[Release] openEuler update_20240117版本发布公告

19 Jan 2024


      
主题: openEuler update_20240117版本发布公告
 
Dear all，
      经社区Release SIG、QA SIG及 CICD SIG 评估，openEuler-20.03-LTS-SP1、openEuler-22.03-LTS、openEuler-22.03-LTS-SP1、openEuler-22.03-LTS-SP2、openEuler-20.03-LTS-SP4及openEuler-22.03-LTS-SP3 update版本满足版本出口质量，现进行发布公示。
本公示分为九部分：
1、openEuler-20.03-LTS-SP1 Update 20240117发布情况及待修复缺陷
2、openEuler-22.03-LTS Update 20240117发布情况及待修复缺陷     
3、openEuler-22.03-LTS-SP1 Update 20240117发布情况及待修复缺陷
4、openEuler-22.03-LTS-SP2 Update 20240117发布情况及待修复缺陷
5、openEuler-20.03-LTS-SP4 Update 20240117发布情况及待修复缺陷
6、openEuler-22.03-LTS-SP3 Update 20240117发布情况及待修复缺陷
7、openEuler 关键组件待修复CVE 清单
8、openEuler 关键组件待修复缺陷清单
9、openEuler 社区指导文档及开放平台链接
本次update版本发布后，下一个版本里程碑点（预计在2024/01/26）提供 update_20240124 版本。
 
openEuler-20.03-LTS-SP1 Update 20240117
经各SIG及社区开发者贡献，本周openEuler-20.03-LTS-SP1修复版本已知问题5个，已知漏洞9个。目前版本分支剩余待修复缺陷4个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-20.03-LTS-SP1 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I8W2BL?from=project-issue
 
CVE修复：
CVE 仓库 score
#I8VOWH:CVE-2020-0452 libexif 9.8
#I8VXF6:CVE-2024-23301 rear 7.8
#I8RXOY:CVE-2023-51781 kernel 7.8
#I8RXNR:CVE-2023-51780 kernel 7.8
#I8QJJK:CVE-2023-51713 proftpd 7.5
#I8RXOD:CVE-2023-51779 kernel 7
#I8UHLA:CVE-2023-48795 python-paramiko 5.9
#I8WDRH:CVE-2023-0437 mongo-c-driver 5.3
#I8VDQE:CVE-2023-35887 apache-sshd 4.3

Bugfix：
issue 仓库
#I8UY7N:ironjacamar 该包的二进制包未发布在sp1的源中，导致narayana自编译的时候缺少编译依赖 ironjacamar
#I5M61D:22.03 LTS版本检测到 可疑TrojanSource代码：存在BiDi控制字符 ibus-typing-booster
#I8WHDS:remove sensitive info samba
#I8UZTK:【OLK-5.10】KASAN: use-after-free Write in expire_timers kernel
#I8WCJM:【openEuler-1.0-LTS】sec磁盘加解密场景，多线程压力出现calltrace kernel

openEuler-20.03-LTS-SP1版本编译构建信息查询链接：
https://build.openeuler.org/project/show/openEuler:20.03:LTS:SP1
https://build.openeuler.org/project/show/openEuler:20.03:LTS:SP1:Epol
 
openEuler-20.03-LTS-SP1 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/
https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/
https://repo.openeuler.org/openEuler-20.03-LTS-SP1/docker_img/update/
 
openEuler CVE 及安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-20.03-LTS-SP1 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler 20.03LTS SP1 update2103 I3E5C1 【20.03-SP1】【arm/x86】服务启动失败 主要 sig/bigdata src-openEuler/hadoop https://gitee.com/open_euler/dashboard?issue_id=I3E5C1
openEuler-20.03-LTS-SP1 I3QGU7 系统不支持GB18030 无优先级 sig/TC openEuler/community https://gitee.com/open_euler/dashboard?issue_id=I3QGU7
openEuler 20.03LTS SP1 update210926 I4CMSV 【20.03-LTS-SP1】【arm/x86】搭建Kubernetes 集群缺少包etcd 无优先级 sig/TC openEuler/community https://gitee.com/open_euler/dashboard?issue_id=I4CMSV
openEuler-20.03-LTS-SP1-dailybuild I5Y99T mate-desktop install problem in openEuler:20:03:LTS:SP1 无优先级 sig/sig-mate-desktop src-openEuler/mate-desktop https://gitee.com/open_euler/dashboard?issue_id=I5Y99T

openEuler-22.03-LTS Update 20240117
经各SIG及社区开发者贡献，本周openEuler-22.03-LTS修复版本已知问题7个，已知漏洞12个。目前版本分支剩余待修复缺陷3个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-22.03-LTS Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I8W2BQ?from=project-issue

CVE修复：
CVE 仓库 score
#I8VOWH:CVE-2020-0452 libexif 9.8
#I8VXF6:CVE-2024-23301 rear 7.8
#I8RXOY:CVE-2023-51781 kernel 7.8
#I8RXNR:CVE-2023-51780 kernel 7.8
#I8QJJK:CVE-2023-51713 proftpd 7.5
#I8MXXY:CVE-2023-6610 kernel 7.1
#I8RXOD:CVE-2023-51779 kernel 7
#I8UHLA:CVE-2023-48795 python-paramiko 5.9
#I8WDRH:CVE-2023-0437 mongo-c-driver 5.3
#I8RXMW:CVE-2023-51782 kernel 4.6
#I8VDQE:CVE-2023-35887 apache-sshd 4.3
#I8H4UJ:CVE-2023-6121 kernel 4.3

Bugfix：
issue 仓库
#I8NMNV:libmicrohttpd build problem in openEuler:22.03-LTS libmicrohttpd
#I66TRA:【5.10】【安全加固】安装cloud-init包，/etc/cloud/cloud.cfg  sudo默认参数权限过大，应该删除 cloud-init
#I5M61D:22.03 LTS版本检测到 可疑TrojanSource代码：存在BiDi控制字符 ibus-typing-booster
#I8WHDS:remove sensitive info samba
#I8ONTF:使用checkpatch脚本检查loongarch/kvm代码，脚本报错 kernel
#I8ORHJ:[OLK-5.10] livepatch_wo_ftrace方案移除对replace字段的处理 kernel
#I8TM21:[Backport] ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() kernel

openEuler-22.03-LTS版本编译构建信息查询链接：
https://build.openeuler.org/project/show/openEuler:22.03:LTS
https://build.openeuler.org/project/show/openEuler:22.03:LTS:Epol
 
openEuler-22.03-LTS Update版本 发布源链接：
https://repo.openeuler.org/openEuler-22.03-LTS/update/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/main/
https://repo.openeuler.org/openEuler-22.03-LTS/docker_img/update/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/multi_version/OpenStack/Train/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/multi_version/OpenStack/Wallaby/
https://repo.openeuler.org/openEuler-22.03-LTS/EPOL/update/multi_version/obs-server/2.10.11/
 
openEuler CVE 及 安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-22.03-LTS Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler-22.03-LTS update20230726 I7ORCE 【22.03 LTS update20230726】【arm\x86】selinux-policy-base的版本不符合ceph子包的安装条件，ceph子包安装失败; cephadm卸载有异常打印 主要 sig/sig-SDS src-openEuler/ceph https://gitee.com/open_euler/dashboard?issue_id=I7ORCE
openEuler-22.03-LTS I6VFRX [22.03-LTS][x86/arm]mariadb授权给远程用户，远程连接服务失败 次要 sig/DB src-openEuler/mariadb https://gitee.com/open_euler/dashboard?issue_id=I6VFRX
openEuler-22.03-LTS I72N5G 【22.03-lts】x86环境上同时安装php-fpm软件包和php-opcache软件包后会导致php-fpm.service服务启动失败 次要 sig/Base-service src-openEuler/php https://gitee.com/open_euler/dashboard?issue_id=I72N5G

openEuler-22.03-LTS-SP1 Update 20240117
经各SIG及社区开发者贡献，本周openEuler-22.03-LTS-SP1修复版本已知问题5个，已知漏洞12个。目前版本分支剩余待修复缺陷4个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-22.03-LTS SP1 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I8W2BK?from=project-issue
 
CVE修复：
CVE 仓库 score
#I8VOWH:CVE-2020-0452 libexif 9.8
#I8VXF6:CVE-2024-23301 rear 7.8
#I8RXOY:CVE-2023-51781 kernel 7.8
#I8RXNR:CVE-2023-51780 kernel 7.8
#I8QJJK:CVE-2023-51713 proftpd 7.5
#I8MXXY:CVE-2023-6610 kernel 7.1
#I8RXOD:CVE-2023-51779 kernel 7
#I8UHLA:CVE-2023-48795 python-paramiko 5.9
#I8WDRH:CVE-2023-0437 mongo-c-driver 5.3
#I8RXMW:CVE-2023-51782 kernel 4.6
#I8VDQE:CVE-2023-35887 apache-sshd 4.3
#I8H4UJ:CVE-2023-6121 kernel 4.3

Bugfix：
issue 仓库
#I8CJE5:cloud-init会生成dsa密钥，长度1024，属于不安全的算法， 建议删除 cloud-init
#I5M61D:22.03 LTS版本检测到 可疑TrojanSource代码：存在BiDi控制字符 ibus-typing-booster
#I8WHDS:remove sensitive info samba
#I8ORHJ:[OLK-5.10] livepatch_wo_ftrace方案移除对replace字段的处理 kernel
#I8TM21:[Backport] ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() kernel

openEuler-22.03-LTS SP1版本编译构建信息查询链接：
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-22.03-LTS-SP1:everything
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-22.03-LTS-SP1:epol
 
openEuler-22.03-LTS SP1 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/main/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/docker_img/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/multi_version/OpenStack/Train/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/multi_version/OpenStack/Wallaby/
https://repo.openeuler.org/openEuler-22.03-LTS-SP1/EPOL/update/multi_version/obs-server/2.10.11/
 
openEuler CVE 及 安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-22.03-LTS-SP1 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler 22.03-SP1 I6B4V1 【22.03 SP1 update 20230118】【arm】libhdfs在arm架构降级失败，x86正常 主要 sig/bigdata src-openEuler/hadoop https://gitee.com/open_euler/dashboard?issue_id=I6B4V1
openEuler-22.03-LTS-SP1 update20230726 I7OR2I 【22.03 LTS SP1 update20230726】【arm\x86】selinux-policy-base的版本不符合ceph子包的安装条件，ceph子包安装失败 主要 sig/sig-SDS src-openEuler/ceph https://gitee.com/open_euler/dashboard?issue_id=I7OR2I
openEuler-22.03-LTS-SP1 I6VFV6 [22.03 SP1] [x86/arm] mariadb授权给远程用户，远程连接服务失败 次要 sig/DB src-openEuler/mariadb https://gitee.com/open_euler/dashboard?issue_id=I6VFV6
openEuler-22.03-LTS-SP1 I73CKF 【22.03-lts-sp1】x86环境上同时安装php-fpm软件包和php-opcache软件包后会导致php-fpm.service服务启动失败 次要 sig/Base-service src-openEuler/php https://gitee.com/open_euler/dashboard?issue_id=I73CKF

openEuler-22.03-LTS-SP2 Update 20240117
经各SIG及社区开发者贡献，本周openEuler-22.03-LTS-SP2修复版本已知问题9个，已知漏洞12个。目前版本分支剩余待修复缺陷2个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-22.03-LTS-SP2 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I8W2BI?from=project-issue

CVE修复：
CVE 仓库 score
#I8VOWH:CVE-2020-0452 libexif 9.8
#I8VXF6:CVE-2024-23301 rear 7.8
#I8RXOY:CVE-2023-51781 kernel 7.8
#I8RXNR:CVE-2023-51780 kernel 7.8
#I8QJJK:CVE-2023-51713 proftpd 7.5
#I8MXXY:CVE-2023-6610 kernel 7.1
#I8RXOD:CVE-2023-51779 kernel 7
#I8UHLA:CVE-2023-48795 python-paramiko 5.9
#I8WDRH:CVE-2023-0437 mongo-c-driver 5.3
#I8RXMW:CVE-2023-51782 kernel 4.6
#I8VDQE:CVE-2023-35887 apache-sshd 4.3
#I8H4UJ:CVE-2023-6121 kernel 4.3

Bugfix：
issue 仓库
#I8HZ7W:从内核态获取dmac kernel
#I8W69Y:【22.03 SP2】从内核态获取dmac信息 rdma-core
#I8CJE5:cloud-init会生成dsa密钥，长度1024，属于不安全的算法， 建议删除 cloud-init
#I8W46D:【22.03 SP2】High-priority bugfixes to be incorporated from SP3 rdma-core
#I5M61D:22.03 LTS版本检测到 可疑TrojanSource代码：存在BiDi控制字符 ibus-typing-booster
#I8WHDS:remove sensitive info samba
#I8W3IU:RDMA/hns: Backport bugfixes for openEuler SP2 kernel
#I8ORHJ:[OLK-5.10] livepatch_wo_ftrace方案移除对replace字段的处理 kernel
#I8TM21:[Backport] ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() kernel

openEuler-22.03-LTS SP2版本编译构建信息查询链接：
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-22.03-LTS-SP2:everything
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-22.03-LTS-SP2:epol
 
openEuler-22.03-LTS SP2 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/EPOL/update/main/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/hotpatch_update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/docker_img/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/EPOL/update/multi_version/OpenStack/Train/
https://repo.openeuler.org/openEuler-22.03-LTS-SP2/EPOL/update/multi_version/OpenStack/Wallaby/
 
openEuler CVE 及 安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
https://repo.openeuler.org/security/data/hotpatch_cvrf/
 
openEuler-22.03-LTS-SP2 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 sig组 关联仓库 任务路径
openEuler-22.03-LTS-SP2-round-2 I795G3 【22.03-LTS-SP2 round2】本次转测源中出现多个版本的containers-common 主要 sig/sig-CloudNative src-openEuler/skopeo https://gitee.com/open_euler/dashboard?issue_id=I795G3
openEuler-22.03-LTS-SP2-SEC I7AFIR 【22.03-LTS-SP2 round2】【x86/arm】libkae-1.2.10-6.oe2203sp2安全编译选项Rpath/Runpath不满足 主要 sig-AccLib src-openEuler/libkae https://gitee.com/open_euler/dashboard?issue_id=I7AFIR

openEuler-20.03-LTS-SP4 Update 20240117
经各SIG及社区开发者贡献，本周openEuler-20.03-LTS-SP4修复版本已知问题4个，已知漏洞9个。目前版本分支剩余待修复缺陷5个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-20.03-LTS-SP4 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I8W2BM?from=project-issue

CVE修复：
CVE 仓库 score
#I8VOWH:CVE-2020-0452 libexif 9.8
#I8VXF6:CVE-2024-23301 rear 7.8
#I8RXOY:CVE-2023-51781 kernel 7.8
#I8RXNR:CVE-2023-51780 kernel 7.8
#I8QJJK:CVE-2023-51713 proftpd 7.5
#I8RXOD:CVE-2023-51779 kernel 7
#I8UHLA:CVE-2023-48795 python-paramiko 5.9
#I8WDRH:CVE-2023-0437 mongo-c-driver 5.3
#I8VDQE:CVE-2023-35887 apache-sshd 4.3

Bugfix：
issue 仓库
#I5M61D:22.03 LTS版本检测到 可疑TrojanSource代码：存在BiDi控制字符 ibus-typing-booster
#I8WHDS:remove sensitive info samba
#I8UZTK:【OLK-5.10】KASAN: use-after-free Write in expire_timers kernel
#I8WCJM:【openEuler-1.0-LTS】sec磁盘加解密场景，多线程压力出现calltrace kernel

openEuler-20.03-LTS SP4版本编译构建信息查询链接：
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-20.03-LTS-SP4:everything
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-20.03-LTS-SP4:epol
 
openEuler-20.03-LTS SP4 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-20.03-LTS-SP4/update/
https://repo.openeuler.org/openEuler-20.03-LTS-SP4/EPOL/update/main/
 
openEuler CVE 及 安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
https://repo.openeuler.org/security/data/hotpatch_cvrf/
 
openEuler-20.03-LTS-SP4 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 标签 关联仓库 任务路径
openEuler-20.03-LTS-SP4-round-1 I8DT5M 【openEuler-20.03-LTS-SP4 rc1】redis-sentinel.service启动失败 主要 sig/bigdata src-openEuler/redis6 https://gitee.com/open_euler/dashboard?issue_id=I8DT5M
openEuler-20.03-LTS-SP4-round-1 I8EFAO 【20.03-LTS-SP4 round1】【x86/arm】strongswan-5.7.2-10.oe2003sp4安全编译选项Runpath/Rpath不满足 主要 sig/sig-security-fac src-openEuler/strongswan https://gitee.com/open_euler/dashboard?issue_id=I8EFAO
openEuler-20.03-LTS-SP4-round-1 I8EKUI 【openEuler-20.03-LTS-SP4 rc1】strongswan-swanctl.service服务启动失败 主要 sig/sig-security-fac src-openEuler/strongswan https://gitee.com/open_euler/dashboard?issue_id=I8EKUI
openEuler-20.03-LTS-SP4-round-2 I8G371 【20.03-SP4-rc2】【arm/x86】h2源码包本地自编译失败 次要 sig/DB src-openEuler/h2 https://gitee.com/open_euler/dashboard?issue_id=I8G371
openEuler-20.03-LTS-SP4-round-2 I8GDGR 【openEuler-20.03-LTS-SP4-RC2】【arm/x86】物理机安装gnome-*启用图形化界面重启之后卡住 主要 sig/GNOME src-openEuler/gnome-desktop3 https://gitee.com/open_euler/dashboard?issue_id=I8GDGR

openEuler-22.03-LTS-SP3 Update 20240117
经各SIG及社区开发者贡献，本周openEuler-22.03-LTS-SP3修复版本已知问题11个，已知漏洞15个。目前版本分支剩余待修复缺陷 1个，缺陷/漏洞统计详见清单，缺陷/漏洞问题详见各软件包源码仓库
 
openEuler-22.03-LTS-SP3 Update版本CVE修复 及Bugfix list公示链接：
https://gitee.com/openeuler/release-management/issues/I8W2BH?from=project-issue

CVE修复：
CVE 仓库 score
#I8VOWH:CVE-2020-0452 libexif 9.8
#I8VXF6:CVE-2024-23301 rear 7.8
#I8RXOY:CVE-2023-51781 kernel 7.8
#I8RXNR:CVE-2023-51780 kernel 7.8
#I8V70Y:CVE-2023-45139 python-fonttools 7.5
#I8QJJK:CVE-2023-51713 proftpd 7.5
#I8RXOD:CVE-2023-51779 kernel 7
#I8UHLA:CVE-2023-48795 python-paramiko 5.9
#I8SCI3:CVE-2023-48795 libssh 5.9
#I8PGM6:CVE-2023-48795 openssh 5.9
#I8WDRH:CVE-2023-0437 mongo-c-driver 5.3
#I8PI4Q:CVE-2023-6004 libssh 4.8
#I8UW3U:CVE-2024-0340 kernel 4.4
#I8H4UJ:CVE-2023-6121 kernel 4.3
#I8VDQE:CVE-2023-35887 apache-sshd 4.3

Bugfix：
issue 仓库
#I5M61D:22.03 LTS版本检测到 可疑TrojanSource代码：存在BiDi控制字符 ibus-typing-booster
#I8WHDS:remove sensitive info samba
#I8HZ8G:回合上游社区补丁 dpdk
#I8I3QU:在loongarch架构下，新建虚拟机，并在虚拟机中搭建ltp测试环境，运行ltp测试脚本，发现虚拟机报rcu超时 kernel
#I8I4BU:loongarch架构下，创建虚拟机，进行虚拟机热迁移操作，同时源虚拟机中不停做重启操作,迁移后目的虚拟机挂死 kernel
#I8I8NK:创建虚拟机后，运行ltp测试之后，虚拟机闲置状态下，在host下查看cpu占用率，发现qemu进程cpu占用率为100% kernel
#I8UNF9:【OpenEuler22.03-LTS-SP3】HNS3 UDMA特性性能优化 kernel
#I8UVW2: net: hns3: fix reset timeout under full functions and queues kernel
#I8UZTK:【OLK-5.10】KASAN: use-after-free Write in expire_timers kernel
#I8VV2H:【OLK-5.10】ARM64内核日志报cma分配失败的问题 kernel
#I8W708:cpufreq: schedutils/conservative/ondemand 采样频率异常 kernel

openEuler-22.03-LTS-SP3版本编译构建信息查询链接：
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-22.03-LTS-SP3:everything
https://eulermaker.compass-ci.openeuler.openatom.cn/project/overview?osProject=openEuler-22.03-LTS-SP3:epol
 
openEuler-22.03-LTS-SP3 Update版本 发布源链接：
https://repo.openeuler.org/openEuler-22.03-LTS-SP3/update/
https://repo.openeuler.org/openEuler-22.03-LTS-SP3/EPOL/update/main/
 
openEuler CVE及安全公告公示链接：
https://www.openeuler.org/zh/security/cve/
https://www.openeuler.org/zh/security/safety-bulletin/
https://repo.openeuler.org/security/data/cvrf/
 
openEuler-22.03-LTS-SP3 Update版本待修复问题清单公示(任务ID标注红色的问题单优先级高)：
里程碑 任务ID 任务标题 优先级 标签 关联仓库 任务路径
openEuler-22.03-LTS-SP3-round-5 I8S8MW [22.03 LTS SP3]飞腾5000C服务器安装系统失败 无优先级 sig/Kernel openEuler/kernel https://gitee.com/open_euler/dashboard?issue_id=I8S8MW

社区待修复漏洞：
openEuler社区根据漏洞严重等级采取差异化的修复策略，请各个SIG 关注涉及CVE组件的修复情况。
严重等级（Severity Rating） 漏洞修复时长
致命（Critical） 7天
高（High） 14天
中（Medium） 30天
低（Low） 30天

可参考社区安全委员会漏洞：https://gitee.com/openeuler/security-committee/wikis/%E7%A4%BE%E5%8C%BA%E6%BC%8F%E6%B4%9E%E7%AE%A1%E7%90%86
 
近14天将超期CVE（01.19日数据）:
漏洞编号 Issue ID 剩余天数 CVSS评分 软件包 责任SIG
CVE-2022-26612 I8WS07 4.57 9.8 hadoop-3.1 sig-bigdata
CVE-2022-25168 I8WRZ9 4.57 9.8 hadoop-3.1 sig-bigdata
CVE-2021-37404 I8WRYE 4.57 9.8 hadoop-3.1 sig-bigdata
CVE-2023-41419 I84A04 5.55 9.8 python-gevent Programming-language
CVE-2023-51698 I8VT5F 1.3 9.6 atril sig-UKUI
CVE-2023-4584 I7WZ0C 1.14 8.8 firefox Application
CVE-2023-32215 I71R4G 6.64 8.8 firefox Application
CVE-2023-32213 I71R3Y 6.64 8.8 firefox Application
CVE-2023-32207 I71R3W 6.64 8.8 firefox Application
CVE-2023-29536 I6UVEI 6.64 8.8 firefox Application
CVE-2023-29541 I6UVDN 6.64 8.8 firefox Application
CVE-2023-29539 I6UVDJ 6.64 8.8 firefox Application
CVE-2023-29550 I6UVCU 6.64 8.8 firefox Application
CVE-2021-33036 I8WRXS 11.57 8.8 hadoop-3.1 sig-bigdata
CVE-2021-25642 I8WRWB 11.57 8.8 hadoop-3.1 sig-bigdata
CVE-2024-21886 I8WQ1L 13.8 8.4 xorg-x11-server Desktop
CVE-2023-45234 I8WU9Y 12.3 8.3 edk2 Virt
CVE-2023-45230 I8WU9U 12.3 8.3 edk2 Virt
CVE-2023-45235 I8WU92 12.3 8.3 edk2 Virt
CVE-2023-41056 I8UW34 5.3 8.1 redis6 sig-bigdata
CVE-2023-41056 I8UW26 5.3 8.1 redis5 sig-bigdata
CVE-2023-5455 I8WSRQ 12.3 8.1 freeipa oVirt
CVE-2023-6040 I8VPKT 7.3 7.8 kernel Kernel
CVE-2024-0582 I8WOO7 11.3 7.8 kernel Kernel
CVE-2024-0562 I8WDR9 11.3 7.8 kernel Kernel
CVE-2024-0607 I8WQRG 13.3 7.8 kernel Kernel
CVE-2023-6816 I8WPZP 13.3 7.8 xorg-x11-server Desktop
CVE-2024-0229 I8WPZK 13.8 7.8 xorg-x11-server Desktop
CVE-2024-21885 I8WPZI 13.8 7.8 xorg-x11-server Desktop
CVE-2021-37311 I8TQBI 0.3 7.5 fcitx Desktop
CVE-2023-1999 I6VVSM 0.64 7.5 firefox Application
CVE-2023-40462 I8URAV 4.3 7.5 tinyxml sig-compat-winapp
CVE-2022-3171 I8V2EA 4.8 7.5 protobuf2 sig-bigdata
CVE-2022-34169 I8X0S3 12.3 7.5 kernel Kernel
CVE-2023-45232 I8WUA4 12.3 7.5 edk2 Virt
CVE-2023-45233 I8WU8W 12.3 7.5 edk2 Virt
CVE-2024-20932 I8WQS3 12.3 7.5 openjdk-1.8.0 Compiler
CVE-2023-39325 I8X4K3 13.3 7.5 runc sig-CloudNative
CVE-2023-39325 I8X4G4 13.3 7.5 yaml-cpp03 Base-service
CVE-2023-39325 I8X4G2 13.3 7.5 cri-tools sig-CloudNative
CVE-2023-39325 I8X4FZ 13.3 7.5 cri-o sig-CloudNative
CVE-2023-39325 I8X4FY 13.3 7.5 ignition sig-K8sDistro
CVE-2023-39325 I8X4FP 13.3 7.5 ansible dev-utils
CVE-2023-39325 I8X4E3 13.3 7.5 containerd sig-CloudNative
CVE-2023-39325 I8X4DU 13.3 7.5 ceph sig-ceph
CVE-2023-39325 I8X4DI 13.3 7.5 toolbox sig-CloudNative
CVE-2023-39325 I8X4DF 13.3 7.5 etcd sig-CloudNative
CVE-2023-39325 I8X4DC 13.3 7.5 grafana Application
CVE-2024-20918 I8WQXR 11.71 7.4 openjdk-11 Compiler
CVE-2024-20952 I8WQVZ 11.71 7.4 openjdk-11 Compiler
CVE-2024-20918 I8WQXT 12.3 7.4 openjdk-1.8.0 Compiler
CVE-2024-20952 I8WQW1 12.3 7.4 openjdk-1.8.0 Compiler
CVE-2024-20918 I8WQVF 12.3 7.4 openjdk-latest Compiler
CVE-2024-20952 I8WQT8 12.3 7.4 openjdk-latest Compiler
CVE-2024-0565 I8WEOK 11.3 7.1 kernel Kernel
CVE-2024-0646 I8X0RZ 12.3 7.0 kernel Kernel
CVE-2023-4575 I7WYY3 1.14 6.5 firefox Application
CVE-2021-23841 I8QI4W 1.61 5.9 openresty-openssl111 sig-OpenResty
CVE-2022-36021 I6IRRY 11.3 5.5 redis6 sig-bigdata
CVE-2023-22081 I88VNW 8.14 5.3 openjdk-latest Compiler
CVE-2023-22025 I88JFX 8.14 3.7 openjdk-latest Compiler
CVE-2023-28786 I8SG9E 9.3 3.7 kf5-solid sig-UKUI

社区关键组件待修复缺陷：
openEuler社区存在无版本里程碑的缺陷，请各个SIG 关注涉及质量等级为L1-L2软件包的缺陷修复情况。

社区提单可参考社区QA 版本测试提单规范
https://gitee.com/openeuler/QA/blob/master/%E7%A4%BE%E5%8C%BA%E7%89%88%E6%9C%ACissue%E5%88%9B%E5%BB%BA%E5%A4%84%E7%90%86%E6%B5%81%E7%A8%8B%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%A4%BE%E5%8C%BA%E7%89%88%E6%9C%ACissue%E5%88%9B%E5%BB%BA%E5%A4%84%E7%90%86%E6%B5%81%E7%A8%8B%E4%B8%8E%E8%A7%84%E8%8C%83.md

关键组件待修复缺陷清单（无版本里程碑）：
序号 任务ID 任务标题 任务类型 创建时间 优先级 关联仓库 sig 任务路径
1 I4UTGM 22.03分支kernel子包perf与libtraceevent有安装冲突 任务 2022/2/22 20:23 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I4UTGM
2 I4V9K0 gcc 10.3.0 __libc_vfork符号丢失（i686架构） 任务 2022/2/25 14:24 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I4V9K0
3 I4YT2R iscsi登录操作并发sysfs读操作概率导致空指针访问 任务 2022/3/21 15:36 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I4YT2R
4 I57O76 从gnutls主包拆分gnutls-dane 任务 2022/5/16 17:18 无优先级 src-openEuler/gnutls sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I57O76
5 I58CJR 删除iptable_filter.ko时出现空指针问题 任务 2022/5/19 20:36 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I58CJR
6 I59BY7 [openEuler-20.03-LTS-SP3] kernel build failed 20220525 任务 2022/5/26 11:08 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I59BY7
7 I5C33B OLK-5.10 page owner功能增强 任务 2022/6/13 20:30 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5C33B
8 I5CHET 使用nftables添加过多的规则时，内核将出现softlockup 任务 2022/6/15 19:33 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5CHET
9 I5D9J8 Upgrade to latest release [kernel: 5.10.0 -> 5.17] 任务 2022/6/21 10:01 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5D9J8
10 I5G321 【openEuler-1.0-LTS】nbd 加载/卸载模组 和 alloc config并发导致 panic 任务 2022/7/8 9:05 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5G321
11 I5H311 修复CVE-2022-2380 任务 2022/7/14 15:27 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5H311
12 I5I2M8 x86: Improve testing false positive for tst-cpu-features-cpuinfo with bad hardware. 任务 2022/7/21 9:47 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5I2M8
13 I5JKG6 【安装冲突arm/x86_64】openEuler:22.09分支libtraceevent与kernel子包perf安装冲突 任务 2022/7/29 14:57 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5JKG6
14 I5LO4A 【22.03 LTS ARM】鲲鹏 920 x8 安装 OS 时，卡死在内核启动界面。 任务 2022/8/10 17:19 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5LO4A
15 I5NXF8 当前kernel提供的spec中，定义了kernel-headers，但是未定义版本号，部分依赖于kernel-headers高版本的软件包错误的被安装在了低版本内核上 任务 2022/8/24 17:00 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5NXF8
16 I5OOLB 反复触发i40e网卡sriov增删vf后，iavf_remove触发BUG_ON at drivers/pci/msi.c:397 任务 2022/8/29 20:23 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5OOLB
17 I5OYJZ kernel源码包构建失败 任务 2022/8/31 11:21 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5OYJZ
18 I5PBRB 注入内存申请故障，i40iw_initialize_dev失败时出现oops复位 任务 2022/9/2 9:56 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5PBRB
19 I5RH8C 内存可靠性分级需求 任务 2022/9/16 16:16 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5RH8C
20 I5RTUS X86架构下无法对mysql8进行autobolt模式反馈编译，报错 缺陷 2022/9/19 15:47 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I5RTUS
21 I5V92B openEuler是否有开启CONFIG_AUXILIARY_BUS配置的计划 任务 2022/10/12 11:37 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5V92B
22 I5VCIJ openEuler如何适配新硬件，请提供适配流程指导 任务 2022/10/12 17:14 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5VCIJ
23 I5WCP1 回合bpftool prog attach/detach命令 任务 2022/10/18 16:10 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I5WCP1
24 I5XP8E Bug in openEuler/gcc (10.3.0) ，22.03-LTS-performance 分支 缺陷 2022/10/26 9:13 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I5XP8E
25 I65UF9 aarch64架构boost icl模板库优化错误 缺陷 2022/12/12 17:17 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I65UF9
26 I67IFE 建议sssd拆分出对应功能的子包 任务 2022/12/26 16:49 无优先级 src-openEuler/sssd Base-service https://gitee.com/open_euler/dashboard?issue_id=I67IFE
27 I6FZWY 主线回合scsi: iscsi_tcp: Fix UAF during logout and login 任务 2023/2/18 11:10 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6FZWY
28 I6HXB9 kernel.spec中是否会新增打包intel-sst工具 任务 2023/2/27 10:06 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6HXB9
29 I6LBR9 【oe 23.03】/proc/sys/kernel/core_pattern中写脚本时收集不到core文件 任务 2023/3/9 14:20 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6LBR9
30 I6MJB4 openssl 3.0 支持TLCP特性 任务 2023/3/13 11:35 无优先级 src-openEuler/openssl sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I6MJB4
31 I6N49D 【openeuler-22.03-LTS-SP】 任务 2023/3/14 20:12 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6N49D
32 I6N49G 【openeuler-22.03-LTS-SP1】openeuler-22.03-LTS-SP1 x86默认不再编译bcache，导致bcache业务无法正常使用 任务 2023/3/14 20:13 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6N49G
33 I6OLND 关闭kdump情况下触发panic可能会卡死 任务 2023/3/20 16:58 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6OLND
34 I6ORVZ 【22.03-LTS-SP1】modprobe强制加载内核模块失败Key was rejected by service 任务 2023/3/21 10:52 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6ORVZ
35 I6P3II [openEuler-22.03-LTS-SP1] arm 内核不支持files cgroup 任务 2023/3/22 10:20 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6P3II
36 I6PA84 神威架构，虚拟化启动失败 任务 2023/3/22 17:20 无优先级 src-openEuler/qemu Virt https://gitee.com/open_euler/dashboard?issue_id=I6PA84
37 I6TQ8W curl命令向hadoop3.2.1 webhdfs put文件失败 任务 2023/4/7 18:02 严重 src-openEuler/curl Networking https://gitee.com/open_euler/dashboard?issue_id=I6TQ8W
38 I6UDV8 Bug in openEuler/gcc (10.3.0) support for ARM SVE openmp 任务 2023/4/10 16:14 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I6UDV8
39 I6VWNS 主线补丁：udp: skip L4 aggregation for UDP tunnel packets分析 任务 2023/4/15 10:37 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I6VWNS
40 I6YYXA OpenEuler23.03不支持platform-python，如何解决 任务 2023/4/26 10:55 无优先级 src-openEuler/python3 Base-service https://gitee.com/open_euler/dashboard?issue_id=I6YYXA
41 I6ZAYW spec 文件内指定了仅 gcc 支持的 CCASFLAGS 导致 LLVM 下 configure 错误 任务 2023/4/27 13:20 无优先级 src-openEuler/gnutls sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I6ZAYW
42 I6ZOUM qemu-6.2.0 内存预分配性能比 qemu-4.1.0有严重下降 任务 2023/4/28 17:37 无优先级 src-openEuler/qemu Virt https://gitee.com/open_euler/dashboard?issue_id=I6ZOUM
43 I70U2A 【openEuler-23.03】wifi功能使用问题 任务 2023/5/6 15:21 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I70U2A
44 I70VML 指针压缩选项的错误提示内容有误。 缺陷 2023/5/6 16:45 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I70VML
45 I71KX8 python3.spec文件中，无效的ifarch语句 任务 2023/5/9 15:00 无优先级 src-openEuler/python3 Base-service https://gitee.com/open_euler/dashboard?issue_id=I71KX8
46 I73TNL 开启FIPS模式重启系统内核自检ofb(aes)算法失败导致panic 任务 2023/5/17 14:33 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I73TNL
47 I73Z10 openeuler 23.03 kernel-6.1.19.src.rpm 编译打包报错 任务 2023/5/17 18:52 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I73Z10
48 I7A5FW Fixed CPU topology issues and add lbt support for kvm. 任务 2023/6/1 17:18 无优先级 src-openEuler/qemu Virt https://gitee.com/open_euler/dashboard?issue_id=I7A5FW
49 I7AAWF 2203-SP2下安装虚拟机，CPU为FT-2000+，使用host-model启动虚拟机失败 任务 2023/6/2 10:46 无优先级 src-openEuler/qemu Virt https://gitee.com/open_euler/dashboard?issue_id=I7AAWF
50 I7B6KR kerberos安装缺少krb5-auth-dialog 和 krb5-workstation 任务 2023/6/6 9:51 无优先级 src-openEuler/krb5 Base-service https://gitee.com/open_euler/dashboard?issue_id=I7B6KR
51 I7B6X5 gcc-pie-arm64架构和操作手册结果不同 缺陷 2023/6/6 10:11 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I7B6X5
52 I7BM6U 【openEuler-22.03-LTS-SP1 】548子项异常波动问题跟踪 任务 2023/6/7 14:54 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I7BM6U
53 I7BRC1 perf 与 libtraceevent 软件包存在安装冲突 任务 2023/6/7 20:42 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I7BRC1
54 I7CKVY peneuler 20.03 LTS arrch64 上安装 libreoffice 7.4.7.2 报错 缺陷 2023/6/11 22:45 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I7CKVY
55 I7CWOS Bug in openEuler/gcc (10.3.1) support for ARM SVE under O0 compiler level 任务 2023/6/12 20:51 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I7CWOS
56 I7EZAZ 无法在sw_64下编译nodejs 任务 2023/6/20 16:50 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I7EZAZ
57 I7KA4H Upgrade to latest release [python3: 3.10.9 2022/12/06 -> 3.11.4 2023/06/06] 任务 2023/7/11 15:13 无优先级 src-openEuler/python3 Base-service https://gitee.com/open_euler/dashboard?issue_id=I7KA4H
58 I7KBUF pyconfig-64.h中定义了CHAR_UNSIGNED 改变了编译行为，导致程序运行出错 任务 2023/7/11 16:27 无优先级 src-openEuler/python3 Base-service https://gitee.com/open_euler/dashboard?issue_id=I7KBUF
59 I7L94Q Upgrade to latest release [libvirt: 6.2.0 2020/04/02 -> 9.5.0 2023/07/03] 任务 2023/7/14 17:07 无优先级 src-openEuler/libvirt Virt https://gitee.com/open_euler/dashboard?issue_id=I7L94Q
60 I7L968 Upgrade to latest release [qemu: 6.2.0 2021/12/14 -> 8.0.3 2023/07/09] 任务 2023/7/14 17:09 无优先级 src-openEuler/qemu Virt https://gitee.com/open_euler/dashboard?issue_id=I7L968
61 I7LSWG Upgrade to latest release [gtk2: 2.24.33 2020/12/20 -> 4.11.4 2023/07/03] 任务 2023/7/17 20:50 无优先级 src-openEuler/gtk2 Desktop https://gitee.com/open_euler/dashboard?issue_id=I7LSWG
62 I7VW3D tmp.mount状态是active，/tmp目录被挂载为tmpfs文件系统 任务 2023/8/25 13:19 无优先级 src-openEuler/systemd Base-service https://gitee.com/open_euler/dashboard?issue_id=I7VW3D
63 I7YRN6 openEuler-20.03-LTS-SP3版本与openEuler-22.03-LTS版本x86上gcc参数差异导致编译出的二进制性能下降 任务 2023/9/5 17:06 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I7YRN6
64 I80BT8 use UCP in UTF mode 补丁未合入 任务 2023/9/11 14:50 无优先级 src-openEuler/grep Base-service https://gitee.com/open_euler/dashboard?issue_id=I80BT8
65 I84DBH 使用x2openEuler把centos7.0升级到openEuler22.03LTS出现boot分区挂载不上的情况 任务 2023/9/26 10:30 无优先级 src-openEuler/systemd Base-service https://gitee.com/open_euler/dashboard?issue_id=I84DBH
66 I84L9F openEuler 22.03 LTS-SP1版本上编译node-v18.18.0的代码失败 缺陷 2023/9/26 19:24 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I84L9F
67 I8790J need EPYC-Genoa model support 任务 2023/10/11 16:53 无优先级 src-openEuler/qemu Virt https://gitee.com/open_euler/dashboard?issue_id=I8790J
68 I8A77R Upgrade to latest release [alsa-lib: 1.2.9 2023/05/04 -> 1.2.10 2023/09/01] 任务 2023/10/23 16:22 无优先级 src-openEuler/alsa-lib Computing https://gitee.com/open_euler/dashboard?issue_id=I8A77R
69 I8B80Y gcc中LTO的功能好像出现异常 任务 2023/10/26 19:15 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I8B80Y
70 I8C0YS 在arm平台使用asan编译选项的程序退出前会卡顿5s左右 缺陷 2023/10/30 16:06 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I8C0YS
71 I8C74L 实时补丁版本选择 任务 2023/10/31 9:53 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8C74L
72 I8DA53 gcc的CVE-2023-4039修复导致鲲鹏920cpu上glibc的接口函数getenv，getenvT2，strftime接口性能下降 任务 2023/11/2 16:27 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I8DA53
73 I8EAHA [20.03-lts-sp4]Support handle CXL devices AER errors in firmware-first mode 任务 2023/11/6 22:23 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8EAHA
74 I8F7ZR [20.03-lts-sp4]The Hisi SAS driver supports the MQ feature 任务 2023/11/9 17:03 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8F7ZR
75 I8F80L [20.03-lts-sp4]The Hisi SAS driver supports loopback bit stream 任务 2023/11/9 17:05 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8F80L
76 I8ISY0 bunzip2 -L/-V和bzcat -L/-V查询信息打印异常且返回值不为0 任务 2023/11/23 11:02 无优先级 src-openEuler/bzip2 Base-service https://gitee.com/open_euler/dashboard?issue_id=I8ISY0
77 I8KAVR dnf reinstall kernel 导致grub.conf 本内核项被删除 任务 2023/11/29 10:30 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8KAVR
78 I8MBMG 20.03-LTS-SP2 上systemd-timesyncd服务默认enable，环境网络不通则一直在给timeX.google.com发域名请求 任务 2023/12/6 18:38 无优先级 src-openEuler/systemd Base-service https://gitee.com/open_euler/dashboard?issue_id=I8MBMG
79 I8N0IL 23.09分支下缺少对应的Module.kabi_aarch64 任务 2023/12/9 15:31 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8N0IL
80 I8ON42 Upgrade to latest release [coreutils: 9.3 2023/04/18 -> 9.4 2023/08/29] 任务 2023/12/15 11:02 无优先级 src-openEuler/coreutils Base-service https://gitee.com/open_euler/dashboard?issue_id=I8ON42
81 I8ON5A Upgrade to latest release [cronie: 1.6.1 2022/04/25 -> 1.7.0 2023/10/13] 任务 2023/12/15 11:04 无优先级 src-openEuler/cronie Base-service https://gitee.com/open_euler/dashboard?issue_id=I8ON5A
82 I8ON6X Upgrade to latest release [dbus: 1.14.8 2023/06/06 -> 1.15.8 2023/08/21] 任务 2023/12/15 11:06 无优先级 src-openEuler/dbus Base-service https://gitee.com/open_euler/dashboard?issue_id=I8ON6X
83 I8ONCM Upgrade to latest release [elfutils: 0.189 2023/03/03 -> 0.190 2023/11/03] 任务 2023/12/15 11:14 无优先级 src-openEuler/elfutils Base-service https://gitee.com/open_euler/dashboard?issue_id=I8ONCM
84 I8ONV2 Upgrade to latest release [glib2: 2.76.4 2023/07/06 -> 2.78.3 2023/12/06] 任务 2023/12/15 11:38 无优先级 src-openEuler/glib2 Base-service https://gitee.com/open_euler/dashboard?issue_id=I8ONV2
85 I8OOF1 Upgrade to latest release [krb5: 1.21.1 2023/07/10 -> 1.21.2 2023/08/14] 任务 2023/12/15 12:29 无优先级 src-openEuler/krb5 Base-service https://gitee.com/open_euler/dashboard?issue_id=I8OOF1
86 I8OOF5 Upgrade to latest release [libarchive: 3.7.1 2023/07/29 -> 3.7.2 2023/09/11] 任务 2023/12/15 12:31 无优先级 src-openEuler/libarchive Base-service https://gitee.com/open_euler/dashboard?issue_id=I8OOF5
87 I8OQ6P Upgrade to latest release [libxml2: 2.11.4 2023/05/18 -> 2.12.3 2023/12/12] 任务 2023/12/15 14:52 无优先级 src-openEuler/libxml2 Base-service https://gitee.com/open_euler/dashboard?issue_id=I8OQ6P
88 I8OTI2 Upgrade to latest release [systemd: 253 2023/02/15 -> 255 2023/12/06] 任务 2023/12/15 17:36 无优先级 src-openEuler/systemd Base-service https://gitee.com/open_euler/dashboard?issue_id=I8OTI2
89 I8OWDX Upgrade to latest release [zlib: 1.2.13 2022/10/12 -> 1.3 2023/08/18] 任务 2023/12/16 3:07 无优先级 src-openEuler/zlib Base-service https://gitee.com/open_euler/dashboard?issue_id=I8OWDX
90 I8OWON [openEuler-22.03-LTS]arch64在飞腾D2000内核初始化失败 任务 2023/12/16 9:40 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8OWON
91 I8PFAG 服务器reboot会卡主，无法重启 缺陷 2023/12/18 19:24 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8PFAG
92 I8PL8Q Upgrade to latest release [gcc: 12.3.1 -/-/- -> 14 2023/04/17] 任务 2023/12/19 11:22 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I8PL8Q
93 I8PT50 Upgrade to latest release [gtk3: 3.24.38 2023/05/21 -> 4.13.3 2023/11/15] 任务 2023/12/20 5:54 无优先级 src-openEuler/gtk3 Desktop https://gitee.com/open_euler/dashboard?issue_id=I8PT50
94 I8RP83 openeuler embeded 23.09 RT版本启动时系统日志报kernel warning 缺陷 2023/12/27 11:14 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8RP83
95 I8SZWW qemu 4.1 虚拟机热迁移到qemu 6.2失败 任务 2024/1/2 17:01 无优先级 src-openEuler/qemu Virt https://gitee.com/open_euler/dashboard?issue_id=I8SZWW
96 I8TGOA master 分支升级到3.0.12版本 任务 2024/1/4 9:53 无优先级 src-openEuler/openssl sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I8TGOA
97 I8UCFC 鲲鹏920服务器多次重启后系统盘盘符跳变 任务 2024/1/8 11:18 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8UCFC
98 I8UHPD 【OLK 5.10】NVME缓存未清空导致内核信息泄露 任务 2024/1/8 17:07 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8UHPD
99 I8UJF0 [openEuler-1.0-LTS]NVME缓存未清空导致内核信息泄露 任务 2024/1/8 19:24 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8UJF0
100 I8UKFJ 【OLK 5.10】raid1/raid10 写io plug延时差并且占用较多内存 任务 2024/1/8 21:46 无优先级 src-openEuler/kernel Kernel https://gitee.com/open_euler/dashboard?issue_id=I8UKFJ
101 I8USES gcc 10.3 2203sp1编译nodejs，编译报错/usr/lib/gcc/x86_64-linux-gnu/10.3.1/include/avx2intrin.h:240:34:internal compiler error: in emit_move_insn, at expr.c:3814 缺陷 2024/1/9 15:57 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I8USES
102 I8VIOB Upgrade to latest release [openssl: 3.0.9 2023/05/30 -> 3.2.0 2023/11/23] 任务 2024/1/12 9:12 无优先级 src-openEuler/openssl sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I8VIOB
103 I8VIOL Upgrade to latest release [gnutls: 3.8.0 2023/02/09 -> 3.8.2 2023/11/15] 任务 2024/1/12 9:13 无优先级 src-openEuler/gnutls sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I8VIOL
104 I8VIPC Upgrade to latest release [audit: 3.1.1 2023/04/27 -> 3.1.2 2023/08/06] 任务 2024/1/12 9:14 无优先级 src-openEuler/audit sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I8VIPC
105 I8VIRN Upgrade to latest release [libcap: 2.69 2023/05/14 -> 20071031 2007/10/31] 任务 2024/1/12 9:17 无优先级 src-openEuler/libcap sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I8VIRN
106 I8VIRQ Upgrade to latest release [libselinux: 3.5 2023/02/23 -> 3.6 2023/12/13] 任务 2024/1/12 9:17 无优先级 src-openEuler/libselinux sig-security-facility https://gitee.com/open_euler/dashboard?issue_id=I8VIRQ
107 I8WAD7 kubelet 获取不到监控数据 缺陷 2024/1/15 17:33 无优先级 src-openEuler/systemd Base-service https://gitee.com/open_euler/dashboard?issue_id=I8WAD7
108 I8WLQF 在终端调用menu库，报段错误 缺陷 2024/1/16 15:31 无优先级 src-openEuler/ncurses Base-service https://gitee.com/open_euler/dashboard?issue_id=I8WLQF
109 I8X88I 在64k kernel pagesize下执行这个命令for((i=0;i<10000;i++));do systemd-cat sleep 20 & done > /dev/null 2>&1 ，会耗尽内存 缺陷 2024/1/18 16:55 无优先级 src-openEuler/systemd Base-service https://gitee.com/open_euler/dashboard?issue_id=I8X88I
110 I8X8MH 【openEuler-20.03-LTS-SP3】【arm】gcc 编译选项里带-march=native编译 coredump 缺陷 2024/1/18 17:15 无优先级 src-openEuler/gcc Compiler https://gitee.com/open_euler/dashboard?issue_id=I8X8MH
111 I8XAF6 将配置文件/etc/systemd/system.conf 配置项修改为 DefaultCPUSetAccounting=no，不生效 缺陷 2024/1/18 20:18 无优先级 src-openEuler/systemd Base-service https://gitee.com/open_euler/dashboard?issue_id=I8XAF6

openEuler 社区指导文档及开放平台链接：
 
openEuler 版本分支维护规范：
https://gitee.com/openeuler/release-management/blob/master/openEuler%E7%89%88%E6%9C%AC%E5%88%86%E6%94%AF%E7%BB%B4%E6%8A%A4%E8%A7%84%E8%8C%83.md
openEuler release-management 版本分支PR指导：
https://gitee.com/openeuler/release-management/blob/master/openEuler%E5%BC%80%E5%8F%91%E8%80%85%E6%8F%90%E4%BA%A4PR%E6%8C%87%E5%AF%BC%E6%96%87%E6%A1%A3.md
社区QA 版本测试提单规范
https://gitee.com/openeuler/QA/blob/master/%E7%A4%BE%E5%8C%BA%E7%89%88%E6%9C%ACissue%E5%88%9B%E5%BB%BA%E5%A4%84%E7%90%86%E6%B5%81%E7%A8%8B%E4%B8%8E%E8%A7%84%E8%8C%83/%E7%A4%BE%E5%8C%BA%E7%89%88%E6%9C%ACissue%E5%88%9B%E5%BB%BA%E5%A4%84%E7%90%86%E6%B5%81%E7%A8%8B%E4%B8%8E%E8%A7%84%E8%8C%83.md
社区QA 测试平台 radiates
https://radiatest.openeuler.org

update版本发布邮箱

tags

CVE	仓库	score
#I8VOWH:CVE-2020-0452	libexif	9.8
#I8VXF6:CVE-2024-23301	rear	7.8
#I8RXOY:CVE-2023-51781	kernel	7.8
#I8RXNR:CVE-2023-51780	kernel	7.8
#I8QJJK:CVE-2023-51713	proftpd	7.5
#I8RXOD:CVE-2023-51779	kernel	7
#I8UHLA:CVE-2023-48795	python-paramiko	5.9
#I8WDRH:CVE-2023-0437	mongo-c-driver	5.3
#I8VDQE:CVE-2023-35887	apache-sshd	4.3

issue	仓库
#I8UY7N:ironjacamar 该包的二进制包未发布在sp1的源中，导致narayana自编译的时候缺少编译依赖	ironjacamar
#I5M61D:22.03 LTS版本检测到可疑TrojanSource代码：存在BiDi控制字符	ibus-typing-booster
#I8WHDS:remove sensitive info	samba
#I8UZTK:【OLK-5.10】KASAN: use-after-free Write in expire_timers	kernel
#I8WCJM:【openEuler-1.0-LTS】sec磁盘加解密场景，多线程压力出现calltrace	kernel

里程碑	任务ID	任务标题	优先级	sig组	关联仓库	任务路径
openEuler 20.03LTS SP1 update2103	I3E5C1	【20.03-SP1】【arm/x86】服务启动失败	主要	sig/bigdata	src-openEuler/hadoop	https://gitee.com/open_euler/dashboard?issue_id=I3E5C1
openEuler-20.03-LTS-SP1	I3QGU7	系统不支持GB18030	无优先级	sig/TC	openEuler/community	https://gitee.com/open_euler/dashboard?issue_id=I3QGU7
openEuler 20.03LTS SP1 update210926	I4CMSV	【20.03-LTS-SP1】【arm/x86】搭建Kubernetes 集群缺少包etcd	无优先级	sig/TC	openEuler/community	https://gitee.com/open_euler/dashboard?issue_id=I4CMSV
openEuler-20.03-LTS-SP1-dailybuild	I5Y99T	mate-desktop install problem in openEuler:20:03:LTS:SP1	无优先级	sig/sig-mate-desktop	src-openEuler/mate-desktop	https://gitee.com/open_euler/dashboard?issue_id=I5Y99T

issue	仓库
#I8NMNV:libmicrohttpd build problem in openEuler:22.03-LTS	libmicrohttpd
#I66TRA:【5.10】【安全加固】安装cloud-init包，/etc/cloud/cloud.cfg sudo默认参数权限过大，应该删除	cloud-init
#I5M61D:22.03 LTS版本检测到可疑TrojanSource代码：存在BiDi控制字符	ibus-typing-booster
#I8WHDS:remove sensitive info	samba
#I8ONTF:使用checkpatch脚本检查loongarch/kvm代码，脚本报错	kernel
#I8ORHJ:[OLK-5.10] livepatch_wo_ftrace方案移除对replace字段的处理	kernel
#I8TM21:[Backport] ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()	kernel

issue	仓库
#I8CJE5:cloud-init会生成dsa密钥，长度1024，属于不安全的算法，建议删除	cloud-init
#I5M61D:22.03 LTS版本检测到可疑TrojanSource代码：存在BiDi控制字符	ibus-typing-booster
#I8WHDS:remove sensitive info	samba
#I8ORHJ:[OLK-5.10] livepatch_wo_ftrace方案移除对replace字段的处理	kernel
#I8TM21:[Backport] ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()	kernel

issue	仓库
#I8HZ7W:从内核态获取dmac	kernel
#I8W69Y:【22.03 SP2】从内核态获取dmac信息	rdma-core
#I8CJE5:cloud-init会生成dsa密钥，长度1024，属于不安全的算法，建议删除	cloud-init
#I8W46D:【22.03 SP2】High-priority bugfixes to be incorporated from SP3	rdma-core
#I5M61D:22.03 LTS版本检测到可疑TrojanSource代码：存在BiDi控制字符	ibus-typing-booster
#I8WHDS:remove sensitive info	samba
#I8W3IU:RDMA/hns: Backport bugfixes for openEuler SP2	kernel
#I8ORHJ:[OLK-5.10] livepatch_wo_ftrace方案移除对replace字段的处理	kernel
#I8TM21:[Backport] ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()	kernel

严重等级（Severity Rating）	漏洞修复时长
致命（Critical）	7天
高（High）	14天
中（Medium）	30天
低（Low）	30天

漏洞编号	Issue ID	剩余天数	CVSS评分	软件包	责任SIG
CVE-2022-26612	I8WS07	4.57	9.8	hadoop-3.1	sig-bigdata
CVE-2022-25168	I8WRZ9	4.57	9.8	hadoop-3.1	sig-bigdata
CVE-2021-37404	I8WRYE	4.57	9.8	hadoop-3.1	sig-bigdata
CVE-2023-41419	I84A04	5.55	9.8	python-gevent	Programming-language
CVE-2023-51698	I8VT5F	1.3	9.6	atril	sig-UKUI
CVE-2023-4584	I7WZ0C	1.14	8.8	firefox	Application
CVE-2023-32215	I71R4G	6.64	8.8	firefox	Application
CVE-2023-32213	I71R3Y	6.64	8.8	firefox	Application
CVE-2023-32207	I71R3W	6.64	8.8	firefox	Application
CVE-2023-29536	I6UVEI	6.64	8.8	firefox	Application
CVE-2023-29541	I6UVDN	6.64	8.8	firefox	Application
CVE-2023-29539	I6UVDJ	6.64	8.8	firefox	Application
CVE-2023-29550	I6UVCU	6.64	8.8	firefox	Application
CVE-2021-33036	I8WRXS	11.57	8.8	hadoop-3.1	sig-bigdata
CVE-2021-25642	I8WRWB	11.57	8.8	hadoop-3.1	sig-bigdata
CVE-2024-21886	I8WQ1L	13.8	8.4	xorg-x11-server	Desktop
CVE-2023-45234	I8WU9Y	12.3	8.3	edk2	Virt
CVE-2023-45230	I8WU9U	12.3	8.3	edk2	Virt
CVE-2023-45235	I8WU92	12.3	8.3	edk2	Virt
CVE-2023-41056	I8UW34	5.3	8.1	redis6	sig-bigdata
CVE-2023-41056	I8UW26	5.3	8.1	redis5	sig-bigdata
CVE-2023-5455	I8WSRQ	12.3	8.1	freeipa	oVirt
CVE-2023-6040	I8VPKT	7.3	7.8	kernel	Kernel
CVE-2024-0582	I8WOO7	11.3	7.8	kernel	Kernel
CVE-2024-0562	I8WDR9	11.3	7.8	kernel	Kernel
CVE-2024-0607	I8WQRG	13.3	7.8	kernel	Kernel
CVE-2023-6816	I8WPZP	13.3	7.8	xorg-x11-server	Desktop
CVE-2024-0229	I8WPZK	13.8	7.8	xorg-x11-server	Desktop
CVE-2024-21885	I8WPZI	13.8	7.8	xorg-x11-server	Desktop
CVE-2021-37311	I8TQBI	0.3	7.5	fcitx	Desktop
CVE-2023-1999	I6VVSM	0.64	7.5	firefox	Application
CVE-2023-40462	I8URAV	4.3	7.5	tinyxml	sig-compat-winapp
CVE-2022-3171	I8V2EA	4.8	7.5	protobuf2	sig-bigdata
CVE-2022-34169	I8X0S3	12.3	7.5	kernel	Kernel
CVE-2023-45232	I8WUA4	12.3	7.5	edk2	Virt
CVE-2023-45233	I8WU8W	12.3	7.5	edk2	Virt
CVE-2024-20932	I8WQS3	12.3	7.5	openjdk-1.8.0	Compiler
CVE-2023-39325	I8X4K3	13.3	7.5	runc	sig-CloudNative
CVE-2023-39325	I8X4G4	13.3	7.5	yaml-cpp03	Base-service
CVE-2023-39325	I8X4G2	13.3	7.5	cri-tools	sig-CloudNative
CVE-2023-39325	I8X4FZ	13.3	7.5	cri-o	sig-CloudNative
CVE-2023-39325	I8X4FY	13.3	7.5	ignition	sig-K8sDistro
CVE-2023-39325	I8X4FP	13.3	7.5	ansible	dev-utils
CVE-2023-39325	I8X4E3	13.3	7.5	containerd	sig-CloudNative
CVE-2023-39325	I8X4DU	13.3	7.5	ceph	sig-ceph
CVE-2023-39325	I8X4DI	13.3	7.5	toolbox	sig-CloudNative
CVE-2023-39325	I8X4DF	13.3	7.5	etcd	sig-CloudNative
CVE-2023-39325	I8X4DC	13.3	7.5	grafana	Application
CVE-2024-20918	I8WQXR	11.71	7.4	openjdk-11	Compiler
CVE-2024-20952	I8WQVZ	11.71	7.4	openjdk-11	Compiler
CVE-2024-20918	I8WQXT	12.3	7.4	openjdk-1.8.0	Compiler
CVE-2024-20952	I8WQW1	12.3	7.4	openjdk-1.8.0	Compiler
CVE-2024-20918	I8WQVF	12.3	7.4	openjdk-latest	Compiler
CVE-2024-20952	I8WQT8	12.3	7.4	openjdk-latest	Compiler
CVE-2024-0565	I8WEOK	11.3	7.1	kernel	Kernel
CVE-2024-0646	I8X0RZ	12.3	7.0	kernel	Kernel
CVE-2023-4575	I7WYY3	1.14	6.5	firefox	Application
CVE-2021-23841	I8QI4W	1.61	5.9	openresty-openssl111	sig-OpenResty
CVE-2022-36021	I6IRRY	11.3	5.5	redis6	sig-bigdata
CVE-2023-22081	I88VNW	8.14	5.3	openjdk-latest	Compiler
CVE-2023-22025	I88JFX	8.14	3.7	openjdk-latest	Compiler
CVE-2023-28786	I8SG9E	9.3	3.7	kf5-solid	sig-UKUI