[Release] openEuler update_20231011版本发布公告

14 Oct 2023


      主题: openEuler update_20231011版本发布公告
 
Dear all，
      经社区Release SIG、QA SIG及 CICD SIG 评估，openEuler-20.03-LTS-SP1、openEuler-20.03-LTS-SP3、openEuler-22.03-LTS、openEuler-22.03-LTS-SP1及openEuler-22.03-LTS-SP2 update版本满足版本出口质量，现进行发布公示。
本公示分为七部分：
1、openEuler-20.03-LTS-SP1 Update 20231011发布情况及待修复缺陷
2、openEuler-20.03-LTS-SP3 Update 20231011发布情况及待修复缺陷     
3、openEuler-22.03-LTS Update 20231011发布情况及待修复缺陷
4、openEuler-22.03-LTS-SP1 Update 20231011发布情况及待修复缺陷
5、openEuler-22.03-LTS-SP2 Update 20231011发布情况及待修复缺陷
6、openEuler 关键组件待修复CVE 清单
7、openEuler 社区指导文档及开放平台链接
本次update版本发布后，下一个版本里程碑点（预计在2023/10/20）提供 update_20231018 版本。
 
openEuler-20.03-LTS-SP1 Update 20231011
经各SIG及社区开发者贡献，本周openEuler-20.03-LTS-SP1修复版本已知问题7个，已知漏洞43个。目前版本分支剩余待修复缺陷11个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-20.03-LTS-SP1 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I86CDI?from=project-issue
 
CVE修复：
CVE 仓库 score
CVE-2023-25775 kernel 9.8
CVE-2023-5217 libvpx 8.8
CVE-2023-40474 gstreamer1-plugins-bad-free 8.8
CVE-2023-40475 gstreamer1-plugins-bad-free 8.8
CVE-2023-5217 libvpx 8.8
CVE-2023-4863 firefox 8.8
CVE-2023-40476 gstreamer1-plugins-bad-free 8.3
CVE-2023-4692 grub2 7.8
CVE-2023-4785 grpc 7.5
CVE-2023-44488 libvpx 7.5
CVE-2022-40433 openjdk-11 7.5
CVE-2023-5344 vim 7.5
CVE-2023-21930 openjdk-11 7.4
CVE-2023-5366 openvswitch 7.1
CVE-2023-42753 kernel 7
CVE-2023-5341 ImageMagick 6.2
CVE-2023-43788 libXpm 6.1
CVE-2023-21954 openjdk-11 5.9
CVE-2023-21967 openjdk-11 5.9
CVE-2023-43804 python-urllib3 5.9
CVE-2023-43789 libXpm 5.5
CVE-2023-43786 libX11 5.5
CVE-2023-4693 grub2 5.5
CVE-2023-43665 python-django 5.3
CVE-2023-21835 openjdk-11 5.3
CVE-2023-21939 openjdk-11 5.3
CVE-2023-5371 wireshark 5.3
CVE-2023-43787 libX11 5.3
CVE-2023-22041 openjdk-11 5.1
CVE-2023-4039 gcc 4.8
CVE-2023-43785 libX11 4.4
CVE-2023-21843 openjdk-11 3.7
CVE-2023-21968 openjdk-11 3.7
CVE-2023-21938 openjdk-11 3.7
CVE-2023-21937 openjdk-11 3.7
CVE-2023-22036 openjdk-11 3.7
CVE-2023-22045 openjdk-11 3.7
CVE-2023-22049 openjdk-11 3.7
CVE-2020-15103 freerdp 3.5
CVE-2020-36766 kernel 3.3
CVE-2023-22006 openjdk-11 3.1
CVE-2023-42754 kernel 0
CVE-2023-42755 kernel 0

Bugfix：
issue 仓库
#I869PY:【OLK510 & openEuler-1.0-LTS】 修复__inet_del_ifa()中一处memleak的问题 kernel
#I85XNK:[openEuler-1.0-LTS] linux-4.19.y inclusion(4.19.292..4.19.294) kernel
#I7RPDX:Backport cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() kernel
#I85WL9:[openEuler-1.0-LTS] mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs() kernel
#I84HSL: fib6_info_destroy_rcu中出现UAF问题 kernel
#I84IKB:【openEuler-1.0-LTS】4.19 LTS补丁回合：cifs: Release folio lock on fscache read hit kernel
#I81G0T:cpuidle: Fix kobject memory leaks in error paths kernel

openEuler-20.03-LTS-SP1版本编译构建信息查询链接：
https://build.openeuler.org/project/show/openEuler:20.03:LTS:SP1
https://build.openeuler.org/project/show/openEuler:20.03:LTS:SP1:Epol
 
openEuler-20.03-LTS-SP1 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/
https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/
https://repo.openeuler.org/openEuler-20.03-LTS-SP1/docker_img/update/
 
openEuler CVE 及安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-20.03-LTS-SP1 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler 20.03LTS SP1 update2103 I3E5C1 【20.03-SP1】【arm/x86】服务启动失败 主要 regression-failed src-openEuler/hadoop https://gitee.com/open_euler/dashboard?issue_id=I3E5C1
openEuler 20.03LTS SP1 update210901 I48GIM 【20.03LTS SP1 update 210901】ovirt-cockpit-sso.service服务启动失败 主要 sig-oVirt src-openEuler/ovirt-cockpit-sso https://gitee.com/open_euler/dashboard?issue_id=I48GIM
openEuler 20.03-LTS-SP1 I4J0OY 【20.03 SP1】【arm/x86】安装好libdap后，getdap4命令的-i和-k参数使用异常 主要 sig/sig-recycle src-openEuler/libdap https://gitee.com/open_euler/dashboard?issue_id=I4J0OY
openEuler 20.03-LTS-SP1 I4JMG4 【20.03 SP1】【arm/x86】robotframework包的三个命令：libdoc、rebot、robot执行--help/-h/-?/--version，查看帮助信息和版本信息，返回值为251 主要 sig/sig-ROS src-openEuler/python-robotframework https://gitee.com/open_euler/dashboard?issue_id=I4JMG4
openEuler 20.03-LTS-SP1 I5DLX7 [20.03 22.03] 管理员指南操作文档mysql服务搭建指导文档有误 主要 sig/doc openEuler/docs https://gitee.com/open_euler/dashboard?issue_id=I5DLX7
openEuler 20.03-LTS-SP1 I6VFAE [20.03 SP1] [x86/arm] mariadb授权给远程用户，远程连接服务失败 次要 sig/DB src-openEuler/mariadb https://gitee.com/open_euler/dashboard?issue_id=I6VFAE
openEuler 20.03-LTS-SP1 I7ZOX9 【20.03 LTS SP1】【arm/x86】 qdbuscpp2xml-qt5的help信息名称不一致 次要 sig/Programming-lang src-openEuler/qt5-qtbase https://gitee.com/open_euler/dashboard?issue_id=I7ZOX9
openEuler-20.03-LTS-SP1 I3QGU7 系统不支持GB18030 无优先级 sig/TC openEuler/community https://gitee.com/open_euler/dashboard?issue_id=I3QGU7
openEuler 20.03LTS SP1 update210926 I4CMSV 【20.03-LTS-SP1】【arm/x86】搭建Kubernetes 集群缺少包etcd 无优先级 sig/TC openEuler/community https://gitee.com/open_euler/dashboard?issue_id=I4CMSV
openEuler 20.03LTS SP1 update220111 I4QV6N 【openEuler-20.03-LTS-SP1】flink命令执行失败  无优先级 sig/sig-ai-bigdata src-openEuler/flink https://gitee.com/open_euler/dashboard?issue_id=I4QV6N
openEuler-20.03-LTS-SP1-dailybuild I5Y99T mate-desktop install problem in openEuler:20:03:LTS:SP1 无优先级 sig/sig-mate-desktop src-openEuler/mate-desktop https://gitee.com/open_euler/dashboard?issue_id=I5Y99T

openEuler-20.03-LTS-SP3 Update 20231011
经各SIG及社区开发者贡献，本周openEuler-20.03-LTS-SP3修复版本已知问7个，已知漏洞42个。目前版本分支剩余待修复缺陷 7个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-20.03-LTS-SP3 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I86CDJ?from=project-issue
 
CVE修复：
CVE 仓库 score
CVE-2023-25775 kernel 9.8
CVE-2023-5217 libvpx 8.8
CVE-2023-4504 cups 8.8
CVE-2023-40475 gstreamer1-plugins-bad-free 8.8
CVE-2023-4863 firefox 8.8
CVE-2023-40474 gstreamer1-plugins-bad-free 8.8
CVE-2023-40476 gstreamer1-plugins-bad-free 8.3
CVE-2023-4692 grub2 7.8
CVE-2023-44488 libvpx 7.5
CVE-2022-40433 openjdk-11 7.5
CVE-2023-5344 vim 7.5
CVE-2023-21930 openjdk-11 7.4
CVE-2023-5366 openvswitch 7.1
CVE-2023-42753 kernel 7
CVE-2023-5341 ImageMagick 6.2
CVE-2023-43788 libXpm 6.1
CVE-2023-43804 python-urllib3 5.9
CVE-2023-21954 openjdk-11 5.9
CVE-2023-21967 openjdk-11 5.9
CVE-2023-43789 libXpm 5.5
CVE-2023-43786 libX11 5.5
CVE-2023-4693 grub2 5.5
CVE-2023-43665 python-django 5.3
CVE-2023-21835 openjdk-11 5.3
CVE-2023-21939 openjdk-11 5.3
CVE-2023-43787 libX11 5.3
CVE-2023-5371 wireshark 5.3
CVE-2018-2799 xerces-j2 5.3
CVE-2023-22041 openjdk-11 5.1
CVE-2023-4039 gcc 4.8
CVE-2023-43785 libX11 4.4
CVE-2023-21843 openjdk-11 3.7
CVE-2023-21968 openjdk-11 3.7
CVE-2023-21938 openjdk-11 3.7
CVE-2023-21937 openjdk-11 3.7
CVE-2023-22036 openjdk-11 3.7
CVE-2023-22045 openjdk-11 3.7
CVE-2023-22049 openjdk-11 3.7
CVE-2020-36766 kernel 3.3
CVE-2023-22006 openjdk-11 3.1
CVE-2023-42754 kernel 0
CVE-2023-42755 kernel 0

Bugfix：
issue 仓库
#I7RPDX:Backport cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() kernel
#I81G0T:cpuidle: Fix kobject memory leaks in error paths kernel
#I84HSL: fib6_info_destroy_rcu中出现UAF问题 kernel
#I84IKB:【openEuler-1.0-LTS】4.19 LTS补丁回合：cifs: Release folio lock on fscache read hit kernel
#I85WL9:[openEuler-1.0-LTS] mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs() kernel
#I85XNK:[openEuler-1.0-LTS] linux-4.19.y inclusion(4.19.292..4.19.294) kernel
#I869PY:【OLK510 & openEuler-1.0-LTS】 修复__inet_del_ifa()中一处memleak的问题 kernel

openEuler-20.03-LTS-SP3版本编译构建信息查询链接：
https://build.openeuler.org/project/show/openEuler:20.03:LTS:SP3
https://build.openeuler.org/project/show/openEuler:20.03:LTS:SP3:Epol
 
openEuler-20.03-LTS-SP3 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-20.03-LTS-SP3/update/
https://repo.openeuler.org/openEuler-20.03-LTS-SP3/EPOL/update/main/
https://repo.openeuler.org/openEuler-20.03-LTS-SP3/docker_img/update/
 
openEuler CVE及安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-20.03-LTS-SP3 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler 20.03-LTS-SP3 I5KXUY 【20.03 LTS SP3 update 20220803】【arm/x86】ovirt-cockpit-sso.service服务启动失败 主要 sig/oVirt src-openEuler/ovirt-cockpit-sso https://gitee.com/open_euler/dashboard?issue_id=I5KXUY
openEuler-20.03-LTS-SP3 I5KY4S 【20.03 LTS SP3 update 20220803】【arm/x86】vdsmd.service服务启动失败，导致mom-vdsm.service服务无法启动成功 主要 sig/oVirt src-openEuler/vdsm https://gitee.com/open_euler/dashboard?issue_id=I5KY4S
openEuler-20.03-LTS-SP3 I6VFMI [20.03 SP3] [x86/arm] mariadb授权给远程用户，远程连接服务失败 次要 sig/DB src-openEuler/mariadb https://gitee.com/open_euler/dashboard?issue_id=I6VFMI
openEuler-20.03-LTS-SP3 I72HWV 【20.03-lts-sp3】x86环境上同时安装php-fpm软件包和php-opcache软件包后会导致php-fpm.service服务启动失败 次要 sig/Base-service src-openEuler/php https://gitee.com/open_euler/dashboard?issue_id=I72HWV
openEuler-20.03-LTS-SP3 I7QP67 [20.03-LTS-SP3]openssh自编译失败，提示缺少bc命令 次要 sig/Base-service src-openEuler/openEuler-release https://gitee.com/open_euler/dashboard?issue_id=I7QP67
openEuler-20.03-LTS-SP3 I7ZOZZ 【20.03 LTS SP3】【arm/x86】 qdbuscpp2xml-qt5的help信息名称不一致 次要 sig/Programming-lang src-openEuler/qt5-qtbase https://gitee.com/open_euler/dashboard?issue_id=I7ZOZZ
openEuler 20.03LTS SP3 update220111 I4QV7S 【openEuler-20.03-LTS-SP3】flink run 命令执行失败 无优先级 sig/sig-ai-bigdata src-openEuler/flink https://gitee.com/open_euler/dashboard?issue_id=I4QV7S

openEuler-22.03-LTS Update 20231011
经各SIG及社区开发者贡献，本周openEuler-22.03-LTS修复版本已知问题9个，已知漏洞46个。目前版本分支剩余待修复缺陷5个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-22.03-LTS Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I86CDK?from=project-issue
 
CVE修复：
CVE 仓库 score
CVE-2023-5217 libvpx 8.8
CVE-2023-40474 gstreamer1-plugins-bad-free 8.8
CVE-2023-40475 gstreamer1-plugins-bad-free 8.8
CVE-2023-4584 firefox 8.8
CVE-2023-4863 firefox 8.8
CVE-2023-40476 gstreamer1-plugins-bad-free 8.3
CVE-2023-4911 glibc 7.8
CVE-2023-4692 grub2 7.8
CVE-2023-5197 kernel 7.8
CVE-2022-40433 openjdk-11 7.5
CVE-2023-44488 libvpx 7.5
CVE-2023-3354 qemu 7.5
CVE-2023-5344 vim 7.5
CVE-2023-21930 openjdk-11 7.4
CVE-2023-5366 openvswitch 7.1
CVE-2023-42753 kernel 7.0
CVE-2023-4575 firefox 6.5
CVE-2023-4573 firefox 6.5
CVE-2023-4574 firefox 6.5
CVE-2023-5341 ImageMagick 6.2
CVE-2023-43788 libXpm 6.1
CVE-2023-21954 openjdk-11 5.9
CVE-2023-21967 openjdk-11 5.9
CVE-2023-43804 python-urllib3 5.9
CVE-2023-43789 libXpm 5.5
CVE-2023-43786 libX11 5.5
CVE-2023-4693 grub2 5.5
CVE-2023-21835 openjdk-11 5.3
CVE-2023-21939 openjdk-11 5.3
CVE-2023-43665 python-django 5.3
CVE-2023-0809 mosquitto 5.3
CVE-2023-5371 wireshark 5.3
CVE-2023-43787 libX11 5.3
CVE-2018-2799 xerces-j2 5.3
CVE-2023-22041 openjdk-11 5.1
CVE-2023-4039 gcc 4.8
CVE-2023-43785 libX11 4.4
CVE-2023-4581 firefox 4.3
CVE-2023-21843 openjdk-11 3.7
CVE-2023-21968 openjdk-11 3.7
CVE-2023-21938 openjdk-11 3.7
CVE-2023-21937 openjdk-11 3.7
CVE-2023-22036 openjdk-11 3.7
CVE-2023-22045 openjdk-11 3.7
CVE-2023-22049 openjdk-11 3.7
CVE-2023-22006 openjdk-11 3.1

Bugfix：
issue 仓库
#I7SUDV:libbpf社区补丁分析回合 libbpf
#I7OXK8: 【openEuler-1.0-LTS】TS200-2280K ,系统侧有inode的报错 kernel
#I7PZZC:[OLK-5.10] NVMe bugfix补丁回合 kernel
#I7R4BC:[OLK-5.10] NVMe bugfix backport kernel
#I7ZCDZ:[OLK-5.10] lpfc bugfix补丁回合 kernel
#I80YEI:LoongArch: binutils 2.41编译问题  kernel
#I80YFC:【OLK-5.10】添加浪潮BMC DRM驱动支持 kernel
#I839LV:【OLK-5.10】etmem修正打开idle_page、swap_page时模块引用计数正确问题 kernel
#I86JB6:nf_table LTS补丁整理回合 kernel

openEuler-22.03-LTS版本编译构建信息查询链接：
https://build.openeuler.org/project/show/openEuler:22.03:LTS
https://build.openeuler.org/project/show/openEuler:22.03:LTS:Epol
 
openEuler-22.03-LTS Update版本 发布源链接：
https://repo.openeuler.org/openEuler-22.03-LTS/update/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/main/
https://repo.openeuler.org/openEuler-22.03-LTS/docker_img/update/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/multi_version/OpenStack/Train/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/multi_version/OpenStack/Wallaby/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/multi_version/obs-server/2.10.11/
 
openEuler CVE 及 安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-22.03-LTS Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler-22.03-LTS update20230726 I7ORCE 【22.03 LTS update20230726】【arm\x86】selinux-policy-base的版本不符合ceph子包的安装条件，ceph子包安装失败; cephadm卸载有异常打印 主要 sig/sig-SDS src-openEuler/ceph https://gitee.com/open_euler/dashboard?issue_id=I7ORCE
openEuler-22.03-LTS I596H5 openEuler官网中安全加固指南模块—>加固指导—>系统服务—>ssh加固项说明：加固建议中多添加了@符号 次要 sig/doc openEuler/docs https://gitee.com/open_euler/dashboard?issue_id=I596H5
openEuler-22.03-LTS I6VFRX [22.03-LTS][x86/arm]mariadb授权给远程用户，远程连接服务失败 次要 sig/DB src-openEuler/mariadb https://gitee.com/open_euler/dashboard?issue_id=I6VFRX
openEuler-22.03-LTS I72N5G 【22.03-lts】x86环境上同时安装php-fpm软件包和php-opcache软件包后会导致php-fpm.service服务启动失败 次要 sig/Base-service src-openEuler/php https://gitee.com/open_euler/dashboard?issue_id=I72N5G
openEuler-22.03-LTS I7ZP1J 【22.03 LTS】【arm/x86】 qdbuscpp2xml-qt5的help信息名称不一致 次要 sig/Programming-lang src-openEuler/qt5-qtbase https://gitee.com/open_euler/dashboard?issue_id=I7ZP1J

openEuler-22.03-LTS-SP1 Update 20231011
经各SIG及社区开发者贡献，本周openEuler-22.03-LTS-SP1修复版本已知问题6个，已知漏洞29个。目前版本分支剩余待修复缺陷11个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-22.03-LTS SP1 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I86CDH?from=project-issue
 
CVE修复：
CVE 仓库 score
CVE-2023-5217 libvpx 8.8
CVE-2023-40475 gstreamer1-plugins-bad-free 8.8
CVE-2023-4584 firefox 8.8
CVE-2023-4863 firefox 8.8
CVE-2023-40474 gstreamer1-plugins-bad-free 8.8
CVE-2023-40476 gstreamer1-plugins-bad-free 8.3
CVE-2023-4911 glibc 7.8
CVE-2023-4692 grub2 7.8
CVE-2023-5197 kernel 7.8
CVE-2023-44488 libvpx 7.5
CVE-2023-5344 vim 7.5
CVE-2023-5366 openvswitch 7.1
CVE-2023-42753 kernel 7.0
CVE-2023-4575 firefox 6.5
CVE-2023-4573 firefox 6.5
CVE-2023-4574 firefox 6.5
CVE-2023-5341 ImageMagick 6.2
CVE-2023-43788 libXpm 6.1
CVE-2023-43804 python-urllib3 5.9
CVE-2023-4693 grub2 5.5
CVE-2023-43786 libX11 5.5
CVE-2023-43789 libXpm 5.5
CVE-2023-0809 mosquitto 5.3
CVE-2023-5371 wireshark 5.3
CVE-2023-43665 python-django 5.3
CVE-2023-43787 libX11 5.3
CVE-2023-4039 gcc 4.8
CVE-2023-43785 libX11 4.4
CVE-2023-4581 firefox 4.3

Bugfix：
issue 仓库
#I7SUDV:libbpf社区补丁分析回合 libbpf
#I82DMH:Add tinytoml rpm tinytoml
#I7WSCH:format_ucs2()中有潜在的越界访问内存问题 efivar
#I7OXK8: 【openEuler-1.0-LTS】TS200-2280K ,系统侧有inode的报错 kernel
#I839LV:【OLK-5.10】etmem修正打开idle_page、swap_page时模块引用计数正确问题 kernel
#I86JB6:nf_table LTS补丁整理回合 kernel

openEuler-22.03-LTS SP1版本编译构建信息查询链接：
https://build.openeuler.openatom.cn/project/show/openEuler:22.03:LTS:SP1
https://build.openeuler.openatom.cn/project/show/openEuler:22.03:LTS:SP1:Epol
 
openEuler-22.03-LTS SP1 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/main/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/docker_img/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/multi_version/OpenStack/Train/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/multi_version/OpenStack/Wallaby/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/multi_version/obs-server/2.10.11/
 
openEuler CVE 及 安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-22.03-LTS-SP1 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler 22.03-SP1 I6B4V1 【22.03 SP1 update 20230118】【arm】libhdfs在arm架构降级失败，x86正常 主要 sig/bigdata src-openEuler/hadoop https://gitee.com/open_euler/dashboard?issue_id=I6B4V1
openEuler-22.03-LTS-SP1 I7LW30 【arm】-O3 -flto-partition=one -fipa-struct-reorg -fwhole-program编译ICE:during IPA pass: struct_reorg(in wide_int_to_tree_1, at tree.c:1575) 主要 sig/Compiler openEuler/gcc https://gitee.com/open_euler/dashboard?issue_id=I7LW30
openEuler-22.03-LTS-SP1 I7LWCW 【arm】-O3 -flto-partition=one -fipa-struct-reorg -fwhole-program编译ICE:internal compiler error: Segmentation fault 主要 sig/Compiler openEuler/gcc https://gitee.com/open_euler/dashboard?issue_id=I7LWCW
openEuler-22.03-LTS-SP1 I7LWK7 【arm】-O3 -flto-partition=one -fipa-struct-reorg -fwhole-program编译ICE:during IPA pass: struct_reorg(in get_type_field, at ipa-struct-reorg/ipa-struct-reorg.c:4394) 主要 sig/Compiler openEuler/gcc https://gitee.com/open_euler/dashboard?issue_id=I7LWK7
openEuler-22.03-LTS-SP1 I7LWO1 【arm】-O3 -flto-partition=one -fipa-struct-reorg -fwhole-program编译ICE:during RTL pass: expand(in convert_move, at expr.c:219) 主要 sig/Compiler openEuler/gcc https://gitee.com/open_euler/dashboard?issue_id=I7LWO1
openEuler-22.03-LTS-SP1 I7LX07 【arm】-O3 -flto-partition=one -fipa-struct-reorg -fwhole-program编译ICE:during IPA pass: struct_reorg(in get_type_field, at ipa-struct-reorg/ipa-struct-reorg.c:4379) 主要 sig/Compiler openEuler/gcc https://gitee.com/open_euler/dashboard?issue_id=I7LX07
openEuler-22.03-LTS-SP1 update20230726 I7OR2I 【22.03 LTS SP1 update20230726】【arm\x86】selinux-policy-base的版本不符合ceph子包的安装条件，ceph子包安装失败 主要 sig/sig-SDS src-openEuler/ceph https://gitee.com/open_euler/dashboard?issue_id=I7OR2I
openEuler-22.03-LTS-SP1 I6VFV6 [22.03 SP1] [x86/arm] mariadb授权给远程用户，远程连接服务失败 次要 sig/DB src-openEuler/mariadb https://gitee.com/open_euler/dashboard?issue_id=I6VFV6
openEuler-22.03-LTS-SP1 I73CKF 【22.03-lts-sp1】x86环境上同时安装php-fpm软件包和php-opcache软件包后会导致php-fpm.service服务启动失败 次要 sig/Base-service src-openEuler/php https://gitee.com/open_euler/dashboard?issue_id=I73CKF
openEuler-22.03-LTS-SP1 I7ZP3M 【22.03 LTS SP1】【arm/x86】 qdbuscpp2xml-qt5的help信息名称不一致 次要 sig/Programming-lang src-openEuler/qt5-qtbase https://gitee.com/open_euler/dashboard?issue_id=I7ZP3M
openEuler-20.03-LTS-SP1-dailybuild I5Y99T mate-desktop install problem in openEuler:20:03:LTS:SP1 无优先级 sig/sig-mate-desktop src-openEuler/mate-desktop https://gitee.com/open_euler/dashboard?issue_id=I5Y99T

openEuler-22.03-LTS-SP2 Update 20231011
经各SIG及社区开发者贡献，本周openEuler-22.03-LTS-SP2修复版本已知问题9个，已知漏洞29个。目前版本分支剩余待修复缺陷3个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-22.03-LTS-SP2 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I86CDG?from=project-issue

CVE修复：
CVE 仓库 score
CVE-2023-5217 libvpx 8.8
CVE-2023-40474 gstreamer1-plugins-bad-free 8.8
CVE-2023-40475 gstreamer1-plugins-bad-free 8.8
CVE-2023-4584 firefox 8.8
CVE-2023-4863 firefox 8.8
CVE-2023-40476 gstreamer1-plugins-bad-free 8.3
CVE-2023-4911 glibc 7.8
CVE-2023-4692 grub2 7.8
CVE-2023-5197 kernel 7.8
CVE-2023-5344 vim 7.5
CVE-2023-44488 libvpx 7.5
CVE-2023-5366 openvswitch 7.1
CVE-2023-42753 kernel 7.0
CVE-2023-4575 firefox 6.5
CVE-2023-4573 firefox 6.5
CVE-2023-4574 firefox 6.5
CVE-2023-5341 ImageMagick 6.2
CVE-2023-43788 libXpm 6.1
CVE-2023-43804 python-urllib3 5.9
CVE-2023-43786 libX11 5.5
CVE-2023-4693 grub2 5.5
CVE-2023-43789 libXpm 5.5
CVE-2023-43787 libX11 5.3
CVE-2023-0809 mosquitto 5.3
CVE-2023-43665 python-django 5.3
CVE-2023-5371 wireshark 5.3
CVE-2023-4039 gcc 4.8
CVE-2023-43785 libX11 4.4
CVE-2023-4581 firefox 4.3

Bugfix：
issue 仓库
#I7SUDV:libbpf社区补丁分析回合 libbpf
#I7WSCH:format_ucs2()中有潜在的越界访问内存问题 efivar
#I7OXK8: 【openEuler-1.0-LTS】TS200-2280K ,系统侧有inode的报错 kernel
#I7PZZC:[OLK-5.10] NVMe bugfix补丁回合 kernel
#I7R4BC:[OLK-5.10] NVMe bugfix backport kernel
#I7T7G4:[OLK-5.10] 5.10.164 - 5.10.165 LTS补丁回合 kernel
#I7ZCDZ:[OLK-5.10] lpfc bugfix补丁回合 kernel
#I839LV:【OLK-5.10】etmem修正打开idle_page、swap_page时模块引用计数正确问题 kernel
#I86JB6:nf_table LTS补丁整理回合 kernel

openEuler-22.03-LTS SP2版本编译构建信息查询链接：
https://build.openeuler.openatom.cn/project/show/openEuler:22.03:LTS:SP2
https://build.openeuler.openatom.cn/project/show/openEuler:22.03:LTS:SP2:Epol
 
openEuler-22.03-LTS SP2 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/EPOL/update/main/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/hotpatch_update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/docker_img/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/EPOL/update/multi_version/OpenStack/Train/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/EPOL/update/multi_version/OpenStack/Wallaby/
 
openEuler CVE 及 安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
https://repo.openeuler.org/security/data/hotpatch_cvrf/
 
openEuler-22.03-LTS-SP2 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler-22.03-LTS-SP2-round-2 I795G3 【22.03-LTS-SP2 round2】本次转测源中出现多个版本的containers-common 主要 sig/sig-CloudNative src-openEuler/skopeo https://gitee.com/open_euler/dashboard?issue_id=I795G3
openEuler-22.03-LTS-SP2-SEC I7AFIR 【22.03-LTS-SP2 round2】【x86/arm】libkae-1.2.10-6.oe2203sp2安全编译选项Rpath/Runpath不满足 主要 sig-AccLib src-openEuler/libkae https://gitee.com/open_euler/dashboard?issue_id=I7AFIR
openEuler-22.03-LTS-SP2 I7ZP4V 【22.03 LTS SP2】【arm/x86】 qdbuscpp2xml-qt5的help信息名称不一致 次要 sig/Programming-lang src-openEuler/qt5-qtbase https://gitee.com/open_euler/dashboard?issue_id=I7ZP4V

社区待修复漏洞：
openEuler社区根据漏洞严重等级采取差异化的修复策略，请各个SIG 关注涉及CVE组件的修复情况。
严重等级（Severity Rating） 漏洞修复时长
致命（Critical） 7天
高（High） 14天
中（Medium） 30天
低（Low） 30天

可参考社区安全委员会漏洞：https://gitee.com/openeuler/security-committee/wikis/%E7%A4%BE%E5%8C%BA%E6%BC%8F%E6%B4%9E%E7%AE%A1%E7%90%86
 
近14天将超期CVE（10.14日数据）:
漏洞编号 Issue ID 剩余天数 CVSS评分 软件包 责任SIG
CVE-2019-3885 I8575Q 0.2 7.5 pacemaker sig-Ha
CVE-2023-4584 I7WZ0C 0.2 8.8 firefox Application
CVE-2023-4575 I7WYY3 0.2 6.5 firefox Application
CVE-2023-34414 I7BFX6 0.7 3.1 firefox Application
CVE-2023-32212 I71RAD 0.7 4.3 firefox Application
CVE-2023-32206 I71R4I 0.7 6.5 firefox Application
CVE-2023-32205 I71R4D 0.7 4.3 firefox Application
CVE-2023-32211 I71R41 0.7 6.5 firefox Application
CVE-2023-29533 I6UVER 0.7 4.3 firefox Application
CVE-2023-29545 I6UVEO 0.7 6.5 firefox Application
CVE-2023-29535 I6UVDZ 0.7 6.5 firefox Application
CVE-2023-29548 I6UVDO 0.7 6.5 firefox Application
CVE-2023-32007 I6ZW0C 1.2 8.8 spark sig-bigdata
CVE-2023-43091 I81S93 1.84 0.0 gnome-maps GNOME
CVE-2023-4154 I87063 11.2 7.5 samba Networking
CVE-2023-4586 I8701L 11.2 7.4 netty sig-Java
CVE-2023-36478 I870FQ 12.2 7.5 jetty sig-Java
CVE-2023-1625 I6Q3J1 13.2 5.0 openstack-heat sig-openstack
CVE-2023-43040 I84TVR 13.73 0.0 ceph sig-ceph
CVE-2023-39323 I85M9R 13.79 7.4 golang sig-golang
CVE-2023-40660 I84XBX 13.96 0.0 opensc Base-service

openEuler 社区指导文档及开放平台链接：
 
openEuler 版本分支维护规范：
https://gitee.com/openeuler/release-management/blob/master/openEuler%E7%89%88%E6%9C%AC%E5%88%86%E6%94%AF%E7%BB%B4%E6%8A%A4%E8%A7%84%E8%8C%83.md
openEuler release-management 版本分支PR指导：
https://gitee.com/openeuler/release-management/blob/master/openEuler%E5%BC%80%E5%8F%91%E8%80%85%E6%8F%90%E4%BA%A4PR%E6%8C%87%E5%AF%BC%E6%96%87%E6%A1%A3.md
社区QA 版本测试提单规范
https://gitee.com/openeuler/QA/blob/master/%E7%A4%BE%E5%8C%BA%E7%89%88%E6%9C%ACissue%E5%88%9B%E5%BB%BA%E5%A4%84%E7%90%86%E6%B5%81%E7%A8%8B%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%A4%BE%E5%8C%BA%E7%89%88%E6%9C%ACissue%E5%88%9B%E5%BB%BA%E5%A4%84%E7%90%86%E6%B5%81%E7%A8%8B%E4%B8%8E%E8%A7%84%E8%8C%83.md
社区QA 测试平台 radiates
https://radiatest.openeuler.org

update版本发布邮箱

tags

CVE	仓库	score
CVE-2023-25775	kernel	9.8
CVE-2023-5217	libvpx	8.8
CVE-2023-40474	gstreamer1-plugins-bad-free	8.8
CVE-2023-40475	gstreamer1-plugins-bad-free	8.8
CVE-2023-5217	libvpx	8.8
CVE-2023-4863	firefox	8.8
CVE-2023-40476	gstreamer1-plugins-bad-free	8.3
CVE-2023-4692	grub2	7.8
CVE-2023-4785	grpc	7.5
CVE-2023-44488	libvpx	7.5
CVE-2022-40433	openjdk-11	7.5
CVE-2023-5344	vim	7.5
CVE-2023-21930	openjdk-11	7.4
CVE-2023-5366	openvswitch	7.1
CVE-2023-42753	kernel	7
CVE-2023-5341	ImageMagick	6.2
CVE-2023-43788	libXpm	6.1
CVE-2023-21954	openjdk-11	5.9
CVE-2023-21967	openjdk-11	5.9
CVE-2023-43804	python-urllib3	5.9
CVE-2023-43789	libXpm	5.5
CVE-2023-43786	libX11	5.5
CVE-2023-4693	grub2	5.5
CVE-2023-43665	python-django	5.3
CVE-2023-21835	openjdk-11	5.3
CVE-2023-21939	openjdk-11	5.3
CVE-2023-5371	wireshark	5.3
CVE-2023-43787	libX11	5.3
CVE-2023-22041	openjdk-11	5.1
CVE-2023-4039	gcc	4.8
CVE-2023-43785	libX11	4.4
CVE-2023-21843	openjdk-11	3.7
CVE-2023-21968	openjdk-11	3.7
CVE-2023-21938	openjdk-11	3.7
CVE-2023-21937	openjdk-11	3.7
CVE-2023-22036	openjdk-11	3.7
CVE-2023-22045	openjdk-11	3.7
CVE-2023-22049	openjdk-11	3.7
CVE-2020-15103	freerdp	3.5
CVE-2020-36766	kernel	3.3
CVE-2023-22006	openjdk-11	3.1
CVE-2023-42754	kernel	0
CVE-2023-42755	kernel	0

issue	仓库
#I869PY:【OLK510 & openEuler-1.0-LTS】修复__inet_del_ifa()中一处memleak的问题	kernel
#I85XNK:[openEuler-1.0-LTS] linux-4.19.y inclusion(4.19.292..4.19.294)	kernel
#I7RPDX:Backport cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()	kernel
#I85WL9:[openEuler-1.0-LTS] mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs()	kernel
#I84HSL: fib6_info_destroy_rcu中出现UAF问题	kernel
#I84IKB:【openEuler-1.0-LTS】4.19 LTS补丁回合：cifs: Release folio lock on fscache read hit	kernel
#I81G0T:cpuidle: Fix kobject memory leaks in error paths	kernel

里程碑	任务ID	任务标题	优先级	sig组	关联仓库	任务路径
openEuler 20.03LTS SP1 update2103	I3E5C1	【20.03-SP1】【arm/x86】服务启动失败	主要	regression-failed	src-openEuler/hadoop	https://gitee.com/open_euler/dashboard?issue_id=I3E5C1
openEuler 20.03LTS SP1 update210901	I48GIM	【20.03LTS SP1 update 210901】ovirt-cockpit-sso.service服务启动失败	主要	sig-oVirt	src-openEuler/ovirt-cockpit-sso	https://gitee.com/open_euler/dashboard?issue_id=I48GIM
openEuler 20.03-LTS-SP1	I4J0OY	【20.03 SP1】【arm/x86】安装好libdap后，getdap4命令的-i和-k参数使用异常	主要	sig/sig-recycle	src-openEuler/libdap	https://gitee.com/open_euler/dashboard?issue_id=I4J0OY
openEuler 20.03-LTS-SP1	I4JMG4	【20.03 SP1】【arm/x86】robotframework包的三个命令：libdoc、rebot、robot执行--help/-h/-?/--version，查看帮助信息和版本信息，返回值为251	主要	sig/sig-ROS	src-openEuler/python-robotframework	https://gitee.com/open_euler/dashboard?issue_id=I4JMG4
openEuler 20.03-LTS-SP1	I5DLX7	[20.03 22.03] 管理员指南操作文档mysql服务搭建指导文档有误	主要	sig/doc	openEuler/docs	https://gitee.com/open_euler/dashboard?issue_id=I5DLX7
openEuler 20.03-LTS-SP1	I6VFAE	[20.03 SP1] [x86/arm] mariadb授权给远程用户，远程连接服务失败	次要	sig/DB	src-openEuler/mariadb	https://gitee.com/open_euler/dashboard?issue_id=I6VFAE
openEuler 20.03-LTS-SP1	I7ZOX9	【20.03 LTS SP1】【arm/x86】 qdbuscpp2xml-qt5的help信息名称不一致	次要	sig/Programming-lang	src-openEuler/qt5-qtbase	https://gitee.com/open_euler/dashboard?issue_id=I7ZOX9
openEuler-20.03-LTS-SP1	I3QGU7	系统不支持GB18030	无优先级	sig/TC	openEuler/community	https://gitee.com/open_euler/dashboard?issue_id=I3QGU7
openEuler 20.03LTS SP1 update210926	I4CMSV	【20.03-LTS-SP1】【arm/x86】搭建Kubernetes 集群缺少包etcd	无优先级	sig/TC	openEuler/community	https://gitee.com/open_euler/dashboard?issue_id=I4CMSV
openEuler 20.03LTS SP1 update220111	I4QV6N	【openEuler-20.03-LTS-SP1】flink命令执行失败	无优先级	sig/sig-ai-bigdata	src-openEuler/flink	https://gitee.com/open_euler/dashboard?issue_id=I4QV6N
openEuler-20.03-LTS-SP1-dailybuild	I5Y99T	mate-desktop install problem in openEuler:20:03:LTS:SP1	无优先级	sig/sig-mate-desktop	src-openEuler/mate-desktop	https://gitee.com/open_euler/dashboard?issue_id=I5Y99T

issue	仓库
#I7SUDV:libbpf社区补丁分析回合	libbpf
#I7OXK8: 【openEuler-1.0-LTS】TS200-2280K ,系统侧有inode的报错	kernel
#I7PZZC:[OLK-5.10] NVMe bugfix补丁回合	kernel
#I7R4BC:[OLK-5.10] NVMe bugfix backport	kernel
#I7ZCDZ:[OLK-5.10] lpfc bugfix补丁回合	kernel
#I80YEI:LoongArch: binutils 2.41编译问题	kernel
#I80YFC:【OLK-5.10】添加浪潮BMC DRM驱动支持	kernel
#I839LV:【OLK-5.10】etmem修正打开idle_page、swap_page时模块引用计数正确问题	kernel
#I86JB6:nf_table LTS补丁整理回合	kernel

严重等级（Severity Rating）	漏洞修复时长
致命（Critical）	7天
高（High）	14天
中（Medium）	30天
低（Low）	30天

漏洞编号	Issue ID	剩余天数	CVSS评分	软件包	责任SIG
CVE-2019-3885	I8575Q	0.2	7.5	pacemaker	sig-Ha
CVE-2023-4584	I7WZ0C	0.2	8.8	firefox	Application
CVE-2023-4575	I7WYY3	0.2	6.5	firefox	Application
CVE-2023-34414	I7BFX6	0.7	3.1	firefox	Application
CVE-2023-32212	I71RAD	0.7	4.3	firefox	Application
CVE-2023-32206	I71R4I	0.7	6.5	firefox	Application
CVE-2023-32205	I71R4D	0.7	4.3	firefox	Application
CVE-2023-32211	I71R41	0.7	6.5	firefox	Application
CVE-2023-29533	I6UVER	0.7	4.3	firefox	Application
CVE-2023-29545	I6UVEO	0.7	6.5	firefox	Application
CVE-2023-29535	I6UVDZ	0.7	6.5	firefox	Application
CVE-2023-29548	I6UVDO	0.7	6.5	firefox	Application
CVE-2023-32007	I6ZW0C	1.2	8.8	spark	sig-bigdata
CVE-2023-43091	I81S93	1.84	0.0	gnome-maps	GNOME
CVE-2023-4154	I87063	11.2	7.5	samba	Networking
CVE-2023-4586	I8701L	11.2	7.4	netty	sig-Java
CVE-2023-36478	I870FQ	12.2	7.5	jetty	sig-Java
CVE-2023-1625	I6Q3J1	13.2	5.0	openstack-heat	sig-openstack
CVE-2023-43040	I84TVR	13.73	0.0	ceph	sig-ceph
CVE-2023-39323	I85M9R	13.79	7.4	golang	sig-golang
CVE-2023-40660	I84XBX	13.96	0.0	opensc	Base-service