to change traceback syntax highlighting


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: fuanan <fuanan3@h-partners.com> - 3.17.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.17.3
         drop python 2 support
         datatime fixes
         Remove ancient pathlib requirement for python3. It is part of the stdlib since Python 3.4


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.7.1-1
changelog:
  - Update package with version 5.7.1
    Derive JupyterAsyncApp from JupyterApp
    Modernize event loop behavior
    Enable async JupyterApp
    Clean up lint and add downstream checks
    Add python 3.12 support and update typings for traitlets 5.11


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Clean up linting and fix a bug that was found
    Adopt ruff format
    Normalize "jsonschema[format-nongpl]" in pyproject.toml


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.2-1
changelog:
  - Update package with version 0.5.2
    Set terminals_available to False when not enabled
    Update ruff config


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.3-1
changelog:
  - Update package with version 0.5.3
    Drop support for Python 3.7
    Add direct dependency on ipykernel
    Adapt to level config to match other Jupyter repos


author: xuhe <xuhe@kylinos.cn> - 2.27.3-1
changelog:
  - Update to 2.27.3
  - Fix test util typings.
  - Use json5 typings.
  - Use updated releaser workflows.
  - Ignore pageconfig file if JSON is zero-length.
  - For v2 extensions parse entrypoint data.
  - Add util to get consolidated page_config from higher levels.
  - Move ENV_CONFIG_PATH import back into _get_config_manager.
  - Load overrides once, rather than in each settings handler.
  - Run docs on ubuntu.
  - Fix handling language packs for pseudo language.


author: chenhuihan <chenhuihan@huawei.com> - 2.8.0-1
changelog:
  - Update package to version 2.8.0:
    - export PyJWKClientConnectionError class
    - pre-autoupdate mirrors-mypy blacken-docs black
    - allows passing of ssl.SSLContext to PyJWKClient


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.5.3-1
changelog:
  - Update package to version 1.5.3
    Fix mkdocs serve sometimes locking up all browser tabs when navigating quickly
    Add many new supported languages for "search" plugin - update lunr-languages to 1.12.0
    Built-in themes now also support Chinese (Traditional, Taiwan) language


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.1-1
changelog:
  - upgrade version to 3.2.1:
    - add Tadpole graph
    - fix listing of release notes on Releases page
    - fix syntax warning from bad escape sequence
    - fix triangles to avoid using is to compare nodes
    - fix error message for nx.mycielski_graph(0)
    - disallow negative number of nodes in complete_multipartite_graph
    - fix names of small graphs
    - fix extendability function name in bipartite.rst
    - improve error messages for misconfigured backend treatment


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: kaijie Gu <jiekgu@foxmail.com> - 24.1-1
changelog:
  - Update package with version 24.1
    Add support for Python 3.13
    Fix typo in _parser docstring
    Modernise type annotations using FA rules from ruff
    Document markers.default_environment()


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.0.43-1
changelog:
  - Update package to version 3.0.43
    Make formatted_text.split_lines() accept an iterable instead of lists only.
    Disable the IPython workaround (from 3.0.41) for IPython >= 8.18.
    Restore signal.SIGINT handler between prompts.


author: yaoxin <yao_xin001@hoperun.com> - 5.1.0-1
changelog:
  - Update to 5.1.0
  - Bug Fixes:
    * Handle RESP3 sets as Python lists (#3324)
    * Prevent async ClusterPipeline instances from becoming "false-y" (#3068)
    * Add hostname field to _parse_node_line (#3343)
    * More docs fixes (#3326)
    * Delete the first-defined (and thus "duplicate") Script class (#3333)
    * Catch a known DeprecationWarning when calling .close() (#3335)
    * Add missed redismod at test_commands.py (#3369)
  - Breaking Changes:
    * Timeseries insertion filters for close samples (#3228)
    * Enhanced classes string representation (#3001)
    * Partial clean up of Python 3.7 compatibility (#2928)


author: lixiaoyong <lixiaoyong@kylinos.cn> - 5.2.0-1
changelog:
  - Upgrade version to 5.2.0
    Extend AggregateRequest with scorer argument
    Pin pytest-profiling version


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.18.6-1
changelog:
  - Update package to version 0.18.6
  - Fix issue with multiple document intermixing YAML 1.2 and YAML 1.1, the VersionedResolver now resets


author: fuanan <fuanan3@h-partners.com> - 1.8.1-1
changelog:
  - update version to 1.8.1
  - bump http-proxy from 1.17.0 to 1.8.1
  - fix broken link
  - add chunked inference
  - fix attrs in custom predict fn for tensorboard
  - fixing infer edge case issue
  - explicitly require bash(Change /bin/sh to /bin/bash in build_pip_package.sh)
  - add support for witwidget for JupyterLab 3.x.


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: liuzhilin <liuzhilin@kylinos.cn> - 0.25.1-1
changelog:
  - Upgrade package 0.25.1
  - Fix crash when importing trio in embedded Python on Windows, and other installs that remove docstrings.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.10.0-1
changelog:
  - Update package with version 4.10.0
    Add support for PEP 728, PEP 742
    Drop runtime error when a read-only TypedDict item overrides a mutable one.
    Speedup issubclass() checks against simple runtime-checkable protocols by around 6%.
    Add support for PEP 705, adding typing_extensions.ReadOnly.
    Drop support for Python 3.7 (including PyPy-3.7).


author: zeng liwen <zengliwen@kylinos.cn> - 4.12.2-1
changelog:
  - Update to 4.12.2
  - Fix the runtime behavior of type parameters with defaults (PEP 696)
  - Fix AttributeError when using typing_extensions.runtime_checkable in combination with typing.Protocol on Python 3.12.2 or newer
  - Fix Protocol tests on Python 3.13.0a6 and newer
  - Improve the implementation of type parameter defaults (PEP 696)
  - Add typing_extensions.get_annotations, a backport of inspect.get_annotations that adds features specified by PEP 649
  - Fix regression in v4.12.0 where specialization of certain generics with an overridden __eq__ method would raise errors


author: wangjunqi <wangjunqi@kylinos.cn> - 5.2-1
changelog:
  - Update package to version 5.2
    Added a pre-commit config
    Updated python versions [hugovk]
    Added type hints for the public functions
    Moved to using pyproject.toml for project config.


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.3.0-1
changelog:
  - Update package to version 4.3.0
    Fixed inability to pass total_tokens as a keyword argument on trio


author: liuzhilin <liuzhilin@kylinos.cn> - 4.4.0-1
changelog:
  - Update package to version 4.4.0
  - Added __slots__ to AsyncResource so that child classes can use __slots__.
  - Fixed the entire task group being cancelled if a TaskGroup.start() call gets cancelled.
  - Fixed MemoryObjectStream dropping an item if the item is delivered to a recipient that is waiting to receive an item but has a cancellation pending.
  - Fixed erroneous TypedAttributeLookupError if a typed attribute getter raises KeyError.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.6.1-1
changelog:
  - Update package to version 4.6.1
  - Bugfix: Fixed feed_data after feed_eof assertion errors on asyncio
    Bugfix: Fixed missing or inconsistent error when acquiring already owned Lock


author: yaoxin <yaoxin30@huawei.com> - 1.4.4-3
changelog:
  - Modified the build and install phases to adapt to the compilation and installation modes of Python 3.10


author: chenyanpanHW <chenyanpan@huawei.com> - 1.11.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/beaker-use-system-paste.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.19.2-1
changelog:
  - Update package to version 1.19.2
    Fixed an exception when a Git repository had a broken ref. Git would print a warning that Dunamai failed to parse.


author: liudy <liudingyao@kylinos.cn> - 1.22.0-1
changelog:
  - Update version to 1.22.0
  - Fix The --ignore-untracked CLI flag was ignored.
  - Add --commit-length option.
  - Fix Some timestamps could fail to parse on Python 3.5 and 3.6.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 24.1.0-1
changelog:
  - Update package with version 24.1.0
    Added a default to an internal API that is used by scikit-build-core.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.25.0-1
changelog:
  - Upgrade package version to 1.25.0
    Add .venv to the list of directories that cannot be traversed
    Output from the core Application utility now writes to stderr


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.4-1
changelog:
  - Upgrade package with version 1.0.4
    Add support for HTTPS proxies.
    Handle sni_hostname extension with SOCKS proxy.
    Handle HTTP/1.1 half-closed connections gracefully.
    Add support for Python 3.12 and drop Python 3.7 support.
    Async support becomes fully optional.
    Add support for synchronous TLS-in-TLS streams.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.27.0-1
changelog:
  - Upgrade package with version 0.27.0
    Support HTTPS proxies.
    Drop support for Python 3.7 and Add support for Python 3.12.
    Add support for httpcore 1.0.
    Respect the http1 argument while configuring proxy transports.
    Fix RFC 2069 mode digest authentication.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package with version 1.0.0
    Fix tests for nbclient v0.8
    Remove caps & bump Python for SPEC 0


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.6.0-1
changelog:
  - Update package with version 8.6.0
    Update typing for traitlets 5.13
    Enable strict typing
    Test on python 3.12


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.2.4-1
changelog:
  - Update package with version 2.2.4
    Fix websocket handler incorrectly inheriting from APIHandler rather than JupyterHandler
    Remove unused notebook config entry point
    Support latest version of typescript-language-server


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package with version 2.13.0
    Add an option to have authentication enabled for all endpoints by default
    Websockets: add configurations for ping interval and timeout
    Log extension import time at debug level unless it's actually slow
    Add support for async Authorizers
    Support get file(notebook) md5
    Update kernel env to reflect changes in session
    Support external kernels


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.2.0-1
changelog:
  - Upgrade package with version 1.2.0
    Support running LibCST on Python 3.12 and drop support for running it on 3.8
    Allow Element::codegen to be used by external users
    Fix parsing list matchers without explicit brackets
    Fix filepathprovider generic type


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.1-1
changelog:
  - Update package with version 1.0.1
    Don't import MkDocsConfig (does not exist on MkDocs 1.3-)
    Add Markdown anchors and aliases
    Preserve HTML data attributes (from spans to anchors)
    Support [`identifier`][] with pymdownx.inlinehilite enabled
    Recognize links with multi-line text


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.3.0-1
changelog:
  - Update package with version 2.3.0
    Change excluded file log level to INFO
    Add source attribute to authors. Aims to support GitHub and GitLab in mkdocs material.
    Add support for GitLab


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 6.0.4-1
changelog:
  - Update package with version 6.0.4
    Add mkdocs>=1.4 as dependency.
    Dropped Python upper version requirement bound.
    Fixed some warnings not shown when missing start and end delimiters in some contexts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.6.1-1
changelog:
  - Update package with version 0.6.1
    Fix compatibility with MkDocs 1.5+
    Fix when markdown extensions is set to None


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package to version 1.3.1
    Add official support for Python 3.11 and 3.12.
    Remove support for Python 3.7.
    FIX: Better deprecation warning.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.8.0-1
changelog:
  - Update package with version 0.8.0
    Remove python 3.7 support and upgrade setup-python action
    Upgrade setup-python action to v5


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.1.8-1
changelog:
  - Update package with version 2.1.8
    Bugfix: Can't include nested data files in built wheel.
    Rename tag-pattern to tag_regex in the docs.
    Copytree handle existing dirs.
    Normalize the dist info name in the wheel.
    Path to uri expansion in dependency string.


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
    Rewrite the entire library using dataclasses.
    Add more rigorous testing.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2024.2-1
changelog:
  - Update package to version 2024.2
    Update sklearn.neighbors hook to account for removed hidden import


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 10.7-1
changelog:
  - Update package to version 10.7
    Allow configuring custom repository providers based off the existing providers.
    Admonitions and Details now allow configuring custom block classes and default titles.
    Ensure that Keys does not parse base64 encoded URLs.
    Allow PathLike objects for base_path to better support interactions with MkDocs.
    Officially support Python 3.12 and drop Python 3.7 support.
    Add new combine_header_slug option in legacy Tabbed extension and new Block Tab extension


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Update event loop handling
    Allow passing request_timeout to client_fetch
    Update ruff and typings


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.15.0-1
changelog:
  - Update package with version 3.15.0
    Make requirements compile disable pip's require-virtualenv flag always
    Update setuptools config
    Add dependabot configuration for GitHub Actions
    Bump actions/setup-python from 3 to 4
    Activate numpy tests on Python 3.11
    Add setup-cfg-fmt to pre-commit


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package with version 1.3.1
    Update workflows and tests.
    Use trusted publishing and configure Renovate.
    Drop 3.7 support and do sys path hack.


author: liuxingxiang <liuxingxiang@kylinsec.com.cn> - 2.1.2-5.kb1
changelog:
  - adjust the architecture detection method for the patch. (f:114170)
  - add lose patches for loongarch64 and riscv64. (b:114170)
  - add support sw_64. (f:114170)


author: zhangxianting <zhangxianting@uniontech.com> - 3.19.2-1
changelog:
  - Update to 3.19.2:
  - Updated test & build matrix to include Python 3.12 and use GitHub Actions as a Trusted Publisher (OIDC) https://github.com/simplejson/simplejson/pull/317


author: wangkai <13474090681@163.com> - 3.19.2-2
changelog:
  - Fixed the packaging process does not include __pycache__ tests
  - Obsoletes empty package python-simplejson-help


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
  - Dependencies: use pip-tools + GH Action to keep dependencies updated


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.8-1
changelog:
  - Update package to version 1.0.8
  - Fix multiple term matching when word appears in both title and document


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package to version 2.13.0
    Add support for datetime.timedelta to time_machine.travel().
    Add shift() method to the time_machine pytest fixture.
    Fix documentation about using local time for naive date(time) strings.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.12.3-1
changelog:
  - Update package to version 0.12.3
    chore(deps-dev): bump urllib3 from 1.26.14 to 1.26.18
    fix: Newline lost when updating a table
    fix: Significant slowdown on nested tables depending on syntax
    fix: Fix division for integers
    fix: error when overwriting a sub table


author: Binshuo <binshuo.oerv@isrc.iscas.ac.cn> - 0.13.2-1
changelog:
  - Update package to version 0.13.2
    chore(deps-dev): bump certifi from 2024.2.2 to 2024.7.4
    chore(deps-dev): bump idna from 3.4 to 3.7
    chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.4
    chore(deps-dev): bump requests from 2.31.0 to 2.32.2
    chore(deps-dev): bump setuptools from 68.0.0 to 70.0.0
    chore(deps-dev): bump urllib3 from 2.0.7 to 2.2.2
    chore(deps-dev): bump zipp from 3.15.0 to 3.19.1
    fix: delete keys from out of order table
    fix: don't add sign if the float is negative
    fix: Empty table dumped when number of subtables > 1
    fix: keep the nested out of order table
    fix: Table header missing
    fix: test_dates_behave_like_dates and test_times_behave_like_times
    fix: Encoder contract interferes with external TypeErrors raised in encoders
    fix: -1 index error when setting dotted key
    fix: |= does not work as expected on TOMLDocument
    fix: indent exist check before accessing its property
    [docs] Add tomlkit.dump()


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.14.1-1
changelog:
  - Upgrade package with version 5.14.1
    Add option to load traitlets values from environement.
    Cleanup after remove Python 2 support.
    Add more project URLs, trove classifiers.
    Added type hints to HasTraits.observe() and friends.


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangqiang <wangqiang1@kylinos.cn> - 8.5.1-1
changelog:
  - Update to 8.5.1
  - NEW: Formally support Python 3.11 (no change).
  - NEW: Add support for Python 3.12 (pathlib changes).
  - NEW: Drop Python 3.7 support.
  - FIX: Fix handling of current directory when magic and non-magic patterns are mixed in glob pattern list.
  - FIX: Fix issue with type check failure in wcmatch.glob.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-47
changelog:
  - vdpa: Allow vDPA to work on big-endian machine
  - vfio/container: Replace basename with g_path_get_basename
  - vfio/migration: Report only stop-copy size in vfio_state_pending_exact()
  - vfio/pci: Clear MSI-X IRQ index always
  - hw/arm boot.c: Enforce CCA and virtCCA isolation.
  - block/qed: fix use-after-free by nullifying timer pointer after free
  - hw/gpio: npcm7xx: fixup out-of-bounds access
  - pci/msix: Fix msix pba read vector poll end calculation
  - physmem: fix qemu_ram_alloc_from_fd size calculation
  - s390x/s390-virtio-ccw: don't crash on weird RAM sizes
  - ssh: Do not switch session to non-blocking mode
  - target/ppc: Fix mtDPDES targeting SMT siblings
  - target/ppc: Fix non-maskable interrupt while halted
  - elfload: Fix alignment when unmapping excess reservation


author: Junqi Ma <majunqi1@huawei.com> - 11:8.2.0-48
changelog:
  - target/s390x: Fix MVC not always invalidating translation blocks
  - target/sparc: Fix gdbstub incorrectly handling registers f32-f62
  - virtio-net: Fix size check in dhclient workaround
  - vdpa: Fix endian bugs in shadow virtqueue
  - x86/loader: only patch linux kernels
  - target/ppc: Fix e200 duplicate SPRs
  - vfio/container: For CSV3 VM, only register listener to shared_memory_listener list in vfio_connect_container()
  - target/riscv/kvm: update the KVM regs to Linux rvck-6.6
  - target/riscv/kvm: Fix exposure of Zkr
  - hw/arm/virt: Introduce a IPIV machine option
  - hw/vfio/migration: Fix vfio migration isn't aborted in a corner case


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-49
changelog:
  - common-user/host/riscv: use tail pseudoinstruction for calling tail
  - meson: Remove CONFIG_STATX and CONFIG_STATX_MNT_ID
  - qga: fix potentially not initialized nr_volumes in qga_vss_fsfreeze()
  - hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint(CVE-2024-8354)
  - hw/usb/hcd-xhci: Unmap canceled packet
  - meson: Use has_header_symbol() to check getcpu()
  - hw/intc/arm_gicv3_cpuif: Don't downgrade monitor traps for AArch32 EL3
  - migration: fix SEEK_CUR offset calculation in qio_channel_block_seek


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-50
changelog:
  - Revert "hw/arm/virt: Introduce a IPIV machine option"
  - target/arm: add ipiv=on/off option
  - arm/cpu: Add sysreg definitions in cpu-sysregs.h
  - arm/cpu: Store aa64isar0/aa64zfr0 into the idregs arrays
  - arm/cpu: Store aa64isar1/2 into the idregs array
  - arm/cpu: Store aa64pfr0/1 into the idregs array
  - arm/cpu: Store aa64mmfr0-2 into the idregs array
  - arm/cpu: Store aa64dfr0/1 into the idregs array
  - arm/cpu: Store aa64smfr0 into the idregs array
  - arm/cpu: Store id_isar0-7 into the idregs array
  - arm/cpu: Store id_pfr0/1/2 into the idregs array
  - arm/cpu: Store id_dfr0/1 into the idregs array
  - arm/cpu: Store id_mmfr0-5 into the idregs array
  - arm/cpu: Add generated sysreg properties
  - arm/cpu: Add sysreg properties generation
  - arm/cpu: Add infra to handle generated ID register definitions
  - kvm: kvm_get_writable_id_regs
  - arm/kvm: use fd instead of fdarray[2]
  - arm/cpu: switch to a generated cpu-sysregs.h.inc
  - arm/cpu: Add sysreg generation scripts
  - arm/cpu: Store aa64dfr0/1 into the idregs array
  - arm/cpu: Store aa64mmfr0-2 into the idregs array
  - arm/cpu: Store aa64pfr0/1 into the idregs array
  - arm/cpu: Store aa64isar1/2 into the idregs array
  - arm/cpu: Store aa64isar0/aa64zfr0 into the idregs arrays
  - arm/cpu: Add sysreg definitions in cpu-sysregs.h
  - arm/cpu: more customization for the kvm host cpu model
  - arm/kvm: write back modified ID regs to KVM
  - arm/kvm: Allow reading all the writable ID registers
  - arm/cpu-features: document ID reg properties
  - arm/qmp-cmds: introspection for ID register props
  - arm/cpu: manually make MIDR/REVIDR/AIDR writable
  - arm/cpu: enable MIDR writable
  - target/arm/kvm: Add SMMC hypercall definitions
  - hw/arm/virt: Initial support to set target_impl CPUs
  - target/arm/kvm: Use PSCI_VERSION for version info
  - target/arm/kvm: Set DISCOVER_IMPL_* hypercalls
  - Fix the compilation of target arm-softmmu


author: huangyan <huangyan@cdjrlc.com> - 11:8.2.0-51
changelog:
  - Add qemu-user package for arm, aarch64, riscv32, riscv64 targets
  - Add user-static, user-binfmt package for statically-linked QEMU user emulator


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-52
changelog:
  - trace: Add trace to measure hot migrate downtime
  - backends: Add support of one guest numa node alloc memory from multi host nodes


author: panchenbo <panchenbo@kylinsec.com.cn> - 11:8.2.0-53.kb2
changelog:
  - sync 8.2.0-53 form openEuler 24.03 LTS SP2(f:114081)
  - enable snapshot for UEFI based virtual machine (b:57253)
  - enable spice vnc and smartcard,Remove some deletion operations.(f:52796)
  - fix loongarch64 virtio-vga unused and fix spec error (b:6789)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 5.15.10-12.kb1
changelog:
  - for greeter and screensaver-dialog, fix Xmanager7 cannot update QScreen geometry size(b:56511)
  - fix cursorTheme update issue(b:22557)


author: Jingwiw <wangjingwei@iscas.ac.cn> - 5.2.0+git6.3-1
changelog:
  - Init package from openSUSE: https://build.opensuse.org/package/show/home:neochapay:nemo:mw/qt5-qtfeedback


author: panchenbo <panchenbo@kylinsec.com.cn> - 5.15.10-5
changelog:
  - Backport ffmpeg: avcodec/x86/mathops: clip constants used with shift instructions within inline assembly


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: luoshengwei <luoshengwei@huawei.com> - 0.8.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: Qizhi Zhang <zhangqizhi3@h-partners.com> - 0.8.0-8
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:Add some improvements and add new modules to HiSilicon common section


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: woody2918 <wudi1@uniontech.com> - 1.15.0-1
changelog:
  - Upgrade to 1.15.0
  - Update reference to MiniTest -> Minitest
  - Add test (and fix support for) for Rack v2.1.x.


author: Ge Wang <wang__ge@126.com> - 0.19.1-1
changelog:
  - update to version 0.19.1
  - No more warnings triggered by enable_for_subprocesses.
  - Avoid trying to patch Process.fork when it isn't available.
  - Dropped support for Ruby 2.4, it reached EOL


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 1.1.0-2
changelog:
  - add BuildRequires: rubygem-bigdecimal rubygem-io-console rubygem-openssl rubygem-psych 
    to resolve koji build error during check


author: liyanan <liyanan61@h-partners.com> - 1.4.0-1
changelog:
  - Update to 1.4.0
  - Faraday adapter exceptions namespace compatibility with Faraday v1
  - Add global config option `Typhoeus::Config.proxy`
  - Add cache adapters for Dails,Rails, and Redis


author: Liu Dalin <liudalin@kylinsec.com.cn> - 1.0.2-1.kb2
changelog:
  - feature(src): refactor setbiba and setmls (f:106542)
  - feature(mls): use builtin bitmap to simplify category implementation (f:115149)
  - feature(update): rename rba to rbac and rename kic to biba (f:115149)


author: Hongjian Dai <daihongjian@kylinsec.com.cn> - 1.0.2-1.kb3
changelog:
  - feature(service): remove StandardOutput/Error=tty to avoid printing expected errors to console (f:119591)
  - feature(biba/mls): streamline attribute reading and fix procfs paths (f:119605)


author: Wang Qi <wangqi@kylinsec.com.cn> - 2.0-1.88.kb1
changelog:
  - refix name rule.(b:57606)
  - Unify GRUB configuration file location across all platforms.(b:3640)
  - fix relpace openEuler to vendor source file.(b:3656)
  - rename file from openEuler to kylinsec.(b:32757)


author: zhongqianyi <zhongqianyi@kylinsec.com.cn> - 40.7-5.kb12
changelog:
  - resolve the error when running sosreport. (b:125477)
  - resolve the problem of failing to turn off the three admins switch in ks-sc. (b:131424)


author: zhongqianyi <zhongqianyi@kylinsec.com.cn> - 40.7-5.kb14
changelog:
  - resolve virt-manager related problems. (b:121632)
  - manage the mls feature using the SELINUXTYPE configuration option. (f:101525)
  - remove mls permissions for user. (b:121709)


author: zhongqianyi <zhongqianyi@kylinsec.com.cn> - 40.7-5.kb15
changelog:
  - add missing permissions for sysadm and init. (b:121632)
  - add dependency of selinux-policy-targeted to selinux-policy-mls. (f:101525)


author: xiefangqi <xiefangqi2@huawei.com> - 0.1.92.6
changelog:
  - Fix split_digits support to SentencepieceTrainer spec parser
  - Add sentencepiece.pc install
  - Add spm_train --help option
  - Fix FTBFS problem on armel/mips/powerpc/m68k/sh4
  - Fix endian problem on android plarform
  - Fix pb protobuf header file can't find problem
  - Restore the sentence boundary


author: chenyanpanHW <chenyanpan@huawei.com> - 2.17-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-2.17-fhs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-2.17-rc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-2.17-spelling.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-hayesesp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/setserial-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Keqian Zhu <zhukeqian1@huawei.com> - 1.0.0-4
changelog:
  - guestinfo: Take another VM stop reason to account
  - cpu_qos: Add aditional setting for cpu QOS
  - cachembw_qos: Add a job to sync VM pids to resctrl


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-6
changelog:
  - cpu_qos: Register reset_domain_bandwidth as exit func after adding power_qos job
  - power_qos/cachembw_qos: Add type check for environment variables


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-7
changelog:
  - docs-Use-chinese-description-instead-of-English-in-R.patch
  - Makefile-Use-strip-option-in-gcc.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.2-9
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/slang-sighuptest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dillon chen<dillon.chen@gmail.com> -1.1.10-1
changelog:
  - update version to 1.1.10
  - Removed patch1(inline.patch) as it's no longer required.
  - repatch patch2(snappy-stubs-internal.h)


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.1.10-2
changelog:
  - Fix errors due to wrong path in sqljet-build.xml
  - Add -Xconversiontimeout to avoid timeout errors for riscv64.


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: chenyanpanHW <chenyanpan@huawei.com> - 1.7.7-12
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-fix-maven-compiler-plugin-release-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaobo <gaobo@kylinsec.com.cn> - 5.3.3-5.kb2
changelog:
  - loongarch64: use glibc instead of unsupported dietlibc (b:113454)
  - Replace openEuler with vendor (b:113454)
  - fix sw_64 build error (b:113454)


author: Wang Qi <wangqi@kylinsec.com.cn> - 1.5.11-23.kb1
changelog:
  - fix interface translation garbled code under GB18030 encoding (b:13560)
  - fix can't find cupshelpers module (b:36248)
  - fix the cups service cannot start (b:79102)
  - change the SPEC file to prevent gnome software from displaying the application (f:79607)


author: panchenbo <panchenbo@kylinsec.com.cn> - 255-49.kb1
changelog:
  - fix build failure from duplicate AUDIT_* macros in kernel headers. (b:99100)
  - changed the waiting time for shutdown error to 10 seconds (b:41995)
  - network wont turn on when it starts up causing slow start (b:39560)
  - expand udev line size for property buffer overflow (b:22555)
  - Remove pretty symbols to ensure compatibility with legacy systems. (b:82004)
  - Revert "user: delegate cpu controller, assign weights to user slices" (b:92078)
  - Fix multi-user switching black screen or stuck problem (b:91710)


author: zhangqiang <zhangqiang@kylinos.cn> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: chenyanpanHW <chenyanpan@huawei.com> - 5.0-15
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/texi2html-5.0-Do-not-install-Unicode-EastAsianWidth-if-external-is.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/texi2html-5.0-Do-not-install-libintl-perl-if-external-is-used.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: updmap-map, wasy2-ps
  - Add texlive-vntex back, because texlive#I29Y5F is false. See the
  - first paragraph of https://tug.org/fonts/utopia/LICENSE-utopia.txt


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: xu_ping <707078654@qq.com> - 9:2021-3
changelog:
  - License compliance rectification.
  - remove package texlive-cm-unicode-doc due to license Non-compliance.


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: einfuehrung-doc, einfuehrung2-doc


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: ifetex, ifluatex, ifxetex,
  - hyperxmp


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: latex-bib-ex-doc, latex-bib2-ex.doc,
  - latex-referenz, latex-tabellen, latex-tds, ltxindex


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: math-e-doc, mbenotes
  - mathalfa was renamed to mathalpha


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: presentations, pst-spirograph,
  - pst-vue3d, psu-thesis


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: texlive-docindex, tabulars-e-doc


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: jinlun <jinlun@huawei.com> - 4.0.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 4.0.1
    - Fix CVE-2023-22745
    - TPM version 1.59 support
    - libmu soname from 0:0:0 to 0:1:0.
    - tss2-sys soname from 1:0:0 to 1:1:0
    - FAPI ignores vendor properties on Fapi_GetInfo
    - FAPI Event Logging JSON format
    - Dead struct TPMS_ALGORITHM_DESCRIPTION
    - Dead field intelPttProperty from TPMU_CAPABLITIES
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal


author: chench <chench@hygon.cn> - 4.0.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add SM4 algorithm support
    - Add support for udev to create tcm devices
    - add ecc encrypt/decrypt support
    - add bootstrap file from upstream


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.0-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/0001-Support-specify-CC.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.22.0-4
changelog:
  - Refresh and reorder patch Add-AArch64-clang-longjmp-support.patch to avoid confliction with other patches in some cases


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: pengmeng <pengmeng@kylinsec.com.cn> - 1.20.11-38.kb2
changelog:
  - sync upstream patches for memory leak. (b:127194)
  - fix memory leak on ms_do_pageflip error.(b:118834)


author: xiaowen <xiaowen@kylinsec.com.cn> - 2:42.2-3.kb1
changelog:
  - Change the SPEC file to prevent gnome software from displaying the application(f:79607)
  - nodisplay-in-kiran-menu.(f:56656)


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.7.2-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypbind-1.11-gettextdomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypbind-2.4-gettext_version.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/abuild/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: gaobo <gaobo@kylinsec.com.cn> - 1.2.15-6.kb1
changelog:
  - add options of OPTIMIZATION and others in src/makefile(f:51450)
  - Add "program" option to rotate lock file configuration for finer-grained rotation locks(b:113752)
  - Fix invalid address access caused by double q pointer increment when environment variable is not matched in ZLOG interpreter line rule(b:84269)
  - Add ldconfig command to the script executed after installation.(f:113752)


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


