- Release - mailweb.openeuler.org

【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/6/9 release评审通知
by guoxiaoqi 12 Jun '21

12 Jun '21

openEuler 20.03 LTS SP1 Update 20210609 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年6月14日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210609 代码冻结： 20210609 转测试时间：20210610 版本发布： 20210612 本次更新主要涉及：bind、qemu等包的CVE修复以及fuse的拆包；任务ID CVE 分数优先级接口变更关联仓库 I3NV4C CVE-2020-36317 7.5 主要不涉及 src-openEuler/rust I3NV4F CVE-2021-28875 7.5 主要不涉及 src-openEuler/rust I3NV4J CVE-2021-28878 7.5 主要不涉及 src-openEuler/rust I3NV4K CVE-2021-28877 7.5 主要不涉及 src-openEuler/rust I3NV4O CVE-2021-28876 7.5 主要不涉及 src-openEuler/rust I3NW7B CVE-2021-28879 9.8 严重不涉及 src-openEuler/rust I3NX8L CVE-2020-36318 9.8 严重不涉及 src-openEuler/rust I3O4XO CVE-2020-36323 8.2 主要不涉及 src-openEuler/rust I3QYQE CVE-2021-2161 5.9 次要不涉及 src-openEuler/openjdk-11 I3QYQH CVE-2021-2163 5.3 次要不涉及 src-openEuler/openjdk-11 I3ROXB CVE-2021-20266 4.9 次要不涉及 src-openEuler/rpm I3TF7Y CVE-2021-3541 6.5 次要不涉及 src-openEuler/libxml2 I3U5EY CVE-2020-27753 5.5 次要不涉及 src-openEuler/ImageMagick I3U5F1 CVE-2020-25667 5.5 次要不涉及 src-openEuler/ImageMagick I3U5F3 CVE-2020-27756 5.5 次要不涉及 src-openEuler/ImageMagick I3U6WJ CVE-2021-3472 7.8 主要不涉及 src-openEuler/xorg-x11-server I3U9TC CVE-2021-3421 5.5 次要不涉及 src-openEuler/rpm I3UBQC CVE-2021-30465 7.5 主要不涉及 src-openEuler/runc I3UFOQ CVE-2021-20181 7.5 主要不涉及 src-openEuler/qemu I3ULDL CVE-2021-2161 5.9 次要不涉及 src-openEuler/openjdk-1.8.0 I3UMM3 CVE-2021-2163 5.3 次要不涉及 src-openEuler/openjdk-1.8.0 I3UPMO CVE-2021-25317 3.3 不重要不涉及 src-openEuler/cups I3UPQ6 CVE-2021-22897 3.7 不重要不涉及 src-openEuler/curl I3UPQA CVE-2021-22898 5.9 次要不涉及 src-openEuler/curl I3UPWC CVE-2021-29478 8.8 主要不涉及 src-openEuler/redis bug/feature related repo related issue/PR (1)Incorrect label / name in case regeneration of HTML without regeneration of dot files (2)Md5 hash does not match for two different runs doxygen https://gitee.com/src-openeuler/doxygen/pulls/36 From: xiasenlin Sent: Monday, June 7, 2021 2:39 PM To: release(a)openeuler.org; qa(a)openeuler.org; sa-announce(a)openeuler.org; dev(a)openeuler.org Cc: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com>; xingchaochao <xingchaochao(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/6/2 release评审通知 openEuler 20.03 LTS SP1 Update 20210602 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年6月7日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210602 代码冻结： 20210602 转测试时间：20210603 版本发布： 20210607 本次更新主要涉及：bind、qemu等包的CVE修复以及fuse的拆包；任务ID CVE 分数优先级接口变更关联仓库 I3OJAU CVE-2021-25214 6.5 次要不涉及 bind I3OJBE CVE-2021-25215 7.5 主要不涉及 bind I3T00S CVE-2021-32617 5.5 次要不涉及 exiv2 I3QYZE CVE-2021-29468 8.8 主要不涉及 git I3SX1D CVE-2021-3200 6.5 次要不涉及 libsolv I3T023 CVE-2021-3518 8.8 主要不涉及 libxml2 I3T026 CVE-2021-3517 8.6 主要不涉及 libxml2 I3T1Y1 CVE-2021-29509 7.5 主要不涉及 rubygem-puma I3RE5J CVE-2021-20254 8.1 主要不涉及 samba I3SC49 CVE-2021-20277 7.5 主要不涉及 samba I3SLJO CVE-2020-27840 7.5 主要不涉及 samba I3RMC6 CVE-2021-29505 8.8 主要不涉及 xstream I1NJI5 CVE-2020-15469 3.1 不重要不涉及 qemu I3SX19 CVE-2020-25709 7.5 主要不涉及 openldap I3UBQC CVE-2021-30465 7.5 主要有变更 runc bug/feature related repo related issue/PR fuse软件包目前存在两个版本fuse和fuse3，现将fuse3单独建仓，拆分fuse和fuse3，将libfuse-common单独提供出子包以供用户使用时无冲突。 fuse、fuse3 https://gitee.com/openeuler/community/pulls/1839 audit升级到3.0版本 audit https://gitee.com/open_euler/dashboard?issue_id=I3R0Q8 From: xiasenlin Sent: Sunday, May 30, 2021 9:03 AM To: release(a)openeuler.org<mailto:release@openeuler.org>; qa(a)openeuler.org<mailto:qa@openeuler.org>; sa-announce(a)openeuler.org<mailto:sa-announce@openeuler.org>; dev(a)openeuler.org<mailto:dev@openeuler.org> Cc: Guoge(JVM) <ge.guo(a)huawei.com<mailto:ge.guo@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; Chenzhendong (alex) <alex.chen(a)huawei.com<mailto:alex.chen@huawei.com>>; Liyiting <liyiting(a)huawei.com<mailto:liyiting@huawei.com>>; Mingpei <mingpei(a)huawei.com<mailto:mingpei@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; xingchaochao <xingchaochao(a)huawei.com<mailto:xingchaochao@huawei.com>>; Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/28 release评审通知 openEuler 20.03 LTS SP1 Update 20210528 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月30日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210526 代码冻结： 20210526 转测试时间：20210527 版本发布： 20210530 本次更新主要涉及：mysql、ImageMagick等包的CVE修复以及RPM的bugfix；修复cve：49个 CVE清单： issue ID 任务标题 CVE评分关联仓库责任田是否涉及接口变更接口变更是否有影响 I3NYKT CVE-2021-2212 9.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKS CVE-2021-2299 9.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKR CVE-2021-2293 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKQ CVE-2021-2213 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKP CVE-2021-2215 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKO CVE-2021-2278 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKN CVE-2021-2164 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKM CVE-2021-2208 8.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKL CVE-2021-2217 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKK CVE-2021-2203 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKJ CVE-2021-2226 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKI CVE-2021-2202 8.2 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKH CVE-2021-2232 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKG CVE-2021-2301 7.1 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKF CVE-2021-2298 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKE CVE-2021-2230 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKD CVE-2021-2300 5.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKC CVE-2021-2304 6.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX9A CVE-2021-2308 3.7 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX96 CVE-2021-2172 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX91 CVE-2021-2194 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX90 CVE-2021-2170 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8P CVE-2021-2196 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8O CVE-2021-2201 6.1 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8M CVE-2021-2180 4.4 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8J CVE-2021-2307 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8I CVE-2021-2169 4.4 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8G CVE-2021-2171 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8F CVE-2021-2305 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7X CVE-2021-2179 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7W CVE-2021-2174 6.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7V CVE-2021-2193 5.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC6G CVE-2021-2166 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC66 CVE-2021-2144 7.2 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC26 CVE-2021-2146 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC20 CVE-2021-2160 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC1V CVE-2021-2162 4.3 src-openEuler/mysql 智能计算是无（仅新增命令） I3OUV2 CVE-2020-27752 7.1 src-openEuler/ImageMagick 智能计算否不涉及 I3QYAH CVE-2020-9492 8.8 src-openEuler/hadoop 智能计算否不涉及 I3RQ13 CVE-2021-20310 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ12 CVE-2021-20309 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ10 CVE-2021-20312 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ0O CVE-2021-20311 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ0M CVE-2021-20313 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQQI CVE-2021-23383 9.8 src-openEuler/nodejs-handlebars 智能计算否不涉及 I3SC5R CVE-2020-15078 7.5 src-openEuler/openvpn 智能计算否不涉及 I3SC4U CVE-2021-3504 8.1 src-openEuler/hivex 智能计算否不涉及 I3SCAN CVE-2020-27769 3.3 src-openEuler/ImageMagick 智能计算否不涉及 BUgfix清单： bug/feature related repo related issue/PR 责任田修复tpm2-abrmd-selinux子包中存储的SELinux标签信息 tpm2-abrmd https://gitee.com/open_euler/dashboard?issue_id=I3SHS5 基础服务构建时长优化 clang https://gitee.com/open_euler/dashboard?issue_id=I3AGT3 智能计算 rpm bug修复，主要问题是升级rpm、rpm-libs包后，影响其他软件包升级及yum等工具使用 rpm https://gitee.com/open_euler/dashboard?issue_id=I3RPU3 基础服务例外说明：本周转测的audit升级和fuse拆包因为issue未闭环，不发布，计划下周解决后发布发件人: xiasenlin 发送时间: 2021年5月24日 10:37 收件人: release(a)openeuler.org<mailto:release@openeuler.org>; qa(a)openeuler.org<mailto:qa@openeuler.org>; sa-announce(a)openeuler.org<mailto:sa-announce@openeuler.org>; dev(a)openeuler.org<mailto:dev@openeuler.org> 抄送: Guoge(JVM) <ge.guo(a)huawei.com<mailto:ge.guo@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; Chenzhendong (alex) <alex.chen(a)huawei.com<mailto:alex.chen@huawei.com>>; Liyiting <liyiting(a)huawei.com<mailto:liyiting@huawei.com>>; Mingpei <mingpei(a)huawei.com<mailto:mingpei@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; xingchaochao <xingchaochao(a)huawei.com<mailto:xingchaochao@huawei.com>> 主题: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/20 release评审通知 openEuler 20.03 LTS SP1 Update 20210520 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月24日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210519 代码冻结： 20210519 转测试时间：20210520 版本发布： 20210524 本次更新主要涉及：qemu、ruby等包的CVE修复以及libvirt的新特性IO悬挂，需要与qemu一起发布；修复cve：9个 CVE清单： CVE-2021-3416 6 次要 src-openEuler/qemu CVE-2021-3409 5.7 次要 src-openEuler/qemu CVE-2021-3392 3.2 不重要 src-openEuler/qemu CVE-2019-14562 5.5 次要 src-openEuler/edk2 CVE-2020-25085 5 次要 src-openEuler/qemu CVE-2021-20208 6.1 次要 src-openEuler/cifs-utils CVE-2021-28965 7.5 主要 src-openEuler/ruby CVE-2021-20095 7.8 主要 src-openEuler/babel CVE-2020-18032 9.8 严重 src-openEuler/graphviz 涉及新增libvirt特性一个 From: xiasenlin Sent: Friday, May 14, 2021 6:15 PM To: 'release(a)openeuler.org' <release(a)openeuler.org<mailto:release@openeuler.org>>; 'qa(a)openeuler.org' <qa(a)openeuler.org<mailto:qa@openeuler.org>>; 'sa-announce(a)openeuler.org' <sa-announce(a)openeuler.org<mailto:sa-announce@openeuler.org>>; 'dev(a)openeuler.org' <dev(a)openeuler.org<mailto:dev@openeuler.org>> Cc: Guoge(JVM) <ge.guo(a)huawei.com<mailto:ge.guo@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; Chenzhendong (alex) <alex.chen(a)huawei.com<mailto:alex.chen@huawei.com>>; Liyiting <liyiting(a)huawei.com<mailto:liyiting@huawei.com>>; Mingpei <mingpei(a)huawei.com<mailto:mingpei@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知 openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; xiasenlin <xiasenlin1(a)huawei.com<mailto:xiasenlin1@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler src-openEuler/mxparser 依赖 SP1 不涉及 openEuler src-openEuler/xmlpull 依赖 SP1 不涉及 openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 涉及接口变更 openEuler src-openEuler/thrift CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base…

1 0

openEuler 20.03 LTS SP2 Test round 5转测试通知
by Xuxiaosong 09 Jun '21

09 Jun '21

Test round 5版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/openeuler-2021-06-0… 欢迎感兴趣的开发者提前获取验证，对于发现的问题请及时以issue的方式反馈给openEuler社区（里程碑选择openEuler 20.03-LTS-SP2-round-5）。由本次为发布前测试环节，软件版本可能存在重大问题，不建议大规模使用。 Release计划路径 https://gitee.com/openeuler/release-management/blob/master/openEuler-20.03-… 本轮转测内容包括： 1、gcc补丁 2、issue： Test round 4解决问题单26个，问题单详见： Round1：https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=1163… Round2：https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=1188… Round3：https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=1217… Round4：https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=1239… Release plan Stage name Begin time End time key feature collect 2021-03-16 2021-03-31 Develop 2021-03-16 2021-04-26 Kernel freezing 2021-04-16 2021-04-16 Build 2021-04-26 2021-04-30 Test round 1 2021-05-6 2021-05-12 Test round 2 2021-05-17 2021-05-25 Test round 3 2021-05-26 2021-06-02 Test round 4 2021-06-04 2021-06-07 Test round 5（we are here） 2021-06-09 2021-06-11 release 2021-06-28 2021-06-30 Feture list 状态说明：discussion(方案讨论，需求未接受)，developing(开发中)，Testing(测试中)，Reject(未纳入版本) o fetur status sig owner 1 【openEuler 20.03 LTS SP2】【虚拟化】回合openEuler 21.03，vmtop支持x86<https://gitee.com/openeuler/release-management/issues/I3NLWF?from=project-i…> Testing 2 openEuler 20.03-LTS-SP2支持内存分级扩展特性<https://gitee.com/openeuler/release-management/issues/I2C2NI?from=project-i…> Testing storage liuzhiqiang26<https://gitee.com/liuzhiqiang26> 3 openEuler 20.03-LTS-SP2版本集成secgear组件<https://gitee.com/openeuler/release-management/issues/I3JE3U?from=project-i…> Testing sig-confidential-computing chenmaodong<https://gitee.com/chenmaodong> 4 openEuler 20.03 LTS SP2 support OpenStack Rocky discussion sig-openstack @joec88 @liksh @xiyuanwang @huangtianhua 5 openEuler 20.03 LTS SP2支持osinfo软件包<https://gitee.com/openeuler/release-management/issues/I3N30H?from=project-i…> Testing 6 openEuler 20.03 LTS SP2开源openEuler-rpm-config宏定义文件<https://gitee.com/openeuler/release-management/issues/I3N30J?from=project-i…> Testing 7 openEuler 20.03 LTS SP2 支持 compat-openssl10、libzip等<https://gitee.com/openeuler/release-management/issues/I3N30L?from=project-i…> Testing 8 openEuler 20.03 LTS SP2 支持libwbxml、hyperscan<https://gitee.com/openeuler/release-management/issues/I3N30N?from=project-i…> Testing 9 openEuler 20.03 LTS SP2支持microcode_ctl<https://gitee.com/openeuler/release-management/issues/I3N30S?from=project-i…> Testing 10 openEuler 20.03 LTS SP2支持bcc软件包<https://gitee.com/openeuler/release-management/issues/I3N30Q?from=project-i…> Testing 11 openEuler 20.03 LTS SP2支持树莓派<https://gitee.com/openeuler/release-management/issues/I3N30P?from=project-i…> Testing 12 openEuler 20.03 LTS SP2支持1822 HBA卡<https://gitee.com/openeuler/release-management/issues/I3N30V?from=project-i…> Testing 13 openEuler 20.03 LTS SP2支持飞腾2000+/64<https://gitee.com/openeuler/release-management/issues/I3N30W?from=project-i…> Testing 14 openEuler 20.03 LTS SP2支持maildrop和proftpd<https://gitee.com/openeuler/release-management/issues/I3N30X?from=project-i…> Testing 15 openEuler 20.03 LTS SP2支持 iSulad 2.0<https://gitee.com/openeuler/release-management/issues/I3N312?from=project-i…> Testing 16 openEuler 20.03 LTS SP2 A-tune 2.0<https://gitee.com/openeuler/release-management/issues/I3N314?from=project-i…> Testing 17 openEuler 20.03 LTS SP2 支持网络安装<https://gitee.com/openeuler/release-management/issues/I3N315?from=project-i…> Testing 18 openEuler 20.03 LTS SP2 支持 criu组件<https://gitee.com/openeuler/release-management/issues/I3N319?from=project-i…> Testing 19 openEuler 20.03 LTS SP2支持config_acpi_nfit<https://gitee.com/openeuler/release-management/issues/I3N31B?from=project-i…> Testing 20 openEuler 20.03 LTS SP2 虚拟化增强<https://gitee.com/openeuler/release-management/issues/I3N31E?from=project-i…> Testing 21 openEuler 20.03 LTS SP2 支持 UKUI桌面<https://gitee.com/openeuler/release-management/issues/I3N31F?from=project-i…> Testing 22 openEuler 20.03 LTS SP2 支持DDE桌面<https://gitee.com/openeuler/release-management/issues/I3N31J?from=project-i…> Testing 23 openEuler 20.03 LTS SP2 编译器支持openjdk<https://gitee.com/openeuler/release-management/issues/I3N31M?from=project-i…> Testing 24 openEuler 20.03 LTS SP2支持HA<https://gitee.com/openeuler/release-management/issues/I3N31O?from=project-i…> Testing 25 openEuler 20.03 LTS SP2 加速库版本同步<https://gitee.com/openeuler/release-management/issues/I3N31Q?from=project-i…> Testing 26 openEuler 20.03 LTS SP2支持金融领域软件包<https://gitee.com/openeuler/release-management/issues/I3N311?from=project-i…> Testing 27 openEuler 20.03 LTS SP2支持kmod功能<https://gitee.com/openeuler/release-management/issues/I3N30C?from=project-i…> Testing 28 openEuler 20.03 LTS SP2 CPU核故障在线隔离解决方案<https://gitee.com/openeuler/release-management/issues/I3N36L?from=project-i…> Testing 29 openEuler 20.03 LTS SP2 支持多应用版本构建和发布<https://gitee.com/openeuler/release-management/issues/I3N36K?from=project-i…> Testing 30 openEuler 20.03 LTS SP2 内存UCE故障降级，用户数据保持一致，业务可持续运行<https://gitee.com/openeuler/release-management/issues/I3N36H?from=project-i…> Testing 31 openEuler 20.03 LTS SP2 故障预测框架<https://gitee.com/openeuler/release-management/issues/I3N36F?from=project-i…> Testing 32 openEuler 20.03 LTS SP2 IO_URING全栈使能<https://gitee.com/openeuler/release-management/issues/I3N36C?from=project-i…> Testing 33 openEuler 20.03 LTS SP2 Qemu：虚拟化可靠性和可维护性增强<https://gitee.com/openeuler/release-management/issues/I3N369?from=project-i…> Testing 34 openEuler 20.03 LTS SP2 Qemu：热迁移pro，提升热迁移性能+安全<https://gitee.com/openeuler/release-management/issues/I3N368?from=project-i…> Testing 35 openEuler 20.03 LTS SP2支持StratoVirt：下一代轻量化虚拟化平台<https://gitee.com/openeuler/release-management/issues/I3N364?from=project-i…> Testing 36 【openEuler 20.03 LTS SP2】继承xfce 4.14<https://gitee.com/openeuler/release-management/issues/I3NC3I?from=project-i…> Testing xfce @dillon_chen<https://gitee.com/dillon_chen> 37 【openEuler 20.03 LTS SP2】继承Kubernetes 1.18<https://gitee.com/openeuler/release-management/issues/I3NC5H?from=project-i…> Testing sig-cloudnative @jingxiaolu<https://gitee.com/jingxiaolu> 38 【openEuler 20.03 LTS SP2】继承门禁检查功能<https://gitee.com/openeuler/release-management/issues/I3O08F?from=project-i…> Testing 39 openEuler 20.03-LTS-SP2 集成 kubernetes 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I2BHF4?from=project-i…> Testing 40 openEuler 20.03-LTS-SP2 arm虚拟机支持NMI watchdog<https://gitee.com/openeuler/release-management/issues/I2B4WL?from=project-i…> Testing 41 openEuler 20.03-LTS-SP2 集成 coredns 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXLJ?from=project-i…> Testing 42 【openEuler 20.03 LTS SP2】虚拟机热迁移支持TLS<https://gitee.com/openeuler/release-management/issues/I3IE57?from=project-i…> Testing 43 【kernel-4.19】openEuler kernel nvme 驱动增强<https://gitee.com/openeuler/release-management/issues/I1WGZE?from=project-i…> Testing 44 openEuler 20.03-LTS-SP2 集成 etcd 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXGJ?from=project-i…> Testing 历史转测试版本取用链接 Test round 4版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/test_openeuler-2021…

1 0

【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/6/2 release评审通知
by xiasenlin 07 Jun '21

07 Jun '21

openEuler 20.03 LTS SP1 Update 20210602 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年6月7日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210602 代码冻结： 20210602 转测试时间：20210603 版本发布： 20210607 本次更新主要涉及：bind、qemu等包的CVE修复以及fuse的拆包；任务ID CVE 分数优先级接口变更关联仓库 I3OJAU CVE-2021-25214 6.5 次要不涉及 bind I3OJBE CVE-2021-25215 7.5 主要不涉及 bind I3T00S CVE-2021-32617 5.5 次要不涉及 exiv2 I3QYZE CVE-2021-29468 8.8 主要不涉及 git I3SX1D CVE-2021-3200 6.5 次要不涉及 libsolv I3T023 CVE-2021-3518 8.8 主要不涉及 libxml2 I3T026 CVE-2021-3517 8.6 主要不涉及 libxml2 I3T1Y1 CVE-2021-29509 7.5 主要不涉及 rubygem-puma I3RE5J CVE-2021-20254 8.1 主要不涉及 samba I3SC49 CVE-2021-20277 7.5 主要不涉及 samba I3SLJO CVE-2020-27840 7.5 主要不涉及 samba I3RMC6 CVE-2021-29505 8.8 主要不涉及 xstream I1NJI5 CVE-2020-15469 3.1 不重要不涉及 qemu I3SX19 CVE-2020-25709 7.5 主要不涉及 openldap I3UBQC CVE-2021-30465 7.5 主要有变更 runc bug/feature related repo related issue/PR fuse软件包目前存在两个版本fuse和fuse3，现将fuse3单独建仓，拆分fuse和fuse3，将libfuse-common单独提供出子包以供用户使用时无冲突。 fuse、fuse3 https://gitee.com/openeuler/community/pulls/1839 audit升级到3.0版本 audit https://gitee.com/open_euler/dashboard?issue_id=I3R0Q8 From: xiasenlin Sent: Sunday, May 30, 2021 9:03 AM To: release(a)openeuler.org; qa(a)openeuler.org; sa-announce(a)openeuler.org; dev(a)openeuler.org Cc: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com>; xingchaochao <xingchaochao(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/28 release评审通知 openEuler 20.03 LTS SP1 Update 20210528 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月30日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210526 代码冻结： 20210526 转测试时间：20210527 版本发布： 20210530 本次更新主要涉及：mysql、ImageMagick等包的CVE修复以及RPM的bugfix；修复cve：49个 CVE清单： issue ID 任务标题 CVE评分关联仓库责任田是否涉及接口变更接口变更是否有影响 I3NYKT CVE-2021-2212 9.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKS CVE-2021-2299 9.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKR CVE-2021-2293 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKQ CVE-2021-2213 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKP CVE-2021-2215 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKO CVE-2021-2278 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKN CVE-2021-2164 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKM CVE-2021-2208 8.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKL CVE-2021-2217 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKK CVE-2021-2203 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKJ CVE-2021-2226 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKI CVE-2021-2202 8.2 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKH CVE-2021-2232 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKG CVE-2021-2301 7.1 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKF CVE-2021-2298 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKE CVE-2021-2230 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKD CVE-2021-2300 5.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKC CVE-2021-2304 6.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX9A CVE-2021-2308 3.7 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX96 CVE-2021-2172 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX91 CVE-2021-2194 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX90 CVE-2021-2170 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8P CVE-2021-2196 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8O CVE-2021-2201 6.1 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8M CVE-2021-2180 4.4 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8J CVE-2021-2307 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8I CVE-2021-2169 4.4 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8G CVE-2021-2171 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8F CVE-2021-2305 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7X CVE-2021-2179 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7W CVE-2021-2174 6.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7V CVE-2021-2193 5.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC6G CVE-2021-2166 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC66 CVE-2021-2144 7.2 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC26 CVE-2021-2146 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC20 CVE-2021-2160 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC1V CVE-2021-2162 4.3 src-openEuler/mysql 智能计算是无（仅新增命令） I3OUV2 CVE-2020-27752 7.1 src-openEuler/ImageMagick 智能计算否不涉及 I3QYAH CVE-2020-9492 8.8 src-openEuler/hadoop 智能计算否不涉及 I3RQ13 CVE-2021-20310 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ12 CVE-2021-20309 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ10 CVE-2021-20312 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ0O CVE-2021-20311 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ0M CVE-2021-20313 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQQI CVE-2021-23383 9.8 src-openEuler/nodejs-handlebars 智能计算否不涉及 I3SC5R CVE-2020-15078 7.5 src-openEuler/openvpn 智能计算否不涉及 I3SC4U CVE-2021-3504 8.1 src-openEuler/hivex 智能计算否不涉及 I3SCAN CVE-2020-27769 3.3 src-openEuler/ImageMagick 智能计算否不涉及 BUgfix清单： bug/feature related repo related issue/PR 责任田修复tpm2-abrmd-selinux子包中存储的SELinux标签信息 tpm2-abrmd https://gitee.com/open_euler/dashboard?issue_id=I3SHS5 基础服务构建时长优化 clang https://gitee.com/open_euler/dashboard?issue_id=I3AGT3 智能计算 rpm bug修复，主要问题是升级rpm、rpm-libs包后，影响其他软件包升级及yum等工具使用 rpm https://gitee.com/open_euler/dashboard?issue_id=I3RPU3 基础服务例外说明：本周转测的audit升级和fuse拆包因为issue未闭环，不发布，计划下周解决后发布发件人: xiasenlin 发送时间: 2021年5月24日 10:37 收件人: release(a)openeuler.org<mailto:release@openeuler.org>; qa(a)openeuler.org<mailto:qa@openeuler.org>; sa-announce(a)openeuler.org<mailto:sa-announce@openeuler.org>; dev(a)openeuler.org<mailto:dev@openeuler.org> 抄送: Guoge(JVM) <ge.guo(a)huawei.com<mailto:ge.guo@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; Chenzhendong (alex) <alex.chen(a)huawei.com<mailto:alex.chen@huawei.com>>; Liyiting <liyiting(a)huawei.com<mailto:liyiting@huawei.com>>; Mingpei <mingpei(a)huawei.com<mailto:mingpei@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; xingchaochao <xingchaochao(a)huawei.com<mailto:xingchaochao@huawei.com>> 主题: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/20 release评审通知 openEuler 20.03 LTS SP1 Update 20210520 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月24日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210519 代码冻结： 20210519 转测试时间：20210520 版本发布： 20210524 本次更新主要涉及：qemu、ruby等包的CVE修复以及libvirt的新特性IO悬挂，需要与qemu一起发布；修复cve：9个 CVE清单： CVE-2021-3416 6 次要 src-openEuler/qemu CVE-2021-3409 5.7 次要 src-openEuler/qemu CVE-2021-3392 3.2 不重要 src-openEuler/qemu CVE-2019-14562 5.5 次要 src-openEuler/edk2 CVE-2020-25085 5 次要 src-openEuler/qemu CVE-2021-20208 6.1 次要 src-openEuler/cifs-utils CVE-2021-28965 7.5 主要 src-openEuler/ruby CVE-2021-20095 7.8 主要 src-openEuler/babel CVE-2020-18032 9.8 严重 src-openEuler/graphviz 涉及新增libvirt特性一个 From: xiasenlin Sent: Friday, May 14, 2021 6:15 PM To: 'release(a)openeuler.org' <release(a)openeuler.org<mailto:release@openeuler.org>>; 'qa(a)openeuler.org' <qa(a)openeuler.org<mailto:qa@openeuler.org>>; 'sa-announce(a)openeuler.org' <sa-announce(a)openeuler.org<mailto:sa-announce@openeuler.org>>; 'dev(a)openeuler.org' <dev(a)openeuler.org<mailto:dev@openeuler.org>> Cc: Guoge(JVM) <ge.guo(a)huawei.com<mailto:ge.guo@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; Chenzhendong (alex) <alex.chen(a)huawei.com<mailto:alex.chen@huawei.com>>; Liyiting <liyiting(a)huawei.com<mailto:liyiting@huawei.com>>; Mingpei <mingpei(a)huawei.com<mailto:mingpei@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知 openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; xiasenlin <xiasenlin1(a)huawei.com<mailto:xiasenlin1@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler src-openEuler/mxparser 依赖 SP1 不涉及 openEuler src-openEuler/xmlpull 依赖 SP1 不涉及 openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 涉及接口变更 openEuler src-openEuler/thrift CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base…

1 0

openEuler 20.03 LTS SP2 Test round 4转测试通知
by xiasenlin 04 Jun '21

04 Jun '21

转测试计划比原计划有1天延期。 Test round 4版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/test_openeuler-2021… 欢迎感兴趣的开发者提前获取验证，对于发现的问题请及时以issue的方式反馈给openEuler社区（里程碑选择openEuler 20.03-LTS-SP2-round-4）。由本次为发布前测试环节，软件版本可能存在重大问题，不建议大规模使用。 Release计划路径 https://gitee.com/openeuler/release-management/blob/master/openEuler-20.03-… 本轮转测内容包括： 1、新增openJDK-latest； 2、 CPU故障隔离方案内核部分； 3、 issue： Test round1~round3已解决问题单120个，未解决的问题单详见： Round1：https://gitee.com/open_euler/dashboard/issues?sort=created_at%20desc… Round2：https://gitee.com/open_euler/dashboard/issues?sort=created_at%20desc… Round3：https://gitee.com/open_euler/dashboard/issues?sort=created_at%20desc… Release plan Stage name Begin time End time key feature collect 2021-03-16 2021-03-31 Develop 2021-03-16 2021-04-26 Kernel freezing 2021-04-16 2021-04-16 Build 2021-04-26 2021-04-30 Test round 1 2021-05-6 2021-05-12 Test round 2 2021-05-17 2021-05-25 Test round 3 2021-05-26 2021-06-02 Test round 4（we are here） 2021-06-04 2021-06-07 Test round 5 2021-06-09 2021-06-11 release 2021-06-28 2021-06-30 Feture list 状态说明：discussion(方案讨论，需求未接受)，developing(开发中)，Testing(测试中)，Reject(未纳入版本) no fetur status sig owner 1 【openEuler 20.03 LTS SP2】【虚拟化】回合openEuler 21.03，vmtop支持x86<https://gitee.com/openeuler/release-management/issues/I3NLWF?from=project-i…> Testing 2 openEuler 20.03-LTS-SP2支持内存分级扩展特性<https://gitee.com/openeuler/release-management/issues/I2C2NI?from=project-i…> Testing storage liuzhiqiang26<https://gitee.com/liuzhiqiang26> 3 openEuler 20.03-LTS-SP2版本集成secgear组件<https://gitee.com/openeuler/release-management/issues/I3JE3U?from=project-i…> Testing sig-confidential-computing chenmaodong<https://gitee.com/chenmaodong> 4 openEuler 20.03 LTS SP2 support OpenStack Rocky discussion sig-openstack @joec88 @liksh @xiyuanwang @huangtianhua 5 openEuler 20.03 LTS SP2支持osinfo软件包<https://gitee.com/openeuler/release-management/issues/I3N30H?from=project-i…> Testing 6 openEuler 20.03 LTS SP2开源openEuler-rpm-config宏定义文件<https://gitee.com/openeuler/release-management/issues/I3N30J?from=project-i…> Testing 7 openEuler 20.03 LTS SP2 支持 compat-openssl10、libzip等<https://gitee.com/openeuler/release-management/issues/I3N30L?from=project-i…> Testing 8 openEuler 20.03 LTS SP2 支持libwbxml、hyperscan<https://gitee.com/openeuler/release-management/issues/I3N30N?from=project-i…> Testing 9 openEuler 20.03 LTS SP2支持microcode_ctl<https://gitee.com/openeuler/release-management/issues/I3N30S?from=project-i…> Testing 10 openEuler 20.03 LTS SP2支持bcc软件包<https://gitee.com/openeuler/release-management/issues/I3N30Q?from=project-i…> Testing 11 openEuler 20.03 LTS SP2支持树莓派<https://gitee.com/openeuler/release-management/issues/I3N30P?from=project-i…> Testing 12 openEuler 20.03 LTS SP2支持1822 HBA卡<https://gitee.com/openeuler/release-management/issues/I3N30V?from=project-i…> Testing 13 openEuler 20.03 LTS SP2支持飞腾2000+/64<https://gitee.com/openeuler/release-management/issues/I3N30W?from=project-i…> Testing 14 openEuler 20.03 LTS SP2支持maildrop和proftpd<https://gitee.com/openeuler/release-management/issues/I3N30X?from=project-i…> Testing 15 openEuler 20.03 LTS SP2支持 iSulad 2.0<https://gitee.com/openeuler/release-management/issues/I3N312?from=project-i…> Testing 16 openEuler 20.03 LTS SP2 A-tune 2.0<https://gitee.com/openeuler/release-management/issues/I3N314?from=project-i…> Testing 17 openEuler 20.03 LTS SP2 支持网络安装<https://gitee.com/openeuler/release-management/issues/I3N315?from=project-i…> Testing 18 openEuler 20.03 LTS SP2 支持 criu组件<https://gitee.com/openeuler/release-management/issues/I3N319?from=project-i…> Testing 19 openEuler 20.03 LTS SP2支持config_acpi_nfit<https://gitee.com/openeuler/release-management/issues/I3N31B?from=project-i…> Testing 20 openEuler 20.03 LTS SP2 虚拟化增强<https://gitee.com/openeuler/release-management/issues/I3N31E?from=project-i…> Testing 21 openEuler 20.03 LTS SP2 支持 UKUI桌面<https://gitee.com/openeuler/release-management/issues/I3N31F?from=project-i…> Testing 22 openEuler 20.03 LTS SP2 支持openGauss<https://gitee.com/openeuler/release-management/issues/I3N31I?from=project-i…> Discussion 23 openEuler 20.03 LTS SP2 支持DDE桌面<https://gitee.com/openeuler/release-management/issues/I3N31J?from=project-i…> Testing 24 openEuler 20.03 LTS SP2 编译器支持openjdk<https://gitee.com/openeuler/release-management/issues/I3N31M?from=project-i…> Testing 25 openEuler 20.03 LTS SP2支持HA<https://gitee.com/openeuler/release-management/issues/I3N31O?from=project-i…> Testing 26 openEuler 20.03 LTS SP2 加速库版本同步<https://gitee.com/openeuler/release-management/issues/I3N31Q?from=project-i…> Testing 27 openEuler 20.03 LTS SP2支持金融领域软件包<https://gitee.com/openeuler/release-management/issues/I3N311?from=project-i…> Testing 28 openEuler 20.03 LTS SP2支持kmod功能<https://gitee.com/openeuler/release-management/issues/I3N30C?from=project-i…> Testing 29 openEuler 20.03 LTS SP2支持华为多路径<https://gitee.com/openeuler/release-management/issues/I3N2XS?from=project-i…> Discussion 30 openEuler 20.03 LTS SP2 CPU核故障在线隔离解决方案<https://gitee.com/openeuler/release-management/issues/I3N36L?from=project-i…> Testing 31 openEuler 20.03 LTS SP2 支持多应用版本构建和发布<https://gitee.com/openeuler/release-management/issues/I3N36K?from=project-i…> Testing 32 openEuler 20.03 LTS SP2 内存UCE故障降级，用户数据保持一致，业务可持续运行<https://gitee.com/openeuler/release-management/issues/I3N36H?from=project-i…> Testing 33 openEuler 20.03 LTS SP2 故障预测框架<https://gitee.com/openeuler/release-management/issues/I3N36F?from=project-i…> Testing 34 openEuler 20.03 LTS SP2 IO_URING全栈使能<https://gitee.com/openeuler/release-management/issues/I3N36C?from=project-i…> Testing 35 openEuler 20.03 LTS SP2 Qemu：虚拟化可靠性和可维护性增强<https://gitee.com/openeuler/release-management/issues/I3N369?from=project-i…> Testing 36 openEuler 20.03 LTS SP2 Qemu：热迁移pro，提升热迁移性能+安全<https://gitee.com/openeuler/release-management/issues/I3N368?from=project-i…> Testing 37 openEuler 20.03 LTS SP2支持StratoVirt：下一代轻量化虚拟化平台<https://gitee.com/openeuler/release-management/issues/I3N364?from=project-i…> Testing 38 【openEuler 20.03 LTS SP2】继承xfce 4.14<https://gitee.com/openeuler/release-management/issues/I3NC3I?from=project-i…> Testing xfce @dillon_chen<https://gitee.com/dillon_chen> 39 【openEuler 20.03 LTS SP2】继承Kubernetes 1.18<https://gitee.com/openeuler/release-management/issues/I3NC5H?from=project-i…> Testing sig-cloudnative @jingxiaolu<https://gitee.com/jingxiaolu> 40 【openEuler 20.03 LTS SP2】继承门禁检查功能<https://gitee.com/openeuler/release-management/issues/I3O08F?from=project-i…> Testing 41 openEuler 20.03-LTS-SP2 集成 kubernetes 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I2BHF4?from=project-i…> Testing 42 openEuler 20.03-LTS-SP2 arm虚拟机支持NMI watchdog<https://gitee.com/openeuler/release-management/issues/I2B4WL?from=project-i…> Testing 43 openEuler 20.03-LTS-SP2 集成 coredns 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXLJ?from=project-i…> Testing 44 【openEuler 20.03 LTS SP2】虚拟机热迁移支持TLS<https://gitee.com/openeuler/release-management/issues/I3IE57?from=project-i…> Testing 45 【kernel-4.19】openEuler kernel nvme 驱动增强<https://gitee.com/openeuler/release-management/issues/I1WGZE?from=project-i…> Testing 46 openEuler 20.03-LTS-SP2 集成 etcd 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXGJ?from=project-i…> Testing 历史转测试版本取用链接 Test round 3版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/test_openeuler-2021…

1 0

Re: [Dev] 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/28 release评审通知
by Wang Jianmin 30 May '21

30 May '21

Hi，Senlin，请问 issue 链接是哪一个？谢谢。 ——王建民 From: <dev-bounces(a)openeuler.org> on behalf of xiasenlin <xiasenlin1(a)huawei.com> Date: Sunday, 30 May 2021 at 9:03 AM To: "release(a)openeuler.org" <release(a)openeuler.org>, "qa(a)openeuler.org" <qa(a)openeuler.org>, "sa-announce(a)openeuler.org" <sa-announce(a)openeuler.org>, "dev(a)openeuler.org" <dev(a)openeuler.org> Cc: "Guoge(JVM)" <ge.guo(a)huawei.com>, chenyaqiang <chenyaqiang(a)huawei.com>, "liyongqiang (H)" <liyongqiang10(a)huawei.com>, "Chenzhendong (alex)" <alex.chen(a)huawei.com>, Liyiting <liyiting(a)huawei.com>, Mingpei <mingpei(a)huawei.com>, Xuxiaosong <xuxiaosong(a)huawei.com>, Solar <Hufeng>, "<solar.hu(a)huawei.com>, Yanxiaobing <yanxiaobing(a)huawei.com>, Liujingang (Bob) ," <liujingang09(a)huawei.com>, "fanjiachen (A)" <fanjiachen3(a)huawei.com>, guoxiaoqi <guoxiaoqi2(a)huawei.com>, xingchaochao <xingchaochao(a)huawei.com>, Yanxiaobing <yanxiaobing(a)huawei.com> Subject: [Dev] 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/28 release评审通知 openEuler 20.03 LTS SP1 Update 20210528 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月30日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210526 代码冻结： 20210526 转测试时间：20210527 版本发布： 20210530 本次更新主要涉及：mysql、ImageMagick等包的CVE修复以及RPM的bugfix；修复cve：49个 CVE清单： issue ID任务标题CVE评分关联仓库责任田是否涉及接口变更接口变更是否有影响 I3NYKTCVE-2021-22129.8src-openEuler/mysql智能计算是无（仅新增命令） I3NYKSCVE-2021-22999.8src-openEuler/mysql智能计算是无（仅新增命令） I3NYKRCVE-2021-22937.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKQCVE-2021-22137.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKPCVE-2021-22157.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKOCVE-2021-22787.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKNCVE-2021-21647.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKMCVE-2021-22088.8src-openEuler/mysql智能计算是无（仅新增命令） I3NYKLCVE-2021-22177.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKKCVE-2021-22037.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKJCVE-2021-22267.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKICVE-2021-22028.2src-openEuler/mysql智能计算是无（仅新增命令） I3NYKHCVE-2021-22327.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKGCVE-2021-23017.1src-openEuler/mysql智能计算是无（仅新增命令） I3NYKFCVE-2021-22984.9src-openEuler/mysql智能计算是无（仅新增命令） I3NYKECVE-2021-22304.9src-openEuler/mysql智能计算是无（仅新增命令） I3NYKDCVE-2021-23005.5src-openEuler/mysql智能计算是无（仅新增命令） I3NYKCCVE-2021-23046.5src-openEuler/mysql智能计算是无（仅新增命令） I3NX9ACVE-2021-23083.7src-openEuler/mysql智能计算是无（仅新增命令） I3NX96CVE-2021-21724.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX91CVE-2021-21944.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX90CVE-2021-21704.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX8PCVE-2021-21964.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX8OCVE-2021-22016.1src-openEuler/mysql智能计算是无（仅新增命令） I3NX8MCVE-2021-21804.4src-openEuler/mysql智能计算是无（仅新增命令） I3NX8JCVE-2021-23074.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX8ICVE-2021-21694.4src-openEuler/mysql智能计算是无（仅新增命令） I3NX8GCVE-2021-21714.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX8FCVE-2021-23054.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX7XCVE-2021-21794.9src-openEuler/mysql智能计算是无（仅新增命令） I3NX7WCVE-2021-21746.5src-openEuler/mysql智能计算是无（仅新增命令） I3NX7VCVE-2021-21935.5src-openEuler/mysql智能计算是无（仅新增命令） I3OC6GCVE-2021-21664.9src-openEuler/mysql智能计算是无（仅新增命令） I3OC66CVE-2021-21447.2src-openEuler/mysql智能计算是无（仅新增命令） I3OC26CVE-2021-21464.9src-openEuler/mysql智能计算是无（仅新增命令） I3OC20CVE-2021-21604.9src-openEuler/mysql智能计算是无（仅新增命令） I3OC1VCVE-2021-21624.3src-openEuler/mysql智能计算是无（仅新增命令） I3OUV2CVE-2020-277527.1src-openEuler/ImageMagick智能计算否不涉及 I3QYAHCVE-2020-94928.8src-openEuler/hadoop智能计算否不涉及 I3RQ13CVE-2021-203107.5src-openEuler/ImageMagick智能计算否不涉及 I3RQ12CVE-2021-203097.5src-openEuler/ImageMagick智能计算否不涉及 I3RQ10CVE-2021-203127.5src-openEuler/ImageMagick智能计算否不涉及 I3RQ0OCVE-2021-203117.5src-openEuler/ImageMagick智能计算否不涉及 I3RQ0MCVE-2021-203137.5src-openEuler/ImageMagick智能计算否不涉及 I3RQQICVE-2021-233839.8src-openEuler/nodejs-handlebars智能计算否不涉及 I3SC5RCVE-2020-150787.5src-openEuler/openvpn智能计算否不涉及 I3SC4UCVE-2021-35048.1src-openEuler/hivex智能计算否不涉及 I3SCANCVE-2020-277693.3src-openEuler/ImageMagick智能计算否不涉及 BUgfix清单： bug/featurerelated reporelated issue/PR责任田修复tpm2-abrmd-selinux子包中存储的SELinux标签信息tpm2-abrmdhttps://gitee.com/open_euler… 构建时长优化clanghttps://gitee.com/open_euler/dashboard?issue_id=I3AGT3智能计算 rpm bug修复，主要问题是升级rpm、rpm-libs包后，影响其他软件包升级及yum等工具使用rpmhttps://gitee.com/open_eul… 例外说明：本周转测的audit升级和fuse拆包因为issue未闭环，不发布，计划下周解决后发布发件人: xiasenlin 发送时间: 2021年5月24日 10:37 收件人: release(a)openeuler.org; qa(a)openeuler.org; sa-announce(a)openeuler.org; dev(a)openeuler.org 抄送: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com>; xingchaochao <xingchaochao(a)huawei.com> 主题: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/20 release评审通知 openEuler 20.03 LTS SP1 Update 20210520 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月24日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210519 代码冻结： 20210519 转测试时间：20210520 版本发布： 20210524 本次更新主要涉及：qemu、ruby等包的CVE修复以及libvirt的新特性IO悬挂，需要与qemu一起发布；修复cve：9个 CVE清单： CVE-2021-34166次要src-openEuler/qemu CVE-2021-34095.7次要src-openEuler/qemu CVE-2021-33923.2不重要src-openEuler/qemu CVE-2019-145625.5次要src-openEuler/edk2 CVE-2020-250855次要src-openEuler/qemu CVE-2021-202086.1次要src-openEuler/cifs-utils CVE-2021-289657.5主要src-openEuler/ruby CVE-2021-200957.8主要src-openEuler/babel CVE-2020-180329.8严重src-openEuler/graphviz 涉及新增libvirt特性一个 From: xiasenlin Sent: Friday, May 14, 2021 6:15 PM To: 'release(a)openeuler.org' <release(a)openeuler.org>; 'qa(a)openeuler.org' <qa(a)openeuler.org>; 'sa-announce(a)openeuler.org' <sa-announce(a)openeuler.org>; 'dev(a)openeuler.org' <dev(a)openeuler.org> Cc: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知 openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com> Cc: Yanxiaobing <yanxiaobing(a)huawei.com>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com>; wangchong (J) <wangchong56(a)huawei.com>; yaokai (G) <yaokai13(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; xiasenlin <xiasenlin1(a)huawei.com> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-ioCVESP1不涉及openEuler src-openEuler/binutilsCVESP1不涉及基础服务 src-openEuler/dnsmasqCVESP1不涉及网络组 src-openEuler/exiv2CVESP1不涉及网络组 src-openEuler/gnome-autoarCVESP1不涉及网络组 src-openEuler/golangCVESP1不涉及容器组 src-openEuler/jerseyCVESP1不涉及openEuler src-openEuler/python-jinja2CVESP1不涉及基础服务 src-openEuler/rubygem-actionviewCVESP1不涉及openEuler src-openEuler/velocityCVESP1不涉及openEuler src-openEuler/xstreamCVESP1不涉及openEuler src-openEuler/mxparser依赖SP1不涉及openEuler src-openEuler/xmlpull依赖SP1不涉及openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com> Cc: Yanxiaobing <yanxiaobing(a)huawei.com>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com>; wangchong (J) <wangchong56(a)huawei.com>; yaokai (G) <yaokai13(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-ioCVESP1不涉及openEuler src-openEuler/binutilsCVESP1不涉及基础服务 src-openEuler/dnsmasqCVESP1不涉及网络组 src-openEuler/exiv2CVESP1不涉及网络组 src-openEuler/gnome-autoarCVESP1不涉及网络组 src-openEuler/golangCVESP1不涉及容器组 src-openEuler/jerseyCVESP1不涉及openEuler src-openEuler/python-jinja2CVESP1不涉及基础服务 src-openEuler/rubygem-actionviewCVESP1不涉及openEuler src-openEuler/velocityCVESP1不涉及openEuler src-openEuler/xstreamCVESP1不涉及openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com> Cc: Yanxiaobing <yanxiaobing(a)huawei.com>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com>; wangchong (J) <wangchong56(a)huawei.com>; yaokai (G) <yaokai13(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-ioCVESP1不涉及openEuler src-openEuler/binutilsCVESP1不涉及基础服务 src-openEuler/dnsmasqCVESP1不涉及网络组 src-openEuler/exiv2CVESP1不涉及网络组 src-openEuler/gnome-autoarCVESP1不涉及网络组 src-openEuler/golangCVESP1不涉及容器组 src-openEuler/jerseyCVESP1不涉及openEuler src-openEuler/python-jinja2CVESP1不涉及基础服务 src-openEuler/rubygem-actionviewCVESP1不涉及openEuler src-openEuler/velocityCVESP1不涉及openEuler src-openEuler/xstreamCVESP1涉及接口变更openEuler src-openEuler/thriftCVESP1不涉及openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… _______________________________________________ Dev mailing list -- dev(a)openeuler.org To unsubscribe send an email to dev-leave(a)openeuler.org

1 0

【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/28 release评审通知
by xiasenlin 30 May '21

30 May '21

openEuler 20.03 LTS SP1 Update 20210528 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月30日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210526 代码冻结： 20210526 转测试时间：20210527 版本发布： 20210530 本次更新主要涉及：mysql、ImageMagick等包的CVE修复以及RPM的bugfix；修复cve：49个 CVE清单： issue ID 任务标题 CVE评分关联仓库责任田是否涉及接口变更接口变更是否有影响 I3NYKT CVE-2021-2212 9.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKS CVE-2021-2299 9.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKR CVE-2021-2293 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKQ CVE-2021-2213 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKP CVE-2021-2215 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKO CVE-2021-2278 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKN CVE-2021-2164 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKM CVE-2021-2208 8.8 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKL CVE-2021-2217 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKK CVE-2021-2203 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKJ CVE-2021-2226 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKI CVE-2021-2202 8.2 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKH CVE-2021-2232 7.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKG CVE-2021-2301 7.1 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKF CVE-2021-2298 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKE CVE-2021-2230 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKD CVE-2021-2300 5.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NYKC CVE-2021-2304 6.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX9A CVE-2021-2308 3.7 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX96 CVE-2021-2172 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX91 CVE-2021-2194 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX90 CVE-2021-2170 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8P CVE-2021-2196 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8O CVE-2021-2201 6.1 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8M CVE-2021-2180 4.4 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8J CVE-2021-2307 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8I CVE-2021-2169 4.4 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8G CVE-2021-2171 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX8F CVE-2021-2305 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7X CVE-2021-2179 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7W CVE-2021-2174 6.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3NX7V CVE-2021-2193 5.5 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC6G CVE-2021-2166 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC66 CVE-2021-2144 7.2 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC26 CVE-2021-2146 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC20 CVE-2021-2160 4.9 src-openEuler/mysql 智能计算是无（仅新增命令） I3OC1V CVE-2021-2162 4.3 src-openEuler/mysql 智能计算是无（仅新增命令） I3OUV2 CVE-2020-27752 7.1 src-openEuler/ImageMagick 智能计算否不涉及 I3QYAH CVE-2020-9492 8.8 src-openEuler/hadoop 智能计算否不涉及 I3RQ13 CVE-2021-20310 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ12 CVE-2021-20309 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ10 CVE-2021-20312 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ0O CVE-2021-20311 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQ0M CVE-2021-20313 7.5 src-openEuler/ImageMagick 智能计算否不涉及 I3RQQI CVE-2021-23383 9.8 src-openEuler/nodejs-handlebars 智能计算否不涉及 I3SC5R CVE-2020-15078 7.5 src-openEuler/openvpn 智能计算否不涉及 I3SC4U CVE-2021-3504 8.1 src-openEuler/hivex 智能计算否不涉及 I3SCAN CVE-2020-27769 3.3 src-openEuler/ImageMagick 智能计算否不涉及 BUgfix清单： bug/feature related repo related issue/PR 责任田修复tpm2-abrmd-selinux子包中存储的SELinux标签信息 tpm2-abrmd https://gitee.com/open_euler/dashboard?issue_id=I3SHS5 基础服务构建时长优化 clang https://gitee.com/open_euler/dashboard?issue_id=I3AGT3 智能计算 rpm bug修复，主要问题是升级rpm、rpm-libs包后，影响其他软件包升级及yum等工具使用 rpm https://gitee.com/open_euler/dashboard?issue_id=I3RPU3 基础服务例外说明：本周转测的audit升级和fuse拆包因为issue未闭环，不发布，计划下周解决后发布发件人: xiasenlin 发送时间: 2021年5月24日 10:37 收件人: release(a)openeuler.org; qa(a)openeuler.org; sa-announce(a)openeuler.org; dev(a)openeuler.org 抄送: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com>; xingchaochao <xingchaochao(a)huawei.com> 主题: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/20 release评审通知 openEuler 20.03 LTS SP1 Update 20210520 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月24日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210519 代码冻结： 20210519 转测试时间：20210520 版本发布： 20210524 本次更新主要涉及：qemu、ruby等包的CVE修复以及libvirt的新特性IO悬挂，需要与qemu一起发布；修复cve：9个 CVE清单： CVE-2021-3416 6 次要 src-openEuler/qemu CVE-2021-3409 5.7 次要 src-openEuler/qemu CVE-2021-3392 3.2 不重要 src-openEuler/qemu CVE-2019-14562 5.5 次要 src-openEuler/edk2 CVE-2020-25085 5 次要 src-openEuler/qemu CVE-2021-20208 6.1 次要 src-openEuler/cifs-utils CVE-2021-28965 7.5 主要 src-openEuler/ruby CVE-2021-20095 7.8 主要 src-openEuler/babel CVE-2020-18032 9.8 严重 src-openEuler/graphviz 涉及新增libvirt特性一个 From: xiasenlin Sent: Friday, May 14, 2021 6:15 PM To: 'release(a)openeuler.org' <release(a)openeuler.org<mailto:release@openeuler.org>>; 'qa(a)openeuler.org' <qa(a)openeuler.org<mailto:qa@openeuler.org>>; 'sa-announce(a)openeuler.org' <sa-announce(a)openeuler.org<mailto:sa-announce@openeuler.org>>; 'dev(a)openeuler.org' <dev(a)openeuler.org<mailto:dev@openeuler.org>> Cc: Guoge(JVM) <ge.guo(a)huawei.com<mailto:ge.guo@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; Chenzhendong (alex) <alex.chen(a)huawei.com<mailto:alex.chen@huawei.com>>; Liyiting <liyiting(a)huawei.com<mailto:liyiting@huawei.com>>; Mingpei <mingpei(a)huawei.com<mailto:mingpei@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知 openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; xiasenlin <xiasenlin1(a)huawei.com<mailto:xiasenlin1@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler src-openEuler/mxparser 依赖 SP1 不涉及 openEuler src-openEuler/xmlpull 依赖 SP1 不涉及 openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 涉及接口变更 openEuler src-openEuler/thrift CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base…

1 0

openEuler 20.03 LTS SP2 Test round 3转测试通知
by Xuxiaosong 28 May '21

28 May '21

转测试计划比原计划有2天延期。请相关责任人最晚于2021-5-29前完成特性进展更新为正常状态。 Test round 3版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/openeuler-2021-05-2… 欢迎感兴趣的开发者提前获取验证，对于发现的问题请及时以issue的方式反馈给openEuler社区（里程碑选择openEuler 20.03-LTS-SP2-round-3）。由本次为发布前测试环节，软件版本可能存在重大问题，不建议大规模使用。 Release计划路径 https://gitee.com/openeuler/release-management/blob/master/openEuler-20.03-… 1、本轮转5个特性见附件； 2、新增和删除包见附件； Test round1已解决问题单37个，未解决的问题单40，详见： https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=69297&is%5B… https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=116380&is%5… https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=118806&is%5… Release plan Stage name Begin time End time key feature collect 2021-03-16 2021-03-31 Develop 2021-03-16 2021-04-26 Kernel freezing 2021-04-16 2021-04-16 Build 2021-04-26 2021-04-30 Test round 1 2021-05-6 2021-05-12 Test round 2 2021-05-17 2021-05-25 Test round 3（we are here） 2021-05-26 2021-06-02 Test round 4 2021-06-03 2021-06-07 Test round 5 2021-06-09 2021-06-11 release 2021-06-28 2021-06-30 Feture list 状态说明：discussion(方案讨论，需求未接受)，developing(开发中)，Testing(测试中)，Reject(未纳入版本) no fetur status sig owner 1 【openEuler 20.03 LTS SP2】【虚拟化】回合openEuler 21.03，vmtop支持x86<https://gitee.com/openeuler/release-management/issues/I3NLWF?from=project-i…> Testing 2 openEuler 20.03-LTS-SP2支持内存分级扩展特性<https://gitee.com/openeuler/release-management/issues/I2C2NI?from=project-i…> Testing storage liuzhiqiang26<https://gitee.com/liuzhiqiang26> 3 openEuler 20.03-LTS-SP2版本集成secgear组件<https://gitee.com/openeuler/release-management/issues/I3JE3U?from=project-i…> Testing sig-confidential-computing chenmaodong<https://gitee.com/chenmaodong> 4 openEuler 20.03 LTS SP2 support OpenStack Rocky discussion sig-openstack @joec88 @liksh @xiyuanwang @huangtianhua 5 openEuler 20.03 LTS SP2支持osinfo软件包<https://gitee.com/openeuler/release-management/issues/I3N30H?from=project-i…> Testing 6 openEuler 20.03 LTS SP2开源openEuler-rpm-config宏定义文件<https://gitee.com/openeuler/release-management/issues/I3N30J?from=project-i…> Testing 7 openEuler 20.03 LTS SP2 支持 compat-openssl10、libzip等<https://gitee.com/openeuler/release-management/issues/I3N30L?from=project-i…> Testing 8 openEuler 20.03 LTS SP2 支持libwbxml、hyperscan<https://gitee.com/openeuler/release-management/issues/I3N30N?from=project-i…> Testing 9 openEuler 20.03 LTS SP2支持microcode_ctl<https://gitee.com/openeuler/release-management/issues/I3N30S?from=project-i…> Testing 10 openEuler 20.03 LTS SP2支持bcc软件包<https://gitee.com/openeuler/release-management/issues/I3N30Q?from=project-i…> Testing 11 openEuler 20.03 LTS SP2支持树莓派<https://gitee.com/openeuler/release-management/issues/I3N30P?from=project-i…> Testing 12 openEuler 20.03 LTS SP2支持1822 HBA卡<https://gitee.com/openeuler/release-management/issues/I3N30V?from=project-i…> Testing 13 openEuler 20.03 LTS SP2支持飞腾2000+/64<https://gitee.com/openeuler/release-management/issues/I3N30W?from=project-i…> Testing 14 openEuler 20.03 LTS SP2支持maildrop和proftpd<https://gitee.com/openeuler/release-management/issues/I3N30X?from=project-i…> Testing 15 openEuler 20.03 LTS SP2支持 iSulad 2.0<https://gitee.com/openeuler/release-management/issues/I3N312?from=project-i…> Testing 16 openEuler 20.03 LTS SP2 A-tune 2.0<https://gitee.com/openeuler/release-management/issues/I3N314?from=project-i…> Testing 17 openEuler 20.03 LTS SP2 支持网络安装<https://gitee.com/openeuler/release-management/issues/I3N315?from=project-i…> Testing 18 openEuler 20.03 LTS SP2 支持 criu组件<https://gitee.com/openeuler/release-management/issues/I3N319?from=project-i…> Testing 19 openEuler 20.03 LTS SP2支持config_acpi_nfit<https://gitee.com/openeuler/release-management/issues/I3N31B?from=project-i…> Testing 20 openEuler 20.03 LTS SP2 虚拟化增强<https://gitee.com/openeuler/release-management/issues/I3N31E?from=project-i…> Testing 21 openEuler 20.03 LTS SP2 支持 UKUI桌面<https://gitee.com/openeuler/release-management/issues/I3N31F?from=project-i…> Testing 22 openEuler 20.03 LTS SP2 支持openGauss<https://gitee.com/openeuler/release-management/issues/I3N31I?from=project-i…> Discussion 23 openEuler 20.03 LTS SP2 支持DDE桌面<https://gitee.com/openeuler/release-management/issues/I3N31J?from=project-i…> Testing 24 openEuler 20.03 LTS SP2 编译器支持openjdk<https://gitee.com/openeuler/release-management/issues/I3N31M?from=project-i…> Testing 25 openEuler 20.03 LTS SP2支持HA<https://gitee.com/openeuler/release-management/issues/I3N31O?from=project-i…> Testing 26 openEuler 20.03 LTS SP2 加速库版本同步<https://gitee.com/openeuler/release-management/issues/I3N31Q?from=project-i…> Testing 27 openEuler 20.03 LTS SP2支持金融领域软件包<https://gitee.com/openeuler/release-management/issues/I3N311?from=project-i…> Testing 28 openEuler 20.03 LTS SP2支持kmod功能<https://gitee.com/openeuler/release-management/issues/I3N30C?from=project-i…> Testing 29 openEuler 20.03 LTS SP2支持华为多路径<https://gitee.com/openeuler/release-management/issues/I3N2XS?from=project-i…> Discussion 30 openEuler 20.03 LTS SP2 CPU核故障在线隔离解决方案<https://gitee.com/openeuler/release-management/issues/I3N36L?from=project-i…> Testing 31 openEuler 20.03 LTS SP2 支持多应用版本构建和发布<https://gitee.com/openeuler/release-management/issues/I3N36K?from=project-i…> Testing 32 openEuler 20.03 LTS SP2 内存UCE故障降级，用户数据保持一致，业务可持续运行<https://gitee.com/openeuler/release-management/issues/I3N36H?from=project-i…> Testing 33 openEuler 20.03 LTS SP2 故障预测框架<https://gitee.com/openeuler/release-management/issues/I3N36F?from=project-i…> Testing 34 openEuler 20.03 LTS SP2 IO_URING全栈使能<https://gitee.com/openeuler/release-management/issues/I3N36C?from=project-i…> Testing 35 openEuler 20.03 LTS SP2 Qemu：虚拟化可靠性和可维护性增强<https://gitee.com/openeuler/release-management/issues/I3N369?from=project-i…> Testing 36 openEuler 20.03 LTS SP2 Qemu：热迁移pro，提升热迁移性能+安全<https://gitee.com/openeuler/release-management/issues/I3N368?from=project-i…> Testing 37 openEuler 20.03 LTS SP2支持StratoVirt：下一代轻量化虚拟化平台<https://gitee.com/openeuler/release-management/issues/I3N364?from=project-i…> Testing 38 【openEuler 20.03 LTS SP2】继承xfce 4.14<https://gitee.com/openeuler/release-management/issues/I3NC3I?from=project-i…> Testing xfce @dillon_chen<https://gitee.com/dillon_chen> 39 【openEuler 20.03 LTS SP2】继承Kubernetes 1.18<https://gitee.com/openeuler/release-management/issues/I3NC5H?from=project-i…> Testing sig-cloudnative @jingxiaolu<https://gitee.com/jingxiaolu> 40 【openEuler 20.03 LTS SP2】继承门禁检查功能<https://gitee.com/openeuler/release-management/issues/I3O08F?from=project-i…> Testing 41 openEuler 20.03-LTS-SP2 集成 kubernetes 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I2BHF4?from=project-i…> Testing 42 openEuler 20.03-LTS-SP2 arm虚拟机支持NMI watchdog<https://gitee.com/openeuler/release-management/issues/I2B4WL?from=project-i…> Testing 43 openEuler 20.03-LTS-SP2 集成 coredns 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXLJ?from=project-i…> Testing 44 【openEuler 20.03 LTS SP2】虚拟机热迁移支持TLS<https://gitee.com/openeuler/release-management/issues/I3IE57?from=project-i…> Testing 45 【kernel-4.19】openEuler kernel nvme 驱动增强<https://gitee.com/openeuler/release-management/issues/I1WGZE?from=project-i…> Testing 46 openEuler 20.03-LTS-SP2 集成 etcd 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXGJ?from=project-i…> Testing 历史转测试版本取用链接 Test round 2版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/openeuler-2021-05-1…

1 0

完成任务，获得荣誉，openEuler 社区的这项比赛有点逆天！
by Marketing openEuler 27 May '21

27 May '21

先说比赛规则独立开发者参赛 *做题得分* *每周结算* 这是任务打榜赛不满足？来看一下*特性命题赛*？独立开发者组队参赛区域赛、半决赛、总决赛过五关斩六将谁可以独占鳌头？你将是*社区贡献者* *你的 ID* 会被铭刻在社区还有*“一”点奖金* [image: WechatIMG16.jpeg]

1 0

【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/20 release评审通知
by xiasenlin 24 May '21

24 May '21

openEuler 20.03 LTS SP1 Update 20210520 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月24日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210519 代码冻结： 20210519 转测试时间：20210520 版本发布： 20210524 本次更新主要涉及：qemu、ruby等包的CVE修复以及libvirt的新特性IO悬挂，需要与qemu一起发布；修复cve：9个 CVE清单： CVE-2021-3416 6 次要 src-openEuler/qemu CVE-2021-3409 5.7 次要 src-openEuler/qemu CVE-2021-3392 3.2 不重要 src-openEuler/qemu CVE-2019-14562 5.5 次要 src-openEuler/edk2 CVE-2020-25085 5 次要 src-openEuler/qemu CVE-2021-20208 6.1 次要 src-openEuler/cifs-utils CVE-2021-28965 7.5 主要 src-openEuler/ruby CVE-2021-20095 7.8 主要 src-openEuler/babel CVE-2020-18032 9.8 严重 src-openEuler/graphviz 涉及新增libvirt特性一个 From: xiasenlin Sent: Friday, May 14, 2021 6:15 PM To: 'release(a)openeuler.org' <release(a)openeuler.org>; 'qa(a)openeuler.org' <qa(a)openeuler.org>; 'sa-announce(a)openeuler.org' <sa-announce(a)openeuler.org>; 'dev(a)openeuler.org' <dev(a)openeuler.org> Cc: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知 openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; xiasenlin <xiasenlin1(a)huawei.com<mailto:xiasenlin1@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler src-openEuler/mxparser 依赖 SP1 不涉及 openEuler src-openEuler/xmlpull 依赖 SP1 不涉及 openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 涉及接口变更 openEuler src-openEuler/thrift CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base…

1 0

【会议纪要】[Dev] sig-release-management双周例会
by Xuxiaosong 19 May '21

19 May '21

轮值主持人：许小松下次主持人：胡峰会议时间：2021年5月19日 14:30－16:30 会议地点：sig电话会议议题一：openEuler 20.03 LTS SP2版本进展介绍：许小松 1、openEuler 20.03 LTS SP2已完成第一轮转测试，正在进行第二轮测试； 2、第三轮转测试时间5.24日，openEuler 20.03 LTS SP2版本需求合入情况和转测试，发布计划详见： https://gitee.com/openeuler/release-management/blob/master/openEuler-20.03-… 议题二：openEuler 21.09创新版本需求搜集计划介绍：胡峰 1、openEuler 21.09创新版本需求收集时间； 2、openEuler 21.09创新版本版本计划介绍； 3、openEuler 21.09创新版本需求填写要求；议题三：为解决xfce声音控制问题引入pavucontrol包：dingwenlong 结论： 1、同意引入pavucontrol包解决声音控制bugfix； 2、代码在5月21日前完成合入验证； From: Xuxiaosong Sent: Monday, May 17, 2021 3:24 PM To: 'tc(a)openeuler.org'; 'dev(a)openeuler.org'; 'release(a)openeuler.org' Subject: [Dev] sig-release-management双周例会欢迎大家申报议题。 From: openEuler conference [mailto:public@openeuler.io] Sent: Monday, May 17, 2021 3:20 PM Subject: [Dev] sig-release-management双周例会您好！ openEuler sig-release-management SIG 邀请您参加 2021-05-19 14:30 召开的ZOOM会议会议主题：sig-release-management双周例会会议链接：https://us06web.zoom.us/j/86057315767?pwd=TTRHUTRaOUwxelhERmQvZVV1UTZ0QT09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler sig-release-management SIG invites you to attend the ZOOM conference will be held at 2021-05-19 14:30, The subject of the conference is sig-release-management双周例会, You can join the meeting at https://us06web.zoom.us/j/86057315767?pwd=TTRHUTRaOUwxelhERmQvZVV1UTZ0QT09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information<https://openeuler.org/zh/>

1 0

2024

2023

2022

2021

2020

Release