openEuler-24.03-LTS-SP1_update20250818 release

版本目标: CVE、软件包引入升级和Bugfix修复<br/>版本: openEuler-24.03-LTS-SP1<br/>例行CVE冻结: 2025-08-20 12:00:00<br/>代码冻结: 2025-08-20 12:00:00<br/>需求收集截止到周三中午12点，（周三下午工程构建，周四上午生成转测repo；周四-周五测试验收；周五晚上发布）<br/>issue收集评论规则（kernel除外）：<br/>包名<br/>issue: 必填，必须为转测软件包制品仓下的issue，issue所在仓库必须和包名称保持一致<br/>pr:pr所在仓库必须和包名称保持一致<br/>例如：<br/>gazelle<br/>issue:https://gitee.com/src-openeuler/gazelle/issues/xxx<br/>pr:https://gitee.com/src-openeuler/gazelle/pulls/xxx<br/><br/>版本发布负责人<br/>版本经理：@randy1568 @yajieli<br/>开发人员：@lyn1001 @jxy_git @sun_hai_10<br/>安全委员会：@zhujianwei001 @luoyukai<br/>测试人员：@Algernon @li-yancheng @wenjunryou<br/><h2>1.发布范围</h2><h3>(1) cve</h3><p>修复CVE 24个</p><table><tr bgcolor="#FFCA28" align="center"><td><b>序号</b></td><td><b>CVE</b></td><td><b>仓库</b></td><td><b>status</b></td><td><b>score</b></td><td><b>abi是否变化</b></td></tr><tr bgcolor="#FFFFFF" align="center"><td>1</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/IC9911>IC9911:CVE-2025-37913</a></td><td>kernel</td><td>已完成</td><td><font color="red"><b>8.0</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>2</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/IC5BMW>IC5BMW:CVE-2025-37796</a></td><td>kernel</td><td>已完成</td><td><font color="red"><b>8.0</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>3</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN8W>ICSN8W:CVE-2025-22889</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.9</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>4</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN8T>ICSN8T:CVE-2025-20109</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.8</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>5</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/IC1QTH>IC1QTH:CVE-2025-22097</a></td><td>kernel</td><td>已完成</td><td><font color="red"><b>7.8</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>6</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/ICPD1U>ICPD1U:CVE-2025-38495</a></td><td>kernel</td><td>已完成</td><td><font color="red"><b>7.8</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>7</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/IC5D94>IC5D94:CVE-2025-37798</a></td><td>kernel</td><td>已完成</td><td><font color="red"><b>7.8</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>8</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN8V>ICSN8V:CVE-2025-22839</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.5</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>9</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN8U>ICSN8U:CVE-2025-22840</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.4</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>10</td><td><a href= https://gitee.com/src-openeuler/openjdk-1.8.0/issues/IC1GI7>IC1GI7:CVE-2025-21587</a></td><td>openjdk-1.8.0</td><td>已完成</td><td><font color="red"><b>7.4</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>11</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN8Z>ICSN8Z:CVE-2025-32086</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.2</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>12</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN8X>ICSN8X:CVE-2025-20053</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.2</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>13</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN90>ICSN90:CVE-2025-24305</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.2</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>14</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN8Y>ICSN8Y:CVE-2025-26403</a></td><td>microcode_ctl</td><td>已完成</td><td><font color="red"><b>7.2</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>15</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/ICPD73>ICPD73:CVE-2025-38473</a></td><td>kernel</td><td>进行中</td><td><font color="red"><b>7.0</b></font></td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>16</td><td><a href= https://gitee.com/src-openeuler/microcode_ctl/issues/ICSN91>ICSN91:CVE-2025-21090</a></td><td>microcode_ctl</td><td>已完成</td><td>6.5</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>17</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/ICK4S4>ICK4S4:CVE-2025-38211</a></td><td>kernel</td><td>进行中</td><td>6.1</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>18</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/ICOXB0>ICOXB0:CVE-2025-38375</a></td><td>kernel</td><td>已完成</td><td>6.1</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>19</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/ICL7Y8>ICL7Y8:CVE-2025-38251</a></td><td>kernel</td><td>已完成</td><td>5.7</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>20</td><td><a href= https://gitee.com/src-openeuler/openjdk-1.8.0/issues/IC1GJD>IC1GJD:CVE-2025-30698</a></td><td>openjdk-1.8.0</td><td>已完成</td><td>5.6</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>21</td><td><a href= https://gitee.com/src-openeuler/restic/issues/ICMN9O>ICMN9O:CVE-2024-35255</a></td><td>restic</td><td>已完成</td><td>5.5</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>22</td><td><a href= https://gitee.com/src-openeuler/openjdk-1.8.0/issues/IC1GJ4>IC1GJ4:CVE-2025-30691</a></td><td>openjdk-1.8.0</td><td>已完成</td><td>4.8</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>23</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/ICTB66>ICTB66:CVE-2025-38528</a></td><td>kernel</td><td>已完成</td><td>3.9</td><td>否</td></tr><tr bgcolor="#FFFFFF" align="center"><td>24</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/IC990Y>IC990Y:CVE-2025-37915</a></td><td>kernel</td><td>已完成</td><td>3.9</td><td>否</td></tr></table><h3>(2) bugfix</h3><p>修复bugfix 13个</p><table><tr bgcolor="#FFCA28" align="center"><td><b>序号</b></td><td><b>issue</b></td><td><b>仓库</b></td><td><b>status</b></td></tr><tr bgcolor="#FFFFFF" align="center"><td>1</td><td><a href= https://gitee.com/src-openeuler/ceph/issues/ICJFEK>ICJFEK：ceph-fuse mount faild and coredump</a></td><td>ceph</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>2</td><td><a href= https://gitee.com/openeuler/kernel/issues/IC8PQW>IC8PQW：Optimize mremap() for large folios</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>3</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICSFVV>ICSFVV：PM / devfreq: Add HiSilicon uncore frequency scaling driver</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>4</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICK7RZ>ICK7RZ：KASAN: null-ptr-deref Write in unregister_vlan_dev</a></td><td>kernel</td><td>待办的</td></tr><tr bgcolor="#FFFFFF" align="center"><td>5</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICSKIY>ICSKIY：Get rid of never false gpio_is_valid() calls.</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>6</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICSYJ1>ICSYJ1：[OLK-6.6] RDMA/hns: Fix DIP-entry leaks and SCC lookup errors on post-hip09 devices</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>7</td><td><a href= https://gitee.com/src-openeuler/kernel/issues/ICTDP9>ICTDP9：【OLK-6.6主线补丁回合】Enhance soft hwpoison handling and injection</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>8</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICPMAC>ICPMAC：修改/proc/pressure/stat接口权限</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>9</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICA1GK>ICA1GK：高性能容器资源视图</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>10</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICRY17>ICRY17：enfs模块的一些bug</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>11</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICTB3Q>ICTB3Q：[OLK-6.6] filemap: move prefaulting out of hot write path</a></td><td>kernel</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>12</td><td><a href= https://gitee.com/src-openeuler/unbound/issues/ICTO47>ICTO47：CVE-2025-5994 合入后置补丁</a></td><td>unbound</td><td>已完成</td></tr><tr bgcolor="#FFFFFF" align="center"><td>13</td><td><a href= https://gitee.com/openeuler/kernel/issues/ICRXXI>ICRXXI：[olk-6.6] 冷热页spe: 在perf SPE采样期间保留内核子系统的SPE状态</a></td><td>kernel</td><td>已完成</td></tr></table><h3>(3) requires</h3><table><tr bgcolor="#FFCA28" align="center"><td><b>仓库</b></td><td><b>引入原因</b></td></tr></table><h2>2.测试repo源</h2><table><tr bgcolor="#FFCA28" align="center"><td><b>repo_type</b></td><td><b>url</b></td></tr><tr bgcolor="#FFFFFF" align="center"><td>standard</td><td>https://dailybuild.openeuler.openatom.cn/repo.openeuler.org/openEuler-24.03-LTS-SP1/update_20250820/</td></tr><tr bgcolor="#FFFFFF" align="center"><td>epol</td><td>https://dailybuild.openeuler.openatom.cn/repo.openeuler.org/openEuler-24.03-LTS-SP1/EPOL/update_20250820/main/</td></tr></table><h2>3.安装、自编译问题</h2><table><tr bgcolor="#FFCA28" align="center"><td><b>issue</b></td><td><b>仓库</b></td><td><b>status</b></td></tr></table><h2>4.遗留问题</h2><table><tr bgcolor="#FFCA28" align="center"><td><b>issue</b></td><td><b>仓库</b></td><td><b>status</b></td><td><b>type</b></td></tr></table>

openEuler/release-management
Closed

Content Risk Flag

Comments (4)

openEuler/release-managementClosed .gitee-modal { width: 500px !important; }

Content Risk Flag