# changelog

author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - fix: modify install permission for library and config file.
  - fix: update nullptr check.
  - fix: update VM consistency log.
  - fix: extend RPC transmission timeout to 20 seconds.
  - fix: clear const_cast in domain.cpp; solve memory leak.
  - fix: add debug log for TSB API.
  - fix: extend RPC transmission timeout


author: cx <cx22757@163.com> - 0.0.1-3
changelog:
  - 修改日志问题
  - fix: log ERROR when peer received a failure notification.
  - fix: remove unsupported flag in DomainMigrate log.
  - fix: remove redundant nullptr check.
  - fix: change measure item name from grub_cfg to grub.cfg.
  - 修改安全问题
  - fix: safety inspection.
  - 修改检视意见
  - 格式化代码
  - 修改安全排查
  - fix: remove option --undefinesource.
  - fix: add return value check for GetVRoots.
  - fix: remove `--allow-store-measurements` option in VM create.
  - fix: remove RPATH compile option.
  - fix: call MigrationNotify after migration success in source end.
  - 修改安全排查问题
  - fix: update doc.
  - fix: modify VM state to shutoff after migration.
  - fix: add memory free for error branch in foreign_mounter.cpp


author: cx <cx22757@163.com> - 0.0.1-4
changelog:
  - fix: adapt to new VerifyTrustReport API.
  - 增加start虚机耗时日志
  - 保持挂载和startVRoot进行异步，并且不可以让checkmeasure和startVRoot异步
  - delete no use function
  - 1: adapter mock 2：add time-consuming debug 3: async StartVRoot and CheckGuestBeforeStart
  - fix: update doc and CLI help info.


author: cx <cx22757@163.com> - 0.0.1-5
changelog:
  - fix: update TSB-agent mock implement.
  - docs: update supported OS version
  - fix: update download URL for libboundscheck.
  - fix: rename sessionId to uuid.
  - fix: add suggestion for edk2 version


author: Xu Zheng <xuzheng_yewu@cmss.chinamobile.com> - 0.1.0-32
changelog:
  - adapt to multiple qemu process 
  - virt_check update
  - optimize qemu_var and os_var matching formats


author: yaoxin <1024769339@qq.com> - 5.19.7-1
changelog:
  - Update to 5.19.7 for fix CVEs: CVE-2026-42253, CVE-2026-42588,
    CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270


author: yaoxin <1024769339@qq.com> - 5.19.8-1
changelog:
  - Update to 5.19.8 for fix CVEs: CVE-2026-49432, CVE-2026-49434,
    CVE-2026-49877, CVE-2026-50734, CVE-2026-52760, CVE-2026-53916,
    CVE-2026-53917


author: Wenhui Tang <wenhui.oerv@isrc.iscas.ac.cn> - 0.26.0-2
changelog:
  - Append flags to GOFLAGS to fix go linker bugs for riscv
  - Related issue: https://github.com/golang/go/issues/62465
  - This is a temporary solution that requires fixing the upstream riscv support for golang.


author: wenxin<wenxin32@foxmail.com> - v1.4.1-3
changelog:
  - fix the query error of cve associated host
  - update verification method for host ip fieldl;fix repo field filter error
  - update TimedCorrectTask method


author: wenxin<wenxin32@foxmail.com> - v2.0.0-3
changelog:
  - Added support for cluster features.
  - Adjusted Task Module logic to use Celery for task management and execution.


author: luxuexian<luxuexian@huawei.com> - v2.1.0-2
changelog:
  - Fixed exceptions in calling stored procedures and cases caused by SQLschema upgrade
  - Fixed errors reported in calling cve summary interface


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-12
changelog:
  - to maintain functional stability, da-tool only releases network related analysis
  - it is not allowed to modify the configuration file of the da-tool


author: wangguangge<wangguangge@huawei.com> - v1.4.1-1
changelog:
  - update to v1.4.1
  - update cve fix logic
  - support rollback operation for kernel hotpatch/coldpatch


author: zhuyuncheng<zhuyuncheng@huawei.com> - v1.1.3-3
changelog:
  - Bugfix: fix the alert count error
  - Bugfix: for ai model, increase queried data length and add
    a time range for error judgment.


author: gongzhengtang<gong_zhengtang@163.com> - v1.2.0-1
changelog:
  - update the structure of response body; update how to get session used to
  - connect to the database


author: Hu gang<18768366022@163.com> - v1.3.5-2
changelog:
  - Resolve the problem of host display of the expanded menu in the host management batch adding host interface
  - Optimize the logic of adding hosts in batches under different circumstances


author: Hu gang<18768366022@163.com> - v1.4.0-1
changelog:
  - adapt to NewRepair Tasks Including DetailsCreation TaskReports And TaskExecution
  - Modify the original rollback task to hot patch rollback
  - Added related rollback tasks


author: Hu gang<18768366022@163.com> - v1.4.0-2
changelog:
  - Added keyword search for host list
  - Fixed the problem of abnormal list rendering in task details task running state
  - Optimize some page copywriting
  - Adaptation rollback task related (creation, execution, detailed viewing, task report viewing, etc.)
  - Solve the problem of hot and cold patch execution tasks failing when creating a repair task.
  - Fix hotpatch remove list filter failed


author: Hu gang<18768366022@163.com> - v1.4.0-4
changelog:
  - Added an interface adaptation for host status
  - Added a field to determine whether the kernel changes after the host is restarted
  - Added a new hot patch prompt for creating a repair task
  - Fix some bug


author: Hu gang<18768366022@163.com> - v1.4.0-7
changelog:
  - Modify the task description copy of the create hot patch removal task
  - remove create rollback button in cve detail,add hotpatch button in cve detail


author: Hu gang<18768366022@163.com> - v2.1.2-4
changelog:
  - Update version to v2.1.2-4
  - Provides smart Q&A capabilities for big models
  - Provide vulnerability repair and configure traceability intelligent management
  - Supports traceability of file changes


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Adjusted configuration file loading method: changed format from INI to YAML.
  - Added support for reading and writing configuration through Zookeeper.
  - Added support for reading and writing cache through Redis, including logic for current cache keys.
  - Implemented RSA signature verification for data.
  - Removed deprecated files.
  - Optimized Prometheus import statements.
  - Added retry mechanism to `response` method.


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Split the existing service module into distinct modules:
    - Task Module: Handles task management and execution.
    - Host Module: Manages host configurations and interactions.
    - User Module: Manages user accounts and permissions.
    - Interface Dispatch Module: Manages the dispatching of requests to appropriate interfaces.
  - Added a new command line tool for enhanced functionality and management.
  - Introduced support for clustering, allowing for more robust and scalable deployments.
  - Reorganized the service architecture to improve modularity and maintainability.
  - Fixed various issues to enhance stability and performance.


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: allow root to use desktop manager
  - KYOS-F: feature(kiran): Support kiran desktop environment
  - KYOS-F: Support change desktop background image in kiran desktop(#I5I1HE)
  - KYOS-B: Fix the file rename error msg too long(#I5I8IM)
  - KYOS-B: Fix the file can be rename to only container space name(#I5I8KI)
  - KYOS-F: Let the location bar background change with theme(#I5I8V9)
  - KYOS-B: Not draw icon and text hight light color when icon not get force(#I5HRI0)
  - KYOS-B: Fix the open terminal can not correct to terminal icon


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-2
changelog:
  - modify the logic that open kiran-control-panel when change the background (f:107366)
  - fix that background abnormal when change the scale to 200%. (b:121360)


author: wangdi <wangdi@kylinos.cn> - 0.15.0-3
changelog:
  - Change hardcoded deafult hash algorithm from legacy md4 to sha512
  - Change dependecy from ansible-2.9 to ansible since ansible version has bumped to 2.9


author: liheavy <lihaiwei8@huawei.com> - 1.0.0-3
changelog:
  - Disassemble yocto-embedded-tools and replace cjson, ninja, gn, openssl, libboundscheck
  - with openEuler software package


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-6
changelog:
  * Tue Nov 20 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-6
  - Update dsoftbus from 3.1.2 to 3.2
  - Rename package name from dsoftbus to communication_dsoftbus


author: Shi Quan <shiq10@chinaunicom.cn> - 1.0-3
changelog:
  - Drop the python3-pam RPM dependency (not available in openEuler); the python
    pam module is installed at runtime via pip and used with a graceful fallback.


author: mahailiang <mahailiang@uniontech.com> - 5.12.20.30-6
changelog:
  - Solve the issue where there is no banner notification when the root user ends the screen recording


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.0-1
changelog:
  - Initial release of DevStore
  - Includes frontend Electron application
  - Includes backend Django application
  - Provides comprehensive development store management functionality
  - Added systemd service support for easy service management
  - Users can now start/stop DevStore using systemctl commands


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.1-1
changelog:
  - Support search functionality
  - Fix the issue where the list is empty when returning to the homepage from the details page
  - Auto-enable and start dev-store service after installation
  - Add error handling to ensure service startup failures don't affect package installation


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.3-1
changelog:
  - Replace MariaDB with SQLite database, optimize initialization process for faster startup
  - Optimize cleanup and write processes during data synchronization exceptions


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.4-1
changelog:
  - Update desktop icon
  - Remove massive logs
  - Support for quickly adding MCP servers to PolyMind
  - Fix handling issue when oeDeploy plugin is duplicated
  - Optimize interface, support multiple tabs


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device manager to openEuler


author: zhourenjian <zhourenjian@huawei.com> - 2025.36-1
changelog:
  - Adapt E2B to the arm64 architecture, remove its dependency on GCP, and add a one-click local installation script.Fix start-client process, use dnsmasq replace systemd-resolved, use paramater to decide current client belongs to which node pool, use glibc busybox,use provision.sh to install vm's deps while building template.Add arm vmlinux.bin and change x86 vmlinux.bin name.Make start-client process local.use dnsmasq replace systemd-resolved. Use paramater to decide current client belongs to which node pool. fix configure.sh run fail because busybox has no bash.change async to sync.complete readme.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.5.0-16
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Add-PL_ARCH-for-AArch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/coverity.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-add-loongarch64-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-add-riscv-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongqi <dongqi1@kylinos.cn> - 1.4.10-1
changelog:
  - update to version 1.4.10
  - Rewrite locale migration to use fd-based traversal
  - Various improvements to tests


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: luxuexian<luxuexian@huawei.com> - v2.1.0-3
changelog:
  - Optimize the query of the number of unsynchronized service domains
  - unified conftrace record in English


author: zhanglin <lin.zhang@turbolinux.com.cn> - 1:3.38.2-4
changelog:
  - fix build when Meson >= 0.61.5
  - add patch modify-meson-build-tepl6.patch
  - add patch fix-i18n-merge-file.patch


author: renjunkai1@example.com - 0.0.1-21
changelog:
  - fix: Add a cargo.lock file to lock dependency versions.
  - fix:[plugin manager] replace unwrap with results
  - fix:[policy engine] forbid custom functions and loop with number range
  - fix: Add libboundscheck library for building RPM agent and cli.
  - fix:[policy engine] forbid custom functions and loop with number range
  - feat: Modify the URL paths in the API documentation
  - feat: Add a default value for executables_value in the tpm_boot.rego file.
  - fix:fix key managerd workers


author: renjunkai1@example.com - 0.0.1-22
changelog:
  - feat: add compilation options for security requirements
  - fix: [attestation server] fix unwrap problem in initialization process
  - fix: strengthen the policy injection proctection
  - fix: delete tests that are commented out
  - fix: [endorsement] fix unwrap problem
  - fix: add more strict parameter validation for user id
  - feat:modify register white box inspection
  - fix:fix apikey block_on
  - Merge openeuler/master: resolve conflicts and integrate upstream changes
  - perf: optimize PCR index validation
  - config: update PCR banks config for batch processing
  - test: add test cases for TPM plugin improvements
  - fix:fix apikey block_on
  - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems.
  - fix: optimize TPM NV reading and PCR collection


author: cx <cx22757@163.com> - 0.0.1-23
changelog:
  - fix:add tpm.rego,modify ut and agent_config
  - feat: fix log name
  - Revert "bugfix: add key_managerd.service to rpm"
  - bugfix: add key_managerd.service to rpm
  - feat: Adapting to the log of ascend npu
  - fix:fix server_config
  - feat: The virtCCA plugin supports log collection and verification in the dim format
  - feat:add TpmPlugin for attester and verfier dim_log
  - fix: cancel exporting unnecessary lib.
  - fix: clear magic number in CCA plugin.
  - fix: split the verify_logs func in CCA verifier.
  - fix: add UT for CCA verifier plugin.
  - fix: Optimize command-line options and their explanations
  - feat: update docs and RPM spec files for CCA.
  - feat: add CCA verifier plugin.
  - feat: Modify the input of the all policy to the output of the plugin.
  - feat: Modify the interface documentation
  - feat: The baseline generation tool supports dim baseline generation.
  - feat: Added all-type policy
  - feat: add CCA attester plugin.
  - fix: extract public log verify code.
  - fix:Fix failure to read IAK certificate
  - fix: Adapt to EAR token format for itrustee plugin.
  - fix: Adding the secure boot field to the token in the virtCCA plugin
  - fix: Remove unnecessary fields in itrustee.rego.
  - fix: Add public key information and display the realm challenge when no platform token exists.
  - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: #   conflict attestation_server/policy/src/services/policy_service.rs
  - fix: Add JWT signature verification when updating the policy
  - feat: Add platform token challenge field and refine software component serialization
  - fix: Modify the translated content of the document
  - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events.
  - fix: Modified failed test cases
  - Merge remote-tracking branch 'origin/issue' into issue
  - fix: Capitalize the first letter of error messages
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - fix: Add codecheck build script
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - bugfix: add a chapter for readme
  - fix: add UT
  - feat(api): configure server limits and improve error handling
  - fix: Fixing some errors in the API documentation


author: cx <cx22757@163.com> - 0.0.1-24
changelog:
  - fix: declare dependency for ITrustee.
  - fix: add copyright notice.
  - test:add tpm and virtcca UT
  - fix: update descriptions of request params.
  - fix: fixes OpenSSL affected by CVE-2025-15467.
  - feat: add ascend_npu cbor data to policy
  - feat: Add the user policy for the TPM plugin


author: cx <cx22757@163.com> - 0.0.1-27
changelog:
  - Revert "feat: Added Compatibility Plugin"
  - Revert "feat: Add logic for the main plugin to retrieve information for each plugin."
  - feat: Added token verification interface, supporting custom public key input.
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: update rustup source in code-check script.
  - fix: replace default rustup source in code-check script.
  - Merge remote-tracking branch 'upstream/master' into plugin
  - feat: add UT to key_manager
  - feat: Added Compatibility Plugin


author: cx <cx22757@163.com> - 0.0.1-28
changelog:
  - fix: Change the IP addresses in the document
  - fix: specify REM indexes when replaying boot log.
  - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: address review comments
  - feat: add cca server unit tests
  - feat: remove obsolete CLI unit tests
  - feat: Add log data validation
  - feat: add unit test to endorserment, key and resource_provider
  - feat: expand client, validate, load_plugins, and error coverage
  - feat: add challenge and evidence verification handler coverage
  - feat: expand service, entities, utils, and signature update coverage
  - feat: add event log, parser, and serializer coverage
  - feat: add api-sub-key func
  - fix: move LICENSE to root directory.
  - fix: remove communication matrix in guide.
  - fix: add docs to tpm plugin
  - feat: delete Chinese for key_manager
  - feat: add UT to attestation_server
  - feat: add UT to attestation_common
  - feat: add UT to attestation_cli
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - add UT to attestation_agent


author: cx <cx22757@163.com> - 0.0.1-29
changelog:
  - feat: add attestation_client facade crate
  - refactor: move func process_nonce to NonceUtil
  - refactor: unify ascend npu evidence handling around base64 cbor
  - fix: Edit the cargo.toml file
  - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time.
  - Merge remote: openeuler/global-trust-authority master
  - fix: DICE verification configuration update
  - fix: move dependencies of cca to workspace level
  - feat: Added a new DICE verifier module
  - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management
  - feat: Added DICE authentication module and adapted CLI tool


author: cx <cx22757@163.com> - 0.0.1-30
changelog:
  - docs: fix typo ITrustee to itrustee in attestation_service.md
  - feat: add is_default field to ref_value API documentation
  - fix: Fix and refine attestation codebase and documentation
  - fix: Make the rate limiting for the agent service configurable
  - feat: Declare the dependencies of the policy_engine module separately
  - fix(agent): handle non-2xx HTTP responses to surface real error causes
  - fix: add restful configuration in attestation client
  - refactor(ref_value): remove redundant validate func
  - fix(docs): add cca type for ref_value and modify content size
  - test(attestation): add UTs for dice verifier and token
  - fix: modify dice uts
  - Merge atomgit/master into current branch
  - feat: Add documentation for dice plugin and support SM2 algorithm for token
  - test(attestation): add UTs for dice attester and verifier
  - perf: use AtomicBool for initialization check
  - fix: Modify the fields in the token so that the fields related to the log status become Boolean values
  - fix: Change the data type of the secureBoot field to boolean
  - fix: Remove the “ignore” field from all ref_value_match_status entries
  - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p”


author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - feat(rbs-cli): add verbose tracing and refresh client command docs
  - feat(rbs):Added parameter validation to the User Management and Policy Management modules
  - feat(rbc,rbs-cli): unify token flow and extend resource auth modes
  - feat(rbs):Add logs for business logic processing
  - feat(rbs):Modify the URL for the certificate management interface
  - feat(rbs):Supports elliptic curve algorithms
  - feat(rbs):Change the key input parameter to Base64 encoding
  - Modify the business logic of the retrieve interface
  - feat(rbs):The export mode only supports JWE.
  - feat(rbs): add resource management module with JWE encryption and unified DB schema
  - feat(rbs): add policy management module with API documentation


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.2-2
changelog:
  - Move '%find_lang gnome-initial-setup' to %install, fix not found gnome-initial-setup.lang if disable %check build


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.0-2
changelog:
  - Move '%find_lang gnome-photos' to %install, fix not found gnome-photos.lang if disable %check build


author: laokz <zhangkai@iscas.ac.cn> - 44.5-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: yaoxin <1024769339@qq.com> - 9.2.10-1
changelog:
  - Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
    CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
    CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097


author: yaoxin <1024769339@qq.com> - 2.8.139-1
changelog:
  - Update to 2.8.139:
    * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML
      namespaces) logic when performing non-strict XML validation
      (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML
      extensibility elements in an inbound SOAP/XML message; no
      longer produces validation errors for non-serializable XML to
      "safely" ignore, unless strict XML validation is enabled with
      `SOAP_XML_STRICT`, as expected.
    * Minor update to improve XML entity parsing within limits.
    * The wsdl2h tool with SSL/TLS enabled for https no longer
      supports legacy SSLv3, only TLS 1.0 to 1.3, this avoids
      potential TLS/SSL handshake errors.
    * Corrected a logic bug in wsdl2h for attribute/elemenet
      reference qualification for C++ class and C struct members in
      the generated header interface file for soapcpp2.


author: herengui <herengui@kylinsec.com.cn> - 1.50.2-9
changelog:
  - Fix CVE-2026-28296: reject paths containing CR/LF characters in FTP backend
  - ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (server-supplied paths)


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-162.0.0.147.20260703.39b7a750c01c
changelog:
  - !24494  i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
  - !24491  bus: fsl-mc: use generic driver_override infrastructure
  - !24356  vdpa: use generic driver_override infrastructure
  - !24483 urma: kref_get in find_add_tpid_reuse
  - !24564  iommu/amd: Fix clone_alias() to use the original device's devid
  - iommu/amd: Fix clone_alias() to use the original device's devid
  - !24475 urma: create resources in ubmad_post_send before the ack message returns
  - !24533 iommu/ummu: Fix use-after-free in ummu_core_alloc_separate_tdev
  - !24520 urma: change log level to rl in ubagg_import_jetty and ubagg_import_seg
  - iommu/ummu: Fix use-after-free in ummu_core_alloc_separate_tdev
  - urma: create resources in ubmad_post_send before the ack message returns
  - !24252 Fix CVE-2026-53072
  - !24341  kernel/fork: clear PF_BLOCK_TS in copy_process()
  - !24335 Fix CVE-2026-53186
  - !24311 Fix CVE-2026-53208
  - !24343  Bluetooth: fix memory leak in error path of hci_alloc_dev()
  - urma: change log level to rl in ubagg_import_jetty and ubagg_import_seg
  - urma: kref_get in find_add_tpid_reuse
  - !24401 [OLK-6.6] Fix CVE-2026-53159
  - !24402 [OLK-6.6] Fix CVE-2026-53158
  - !24421 [OLK-6.6] Fix CVE-2026-53237
  - i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
  - bus: fsl-mc: use generic driver_override infrastructure
  - gpio: mvebu: fix NULL pointer dereference in suspend/resume
  - misc: fastrpc: Fix NULL pointer dereference in rpmsg callback
  - misc: fastrpc: fix DMA address corruption due to find_vma misuse
  - vdpa: use generic driver_override infrastructure
  - Bluetooth: fix memory leak in error path of hci_alloc_dev()
  - kernel/fork: clear PF_BLOCK_TS in copy_process()
  - RDMA/srp: bound SRP_RSP sense copy by the received length
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-162.0.0.147.20260704.a927b975a5e9
changelog:
  - !24309 Fix CVE-2026-53267
  - !24583 Optimize wake_soft_domain() fast path
  - sched/fair: Optimize wake_soft_domain() fast path
  - Revert "sched/fair: Record per-LLC utilization to guide cache-aware scheduling decisions"
  - Revert "kabi: Protect new sched_domain_shared fields with KABI_EXTEND"
  - Revert "sched: Inhibit soft domain scheduling when overutil"
  - Revert "sched/fair: Optimize wake_soft_domain() fast path"
  - Revert "sched/fair: Filter soft domain candidates in find_idlest_group/cpu"
  - !24573 Optimize soft domain
  - !24470 [OLK-6.6] Fix CVE-2026-53138
  - !24469 [OLK-6.6] Fix CVE-2026-53137
  - !24460 [OLK-6.6] Fix CVE-2026-53190
  - !24453 [OLK-6.6] Fix CVE-2026-53208
  - !24452 [OLK-6.6] Fix CVE-2026-53268
  - !24448 [OLK-6.6] Fix CVE-2026-53213
  - !24531 [OLK-6.6] Fix CVE-2026-53072
  - !24523 [OLK-6.6] Fix CVE-2026-53073
  - !24515 [OLK-6.6] Fix CVE-2026-53017
  - !24456 [OLK-6.6] Fix CVE-2026-53177
  - !24440 [OLK-6.6] Fix CVE-2026-53275
  - !24436 [OLK-6.6] Fix CVE-2026-53270
  - !24430 [OLK-6.6] Fix CVE-2026-53269
  - !24424 [OLK-6.6] Fix CVE-2026-53230
  - !24418 [OLK-6.6] Fix CVE-2026-53245
  - !24417 [OLK-6.6] Fix CVE-2026-53238
  - !24407 [OLK-6.6] Fix CVE-2026-53266
  - !24406 [OLK-6.6] Fix CVE-2026-53236
  - !24405 [OLK-6.6] Fix CVE-2026-53249
  - sched/fair: Filter soft domain candidates in find_idlest_group/cpu
  - sched/fair: Optimize wake_soft_domain() fast path
  - !24351 [OLK-6.6] Fix CVE-2026-53136
  - sched: Inhibit soft domain scheduling when overutil
  - kabi: Protect new sched_domain_shared fields with KABI_EXTEND
  - sched/fair: Record per-LLC utilization to guide cache-aware scheduling decisions
  - !24369  ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
  - ipv6: mcast: Fix use-after-free when processing MLD queries
  - netfilter: bridge: make ebt_snat ARP rewrite writable
  - tcp: restrict SO_ATTACH_FILTER to priv users
  - ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
  - netfilter: conntrack_irc: fix possible out-of-bounds read
  - ipvs: clear the svc scheduler ptr early on edit
  - netfilter: synproxy: add mutex to guard hook reference counting
  - net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
  - netlabel: validate unlabeled address and mask attribute lengths
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
  - f2fs: fix data loss caused by incorrect use of nat_entry flag
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
  - drm/amd/display: Bound VBIOS record-chain walk loops
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()
  - bnxt_en: Fix NULL pointer dereference
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
  - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
  - drm/vc4: fix krealloc() memory leak
  - ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
  - netfilter: nft_ct: bail out on template ct in get eval


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-162.0.0.147.20260705.9186ff790f08
changelog:
  - !24601 ub: udma: Optimize udma jetty id access logic.
  - ub: udma: Optimize udma jetty id access logic.
  - !24585 urma: fix workqueue use-after-free in ubagg_exit teardown sequence
  - ubagg: fix workqueue use-after-free in ubagg_exit teardown sequence


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-162.0.0.147.20260706.39a914671550
changelog:
  - !24627 Fix CVE-2026-53356
  - !24091 Fix CVE-2026-46302
  - !24390 [OLK-6.6] Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"
  - !24392 [OLK-6.6][linux-6.6.y sync] Backport 6.6.135-6.6.136 LTS conflict Patches
  - !24602 Fix CVE-2026-53345
  - drm/i915/gem: Fix phys BO pread/pwrite with offset
  - !24567 v2  erofs: unify lcn as u64 for 32-bit platforms
  - !24340 padata: fix kabi breakage
  - !24609 Fix CVE-2026-53357
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
  - !24579 Fix CVE-2026-53246
  - !24576 Fix CVE-2026-53207
  - !24575 Fix CVE-2026-53148
  - !24606  CVE-2026-53084 and CVE-2026-53085
  - !24577  iommu/vt-d: Fix oops due to out of scope access
  - !24087 x86/hw-vuln:Adjust CPU mitigations MSR handling for newer models
  - bpf: return VMA snapshot from task_vma iterator
  - bpf: switch task_vma iterator from mmap_lock to per-VMA locks
  - bpf: fix mm lifecycle in open-coded task_vma iterator
  - KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
  - iommu/vt-d: Fix oops due to out of scope access
  - mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
  - thunderbolt: Clamp XDomain response data copy to allocation size
  - erofs: unify lcn as u64 for 32-bit platforms
  - ksmbd: make ksmbd thread names distinct by client IP
  - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
  - ALSA: caiaq: Don't abort when no input device is available
  - ALSA: caiaq: fix usb_dev refcount leak on probe failure
  - ALSA: caiaq: Handle probe errors properly
  - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow
  - USB: cdc-acm: Fix bit overlap and move quirk definitions to header
  - ALSA: caiaq: take a reference on the USB device in create_card()
  - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu
  - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
  - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
  - smb: server: fix max_connections off-by-one in tcp accept path
  - smb: server: fix active_num_conn leak on transport allocation failure
  - usb: port: add delay after usb_hub_set_port_power()
  - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen
  - usb: storage: Expand range of matched versions for VL817 quirks entry
  - xfrm: Wait for RCU readers during policy netns exit
  - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"
  - x86/hw-vuln:Adjust CPU mitigations MSR handling for newer models
  - padata: fix kabi breakage
  - padata: Put CPU offline callback in ONLINE section to allow failure
  - padata: Remove cpu online check from cpu add and removal
  - selinux: allow multiple opens of /sys/fs/selinux/policy


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-162.0.0.147.20260707.c74a44b14e49
changelog:
  - !24642 [OLK-6.6] ub: ubase: Modify the log for receiving the ctrlq message
  - !24600  fix CVE-2026-53003
  - !24378  ipc/shm: serialize orphan cleanup with shm_nattch updates
  - !24635  drm/virtio: Fix driver removal with disabled KMS
  - !24616 Fix CVE-2026-53000
  - !24621 urma: limit ubcore logs in reuse paths
  - drm/virtio: Fix driver removal with disabled KMS
  - urma: limit ubcore logs in reuse paths
  - netfilter: nat: use kfree_rcu to release ops
  - fix kabi for ppp_defs.h
  - pppoe: drop PFC frames
  - ub: ubase: Modify the log for receiving the ctrlq message
  - ipc/shm: serialize orphan cleanup with shm_nattch updates


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-163.0.0.148
changelog:
  - !24706  l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
  - !24709 v2  CVE-2026-53090
  - !24683 [OLK-6.6] Fix CVE-2026-53359
  - !24710 Ethernet: Linkdata: remove mistakenly committed binary file
  - Ethernet: Linkdata: remove mistakenly committed binary file
  - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs
  - bpf: Fix ld_{abs,ind} failure path analysis in subprogs
  - l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
  - !20350 Backport EDAC support for DMR and regression for CWF
  - !24696 urma: retry import jetty/jfr on EIO from tpid reuse failure
  - !24700 urma: limit ubagg connect exchange logs
  - urma: retry import jetty/jfr on EIO from tpid reuse failure
  - urma: limit ubagg connect exchange logs
  - !24692  USB: serial: io_ti: fix heap overflow in get_manuf_info()
  - !24690  drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED
  - !24689  drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths
  - !24648  locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
  - USB: serial: io_ti: fix heap overflow in get_manuf_info()
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role
  - !24667  CVE-2026-53358
  - !24664 mm/madvise: add MADV_FCMA_ENABLE to set PF_FOLIO_CMA via madvise
  - mm/madvise: add MADV_FCMA_ENABLE to set PF_FOLIO_CMA via madvise
  - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
  - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn
  - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
  - EDAC/i10nm: Add back CWF support
  - config: enable DMR EDAC driver
  - EDAC/imh: Setup 'imh_test' debugfs testing node
  - EDAC/{skx_comm,imh}: Detect 2-level memory configuration
  - EDAC/skx_common: Extend the maximum number of DRAM chip row bits
  - EDAC/{skx_common,imh}: Add EDAC driver for Intel Diamond Rapids servers
  - EDAC/skx_common: Prepare for skx_set_hi_lo()
  - EDAC/skx_common: Prepare for skx_get_edac_list()
  - EDAC/{skx_common,skx,i10nm}: Make skx_register_mci() independent of pci_dev
  - EDAC/{skx_common,skx}: Use configuration data, not global macros


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-163.0.0.148.20260709.2b076cc36d6f
changelog:
  - !24728 urma: fix tpid_reuse attached to vtpn causes use_after_free
  - urma: fix tpid_reuse attached to vtpn causes use_after_free
  - !24701 [OLK-6.6]: SEV-SNP Fix for QEMU startup failure
  - !24684  Bluetooth: serialize accept_q access
  - sw_64/kvm: select HAVE_KVM_READONLY_MEM
  - kvm: replace __KVM_HAVE_READONLY_MEM with Kconfig symbol
  - Bluetooth: serialize accept_q access


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-163.0.0.148.20260710.b1293be5552c
changelog:
  - !24752 urma: drain jfe event lists in batches to avoid soft-lockup
  - urma: drain jfe event lists in batches to avoid soft-lockup
  - !24750 urma: reduce ubagg topo log noise
  - urma: reduce ubagg topo log noise
  - !24389 feat(tsm): add measurement extend support with rem0-rem3 configfs interface
  - !24747 urma: free jfe events outside lock
  - !24740 urma: free completion events outside jfe lock
  - urma: free jfe events outside lock
  - urma: free completion events outside jfe lock
  - !24733 urma: fix UAF of accessing token_id in log.
  - !24726 urma: fix get tp list from ops to single group id
  - !24705 urma: free tpid by uobj
  - feat(tsm): add measurement extend support with rem0-rem3 configfs interface
  - !24730 urma: Fix the issue of inaccurate timing for some functions in DFX
  - urma: fix get tp list from ops to single group id
  - !24731  mm/numa_remote: limit remote NUMA linear mapping to PMD granularity
  - urma: fix UAF of accessing token_id in log.
  - mm/numa_remote: limit remote NUMA linear mapping to PMD granularity
  - urma: Fix the issue of inaccurate timing for some functions in DFX
  - urma: free tpid by uobj


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-163.0.0.148.20260713.fe0800799d8e
changelog:
  - !24765 urma: fix tpid uobj used by ubcore_get_tp_list
  - !24718  drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()
  - !24721 ub:ubus: Update ubus documetation to match latest code
  - !24768 urma: ratelimit import jetty/jfr error logs
  - urma: ratelimit import jetty/jfr error logs
  - urma: fix tpid uobj used by ubcore_get_tp_list
  - ub:ubus: Update ubus documetation to match latest code
  - ub:ubus: move ub memory event definition to uapi
  - ub:ubus: Support DKMS
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-163.0.0.148.20260714.e16e9abef9c1
changelog:
  - !24794 Fix CVE-2026-53149
  - !24780 net/hinic5: fix code logic bug in the nic
  - !24796 urma: use vzalloc for ubmad tjetty and ini_rtbuffer
  - !24650  gtp: disable BH before calling udp_tunnel_xmit_skb()
  - !24651  sctp: purge outqueue on stale COOKIE-ECHO handling
  - !24652  thunderbolt: Reject zero-length property entries in validator
  - !24716  drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
  - !24788  perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
  - !24722  Fix CVE-2026-46054
  - urma: use vzalloc for ubmad tjetty and ini_rtbuffer
  - net/hinic5: fix code logic bug in the nic
  - thunderbolt: Bound root directory content to block size
  - !24698  arm64: stacktrace: Don't WARN when unwinding other tasks
  - !24784 urma: fix UAF of accessing jfs/jetty in log.
  - !24773 drivers/ub/sentry: move smh_common_type.h to the include/uapi directory
  - perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
  - urma: fix UAF of accessing jfs/jetty in log.
  - drivers/ub/sentry: move smh_common_type.h to the include/uapi directory
  - selinux: fix overlayfs mmap() and mprotect() access checks
  - lsm: add backing_file LSM hooks
  - fs: constify file ptr in backing_file accessor helpers
  - fs: prepare for adding LSM blob to backing_file
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
  - arm64: stacktrace: Don't WARN when unwinding other tasks
  - thunderbolt: Reject zero-length property entries in validator
  - sctp: purge outqueue on stale COOKIE-ECHO handling
  - gtp: disable BH before calling udp_tunnel_xmit_skb()


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-ksmtp-23.08.4-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libgravatar-23.08.4-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libkleo-23.08.4-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-modemmanager-qt-5.113.0-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-plasma-5.113.0-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-prison-5.113.0-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-purpose-5.113.0-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-sonnet-5.113.0-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-syntax-highlighting-5.113.0-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-8
changelog:
  - KYOS-B: Fix window thumbnails not being fetched by window manager takeover(#56152)
  - KYOS-B: fix some memory leak(#54376)
  - KYOS-B: Fix some related issues in recent documents(#55119)
  - KYOS-F: adding apps to the desktop, copy them to a temporary file and change the permissions.(#37790)
  - KYOS-F: Added configuration items: Fixed application to the taskbar(#37152)
  - KYOS-B: change 'Recently files' to 'Recent files'(#38303)
  - kYOS-B: fix interference caused by tooltip and popup type windows
  - KYOS-F: taskbar add "simply window previewer" mode(only show window title)(#45321) 
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.0-10
changelog:
  - Fix non-existent make_managed definitions in low versions of gtkmm (f:155085)
  - add CI (f:155085)
  - fix crash caused by double free(b:90168)
  - update test/test-all-apps.cpp (f:155085)
  - hidden menu to display the power dialog(f:29589)
  - Hide start menu before showing warning dialog (b:107763)
  - fix a memory leak problem. (b:121165)
  - fix crash caused by GSettings idle callback after KiranTray destruction. (b:139019)
  - fix some memory leaks. (b:139488)
  - add debounce when system app monitor changed and update window pixmap frequently (b:139488)
  - fix memory leaks of kiran x11 tray icon. (b:139488)
  - fix memory leak of sn icon menu and tray (b:120470)
  - fix memory leak of RecentFileItem context menu (b:120470)


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.2-3
changelog:
  - KYOS-B: Fixed a crash caused by repeatedly calling disConnectDev in resetUkey and destructor to release the same device handle
  - KYOS-R: Modify the code according to the https://gitee.com/openeuler/kiran-authentication-devices/pulls/17 review opinions
  - KYOS-B: when the iris face integrated device is removed, the memory cannot be released and the process is blocked.When the face iris device object is removed, restart the service to release resources (#25243)
  - KYOS-B: When the driver is enabled, the device is scanned and the corresponding device object is created.When the driver is disabled,the corresponding device object is released. (#25387)
  - KYOS-B: fix file install path error


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-5
changelog:
  - KYOS-B: delete blank cmake_target_link_directories
  - KYOS-B: remove rpath (#37243)
  - KYOS-F: suitable for zhi ang fingerprint device (#24532)


author: longcheng <longcheng@kylinos.com.cn> - 0.0.2-2.kb3
changelog:
  - KYOS-B: remove BuildRequires: fingerprint-sdk-devel in openeuler 
  - KYOS-F：Add the enable zlog ex macro for zlog.
  - KYOS-B: Add BuildRequires: gcc-c++ in openeuler


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-24
changelog:
  - KYOS-F: Decrease the priority of override file configurations(#52881)
  - KYOS-F: Marking the configuration as not to be replaced
  - KYOS-B: Enrichment of error messages in pw_history module when changing passwords(#52096)
  - KYOS-B: Fix crash caused by the previous commit due to the existence of a schema but the absence of a color-schema (#35120)
  - KYOS-B: Fix the issue where switching between light and dark themes does not work in Gnome 41 and later versions.(#35120)
  - KYSO-B: Fix the ntp service load order logic error
  - KYSO-B: Fix std::regex can not run in gcc version < 4.9(#48386)
  - KYSO-F: Use glibmm's regex to replace glib's regex
  - KYSO-B: Fix failure to get disk information in virtual machine(#46645)
  - KYOS-B: Fixed the issue where Unglab was not executed in a timely manner, causing subsequent Xclient connections to XServer to fail
  - KYOS-B: fix the graphical and network hardware info no display problem.(#37289)
  - KYOS-B: Remove the duplicate graphical and network hardware info.
  - KYOS-B: The shutdown shortcut cannot be found.(#44337)
  - KYOS-F: add shutdown keybinding
  - KYOS-B: perform adaptive settings when connection status or monitor uid is changed.(#37289)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-25
changelog:
  - KYOS-B: fix the passwd command compatible problem for KY3.3-9-Server(#46550)
  - KYOS-F: Add icon and cursor theme changing when enable auto switch theme.(#73665)
  - KYOS-F: Modify gtk and icon theme to light theme defaultly.


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.1-27
changelog:
  - Update the patch0035's description (f:155085)
  - modify the ntp service selected rule.(b:77953)
  - Fix the signal parameter parsing of added/deleted Upower devices.(b:81563)
  - Disable capslock and numlock by default(b:155085)
  - Fix cpu model name with BIOS while it is empty(b:91787)
  - Fix translation typo (b:90671)
  - Fix issue caused by delayed synchronization when disabling repeat keys (b:90671)
  - Fix build issues caused by recent commits (f:155085)
  - Fix incorrect remaining time in discharge notification after unplugging at full charge(b:108231)
  - Export symbols of exec application(b:109925)
  - Auto theme switching not disabled after manual theme switch.(b:115404)
  - add "--" before user name in spawn calls to prevent option injection. (b:121814)
  - avoid treating VMware VMMouse as touchpad. (b:34878)
  - resolve multiple resource and memory leaks. (b:123369)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.4-2
changelog:
  - KYOS-B: Fix crash when ipv6 address can't be retrieved(#75993)
  - KYOS-F: Supports dimming the monitor during idle time(#76040)
  - KYOS-F: Supports Meta and Window theme settings(#73665)
  - KYOS-F: Support for sound testing(#73668)
  - KYOS-B: compatible with different versions of open-source cursor to prevent program crashes(#IBV1XG)
  - KYOS-F: Split Screensaver and locking concepts, add support for embedded xscreensaver(#73664)
  - KYOS-F:Fix the problem of web details supporting large layouts.(#72894)
  - KYOS-F:improve code in group plugin.(#73623)
  - KYOS-F: Fix the problem of getting the return value of a device via NetworkManager DBus interface under stress test(#70121)
  - KYOS-B: Fix password input limit of 20（#57392）
  - KYOS-B: power management front-end server version determination to runtime configuration(#52885)
  - KYOS-B: Fixes an issue with determining connection and NIC Mac configuration matches when a connection configuration change is active(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-B: shared Networks Add Configuration Invisible (#51089)
  - KYOS-B: shared Networks Add Configuration Invisible(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-F: hide privacy_policy(#35818)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-B: Fix Control Center NIC duplication when restarting NetworkManager(#50967)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-B: remove NetworkManager-l2tp Requires
  - KYOS-F: network details page supports multiple IP masks(#46740)
  - KYOS-B: Fix DBusServiceWatcher lifecycle not bound to slot object(#46755)
  - KYOS-B: Fix that the maximum height of KiranCollapse will not be adjusted under the list of available connections in the network plugin(#47197)
  - KYOS-F: network plugin support wired carrier check(#36646)
  - KYOS-F: netowrk plugin support single configuration multiple IP addresses(#46740)
  - KYOS-B:  add Obsoletes kiran-timedate-manager  
  - KYOS-F: fix build in 339
  - KYOS-B: Adapt to Qt5.9.7 NativeScanCode to QtKey
  - KYOS-F: new network card Carrier status check as tray connection condition judgment(#36646)
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-B: fix gateway display not configured tray icon show disconnection(#36646)
  - KYOS-B: Fix the issue where the initial letters of certain categories are not capitalized.(#36266)


author: gaobo <gaobo@kylinsec.com.cn> - 2.6.4-4
changelog:
  - Network connectivity checking is not enabled by default(f:77265)
  - Fix monitor dimming translation when idle(f:76040)
  - Fix incorrect icon color for more options (f:155085)
  - hide the option to dim when general settings are idle(f:76040)
  - Screen saver setting screen is not enabled by default (f:155085)
  - add message dialog while input only modifies or input super key for keybinding.(f:79211)
  - handle Super_R same with Super_L.(f:79211)
  - improve translation of "Window Themes Setting".(f:84434)
  - Repair strftime results in LANG=zh_CN environment in the graphical interface display messy code(f:86656)
  - Fix build error on 336 system(f:88924)
  - Fix crash caused by failure to obtain primary or active connection when network device state changes(f:90564)
  - fix the default position of the Hostname dialog and slightly adjust the content layout. (b:90839)
  - Fix translation issues in authentication configuration interface. (b:90773)
  - Fix Incorrect Anchor Information Update When Virtual Screen Resolution Changes Leading to Position Abnormalities. (b:92973)
  - network unavailable prompt still exists after restarting NetworkManager service on system startup(f:94129)
  - Update window positions when a single display's resolution changes to prevent gaps between screens. (b:103625)
  - Fix the issue where the prompt content is not fully displayed when changing from a low resolution to a higher one. (b:108453)
  - compatible with kylinsec and kylin release dir,and show agreement only if file exists.(b:107748)
  - fix can't load logging category in audio and power. (b:118262)
  - hide license version. (b:126107)
  - Add zh_CN translations for devel and launcher packages (f:155085)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-22
changelog:
  - KYOS-F: Setting the default white theme for the desktop version
  - KYOS-F: Override configuration, split screen saver as well as lock screen(#73664)
  - KYOS-B: adjusting gvfs dependency judgments for v6 releases
  - KYOS-B: Increase Server Version Disable DPMS Configuration Priority(#53822)
  - Change configuration only at installation time
  - Fix the issue that executing the post script twice causes the touchpad backend plugin to be disabled
  - Specify configuration file %config(noreplace)
  - KYOS-B: Fix post stage change unlock box power configuration error report
  - KYOS-F: Adjust the default configuration of window screenshot shortcuts to kiran-flameshot
  - KYOS-B: Decrease override file priority(#52881)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-F: server versions enable locking on idle by default
  - KYOS-B: fix install error in KY3.3-9
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-F: remove kiran-authentication-devices-sdk dependency (#35156)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0.23
changelog:
  - KYOS-F: Add 51_kiran-desktop.gschema.override to distinguish desktop and server.
  - KYOS-B: Add package dependencies xscreensaver for V6(#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-24
changelog:
  - KYOS-B: Enable split screen saver and lock screen only for V6 version
  - KYOS-B: remove dep initial-setup-gui


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: add icon of gnome software with correct icon name in Kiran.(#28021)
  - KYOS-B: update icons to smaller size to fix the slowly problem when open caja.(#33978)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-7
changelog:
  - fix zlog use program log rotation lock rules to avoid log file is locked by other process(b: 113752)


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.1-1.kb2
changelog:
  - KYOS-F: Fix error caused by missing overload implementation on lower version C++standard library.
  - KYOS-F: Adapt to lower version STDC++.
  - KYOS-F: Fix the sonarqube bugs.(#76290)


author: gaobo <gaobo@kylinsec.com.cn> - 1.22.4-8
changelog:
  - fix memory leak from upstream and valgrind. (b:126226)
  - add show desktop function in panel context menu.(f:94564)
  - remove locker of panel-profile(f:72513)
  - Lock when initializing gsettings(f:72141)
  - fix some memory leaks(f:48935)
  - fix run-dialog issue(f:24810)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-4
changelog:
  - KYOS-F: Fix destructor crash when VirtualKeyboard is not initialized.(#71359)
  - KYOS-F: greeter and unlock dialog support fullname(#40540)
  - KYOS-F: Add detection for whether to install a virtual keyboard
  - KYOS-F: Hide triple-authorized users by default(#53743)
  - KYOS-B: processing screen from scratch, configuration screen(#51999)
  - Fix the power menu showing on the top left when disabling all power options
  - KYOS-B: Fix the crash caused by receiving two signals from Polkit completion(#49904)
  - KYOS-B: When disabling all power settings, the power button should not be displayed(#49764)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-F: Support default preferred login user configurable(#47534)
  - KYOS-B: fix crash in xserver without randr (#41284)
  - KYOS-B: Fix the issue of lowercase first letters in sub-feature items(#36266)


author: gaobo <gaobo@kylinsec.com.cn> - 2.5.2-6
changelog:
  - Fix the problem that the login screen cannot be popped up by clicking the menu on the right screen (f:155085)
  - Setting focus when switching control buttons or input boxes on the authentication screen (f:155085)
  - Adjusting zlog category name, output to standard error, will redirect to lightdm/seat-greeter.log (f:155085)
  - Fix the problem of input box losing focus when the screensaver is switched (f:155085)
  - greeter disable dpms(f:80240)
  - Repair the garbled display of PAM prompts in the lock screen interface under LANG=zh_CN env(f:86656)
  - Fix incorrect icon paths in resource files(f:90917,f:90840)
  - Fix HoverTips display occlusion issue(f:94259)
  - Fix memory leak and double free issue in screensaver authentication program (f:101394)
  - add virtual face auth (f:86337)
  - modify KAD_AUTH_TYPE_VIRTUAL_FACE value (f:155085)
  - add auth code function (f:105803)
  - change the minimum version of CMake to a range. (b:105353)
  - fix the issue of incorrect authentication method translation. (b:120281)
  - Fix memory leaks in auth dialog and animation. (b:121166)
  - Migrate server power config to kiran-session-guard(b:126789)
  - hidden netadm user (f:79593)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-20
changelog:
  - KYOS-B: replace ParentStyle with QProxyStyle and adapt to QT5.9.7 version
  - KYOS-B: theme support custom library name
  - KYOS-B: Adapting to lower version Qt, autorcc not correctly associating dependencies
  - KYOS-B: Fix theme error when session dbus service is not registered(#35760)
  - kYOS-B: fix build in Qt5.9.2(#45382)
  - KYOS-B: adjust the height of the QCompleter Popup pop-up(#42329)
  - KYOS-B: fix the failure of dynamic theme switching in low version of Qt.(#51353)


author: gaobo <gaobo@kylinsec.com.cn> - 2.4.0-22
changelog:
  - fix event leak and harden svg load fallback. (b:131613)
  - add support of custom plugins dir (f:85372)
  - change requires, pkgconfig(pkg-config) (f:155085)
  - adjusting spec file parameters (f:155085)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.3-12
changelog:
  - KYOS-B: Fix the problem of closing the screensaver window in idle shutdown/logout process after locking the screen


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-1
changelog:
  - KYOS-B: fix sonarqube scanning problem.
  - KYOS-B: Fix conflict with Display dims when idle
  - KYOS-F: Support XEmbed Screensaver theme(#78377,#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-2
changelog:
  - rebuild for KiranUI-2.6-next
  - KYOS-B: Fix AutoRestart not working due to disabling session management


author: gaobo <gaobo@kylinsec.com.cn> - 2.2.4-4
changelog:
  - Embedded XScreensaver screensaver without the cursor to enhance the viewing experience (f:155085)
  - improve gamma setting reliability with error handling(b:91531)
  - Improve compatibility by reading lock background directly via GSettings (f:118607)
  - update CMake structure and add basic unit test functionality (f:113505)
  - fix sonarqube scanning problem (b:118607)
  - simplify visibility monitor restack handling.(b:115411)
  - fix animation parent for screensaver and remove redundant xcb_connect call. (b:121166)
  - fix gamma buffer release and translator lifecycle(b:131613)
  - run tests with explicit QApplication(b:131613)
  - improve generateCookie compatibility and robustness(b:123369)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.0-14
changelog:
  - KYOS-B: Session management pulled up child process forwards standard errors to the master process(#50844)
  - KYOS-B: Repair the situation that Key cannot be matched when receiving QGSettings changed signals(#51570)
  - KYOS-F: Add kiran-session-quit to support shutdown shortcut (#44337)
  - KYOS-B: fix build error
  - KYOS-B: extend the dbus call timeout to 10s to fix the restart failure caused by the CanReboot call timeout
  - KYOS-B: fix the problem that inhibitor window is show when the number of inhibitor is zero.(#24564)
  - KYOS-B: repair defects about theme not right when into livecd mode (#8146)
  - KYOS-B: change QCoreApplication to QGui/QApplication to fix the issue of SM not auto exit when XDMCP connection is disconnected.(#31631,#31796)


author: gaobo <gaobo@kylinsec.com.cn> - 2.5.0-16
changelog:
  - add translation for main.cpp (f:155085)
  - Fix memory growth caused by caching standard output into memory when QProcess pulls up a child process(f:83175)
  - Fix session exit confirmation dialog JSON response parsing failure caused by unexpected stdout output(f:96728)
  - Remove Qt graphics dependency for service connection management(f:97507,f:31631,f:31796)
  - fix session manager end session phase1 failed issue during logout. (b:119781)
  - fix some memory leak problem. (b:121165)
  - add multi-screen support for session exit window. (b:121359)
  - Enhance display server monitoring and session management. (f:117344)
  - fall back for QGuiApplication::screenAt on Qt before 5.10(b:121359)
  - fix the memory leak for IceConn and coredump when call SmsCleanUp because of iceConn is already closed. (b:116395)
  - check startup id before adding XSMP client, avoid session manager coredump. (b:121806)
  - cleanup ConnectionWatch and fix client object/property memory leaks. (b:154642)
  - fix Use-After-Free when IceProcessMessages returns non-Success after client disconnects(b:154642)


author: gaobo <gaobo@kylinsec.com.cn> - 2.4.2-8
changelog:
  - use QRectF to adjusted floating value (f:76290)
  - Fix HoverTips display occlusion issue (f:94259)
  - window menu right-click trigger position detection. (b:103627)
  - When changing from a low resolution to a higher one, the prompt content displays line breaks. (b:108453)
  - Fix memory leak of d-pointer in KiranPasswdEdit. (b:121166)
  - Add Qt version compatibility for obtaining the screen where the widget is located. (f:131613)
  - Change the minimum version of CMake to a supported range. (b:105353)


author: ChenYanpan <chenyanpan@xfusion.com> - 1.5.2-2
changelog:
  - use 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/ktextaddons-1.5.2-2.oe2403next.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu" to fix build failure


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: jade_t <yzd50036@gmail.com> - 1.29.1-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the installation conflict between kubernetes-kubelet and kubernetes-node


author: lvfei <lvfei@kylinos.cn> - 1.0.34-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC: add patch:0001-update-desktop-file-and-add-sdk-translate.patch


author: lvfei <lvfei@kylinos.cn> - 1.0.4-6
changelog:
  - add patch:0001-kylin-user-guide-add-bo-desktop-translate.patch
  - kylin user guide add desktop zangwen support


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-31
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:add ukui-control-center-3.1.2-repair-freelogin-autologin-not-available.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-33
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:Patch203:fix-the-display-resolution-does-not-match-the-actual-resolution.patch


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: change workspace titlebar and font and composite
  - KYOS-B: fix disabled Alt+F1 to popop mate menu
  - KYOS-F: feature [menu] : pop up start menu when press super key


author: longcheng <longcheng@kylinos.com.cn> - 1.24.0-2
changelog:
  - KYOS-F: draw mask for whole screen except the selection area
  - KYOS-F: add X-System-Server category for mate-system-log
  - KYOS-F: add X-KIRAN-NoDisplay=true in mate-system-log.desktop.in.in
  - KYOS-T: change chinese translation.(#28543)
  - KYOS-F: fix mate system log is not displayed in the control panel (#48482)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - Properly update the set of monitors when it changes
  - KYOS-F: add kiran theme
  - KYOS-F: set default position to right-bottom


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - Initial build
  - KYOS-F: modify desktop and modify mate system monitor
  - KYOS-B: fix resource abnormal caused by excessive CPUs and solve crash when switch CPU display color in CPU > 31
  - KYOS-B: fix get pcpu with double to solve the cpu% don't changed
  - KYOS-B: fix could not get name information of Loongson processor
  - KYOS-B: fix cpuinfo mate-system-monitor hardware-cpuinfo display


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - initial build
  - KYOS-B: add kylin mask and part of translations
  - KYOS-B: set text preview content
  - KYOS-B: add a action in mate-terminal.desktop.in.in
  - KYOS-B: change default color and system color to Dracula Dark(#30872)
  - KYOS-B: select the default charset by locale


author: yaoxin <yao_xin001@hoperun.com> - 2.0.20-1
changelog:
  - Update to 2.0.20
    * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
    * Open files with appropriate access on Windows. Closes #3119.
    * Don't allow invalid response topic values.
    * Fix some strict protocol compliance issues. Closes #3052.
    * Fix cmake build on OS X. Closes #3125.
    * Fix build on NetBSD
    * Fix mismatched subscribe/unsubscribe with normal/shared topics.
    * Fix crash on bridge using remapped topic being sent a crafted packet.
    * Don't allow SUBACK with missing reason codes in client library.
    * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
    * Fix mosquitto_rr not honouring -R. Closes #2893.
    * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
    * Fix max_inflight_messages not being set correctly. Closes #2876.
    * Fix mosquitto_passwd -U backup file creation. Closes #2873.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: zhangxingrong <zhangxingrong@uniontech.cn> - 44.6-4
changelog:
  - delete: Don't wrongly set window as not alive when pings are disabled
  - window: Add IS_ALIVE to get_property
  - core/window: Propagate focus appearance to all ancestors
  - clutter/actor: Don't write uninitialized out values on failed transform
  - clutter/pick-stack: Add an allocation check to calculate_clear_area ()


author: zhangbowei <zhangbowei@kylinos.cn> - 0.3.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: implement a pure Go solution to eliminate iproute dependencies


author: will_niutao <niutao2@huawei.com> - 1.5.1-1
changelog:
  - Change upstream to https://github.com/orocos/orocos_kinematics_dynamics, and rename the package to orocos-kdl


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.4.4.1-2
changelog:
  - Change requires from postgresql-13-contrib and postgresql-13-server to postgresql-contrib and postgresql-server


author: tangjie02 <tangjie02@kylinsec.com.cn> - 5.27.11-2
changelog:
  - adapt to the new CMake macros to fix build failure
  - disable snap plugin because of snapd-glib required qt6, but plasma-discover required qt5


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: add chinese translation
  - KYOS-B: Fixed garbled toolTips path in tab page with GB18030 encoding(#7248)


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2.53.3-1
changelog:
  - Update package to version 2.53.3
    * Fix metric name include histogram error
    * TSDB: Let queries with heavy regex matches be cancelled and not use up the CPU
    * Scraping: allow multiple samples on same series, with explicit timestamps


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-2
changelog:
  - Type: CVE
  - CVE: CVE-2023-39326 CVE-2024-24789 CVE-2024-24791
  - SUG: NA
  - DESC: Rebuild to fix CVE-2023-39326 CVE-2024-24789 CVE-2024-24791


author: gongzhengtang<gong_zhengtang@163.com> - 1.3.2-1
changelog:
  - update to v1.3.2
  - Prevent ever-growing session size for OAuth clients.
  - Revert quote client id and secret.
  - unquote basic auth header for authorization server.
  - fix a bug in module 'importlib' has no attribute 'metadata'


author: yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
changelog:
  - Update to 5.0.0:
    * Breaking: Change default to disable private network access
      This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71


author: guochao <guochao@kylinos.cn> - 24.1.0-1
changelog:
  - Update package to version 24.1.0
  - Import os.link conditionally to fix importing on android
  - Add aiofiles.os.path.abspath and aiofiles.os.getcwd.


author: GuoCe <guoce@kylinso.cn> - 3.8.1-1
changelog:
  - Update package to version 3.8.1
  - Corrects WSGI adapter handling of root path.
  - Handles case where `"client"` is ``None`` in WsgiToAsgi adapter.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.2.1-1
changelog:
  - Update package to version 4.2.1
  - Adapt for logging lock internal changes in Python3.13
    Remove SIGUSR2 from TERMSIGS_DEAULT


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.1-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-build-erro.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-delete-import-m2r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: songliyang <songliyang@kylinos.cn> - 5.3.4-1
changelog:
  - update to 5.3.4
  - Use string value for CELERY_SKIP_CHECKS envvar
  - Document need for CELERY_ prefix on CLI env vars
  - Fixed AttributeError: 'str' object has no attribute


author: lilu <lilu@kylinos.cn> - 0.3.1-1
changelog:
  - Update package to version 0.3.1
  - Update pyproject.toml, remove upper bound from Python version specifier and so on


author: Hann <hannannan@kylinos.cn> - 30.8.0-1
changelog:
  - Update package to version 30.8.0
  - Update city names for uk_UA
  - Fix issue where Faker does not properly convert min/max float values to Decimal


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 33.0.0-1
changelog:
  - Update package with version 33.0.0
    Revert "Make pytest fixture session-scoped".
    Add jobs for locale de_AT; added methods job_female and job_male
    Added Providers for uz_UZ language


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 37.3.0-1
changelog:
  - Update package with version 37.3.0
    Fix remove duplicate cities in de_DE address provider
    Add support for unique complex value types Fixes
    Add hash functions overloads with no params
    Overload hash generation functions to make return types more specific
    Add stub support for overloaded methods
    Add phone numbers for de_CH and it_CH
    Fix date_time provider with end_datetime in the past
    Add support for Zulu (zu_ZA) address provider and corresponding tests
    Declare support for Python 3.13


author: sqfu <dev01203@linx-info.com> - 0.7.0-1
changelog:
  - update to 0.7.0
  - adding GH dependabot
  - Bump the pip group with 2 updates
  - Update hypothesis requirement from <6.62.0 to <6.100.0 in /.github/scripts


author: xu_ping <707078654@qq.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Add support for pyhon3.11 and python3.12
  - Added a new valid PGP key to sign the package
  - python3.7 is not supported and Remove support for python3.6


author: jiangxinyu <jiangxinyu@kylinos.cn> - 5.3.5-1
changelog:
  - Update package to version 5.3.5
    Fix crash when using global_keyprefix with a sentinel connection


author: zhaoshuang <zhaoshuang@uniontech.com> - 2.5.0-1
changelog:
  - Update package to version 2.5.0
    Add support for custom extras
    Drop Python 3.5\3.6\3.7 support
    Add prepend arg to toc extra
    Process HTML comments as markdown in 'escape' safe mode
    Fix syntax warnings in test suite
    Process inline tags as HTML blocks when they span multiple lines
    Add new LaTeX Extra
    Fix html, head and body tags being wrapped in <p> tags
    Graceful handling of broken lists when cuddled-lists extra is enabled
    Add type hints
    Drop Python 3.6 and 3.7 support
    Fix fenced code blocks breaking lists
    Fix #583 by tweaking incomplete tag regex
    Fix AssertionError on malformed HTML


author: songliyang <songliyang@kylinos.cn> - 2.5.1-1
changelog:
  - Update package to version 2.5.1
  - Add option to output to file in CLI
  - Add support for Python 3.13
  - Remove redundant version checks
  - Fix tox: 'failed with make is not allowed, use allowlist_externals to allow it'


author: xu_ping <707078654@qq.com> - 9.0.1-1
changelog:
  - Upgrade version to 9.0.1
  - add Raw UDP and DTLS support.
  - Deprecate add_log event hook and mitmproxy.ctx.log.


author: xieyanlong <xieyanlong@kylinos.cn> - 3.1.5-1
changelog:
  - bugfix: Workbook files not properly closed on Python ≥ 3.11.8 and Windows
  - bugfix: Column name caches are slow and use a lot of memory
  - bugfix: Rich-text can be saved if lxml is not installed


author: tanyulong <tanyulong@kylinos.cn> - 2.4.0-2
changelog:
  - delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/opentracing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: lvfei <lvfei@kylinos.cn> - 3.9.15-1
changelog:
  - upgrade to 3.9.15 fix CVE-2024-27454
  - Fix crash serializing str introduced
  - Fix Serialization str escape uses only 128-bit SIMD 
  - Minimal musllinux_1_1 build due to sporadic CI failure
  - Improve performance of serializing. str is significantly faster. Documents
     using dict, list, and tuple are somewhat faster.
  - orjson module metadata explicitly marks subinterpreters as not supported


author: liutao1 <liutao1@kylinos.cn> - 3.10.0-1
changelog:
  - Update package to version 3.10.0
    Support serializing numpy.float16 (numpy.half).
    sdist uses metadata 2.3 instead of 2.1.
    Improve Windows PyPI builds.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.10.11-1
changelog:
  - Update package with version 3.10.11
    Improve performance of UUIDs.
    Publish PyPI wheels with trusted publishing and PEP 740 attestations.
    Compatibility with CPython 3.14 alpha 1.
    Drop support for arm7.
    Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.


author: zhaojingyu <zhaojingyu@klinos.cn> - 5.4.1-1
changelog:
  - Update package to version 5.4.1
    fixed a regression from version 5.4.0 that incorrectly handled files opened twice via file descripto


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.1.2-1
changelog:
  - Update package to version 1.1.2
    * fix: accommodate docxtpl use of Part._rels
    * fix: XmlPart._rel_ref_count


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-1
changelog:
  - Update package to version 0.15.0
  - FIX Copy JupyterLite contents early so it runs before jupyterlite_sphinx build-finished


author: xiaozai <xiaozai@kylinos.cn> - 1.7.0-1
changelog:
  - Update package to version 1.7.0
    - Remove deprecated plugins
    - Remove python 2 declaration
    - Add static method Tree.from_map


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.21.0-1
changelog:
  - Update package to version 0.21.0
    Add cleanup_socket param on create_unix_server
    Use cythonized SO_REUSEPORT rather than the unwrapped native one
    UDP errors should result in protocol.error_received
    Updates for Cython3
    Test with Python 3.13


author: wangkai <13474090681@163.com> - 1.1.0-3
changelog:
  - Compling package with pyproject
  - Obsoletes subpackage python-blurb-help
  - Add check for blurb command


author: Miro Hrončok <mhroncok@redhat.com> - 3.3.4-5
changelog:
  - Subpackage python2-empy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: zhaosaisai <zhaosaisai@kylinos.cn> - 2.0.0-1
changelog:
  - Upgrade to the latest version 2.0.0
  - Add new writer methods and namespace elements/resolvers
  - Separate new write functionality from elements that have namespaces
  - Split everything except the closing tag into a separate fn
  - Improve performance with inline qname splitting
  - Local refactoring/performance improvements
  - Example Change the default write value of the root only ns keyword
  - Deprecate python 3.6 and 3.7 because nsetree requires the updated XMLParser
  - Disable coveralls unless you know exactly how to get access tokens


author: wangjunqi <wangjunqi@kylinos.cn> - 2.1.0-1
changelog:
  - Update package to version 2.1.0 
  	Add support for sys/policies endpoint (GH-1100)
  	add quota support to system backend (GH-1092)
  	Add support to PKI class to perform CRUD on issuers (GH-1102)


author: wangkai <13474090681@163.com> - 0.4.4-1
changelog:
  - Update package to version 0.4.4
  - Fix CVE-2023-30608
  - Compling package with pyproject
  - Obsoletes subpackage python-sqlparse-help


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.46.1-1
changelog:
  - Update package with version 0.46.1
    Fix: Allow relative directory path when follow_symlinks=True
    Add: GZipMiddleware: Make sure Vary header is always added if a response can be compressed
    Fix: Raise exception from background task on BaseHTTPMiddleware
    Fix: GZipMiddleware: Don't compress on server sent events
    Mod: MultiPartParser: Rename max_file_size to spool_max_size
    Drop Python 3.8 support
    Remove ExceptionMiddleware import proxy from starlette.exceptions module
    Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE
    Add client parameter to TestClient
    Add max_part_size parameter to Request.form()
    Remove deprecated allow_redirects argument from TestClient
    Make UUID path parameter conversion more flexible
    Raise ClientDisconnect on StreamingResponse


author: liyue01 <liyue01@kylinos.cn> - 0.30.1-1
changelog:
  - Update package to version 0.30.1
  - Fixed ：Allow horizontal tabs in response header values
  - Added New multiprocess manager and Allow ConfigParser or a io.IO[Any] on log_config
  - Fixed：Suppress side-effects of signal propagation ，Send content-length header on 5xx
  - Added Cooperative signal handling
  - Fixed ：Revert raise ClientDisconnected on HTTP
  - Added Raise ClientDisconnected on send() when client disconnected


author: shaoning <shaoning@kylinos.cn> - 0.32.0-1
changelog:
  - Update package to version 0.32.0
      * Add reason support on WebSocketDisconnectEvent
      * Add pragma: full coverage to Process.is_alive
      * Remove signal testing order dependency
      * Improve ProxyHeadersMiddleware
      * Add support for [*] in trusted hosts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.34.0-1
changelog:
  - Update package to version 0.34.0
    Add content-length to 500 response in wsproto implementation
    Drop support for Python 3.8
    Remove WatchGod support for --reload


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync upstream patches to support isulad container engine and systemd cgroup driver


author: wutao <wutao61@huawei.com> - 0.7.0-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/http_parser.rb-0.7.0/http_parser.rb/ to
    /usr/lib64/gems/ruby/http_parser.rb-0.7.0/ to solve fluentd loaderror problem


author: wutao <wutao61@huawei.com> - 1.4.1-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl-ruby/
    to /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl/ to solve fluentd loaderror problem


author: YuYing Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device auth to openEuler


author: Peng He <hepeng68@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - adapt compilation, tailor dependencies on hitrace and hisysevent


author: <918688502@qq.com> - 0.2.0-1
changelog:
  - Initial skeleton of the sysHAX heterogeneous collaborative acceleration runtime, including core modules, configuration management, logging system, command-line tool, API routing, application entry point, documentation, and dependency declaration


author: donglihao <donglihao1@huawei.com> - 1.2-1
changelog:
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: donglihao <donglihao1@huawei.com> - 1.2-4
changelog:
  - Integrated previous updates:
  - remove usage of cxxfilt
  - disable HAS_BTF_SUPPORT in build.sh
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: yaoxin <1024769339@qq.com> - 3.4.1-1
changelog:
  - Update to 3.4.1:
    * Fix manpage path in pyproject.toml
    * Fallback to common if a platform is specified using -p flag,
      but a page doesn't exist for that platform
    * Drop support for EOL Python 3.8 version
    * Fix broken --render option
    * Fix duplicate platform information shown in pages like du, cd, w


author: chukaiping <chukaiping@baidu.com> - 3.4.3-1
changelog:
  - Update to 3.4.3
    * Fixed unpredictable platform selection when displaying pages 
    * fix: unpredictable platform selection introduced
    * Added a warning when a page is not available for the current platform


author: zhang_jian <zhang_jian7@hoperun.com> - 3.4.4-1
changelog:
  - update to 3.4.4
  - Drop support for EOL Python 3.9 version
  - Allow cache updating and command displaying on the same command
  - fix: only raise URLError or HTTPError when there are no results at all


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: houhongxun <houhongxun@kylinos.cn> - 3.1.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add 0001-ukui-panel-fix-incorrect-usage-of-deallocation-func.patch


author: douyan<douyan@kylinos.cn> - 3.1.2-6
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add patch03: ukui-power-manager-3.1.2-disable-computer-sleep.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch2:ukui-session-manager-3.1.0-kylin-fix-ukui-kwin-x11-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch3:add-switchuser-no-limits-ukui-session.patch
         rm disable-Suspend-and-Sleep-of-ukui-session-manager.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add Patch4:ukui-settings-daemon-3.1.2-kylin-fix-coredump.patch


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.01
changelog:
  - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch.
  - Add Patch: 0002-Modify-pam_strerror-function.patch.
  - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch.


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.02
changelog:
  - Add Patch: 0004-refactor-fix-include-flag-error.patch.
  - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch.


author: wanglujun <wanglujun@uniontech.com> - 0.0.1.04
changelog:
  - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h.
  - Add Patch:0007-change-log-path.patch.


author: wangmeng <wangmengc@uniontech.com> - 0.5.0-3
changelog:
  - feat: add patch 0003-fix-echo-a.z.patch
  - feat: add patch 0004-fix-type-return-error.patch
  - 修复echo {a..z} 执行错误和type命令返回值错误


author: openEuler <contact@openeuler.org> - 2.0.0-3
changelog:
  - feat: Add Witty Assistant welcome screen & LOGO
  - refactor: Improve Markdown rendering performance in TUI


author: openEuler <contact@openeuler.org> - 2.0.1-1
changelog:
  - feat: Set defautl chat model during installation
  - feat: Add shell completion installation command
  - fix: Markdown rendering issue in TUI
  - chore: Remove deprecated scripts in installer


author: openEuler <contact@openeuler.org> - 2.0.2-1
changelog:
  - feat: Add option to launch OpenCode through Witty Assistant
  - installer: Install OpenCode-AI during deployment


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-2
changelog:
  - reorder cmake clean step after configure
  - fix issues in path/input/encoding verification
  - preserve explicit zero port in run_online


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-4
changelog:
  - add --fast-fail/--no-fast-fail to control exit on invalid --pid
  - handle abnormal exits when target process dies or collection is interrupted
  - install witty-profiler in editable mode


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-5
changelog:
  - add infra runtime key threads and interrupts
  - defer logger initialization to prevent redundant output on -h/--help
  - remove slow keyword from bottleneck-identification skill


author: maqi <maqi@uniontech.com> - 1.37-1
changelog:
  - update to version 1.37
    No longer failing to load CHMs silently.
    Minor build system refresh.
    Updated Romanian and Swedish translations.


author: gcw_X8YNlwar <wangjintao1@xfusion.com> - 1.20.4-1
changelog:
  - Update to 1.20.4
  - Fix CVE-2026-40354: Prevent trashing of arbitrary host files via symlink attack


author: yaoxin <1024769339@qq.com> - 1.15.3-1
changelog:
  - Update to 1.15.3:
    * Fix build against newer xdg-desktop-portal
    * Fix return value for the access portal


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 1.2.15-7
changelog:
  - Reorganize patch numbers in spec file
  - Add "program" option to rotate lock file configuration for finer-grained rotation locks(b: 113752)


author: gaobo <gaobo@kylinsec.com.cn> - 1.2.15-8
changelog:
  - Modify the Patch1005, change lock file path and correct the error logic for creating the lock path. (b:113752)


