Open
Fix CVE-2022-33683 #47
Fix CVE-2022-33683 #47
Open
易大夫Add on 22 days ago
Merge blocked
易大夫易大夫
22 days ago Created pull request, commit 7ac615df
易大夫易大夫
22 days ago Associated issue: CVE-2022-33683
openeuler-ci-botopeneuler-ci-botCollaborators
22 days ago Set gogoxiaoxiao,gcw_MWp4hZZX as approver
openeuler-ci-botopeneuler-ci-botCollaborators
22 days ago Added label: sig/sig-message-middleware
openeuler-ci-bot
openeuler-ci-botCollaborators
22 days ago Comments:

当前仓库存在以下 保护分支 :

Protected Branch Version Release
master 2.10.6 5
openEuler-24.03-LTS-SP4 2.10.4 21
openEuler-24.03-LTS-SP3 2.10.4 21
openEuler-24.03-LTS-SP1 2.10.4 21
openEuler-24.03-LTS-Next 2.10.4 21
openEuler-26.09 2.10.6 4
openEuler-26.09-DevStation 2.10.6 4

评论 /sync <branch1> <branch2> ... 可将当前 PR 修改同步到其它分支(创建同步 PR):
a) 如果当前 PR 是 Open 状态,同步操作将延迟到 PR 被合并时执行
b) 如果当前 PR 已经 Merged,将立即执行同步操作

注意:

  1. /sync 命令可以指定同步到多个分支,仅最后一个 /sync 命令生效
  2. 如果创建的同步 PR 不正确,可通过向同步 PR 的源分支提交轻量级 PR 完善,或使用 /close 命令关闭
likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
22 days ago Comments:

Welcome To openEuler Community

Hey @sun_jie001 , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands. You can self-configure the PR merge rules for this repository. For more details, please refer to Here.

Contact Guide

If you have any questions, please contact the SIG: sig-message-middleware ,
and any of the maintainers: @gcw_MWp4hZZX, @gogoxiaoxiao ,
and any of the committers: @JR_Hale .

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
22 days ago Added label: openeuler-cla/yes
openeuler-ci-bot
openeuler-ci-botCollaborators
22 days ago Comments:

CLA Signature Pass

sun_jie001, thanks for your pull request. All authors of the commits have signed the CLA. 👍

likedislike
openeuler-bot
openeuler-botCollaborators
22 days ago Comments:

门禁正在运行, 您可以通过以下链接查看实时门禁检查结果.
若您对门禁结果含义不清晰或者遇到问题不知如何解决,可参考门禁指导手册
门禁入口及编码规范检查: multiarch/src-openeuler/trigger/pulsar/24

likedislike
openeuler-botopeneuler-botCollaborators
22 days ago Added label: ci_processing
openeuler-bot
openeuler-botCollaborators
22 days ago Comments:

x86_64架构构建及构建后检查:multiarch/src-openeuler/x86-64/pulsar/24

likedislike
openeuler-bot
openeuler-botCollaborators
22 days ago Comments:

aarch64架构构建及构建后检查:multiarch/src-openeuler/aarch64/pulsar/24

likedislike
openeuler-botopeneuler-botCollaborators
22 days ago Removed label: ci_processing
openeuler-bot
openeuler-botCollaborators
22 days ago Comments:
Check Name Build Result 详情 Build Details
check_binary_file ✅SUCCESS #24
check_lfsconfig ☑EXCLUDE
check_package_yaml_file ✅SUCCESS
check_repo_in_maintain ✅SUCCESS
check_consistency ✅SUCCESS
check_spec_file ❌FAILED • 仓库中的patch 'backport-CVE-2022-33683-1.patch' 未在spec中声明
• 仓库中的patch 'backport-CVE-2022-33683-2.patch' 未在spec中声明
• 仓库中的patch 'backport-CVE-2022-33683-3.patch' 未在spec中声明
• 仓库中的patch 'backport-CVE-2022-33683-4.patch' 未在spec中声明
• pulsar.spec: 本次PR未更新changelog,每次提交都需要添加changelog条目
x86_64 check_build ✅SUCCESS #24
check_install ✅SUCCESS
check_license ✅SUCCESS
aarch64 check_build ✅SUCCESS #24
check_install ✅SUCCESS
check_license ✅SUCCESS
likedislike
openeuler-botopeneuler-botCollaborators
22 days ago Added label: ci_failed
openeuler-bot
openeuler-botCollaborators
22 days ago Comments:

如下为接口变更检查结果,目标分支为openEuler-24.03-LTS-SP3,请PR提交者check差异信息

Arch Name Check Items Rpm Name Check Result Build Details
compare_package(x86_64) add_rpms ✅SUCCESS #24
delete_rpms ✅SUCCESS
rpm_files ✅SUCCESS
rpm_jabi ✅SUCCESS
rpm_lib ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
compare_package(aarch64) add_rpms ✅SUCCESS #24
delete_rpms ✅SUCCESS
rpm_files ✅SUCCESS
rpm_jabi ✅SUCCESS
rpm_lib ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
likedislike
openeuler-bot
openeuler-botCollaborators
22 days ago Comments:
likedislike
gogoxiaoxiaoCollaborators
1 day ago Comments:

审阅意见:感谢提交!门禁 check_spec_file 已明确检出问题:4 个补丁文件(backport-CVE-2022-33683-1/2/3/4.patch)均未在 pulsar.spec 中声明,且本次 PR 未更新 changelog。

另外请注意:backport-CVE-2022-33683-3.patch(+2439 行)与 #46 的 backport-CVE-2022-33682.patch 大小完全一致,PR 描述中也引用了同一上游 commit(0348502a),疑似与 #46 内容重复。请确认 33683 的修复是否真的需要该补丁,或将其留给 #46。

请补充以下修改:

  1. spec 中声明全部实际需要的 Patch 字段
  2. 确认 %prep 会应用补丁(当前 add_rpms 全 SUCCESS 表明构建产物与基线一致,修复未生效)
  3. 添加 changelog 条目并递增 Release
  4. 澄清补丁 3 与 #46 的重复关系
likedislike