openEuler-20.03-LTS-SP4 Update 2023/12/18 release

版本目标: CVE、软件包引入升级和Bugfix修复
版本: openEuler-20.03-LTS-SP4
例行CVE冻结: 20231220
代码冻结: 20231220

版本发布负责人
版本经理：@gitee-cmd @zhangtao2020 @caodongxia @gongzt
开发人员：@gitee-cmd @zhangtao2020 @caodongxia @gongzt
安全委员会：@yanxiaobing2020 @gitee-cmd @zhangtao2020 @caodongxia @gongzt
测试人员：@gitee-cmd @zhangtao2020 @disnight @caodongxia @gongzt

# 1、发布范围
## 1、CVE
修复CVE 140个
|CVE|仓库|status|score|version|abi是否变化|
|-|-|-|-|-|-|
|#I4QUAH:CVE-2021-43045|avro|已完成|7.5|1.10.2|否|
|#I7HL05:CVE-2023-26136|nodejs-tough-cookie|已完成|9.8|2.3.2|否|
|#I64H54:CVE-2021-37533|apache-commons-net|已完成|6.5|3.6|否|
|#I6ZWOG:CVE-2023-30861|python-flask|已完成|7.5|1.0.4,1.1.2,2.1.2,2.2.5|否|
|#I4UEOC:CVE-2022-21712|python-twisted|已完成|7.5|18.9.0|否|
|#I4XBJL:CVE-2022-21716|python-twisted|已完成|7.5|18.9.0|否|
|#I530MS:CVE-2022-24801|python-twisted|已完成|8.1|18.9.0|否|
|#I5Y48K:CVE-2022-39348|python-twisted|已完成|5.4|18.9.0,22.4.0|否|
|#I67ADZ:CVE-2022-40898|python-wheel|已完成|7.5|0.31.1,0.36.2,0.37.0|否|
|#I6B5Q0:CVE-2023-22742|libgit2|已完成|5.9|0.27.8,1.3.2|否|
|#I8B1WN:CVE-2023-46316|traceroute|已完成|9.8|2.1.0,2.1.1,2.1.2|否|
|#I5LYSP:CVE-2021-23210|sox|已完成|5.5|14.4.2.0|否|
|#I5LYTJ:CVE-2021-23172|sox|已完成|5.5|14.4.2.0|否|
|#I5M59H:CVE-2021-23159|sox|已完成|5.5|14.4.2.0|否|
|#I5M59Q:CVE-2021-33844|sox|已完成|5.5|14.4.2.0|否|
|#I7BEOY:CVE-2023-34318|sox|已完成|7.8|14.4.2.0|否|
|#I7K4AG:CVE-2023-26590|sox|已完成|5.5|14.4.2.0|否|
|#I7K4AJ:CVE-2023-34432|sox|已完成|7.8|14.4.2.0|否|
|#I7K4AK:CVE-2023-32627|sox|已完成|5.5|14.4.2.0|否|
|#I8K8BI:CVE-2023-49083|python-cryptography|已完成|9.1|2.9.2,3.0,3.3.1,3.4.7,36.0.1,39.0.0,40.0.2|否|
|#I8GIA8:CVE-2023-23583|microcode_ctl|已完成|8.8|2.1|否|
|#I89GY7:CVE-2023-5625|python-eventlet|已完成|5.3|0.23.0,0.25.2,0.30.0,0.30.2,0.33.0,0.33.1,0.33.3|否|
|#I7M5BO:CVE-2023-38469|avahi|已完成|5.5|0.8|否|
|#I7M5BR:CVE-2023-38470|avahi|已完成|6.2|0.8|否|
|#I7M5BU:CVE-2023-38473|avahi|已完成|6.2|0.8|否|
|#I7M5BV:CVE-2023-38471|avahi|已完成|6.2|0.8|否|
|#I7M5BW:CVE-2023-38472|avahi|已完成|6.2|0.8|否|
|#I8GTD2:CVE-2023-47641|python-aiohttp|已完成|3.4|3.7.4,3.8.3,3.8.4|否|
|#I8KTVX:CVE-2023-49081|python-aiohttp|已完成|7.2|3.7.4,3.8.3,3.8.4|否|
|#I7V6ZB:CVE-2020-21428|freeimage|已完成|7.8|3.18.0|否|
|#I7VCRZ:CVE-2020-21427|freeimage|已完成|7.8|3.18.0|否|
|#I5UBPV:CVE-2022-41853|hsqldb1|已完成|9.8|1.8.1.3|否|
|#I5UBPU:CVE-2022-41853|hsqldb|已完成|9.8|2.4.0|否|
|#I7DK24:CVE-2023-33933|trafficserver|已完成|7.5|9.1.0,9.1.3,9.1.4|是|
|#I7DK2G:CVE-2022-47184|trafficserver|已完成|7.5|9.1.0,9.1.3,9.1.4|否|
|#I6AVW5:CVE-2022-47630|arm-trusted-firmware|已完成|7.4|1.6,2.3|否|
|#I8BKJ8:CVE-2023-46604|activemq|已完成|10.0|5.15.15|否|
|#I8LR2K:CVE-2022-41678|activemq|已完成|8.8|5.15.15|是|
|#I85U1I:CVE-2023-45322|libxml2|已完成|6.5|2.11.4,2.9.13|否|
|#I88VLP:CVE-2023-45803|python-urllib3|已完成|4.2|1.24.3,1.25.9,1.26.12,1.26.16,1.26.3,1.26.7,1.26.8|否|
|#I885C5:CVE-2023-45853|zlib|已完成|9.8|1.2.11,1.2.12,1.2.13|否|
|#I8HEMM:CVE-2023-44446|gstreamer1-plugins-bad-free|已完成|8.8|1.16.2|否|
|#I8OJ8F:CVE-2023-37329|gstreamer1-plugins-bad-free|已完成|5.5|1.16.2|否|
|#I4EM3G:CVE-2021-41136|rubygem-puma|已完成|3.7|3.12.6,4.3.9|否|
|#I4UY7M:CVE-2022-23634|rubygem-puma|已完成|5.9|3.12.6,4.3.9|否|
|#I8O2IT:CVE-2023-50495|ncurses|已完成|6.5|6.2,6.3,6.4|否|
|#I5CST9:CVE-2022-26981|liblouis|已完成|7.8|3.7.0|否|
|#I5RJ57:CVE-2022-40149|jettison|已完成|7.5|1.4.1|否|
|#I5RJ5B:CVE-2022-40150|jettison|已完成|7.5|1.4.1|否|
|#I667WD:CVE-2022-45685|jettison|已完成|7.5|1.3.7,1.4.1|否|
|#I667WF:CVE-2022-45693|jettison|已完成|7.5|1.3.7,1.4.1|否|
|#I6P70O:CVE-2023-1436|jettison|已完成|7.5|1.3.7,1.4.1|否|
|#I8KJKL:CVE-2023-6378|logback|已完成|7.5|1.1.7,1.2.8|否|
|#I8LOP5:CVE-2023-6481|logback|已完成|7.5|1.1.7,1.2.8|否|
|#I7NYYZ:CVE-2023-39130|gdb|已完成|5.5|11.1,12.1,9.2|否|
|#I7NYZ1:CVE-2023-39129|gdb|已完成|5.5|11.1,12.1,9.2|否|
|#I80VW6:CVE-2023-4039|gcc|已完成|4.8|10.3.1,12.3.0,12.3.1,7.3.0,9.3.1|否|
|#I8OJ88:CVE-2023-37327|gstreamer1-plugins-good|已完成|5.5|1.16.2,1.19.3|否|
|#I84TVR:CVE-2023-43040|ceph|已完成|2.0|12.2.8,14.2.15,14.2.4,16.2.7|否|
|#I8MIG0:CVE-2023-41913|strongswan|已完成|9.8|5.7.2,5.9.10,5.9.7|否|
|#I870C4:CVE-2023-45648|tomcat|已完成|5.3|9.0.10|否|
|#I3E695:CVE-2013-4235|shadow|已完成|4.7|4.7,4.8.1|否|
|#I8ATDK:CVE-2023-5380|xorg-x11-server|已完成|4.7|1.20.10,1.20.11,1.20.8|否|
|#I8ATE2:CVE-2023-5367|xorg-x11-server|已完成|7.8|1.20.10,1.20.11,1.20.8|否|
|#I8O2YP:CVE-2023-6377|xorg-x11-server|已完成|7.8|1.20.10,1.20.11,1.20.8|否|
|#I8O304:CVE-2023-6478|xorg-x11-server|已完成|7.6|1.20.10,1.20.11,1.20.8|否|
|#I6PBZQ:CVE-2023-0836|haproxy|已完成|7.5|2.2.16,2.4.8,2.6.6|否|
|#I8K91W:CVE-2023-45539|haproxy|已完成|8.2|1.8.14,2.0.14,2.2.16,2.4.8,2.6.6|否|
|#I8CTCJ:CVE-2023-33285|qt5-qtbase|已完成|5.3|4.8.7|否|
|#I859RR:CVE-2023-43907|optipng|已完成|7.8|0.7.7|否|
|#I611ZE:CVE-2022-45198|python-pillow|已完成|7.5|5.3.0,7.2.0,8.1.1,8.1.2,9.0.1|否|
|#I8DJKL:CVE-2023-44271|python-pillow|已完成|7.5|10.0.0,5.3.0,7.2.0,8.1.1,8.1.2,9.0.1,9.3.0,9.5.0|否|
|#I8D051:CVE-2023-46695|python-django|已完成|7.5|1.11.13,1.11.18,2.2.19,2.2.27,2.2.3,3.2.12,4.1.4,4.1.7,4.2.3|否|
|#I8GS3K:CVE-2023-44444|gimp|已完成|7.8|2.10.6,2.99.6|否|
|#I8GS3X:CVE-2023-44442|gimp|已完成|7.8|2.10.6,2.99.6|否|
|#I4YM13:CVE-2020-36518|jackson-databind|已完成|7.5|2.9.8|是|
|#I5U706:CVE-2022-42004|jackson-databind|已完成|7.5|2.9.8|否|
|#I5U709:CVE-2022-42003|jackson-databind|已完成|7.5|2.9.8|否|
|#I5RJ5C:CVE-2022-40151|xstream|已完成|7.5|1.4.11.1,1.4.18|否|
|#I67B9Q:CVE-2022-41966|xstream|已完成|7.5|1.4.11.1,1.4.18|否|
|#I89GBG:CVE-2023-31122|httpd|已完成|9.1|2.4.43,2.4.46,2.4.48,2.4.51,2.4.55|否|
|#I89GBL:CVE-2023-45802|httpd|已完成|5.9|2.4.43,2.4.46,2.4.48,2.4.51,2.4.55|否|
|#I8EAZJ:CVE-2023-5678|openssl|已完成|5.9|1.1.1f,1.1.1k,1.1.1l,1.1.1m,3.0.7,3.0.8,3.0.9|否|
|#I8BIMH:CVE-2023-46847|squid|已完成|9.9|4.9,5.7,6.1|否|
|#I8BIMQ:CVE-2023-46846|squid|已完成|9.3|4.9,5.7,6.1|否|
|#I8D0ZQ:CVE-2023-46724|squid|已完成|8.6|4.9,5.7,6.1|否|
|#I8ED5W:CVE-2023-46728|squid|已完成|7.5|4.9,5.7|否|
|#I8LR3D:CVE-2023-49286|squid|已完成|8.6|4.9,5.7,6.1|否|
|#I8LR3E:CVE-2023-49285|squid|已完成|8.6|4.9,5.7,6.1|否|
|#I8OK2V:CVE-2023-50269|squid|已完成|8.6|4.9,5.7,6.1|否|
|#I656LG:CVE-2022-41859|freeradius|已完成|7.5|3.0.15,3.0.21,3.0.25|是|
|#I8DPUP:CVE-2023-32697|sqlite-jdbc|已完成|9.8|3.15.1|否|
|#I5RJTO:CVE-2022-32085|mariadb|已完成|7.5|10.3.9|是|
|#I5RJTP:CVE-2022-32091|mariadb|已完成|7.5|10.3.9|是|
|#I5RJTQ:CVE-2022-32087|mariadb|已完成|7.5|10.3.9|是|
|#I5VZ1H:CVE-2022-0778|mariadb|已完成|7.5|10.3.9|是|
|#I6BCFO:CVE-2022-47015|mariadb|已完成|7.5|10.3.34,10.3.35,10.5.10,10.5.15,10.5.16|是|
|#I86P7R:CVE-2023-38545|curl|已完成|7.5|7.71.1,7.77.0,7.78.0,7.79.1,7.86.0,7.88.1,8.1.2|否|
|#I86P7X:CVE-2023-38546|curl|已完成|5.0|7.71.1,7.77.0,7.78.0,7.79.1,7.86.0,7.88.1,8.1.2|否|
|#I8M940:CVE-2023-46218|curl|已完成|5.3|7.71.1,7.77.0,7.78.0,7.79.1,7.86.0,7.88.1,8.1.2|否|
|#I8M94F:CVE-2023-46219|curl|已完成|4.0|7.71.1,7.77.0,7.78.0,7.79.1,7.86.0,7.88.1,8.1.2|否|
|#I8I8F7:CVE-2023-6228|libtiff|已完成|3.3|4.1.0,4.2.0,4.3.0,4.5.0,4.5.1|否|
|#I8JBIV:CVE-2023-6277|libtiff|已完成|6.5|4.1.0,4.2.0,4.3.0,4.5.0,4.5.1|否|
|#I89674:CVE-2023-44487|nginx|已完成|7.5|1.16.1,1.18.0,1.19.1,1.21.5,1.23.2|是|
|#I8H5HA:CVE-2023-6175|wireshark|已完成|6.6|2.6.2,3.6.0,3.6.11,3.6.14,3.6.2,3.6.3|否|
|#I89672:CVE-2023-44487|nghttp2|已完成|7.5|1.41.0,1.42.0,1.43.0,1.45.1,1.46.0,1.47.0,1.52.0,1.55.1|否|
|#I85M9R:CVE-2023-39323|golang|已完成|7.4|1.13.15,1.15.7,1.17.3,1.19.4,1.20.5|否|
|#I87L5D:CVE-2023-39325|golang|已完成|7.5|1.13.15,1.15.7,1.17.3,1.19.4,1.20.5|否|
|#I8MBKF:CVE-2023-39326|golang|已完成|5.3|1.13.15,1.15.7,1.17.3,1.19.4,1.20.5|否|
|#I8MDEJ:CVE-2023-45285|golang|已完成|7.5|1.13.15,1.15.7,1.17.3,1.19.4,1.20.5|否|
|#I8MKBC:CVE-2023-45866|bluez|已完成|8.8|5.54|否|
|#I8HFCD:CVE-2023-5981|gnutls|已完成|5.9|3.6.14,3.6.15,3.7.2,3.7.8,3.8.0|否|
|#I87062:CVE-2023-42669|samba|已完成|6.5|4.11.12,4.12.5,4.15.3,4.16.4,4.17.2,4.17.5,4.18.5|否|
|#I87CXU:CVE-2023-4091|samba|已完成|6.5|4.11.12,4.12.5,4.15.3,4.16.4,4.17.2,4.17.5,4.18.5|否|
|#I6OZK3:CVE-2023-1544|qemu|已完成|6.3|4.1.0,5.2.0,6.2.0,7.2.0|否|
|#I85JSV:CVE-2023-5441|vim|已完成|8.2|8.2,9.0|否|
|#I87OMW:CVE-2023-5535|vim|已完成|7.8|8.2,9.0|否|
|#I8BKMB:CVE-2023-46246|vim|已完成|4.0|8.2,9.0|否|
|#I8H5IR:CVE-2023-48233|vim|已完成|2.8|8.2,9.0|否|
|#I8H5J1:CVE-2023-48237|vim|已完成|2.8|8.2,9.0|否|
|#I8H5JS:CVE-2023-48234|vim|已完成|2.8|8.2,9.0|否|
|#I8H5JT:CVE-2023-48231|vim|已完成|3.9|8.2,9.0|否|
|#I8H5JU:CVE-2023-48235|vim|已完成|2.8|8.2,9.0|否|
|#I8H5JV:CVE-2023-48236|vim|已完成|2.8|8.2,9.0|否|
|#I8IQ7G:CVE-2023-48706|vim|已完成|3.6|8.2,9.0|否|
|#I88JFX:CVE-2023-22025|openjdk-latest|已完成|3.7|15.0.1.9,15.0.2.7,16.0.1.9,16.0.2.7,17.0.0.35,17.0.1.12,17.0.2.9,18.0.0.37,18.0.1.10,18.0.2.9,19.0.0.36|是|
|#I88VNW:CVE-2023-22081|openjdk-latest|已完成|5.3|15.0.1.9,15.0.2.7,16.0.1.9,16.0.2.7,17.0.0.35,17.0.1.12,17.0.2.9,18.0.0.37,18.0.1.10,18.0.2.9,19.0.0.36|是|
|#I88VO3:CVE-2023-22081|openjdk-11|已完成|5.3|11.0.11.9,11.0.12.9,11.0.13.9,11.0.14.9,11.0.15.10,11.0.16.8,11.0.17.6,11.0.17.8|否|
|#I88VO0:CVE-2023-22081|openjdk-1.8.0|已完成|5.3|1.8.0.292.b10,1.8.0.302.b07,1.8.0.312.b07,1.8.0.322.b06,1.8.0.332.b09,1.8.0.342.b07,1.8.0.352.b07,1.8.0.352.b08,1.8.0.362.b09|是|
|#I88WQT:CVE-2023-22067|openjdk-1.8.0|已完成|5.3|1.8.0.292.b10,1.8.0.302.b07,1.8.0.312.b07,1.8.0.322.b06,1.8.0.332.b09,1.8.0.342.b07,1.8.0.352.b07,1.8.0.352.b08,1.8.0.362.b09|是|
|#I8AM9P:CVE-2023-5217|firefox|已完成|8.8|100.0.2,102.11.0,102.13.0,102.8.0,102.9.0,62.0.3,79.0|否|
|#I84B2W:CVE-2023-42755|kernel|已完成|5.5|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8|否|
|#I85CAQ:CVE-2023-39193|kernel|已完成|6.0|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0|否|
|#I85CAT:CVE-2023-39192|kernel|已完成|6.0|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0|否|
|#I85DZ6:CVE-2023-39194|kernel|已完成|4.4|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0|否|
|#I85DZB:CVE-2023-42754|kernel|已完成|5.5|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0|否|
|#I86MTP:CVE-2023-39189|kernel|已完成|6.0|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0|否|
|#I885FJ:CVE-2023-45862|kernel|已完成|7.5|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8|否|
|#I885ON:CVE-2023-45871|kernel|已完成|9.8|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0|否|
|#I8B1X3:CVE-2023-5717|kernel|已完成|7.8|4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0|否|

## 2、bugfix
修复bugfix 2个
|issue|仓库|status|
|-|-|-|
|#I8KGVB|oec-hardware|已完成|
|#I8OSNK|kernel|已完成|

## 3、requires
|仓库|引入原因|
|-|-|

# 3、安装、自编译问题
|issue|仓库|status|
|-|-|-|

# 4、遗留问题
|issue|仓库|status|type|
|-|-|-|-|

openEuler/release-management
关闭

内容风险标识

评论 (36)

openEuler/release-management关闭 .gitee-modal { width: 500px !important; }

内容风险标识