已合并
fix(cve): 修复 CVE-2026-83813 在 python-twisted 中的漏洞, CVE-2026-115775, CVE-2026-115877 #75
fix(cve): 修复 CVE-2026-83813 在 python-twisted 中的漏洞, CVE-2026-115775, CVE-2026-115877 #75
已合并
infra_team创建于 5 天前
infra_team
5 天前

当前PR是否有AI参与:

[ ] 否

[x] Yes
__1. AI Agent 平台: Claude Code / CVE Agent Team
__2. AI 模型 : glm-5.3-flash
__3. Prompt 上下文 : CVE 漏洞修复全流程:归属分析、修复方案设计(backport/upgrade)、patch 生成、SPEC 文件修改(Patch/Version/Release/Changelog)、本地构建验证(rpmbuild -bp)

PR功能描述 / 为什么需要这个合入:

  • 🔍 全量审计声明:本项目已基于上游主分支执行全量补丁审计
  • CVE: CVE-2026-83813
  • 策略:upgrade
  • 改动详情:
    • 升级 Twisted 26.4.0 -> 26.10.0(twisted-26.10.0.tar.gz 替换 twisted-26.4.0.tar.gz):新版本 src/twisted/names/dns.py 含上游修复 commit b53e1c3477c209b5609a1c74cf9e48373b5879ac(DNSDatagramProtocol 新增 _addressValidation 响应来源地址校验,丢弃来自错误主机或端口的响应,阻断 twisted.names DNS 响应欺骗,CWE-346)
    • python-twisted.spec:Version 26.4.0 -> 26.10.0,Release 2 -> 1,Source0 指向 twisted-26.10.0.tar.gz,移除 Patch0(backport-CVE-2026-106454.patch 修复已包含于 26.10.0 上游),changelog 新增 26.10.0-1 条目

该PR关联的issue

(格式为fixes #<issue号>, 或者resolves #<issue号>): fixes #25

希望检视人员了解:


批量修复 · CVE-2026-115775


批量修复 · CVE-2026-115877

likedislike
Pull Request已成功合入, 合并人@openeuler-ci-bot
(感谢 infra_team 的贡献)
Iinfra_team
5 天前 创建了 pull request,commit 8f45e1f3
Iinfra_team
5 天前 关联了issue:CVE-2026-83813
openeuler-ci-botopeneuler-ci-bot成员
5 天前 添加了label:ai-co-authored
openeuler-ci-botopeneuler-ci-bot成员
5 天前 添加了label:ai-includes-code
openeuler-bot
openeuler-bot成员
5 天前 评论:

门禁正在运行, 您可以通过以下链接查看实时门禁检查结果.
若您对门禁结果含义不清晰或者遇到问题不知如何解决,可参考门禁指导手册
门禁入口及编码规范检查: multiarch/src-openeuler/trigger/python-twisted/19

likedislike
openeuler-ci-bot
openeuler-ci-bot成员
5 天前 评论:

当前仓库存在以下 保护分支 :

Protected Branch Version Release
master 26.4.0 2
openEuler-24.03-LTS-SP1 22.10.0 6
openEuler-24.03-LTS-SP3 22.10.0 6
openEuler-24.03-LTS-SP4 22.10.0 6
openEuler-24.03-LTS-Next 22.10.0 6
openEuler-26.09 26.4.0 1
openEuler-26.09-DevStation 26.4.0 1
openEuler-20.03-LTS-SP4 22.4.0 5
openEuler-22.03-LTS-SP4 22.4.0 5
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP4 22.4.0 4
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP3 22.4.0 4
oepkg_openstack-train_oe-20.03-LTS-SP1 18.9.0 6
oepkg_openstack-rocky_oe-20.03-LTS-SP2 18.9.0 4
oepkg_openstack-rocky_oe-20.03-LTS-Next 18.9.0 4
oepkg_openstack-queens_oe-20.03-LTS-SP2 18.9.0 4
oepkg_openstack-queens_oe-20.03-LTS-Next 18.9.0 4
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP2 22.4.0 4
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP1 22.4.0 4
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-Next 22.4.0 4
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS 22.4.0 4
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-Next 18.9.0 6
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-Next 18.9.0 6
Multi-Version_OpenStack-Antelope_openEuler-25.03 22.10.0 4
openEuler-EPOL-LTS 18.9.0 3
20.09 18.9.0 3

评论 /sync <branch1> <branch2> ... 可将当前 PR 修改同步到其它分支(创建同步 PR):
a) 如果当前 PR 是 Open 状态,同步操作将延迟到 PR 被合并时执行
b) 如果当前 PR 已经 Merged,将立即执行同步操作

注意:

  1. /sync 命令可以指定同步到多个分支,仅最后一个 /sync 命令生效
  2. 如果创建的同步 PR 不正确,可通过向同步 PR 的源分支提交轻量级 PR 完善,或使用 /close 命令关闭
likedislike
openeuler-botopeneuler-bot成员
5 天前 添加了label:ci_processing
openeuler-ci-botopeneuler-ci-bot成员
5 天前 将shinwell_hu,yangzhao_kl设为审查人
openeuler-ci-botopeneuler-ci-bot成员
5 天前 添加了label:sig/sig-python-modules
openeuler-ci-bot
openeuler-ci-bot成员
5 天前 评论:

Welcome To openEuler Community

Hey @infra_team , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands. You can self-configure the PR merge rules for this repository. For more details, please refer to Here.

Contact Guide

If you have any questions, please contact the SIG: sig-python-modules ,
and any of the maintainers: @shinwell_hu, @yangzhao_kl ,
and any of the committers: @cherry530, @randy1568, @starlet-dx .

likedislike
openeuler-ci-botopeneuler-ci-bot成员
5 天前 添加了label:openeuler-cla/yes
openeuler-ci-bot
openeuler-ci-bot成员
5 天前 评论:

CLA Signature Pass

infra_team, thanks for your pull request. All authors of the commits have signed the CLA. 👍

likedislike
openeuler-ci-botopeneuler-ci-bot成员
5 天前 添加了label:ai-compliance-successful
openeuler-bot
openeuler-bot成员
5 天前 评论:

x86_64架构构建及构建后检查:multiarch/src-openeuler/x86-64/python-twisted/19

likedislike
openeuler-bot
openeuler-bot成员
5 天前 评论:

aarch64架构构建及构建后检查:multiarch/src-openeuler/aarch64/python-twisted/19

likedislike
openeuler-botopeneuler-bot成员
5 天前 删除了label:ci_processing
openeuler-bot
openeuler-bot成员
5 天前 评论:
Check Name Build Result 详情 Build Details
check_binary_file ✅SUCCESS #19
check_lfsconfig ☑EXCLUDE
check_package_yaml_file ✅SUCCESS
check_repo_in_maintain ✅SUCCESS
check_consistency ✅SUCCESS
check_spec_file ✅SUCCESS
x86_64 check_build ✅SUCCESS #19
check_install ✅SUCCESS
check_license ✅SUCCESS
aarch64 check_build ✅SUCCESS #19
check_install ✅SUCCESS
check_license ✅SUCCESS
likedislike
openeuler-botopeneuler-bot成员
5 天前 添加了label:ci_successful
openeuler-bot
openeuler-bot成员
5 天前 评论:

如下为接口变更检查结果,目标分支为master,请PR提交者check差异信息

Arch Name Check Items Rpm Name Check Result Build Details
compare_package(x86_64) add_rpms ✅SUCCESS #19
delete_rpms ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires python3-twisted ❌FAILED
compare_package(aarch64) add_rpms ✅SUCCESS #19
delete_rpms ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires python3-twisted ❌FAILED
likedislike
openeuler-bot
openeuler-bot成员
5 天前 评论:
likedislike
Iinfra_team
5 天前 修改标题为 “fix(cve): 修复 CVE-2026-83813 在 python-twisted 中的漏洞, CVE-2026-115775”,原标题为“fix(cve): 修复 CVE-2026-83813 在 python-twisted 中的漏洞”
Iinfra_team
5 天前 修改了pull request 的描述
Iinfra_team
5 天前 修改标题为 “fix(cve): 修复 CVE-2026-83813 在 python-twisted 中的漏洞, CVE-2026-115775, CVE-2026-115877”,原标题为“fix(cve): 修复 CVE-2026-83813 在 python-twisted 中的漏洞, CVE-2026-115775”
Iinfra_team
5 天前 修改了pull request 的描述
xu_ping成员
1 小时前 评论:

/lgtm
/approve

likedislike
openeuler-ci-botopeneuler-ci-bot成员
1 小时前 添加了label:approvedlgtm
openeuler-ci-bot
openeuler-ci-bot成员
1 小时前 评论:

Review Code Feedback

  • The label lgtm, approved was added to this pull request. It means that cherry530 reviewed the code changes. 👋
Tips
  • If this pull request is not merged while all conditions are met, comment /check-pr to try again. 😄
likedislike
openeuler-ci-botopeneuler-ci-bot成员
1 小时前 关闭了关联的issue
openeuler-ci-botopeneuler-ci-bot成员
1 小时前 合入了pull request,合并节点 SHA:0ba63520c3d00daec6a177706abe4c86eab08893