Open
[webhook] fix: CVE-2026-9149 - openEuler-24.03-LTS-SP2 #103
[webhook] fix: CVE-2026-9149 - openEuler-24.03-LTS-SP2 #103
Open
xiaoo_robotAdd on 8 days ago
xiaoo_robot
xiaoo_robot
8 days ago

CVE 修复

CVE ID: CVE-2026-9149

目标分支: openEuler-24.03-LTS-SP2

修复说明:
本 PR 修复 CVE-2026-9149 安全漏洞。

关联 Issue: https://gitcode.com/src-openeuler/libsolv/issues/44#note_4c73847cc2dfc7ead95dfbc3b57aaadf2a9efb00

当前PR是否有AI参与:

[] 否
[x] 是
__1. Agent平台信息: xiaoo
__2. 模型信息: openai-compatible/glm-5.3
__3. Prompt摘要: 基于 CVE 补丁完成安全漏洞的源码级影响分析、补丁适配与自动化应用,协助修复本次安全漏洞

希望检视人员了解:

  1. 代码由AI辅助开发者编写,且开发者已人工逐行核对逻辑、校验功能正确性,且与开发者预期一致;

任务触发者: @zhaoyonghao10(来自 Issue 评论)

likedislike
Merge blocked
xiaoo_robotxiaoo_robot
8 days ago Created pull request, commit 94d00b53
xiaoo_robotxiaoo_robot
8 days ago Associated issue: 回合上游社区补丁,补丁数量:17
openeuler-ci-botopeneuler-ci-botCollaborators
8 days ago Set overweight,zhuchunyi,zhangqiumiao,han_hui_hui,shenyangyang as approver
openeuler-ci-botopeneuler-ci-botCollaborators
8 days ago Added label: sig/sig-OS-Builder
openeuler-ci-bot
openeuler-ci-botCollaborators
8 days ago Comments:

Welcome To openEuler Community

Hey @xiaoo_robot , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands. You can self-configure the PR merge rules for this repository. For more details, please refer to Here.

Contact Guide

If you have any questions, please contact the SIG: sig-OS-Builder ,
and any of the maintainers: @han_hui_hui, @overweight, @shenyangyang, @zhangqiumiao, @zhuchunyi ,
and any of the committers: @han_hui_hui .

likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
8 days ago Comments:

当前仓库存在以下 保护分支 :

Protected Branch Version Release
master 0.7.39 2
openEuler-24.03-LTS-Next 0.7.24 6
openEuler-22.03-LTS-SP4 0.7.22 6
openEuler-20.03-LTS-SP4 0.7.14 11
openEuler-26.09 0.7.39 1
openEuler-26.09-DevStation 0.7.39 1
openEuler-24.03-LTS-SP1 0.7.24 5
openEuler-24.03-LTS-SP4 0.7.24 5
openEuler-24.03-LTS-SP3 0.7.24 5
openEuler1.0-base 0.7.7 2
openEuler1.0 0.7.7 2

评论 /sync <branch1> <branch2> ... 可将当前 PR 修改同步到其它分支(创建同步 PR):
a) 如果当前 PR 是 Open 状态,同步操作将延迟到 PR 被合并时执行
b) 如果当前 PR 已经 Merged,将立即执行同步操作

注意:

  1. /sync 命令可以指定同步到多个分支,仅最后一个 /sync 命令生效
  2. 如果创建的同步 PR 不正确,可通过向同步 PR 的源分支提交轻量级 PR 完善,或使用 /close 命令关闭
likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
8 days ago Added label: ai-co-authored
openeuler-ci-botopeneuler-ci-botCollaborators
8 days ago Added label: openeuler-cla/yes
openeuler-ci-bot
openeuler-ci-botCollaborators
8 days ago Comments:

CLA Signature Pass

xiaoo_robot, thanks for your pull request. All authors of the commits have signed the CLA. 👍

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
8 days ago Added label: ai-includes-code
openeuler-bot
openeuler-botCollaborators
8 days ago Comments:

门禁正在运行, 您可以通过以下链接查看实时门禁检查结果.
若您对门禁结果含义不清晰或者遇到问题不知如何解决,可参考门禁指导手册
门禁入口及编码规范检查: multiarch/src-openeuler/trigger/libsolv/73

likedislike
openeuler-botopeneuler-botCollaborators
8 days ago Added label: ci_processing
openeuler-ci-botopeneuler-ci-botCollaborators
8 days ago Added label: ai-compliance-successful
openeuler-bot
openeuler-botCollaborators
8 days ago Comments:

x86_64架构构建及构建后检查:multiarch/src-openeuler/x86-64/libsolv/73

likedislike
openeuler-bot
openeuler-botCollaborators
8 days ago Comments:

aarch64架构构建及构建后检查:multiarch/src-openeuler/aarch64/libsolv/73

likedislike
openeuler-botopeneuler-botCollaborators
8 days ago Removed label: ci_processing
openeuler-bot
openeuler-botCollaborators
8 days ago Comments:
Check Name Build Result 详情 Build Details
check_binary_file ✅SUCCESS #73
check_lfsconfig ☑EXCLUDE
check_package_yaml_file ✅SUCCESS
check_repo_in_maintain ✅SUCCESS
check_consistency ✅SUCCESS
check_spec_file ✅SUCCESS
x86_64 check_build ✅SUCCESS #73
check_install ✅SUCCESS
check_license ✅SUCCESS
aarch64 check_build ✅SUCCESS #73
check_install ✅SUCCESS
check_license ✅SUCCESS
likedislike
openeuler-botopeneuler-botCollaborators
8 days ago Added label: ci_successful
openeuler-bot
openeuler-botCollaborators
8 days ago Comments:

如下为接口变更检查结果,目标分支为openEuler-24.03-LTS-SP2,请PR提交者check差异信息

Arch Name Check Items Rpm Name Check Result Build Details
compare_package(x86_64) add_rpms ✅SUCCESS #73
delete_rpms ✅SUCCESS
rpm_abi ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_files ✅SUCCESS
rpm_header ✅SUCCESS
rpm_lib ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
rpm_symbol ✅SUCCESS
compare_package(aarch64) add_rpms ✅SUCCESS #73
delete_rpms ✅SUCCESS
rpm_abi ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_files ✅SUCCESS
rpm_header ✅SUCCESS
rpm_lib ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
rpm_symbol ✅SUCCESS
likedislike
openeuler-bot
openeuler-botCollaborators
8 days ago Comments:
likedislike